Se connecter avec
S'enregistrer | Connectez-vous
Votre question
Fermé

Supprimer Babylon Search

Tags :
  • Firefox
  • Sécurité
Dernière réponse : dans Sécurité et virus
Partagez
8 Juin 2011 08:59:35

Bonjour,
Depuis quelques jours, Babylon Search apparait dans mon navigateur Firefox. J'ai supprimer la barre Babylon Search, je l'ai supprimer des extensions Mozilla aussi. Mais quand je tape quelque chose dans la barre d'adresse, c'est Babylon Search qui me donne un résultat au lieu de Google. Comment faire pour supprimer définitivement Babylon Search et pour l'éviter à l'avenir?
Merci d'avance
Anne

Autres pages sur : supprimer babylon search

14 Juin 2011 12:28:49

Bonjour
il faut taper about:config dans la barre d'adresse, ensuite dans filtre tu tape keyword et tu double clique sur keyword.url, ensuite tu colles cette adresse a la place de celle deja presente: http://www.google.com/
voila en revanche ca ne supprime pas babylon il revient a chaque reboot de firefox et ca je suis en train de chercher comment l'arreter!
15 Juin 2011 12:32:00

darcanne a dit :
Bonjour,
Depuis quelques jours, Babylon Search apparait dans mon navigateur Firefox. J'ai supprimer la barre Babylon Search, je l'ai supprimer des extensions Mozilla aussi. Mais quand je tape quelque chose dans la barre d'adresse, c'est Babylon Search qui me donne un résultat au lieu de Google. Comment faire pour supprimer définitivement Babylon Search et pour l'éviter à l'avenir?
Merci d'avance
Anne

telecharge malwaresbytes antimalware met le a jour et apres tu fait un scan complet tient nous au courant
Contenus similaires
27 Août 2011 17:39:59

jaja-17_83 a dit :
Bonjour
il faut taper about:config dans la barre d'adresse, ensuite dans filtre tu tape keyword et tu double clique sur keyword.url, ensuite tu colles cette adresse a la place de celle deja presente: http://www.google.com/
voila en revanche ca ne supprime pas babylon il revient a chaque reboot de firefox et ca je suis en train de chercher comment l'arreter!

Pour l'enlever définitivement , tu va dans about:config (merci du tuyau) puis tu tape dans filtre babylon , et tu réinitialise tout ce qui apparait, sa a marché pour moi
a b 8 Sécurité
27 Août 2011 17:52:45

Hello à tous,

Merci de ne pas intervenir sur les sujets de cette manière, vos solutions ne feront que masquer le problème et non le résoudre.

@darcanne :

__________________


Pour le bon déroulement de la désinfection :[/#ff]


  • Utilise le moins possible ton PC pendant la procédure, afin de faciliter la désinfection.

  • Suis les procédures données, mais ne tente rien par toi-même : si il y a un souci pendant une procédure, fais-m'en part plutôt que de cliquer au hasard et provoquer une panne sur ton système.

  • Si tu suis déjà une procédure sur un autre forum, merci de le signaler, il est important de ne suivre qu'une seule désinfection à la fois.

  • Même si les symptômes de l'infection ont disparu, le PC n'est pas forcément clean : attends bien que l'on t'ait dit que le PC est désinfecté avant de l'utiliser à nouveau.

  • Même si les désinfections sont faites par des personnes ayant des connaissances approfondies dans la désinfection, il est toujours possible que ton PC plante. Pense à bien sauvegarder tes données ;) 

    __________________


    Si tu es prêt(e), allons-y :

    [#ff9000]Diagnostic :


  • Télécharge OTL (de OldTimer[/#ff]) sur ton Bureau.

  • Si tu es sous XP, double-clique dessus pour le lancer, si tu es sous Vista/7, fais un clic droit dessus et fais Exécuter en tant qu'administrateur pour le lancer.

  • Une fenêtre apparaît.

  • Coche la case : Tous les utilisateurs

  • Coche les cases correspondant à la Recherche LOP et à la Recherche Purity (En bleu vers le bas de la fenêtre).

  • Sous Personnalisation, copie-colle l'ensemble du texte ci-dessous, laisse les autres options par défaut.

    netsvcs
    msconfig
    drivers32
    %APPDATA%\*.
    %APPDATA%\*.exe /s
    %SYSTEMDRIVE%\*.*
    %systemroot%\*. /mp /s
    %systemroot%\System32\config\*.sav
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\system32\*.dll /lockedfiles
    /md5start
    explorer.exe
    winlogon.exe
    Userinit.exe
    svchost.exe
    iexplore.exe
    /md5stop
    CREATERESTOREPOINT


  • Enfin, clique sur le bouton Analyse. Pendant la durée du scanne, ne touche à rien. Le scan prendra quelques temps.

  • A la fin du scan, deux rapports s'ouvriront : OTL.Txt et Extras.Txt. Copie/colle ici l'ensemble des rapports.

    Pour les rapports, qui ont tendance à être trop longs pour le forum, merci d'utiliser ce service de rapport en ligne : dépose le fichier via "parcourir" et poste simplement le lien obtenu.

    [#ff9000]Scan Ad-Remover


  • Télécharge Ad-Remover (de C_XX[/#ff]) sur ton Bureau.

    [#ff0000]Déconnecte-toi et ferme toutes applications en cours[/#ff]


  • Double-clique sur AD-R présent sur ton bureau. (Clic droit -> "Exécuter en tant qu'administrateur" pour VISTA/7)

  • Patiente jusqu'à l'apparition du menu principal. A partir de là, clique sur Scanner. On te demandera de confirmer, clique sur Oui et patiente jusqu'à la fin du scan.

    [#ff0000]Laisse travailler l'outil [/#ff]


  • Une fenêtre contenant le rapport va s'ouvrir, poste-moi le rapport dans ta prochaine réponse.
    ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
    Ensuite clique sur Quitter pour fermer Ad-Remover.

    Note : Le rapport que Ad-Remover viens de générer se trouve ici : C:\Ad-Report-SCAN

    [#ff9d00]Pour t'aider :
  • Tuto sur AD-R



    a b 8 Sécurité
    5 Septembre 2011 15:59:38

    Bonjour, merci de créer ton propre sujet :) 
    25 Octobre 2011 23:40:06

    Tu désinstalle Babylon dans ««ajout suppression de programe»» puis tu fais une recherche dans ton ordi: babylon et jette tout tout sauf ce qui n'a pas rapport. Regroupe avec Date de modification le résultat de ta recherche . Sélection tout :les dossiers babylon, fichier,dll etc et jette dans la corbeille.
    17 Décembre 2011 14:35:56

    Merci !!!!!!
    Depuis hier j'ai essayé plusieurs méthodes, mais c'est la tienne (qui en plus est la plus simple!), marche la mieux.
    Gloire à Dieu, vadé rétros satanas, heu, babylon!...
    Encore merci
    8 Mars 2012 23:36:33

    Bonjour!

    Je ne sais si vous avez résolu votre problème, cependant il faudrait vous rendre dans la base de registre; pour cela allez en bas à gauche de l'écran cliquez dans le logo windows "démarrez" puis cliquez dans tous les programmes; ensuite dans le répertoire "accessoires" puis dans le petit rectangle noir "invite de commandes" tapez au clavier regedit répondez oui à la demande "voulez vous autoriser...; la base de registre s'ouvre.

    Première action remplacer la commande faisant ouvrir "Babylon search"

    1) dans votre navigateur lorsque vous avez le bon écran de votre fournisseur d'accès sélectionnez la ligne de commande de celui ci et faites "Ctrl" C.
    2) Dans la base de registre développez en cliquant dans le petit triangle devant "HKEY_LOCAL_MACHINE"
    3) faites de même devant "SOFTWARE"
    4) puis devant "Wow6432Node"
    5) ensuite devant "Microsoft"
    6) et "Explorer"
    7) cliquez dans le répertoire "AboutURLs"
    8) repérez la valeur chaîne "Tabs" à l'extrémité droite de la ligne apparaît la commande de "Babylon search" cliquez deux fois sur "Tabs" une fenêtre "modification de la chaîne" s'ouvre
    9) sélectionnez la valeur dans la fenêtre "Données de la valeur" et faites au clavier "Ctrl" V ;la ligne de commande de votre fournisseur d'accès remplace celui de "Babylon search".
    10) cliquez sur "OK"
    11) si vous allez dans votre navigateur internet, cliquez pour créer un nouvel onglet il doit s'ouvrir avec votre page d'accueil

    Maintenant il faut supprimer toutes les entrées de "Babylon search" dans la base de registre.

    1) remonter tout en haut et sélectionnez "ordinateur"
    2) dans le menu en haut cliquez dans "Edition"
    3) cliquez dans "rechercher"
    4) vérifiez que les coches sont bien présentes pour "clés" "valeurs" et "données" tapez au clavier "babylon" et cliquez sur "rechercher le suivant" la recherche démarre
    5) quand le système trouve une occurrence il s'arrête lisez la ligne vous devez voir le nom de "babylon" cliquez avec le clic droit de la souris dans la ligne choisir "supprimer",attention de ne pas vous tromper vous êtes dans la base de registre il faudrait si vous vous êtes tromper faire une restauration du système et recommencer tout depuis le début; regardez aussi le côté gauche où apparaît tous les répertoires, Babylon peut-être le nom d'un de ces répertoires "supprimer" de la même façon en cliquant avec le clique droit de la souris et choisir "supprimer"
    6) cliquez sur la touche "F3" pour continuer la recherche et érradiquez ainsi de suite toutes les occurences avec babylon ainsi que les répertoires qui portent le nom de babylon jusqu'à épuisement quand le système vous dira que la recherche est terminée.
    7) fermer la base de registre et faites un point d'enregistrement car si vous avez un problème avant que le système n'est lui même créé ce point quand vous voudrez faire une restauration le système remettra tout en place et il vous faudrat tout recommencer depuis le début.
    24 Avril 2012 15:06:15

    guigui0001 a dit :
    Hello à tous,

    Merci de ne pas intervenir sur les sujets de cette manière, vos solutions ne feront que masquer le problème et non le résoudre.

    @darcanne :

    __________________


    Pour le bon déroulement de la désinfection :[/#ff]


  • Utilise le moins possible ton PC pendant la procédure, afin de faciliter la désinfection.

  • Suis les procédures données, mais ne tente rien par toi-même : si il y a un souci pendant une procédure, fais-m'en part plutôt que de cliquer au hasard et provoquer une panne sur ton système.

  • Si tu suis déjà une procédure sur un autre forum, merci de le signaler, il est important de ne suivre qu'une seule désinfection à la fois.

  • Même si les symptômes de l'infection ont disparu, le PC n'est pas forcément clean : attends bien que l'on t'ait dit que le PC est désinfecté avant de l'utiliser à nouveau.

  • Même si les désinfections sont faites par des personnes ayant des connaissances approfondies dans la désinfection, il est toujours possible que ton PC plante. Pense à bien sauvegarder tes données ;) 

    __________________


    Si tu es prêt(e), allons-y :

    [#ff9000]Diagnostic :


  • Télécharge OTL (de OldTimer[/#ff]) sur ton Bureau.

  • Si tu es sous XP, double-clique dessus pour le lancer, si tu es sous Vista/7, fais un clic droit dessus et fais Exécuter en tant qu'administrateur pour le lancer.

  • Une fenêtre apparaît.

  • Coche la case : Tous les utilisateurs

  • Coche les cases correspondant à la Recherche LOP et à la Recherche Purity (En bleu vers le bas de la fenêtre).

  • Sous Personnalisation, copie-colle l'ensemble du texte ci-dessous, laisse les autres options par défaut.

    netsvcs
    msconfig
    drivers32
    %APPDATA%\*.
    %APPDATA%\*.exe /s
    %SYSTEMDRIVE%\*.*
    %systemroot%\*. /mp /s
    %systemroot%\System32\config\*.sav
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\system32\*.dll /lockedfiles
    /md5start
    explorer.exe
    winlogon.exe
    Userinit.exe
    svchost.exe
    iexplore.exe
    /md5stop
    CREATERESTOREPOINT


  • Enfin, clique sur le bouton Analyse. Pendant la durée du scanne, ne touche à rien. Le scan prendra quelques temps.

  • A la fin du scan, deux rapports s'ouvriront : OTL.Txt et Extras.Txt. Copie/colle ici l'ensemble des rapports.

    Pour les rapports, qui ont tendance à être trop longs pour le forum, merci d'utiliser ce service de rapport en ligne : dépose le fichier via "parcourir" et poste simplement le lien obtenu.

    [#ff9000]Scan Ad-Remover


  • Télécharge Ad-Remover (de C_XX[/#ff]) sur ton Bureau.

    [#ff0000]Déconnecte-toi et ferme toutes applications en cours[/#ff]


  • Double-clique sur AD-R présent sur ton bureau. (Clic droit -> "Exécuter en tant qu'administrateur" pour VISTA/7)

  • Patiente jusqu'à l'apparition du menu principal. A partir de là, clique sur Scanner. On te demandera de confirmer, clique sur Oui et patiente jusqu'à la fin du scan.

    [#ff0000]Laisse travailler l'outil [/#ff]


  • Une fenêtre contenant le rapport va s'ouvrir, poste-moi le rapport dans ta prochaine réponse.
    ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
    Ensuite clique sur Quitter pour fermer Ad-Remover.

    Note : Le rapport que Ad-Remover viens de générer se trouve ici : C:\Ad-Report-SCAN

    [#ff9d00]Pour t'aider :
  • Tuto sur AD-R





  • .
    ======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
    .
    Mis à jour par C_XX le 19/05/10 à 19:20
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 14:53:41 le 24/04/2012 | Mode normal | Option: SCAN
    Exécuté de: C:\Ad-Remover\ADR.exe
    SE: Microsoft Windows 7 Édition Familiale Premium (Service Pack 1 - X64)
    Nom du PC: UTILISATEUR-PC (ASUSTeK Computer Inc. N55SF)
    Utilisateur actuel: Utilisateur
    .
    ============== ÉLÉMENT(S) TROUVÉ(S) ==============
    .
    .
    C:\Program Files (x86)\Ask.com
    C:\Users\Utilisateur\AppData\Roaming\Mozilla\FireFox\Profiles\xvb9jc8g.default\extensions\toolbar@ask.com
    C:\Users\Utilisateur\AppData\Roaming\pdfforge
    C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
    .
    HKCU\Software\AskToolbar
    HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
    HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
    HKLM\Software\Classes\AppID\GenericAskToolbar.DLL
    HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
    HKLM\Software\Classes\CLSID\{1A42EA66-2898-4e93-8128-D9A450B27D1D}
    HKLM\Software\Classes\CLSID\{910FDD7E-873A-4983-84C5-FB4C88BF7A59}
    HKLM\Software\Classes\CLSID\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
    HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
    HKLM\Software\Classes\CLSID\{F42C7B47-5234-4BF5-8882-DAAC0D64870E}
    HKLM\Software\Classes\DiscoveryHelper.iMesh6Discovery
    HKLM\Software\Classes\DiscoveryHelper.iMesh6Discovery.1
    HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd
    HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1
    HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
    HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
    HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
    HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
    HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
    HKLM\Software\Classes\Interface\{F42C7B47-5234-4BF5-8882-DAAC0D64870E}
    HKLM\Software\Classes\Interface\{F7BEBBB1-7E6B-4561-9444-6F4866D60C7D}
    HKLM\Software\Classes\TypeLib\{28256861-4286-4022-B9CD-EAEAD0442AAD}
    HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
    HKLM\Software\Classes\TypeLib\{64064B80-4463-49C0-8FD5-8F19E3150445}
    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E0CC53F-74B0-4EB9-AD9B-D2173D330A99}
    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar|{D4027C7F-154A-4066-A1AD-4243D8127440}
    .
    .
    ============== SCAN ADDITIONNEL ==============
    .
    * Mozilla FireFox Version Impossible d'obtenir la version *
    .
    C:\Users\Utilisateur\..\xvb9jc8g.default\prefs.js - browser.search.defaultenginename: Search Results
    C:\Users\Utilisateur\..\xvb9jc8g.default\prefs.js - browser.search.selectedEngine: Linkury Smartbar Search
    C:\Users\Utilisateur\..\xvb9jc8g.default\prefs.js - browser.startup.homepage: hxxps://addons.mozilla.org/fr/firefox/
    C:\Users\Utilisateur\..\xvb9jc8g.default\prefs.js - browser.startup.homepage_override.buildID: 20120420145725
    C:\Users\Utilisateur\..\xvb9jc8g.default\prefs.js - browser.startup.homepage_override.mstone: rv:12.0
    C:\Users\Utilisateur\..\xvb9jc8g.default\prefs.js - keyword.URL: hxxp://cloud-search.linkury.com/results.htm?cx=partner-pub-7890126930977991:7317400059&cof=FORID:11&sa=Search&siteurl=search.linkury.com&q=
    .
    TROUVÉ: C:\Users\Utilisateur\..\xvb9jc8g.default\prefs.js - user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{22C7F6C6-8D67-4534-92B5-529A0EC09405}\":{\"descriptor\":\"C:\\\\Program Files\\\\Trend Micro\\\\AMSP\\\\Module\\\\20004\\\\1.5.1381\\\\6.5.1234\\\\firefoxextension\",\"mtime\":1323236545250},\"{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}\":{\"descriptor\":\"C:\\\\Program Files (x86)\\\\Adobe\\\\Adobe Contribute CS5\\\\Plugins\\\\FirefoxPlugin\\\\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}\",\"mtime\":1321615900416},\"wrc@avast.com\":{\"descriptor\":\"C:\\\\Program Files\\\\AVAST Software\\\\Avast\\\\WebRep\\\\FF\",\"mtime\":1332437704311}}},{\"name\":\"app-global\",\"addons\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"descriptor\":\"C:\\\\Program Files (x86)\\\\Mozilla Firefox\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\",\"mtime\":1335261079186}}},{\"name\":\"app-profile\",\"addons\":{\"firebug@software.joehewitt.com\":{\"descriptor\":\"C:\\\\Users\\\\Utilisateur\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\xvb9jc8g.default\\\\extensions\\\\firebug@software.joehewitt.com.xpi\",\"mtime\":1335255739663},\"toolbar@ask.com\":{\"descriptor\":\"C:\\\\Users\\\\Utilisateur\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\xvb9jc8g.default\\\\extensions\\\\toolbar@ask.com\",\"mtime\":1331066103567},\"{c45c406e-ab73-11d8-be73-000a95be3b12}\":{\"descriptor\":\"C:\\\\Users\\\\Utilisateur\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\xvb9jc8g.default\\\\extensions\\\\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi\",\"mtime\":1335255739715}}}]");
    TROUVÉ: C:\Users\Utilisateur\..\xvb9jc8g.default\prefs.js - user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");
    TROUVÉ: C:\Users\Utilisateur\..\xvb9jc8g.default\prefs.js - user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
    TROUVÉ: C:\Users\Utilisateur\..\xvb9jc8g.default\prefs.js - user_pref("extensions.wrc.SearchRules.baidu.com.style", ".WRCN {display:none} .result .f .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");
    TROUVÉ: C:\Users\Utilisateur\..\xvb9jc8g.default\prefs.js - user_pref("extensions.wrc.SearchRules.baidu.com.url", "^hxxp\\:\\/\\/www\\.baidu\\.com\\/.*");
    .
    * Internet Explorer Version 9.0.8112.16421 *
    .
    [HKCU\Software\Microsoft\Internet Explorer\Main]
    .
    Default_Page_URL: hxxp://asus.msn.com
    Do404Search: 0x01000000
    Enable Browser Extensions: yes
    Local Page: C:\Windows\system32\blank.htm
    Search bar: hxxp://cloud-search.linkury.com/results.htm?cx=partner-pub-7890126930977991:1926905636&cof=FORID:11&q={searchTerms}&sa=Search&siteurl=search.linkury.com
    Search Page: hxxp://cloud-search.linkury.com/results.htm?cx=partner-pub-7890126930977991:1926905636&cof=FORID:11&q={searchTerms}&sa=Search&siteurl=search.linkury.com
    Show_ToolBar: yes
    Start Page: hxxp://search.linkury.com/newtab.html
    Use Search Asst: yes
    .
    [HKLM\Software\Microsoft\Internet Explorer\Main]
    .
    AutoHide: yes
    Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
    Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Delete_Temp_Files_On_Exit: yes
    Local Page: C:\Windows\SysWOW64\blank.htm
    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Start Page: hxxp://asus.msn.com
    .
    [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
    .
    Blank: res://mshtml.dll/blank.htm
    .
    ========================================
    .
    C:\Ad-Remover\Quarantine: 0 Fichier(s)
    C:\Ad-Remover\Backup: 0 Fichier(s)
    .
    C:\Ad-Report-SCAN[1].txt - 8029 Octet(s)
    .
    Fin à: 15:04:53, 24/04/2012
    .
    ============== E.O.F - SCAN[1] ==============

    a b 8 Sécurité
    24 Avril 2012 16:36:37

    Bonjour,

    Merci de créer son propre sujet.
    25 Avril 2012 20:20:36

    rapport OTL

    OTL logfile created on: 25/04/2012 19:54:27 - Run 1
    OTL by OldTimer - Version 3.2.42.0 Folder = C:\Users\Floriane\Downloads
    64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

    3,94 Gb Total Physical Memory | 1,76 Gb Available Physical Memory | 44,80% Memory free
    7,87 Gb Paging File | 5,06 Gb Available in Paging File | 64,25% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 274,96 Gb Total Space | 193,23 Gb Free Space | 70,28% Space Free | Partition Type: NTFS
    Drive E: | 17,83 Gb Total Space | 2,71 Gb Free Space | 15,18% Space Free | Partition Type: NTFS
    Drive F: | 4,98 Gb Total Space | 0,00 Gb Free Space | 0,03% Space Free | Partition Type: FAT32
    Drive G: | 7,67 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

    Computer Name: FLORIANE-HP | User Name: Floriane | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

    ========== Processes (SafeList) ==========

    PRC - [2012/04/25 19:52:46 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Floriane\Downloads\OTL.exe
    PRC - [2012/03/22 23:17:12 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Users\Floriane\firefox.exe
    PRC - [2012/03/22 23:17:11 | 000,016,824 | ---- | M] (Mozilla Corporation) -- C:\Users\Floriane\plugin-container.exe
    PRC - [2011/12/04 21:52:12 | 001,191,216 | ---- | M] (Lavasoft Limited) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
    PRC - [2011/12/04 21:52:11 | 002,152,152 | ---- | M] (Lavasoft Limited) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
    PRC - [2011/10/01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
    PRC - [2011/10/01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
    PRC - [2011/08/20 14:13:16 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
    PRC - [2011/06/10 08:23:52 | 000,959,880 | ---- | M] (SFR) -- C:\Program Files (x86)\SFR\Kit\9props.exe
    PRC - [2011/04/21 07:53:48 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
    PRC - [2011/04/21 07:53:33 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
    PRC - [2011/04/05 20:13:46 | 001,094,712 | ---- | M] (Hewlett-Packard Development Company L.P.) -- c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
    PRC - [2011/03/29 02:07:50 | 000,094,264 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
    PRC - [2011/02/12 05:07:16 | 000,820,048 | R--- | M] (DigitalPersona, Inc.) -- c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
    PRC - [2011/02/11 02:44:28 | 000,076,344 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
    PRC - [2011/02/09 20:51:36 | 000,200,704 | ---- | M] () -- C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe
    PRC - [2011/02/09 20:28:12 | 001,318,912 | ---- | M] () -- C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe
    PRC - [2011/02/07 20:41:42 | 012,274,688 | ---- | M] (Hewlett-Packard) -- C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
    PRC - [2011/02/07 20:41:26 | 000,320,000 | ---- | M] (Hewlett-Packard) -- C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
    PRC - [2011/02/01 10:23:10 | 001,127,448 | ---- | M] (PDF Complete Inc) -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe
    PRC - [2011/01/29 00:27:06 | 000,281,656 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
    PRC - [2011/01/28 18:41:30 | 000,133,688 | ---- | M] (Hewlett-Packard Company) -- c:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe
    PRC - [2011/01/26 19:00:32 | 000,283,160 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    PRC - [2011/01/26 19:00:00 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    PRC - [2011/01/18 22:42:48 | 000,070,256 | ---- | M] (Portrait Displays, Inc) -- C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe
    PRC - [2011/01/18 22:42:44 | 000,113,264 | ---- | M] (Portrait Displays, Inc.) -- C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
    PRC - [2011/01/17 21:42:04 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    PRC - [2011/01/17 21:42:02 | 000,326,168 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    PRC - [2011/01/12 20:12:06 | 000,036,864 | ---- | M] (Hewlett-Packard Development Company, L.P) -- c:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe
    PRC - [2011/01/07 05:08:38 | 000,138,400 | ---- | M] (Atheros) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
    PRC - [2010/11/20 14:17:55 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
    PRC - [2010/11/11 09:43:00 | 000,502,464 | ---- | M] (ArcSoft, Inc.) -- C:\Windows\SysWOW64\ArcVCapRender\uArcCapture.exe
    PRC - [2010/04/30 00:08:14 | 000,742,720 | ---- | M] (SFR) -- C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe
    PRC - [2009/01/26 15:31:16 | 002,144,088 | RHS- | M] (Safer Networking Limited) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
    PRC - [2009/01/26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe


    ========== Win32 Services (SafeList) ==========

    SRV:64bit: - [2011/05/13 19:58:10 | 000,030,520 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv)
    SRV:64bit: - [2011/03/28 08:44:46 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
    SRV:64bit: - [2011/02/12 05:07:16 | 000,481,104 | R--- | M] (DigitalPersona, Inc.) [Auto | Running] -- c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe -- (DpHost)
    SRV:64bit: - [2011/02/09 20:28:12 | 001,318,912 | ---- | M] () [Auto | Running] -- C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe -- (McAfee Endpoint Encryption Agent)
    SRV:64bit: - [2011/01/28 18:41:30 | 000,133,688 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- c:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe -- (HPDayStarterService)
    SRV:64bit: - [2011/01/27 11:52:00 | 000,296,448 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\STacSV64.exe -- (STacSV)
    SRV:64bit: - [2011/01/27 03:11:48 | 000,131,128 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe -- (HP Power Assistant Service)
    SRV:64bit: - [2011/01/22 04:36:02 | 003,154,224 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\SysNative\vcsFPService.exe -- (vcsFPService)
    SRV:64bit: - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
    SRV:64bit: - [2009/03/03 12:42:00 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\IDT\WDM\AESTSr64.exe -- (AESTFilters)
    SRV - [2012/04/24 19:34:34 | 000,489,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
    SRV - [2011/12/04 21:52:11 | 002,152,152 | ---- | M] (Lavasoft Limited) [Auto | Running] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service)
    SRV - [2011/10/01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
    SRV - [2011/10/01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
    SRV - [2011/08/20 14:13:16 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
    SRV - [2011/04/21 07:53:48 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
    SRV - [2011/04/05 20:13:46 | 001,094,712 | ---- | M] (Hewlett-Packard Development Company L.P.) [On_Demand | Running] -- c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe -- (hpCMSrv)
    SRV - [2011/03/29 02:07:50 | 000,094,264 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe)
    SRV - [2011/02/07 20:41:26 | 000,320,000 | ---- | M] (Hewlett-Packard) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe -- (HPFSService)
    SRV - [2011/02/04 00:09:18 | 000,464,480 | ---- | M] (Hewlett-Packard Company) [On_Demand | Stopped] -- c:\Windows\SysWOW64\flcdlock.exe -- (FLCDLOCK)
    SRV - [2011/02/01 10:23:10 | 001,127,448 | ---- | M] (PDF Complete Inc) [Auto | Running] -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe -- (pdfcDispatcher)
    SRV - [2011/01/29 00:27:06 | 000,281,656 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe -- (hpHotkeyMonitor)
    SRV - [2011/01/26 19:00:00 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R)
    SRV - [2011/01/22 04:24:50 | 002,708,784 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vcsFPService.exe -- (vcsFPService)
    SRV - [2011/01/18 22:42:44 | 000,113,264 | ---- | M] (Portrait Displays, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe -- (PdiService)
    SRV - [2011/01/17 21:42:04 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
    SRV - [2011/01/17 21:42:02 | 000,326,168 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
    SRV - [2011/01/12 20:12:06 | 000,036,864 | ---- | M] (Hewlett-Packard Development Company, L.P) [On_Demand | Running] -- c:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe -- (HP ProtectTools Service)
    SRV - [2011/01/07 05:08:38 | 000,138,400 | ---- | M] (Atheros) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe -- (Atheros Bt&Wlan Coex Agent)
    SRV - [2011/01/07 05:06:56 | 000,053,920 | ---- | M] (Atheros Commnucations) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\AdminService.exe -- (AtherosSvc)
    SRV - [2010/11/11 09:43:00 | 000,502,464 | ---- | M] (ArcSoft, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\ArcVCapRender\uArcCapture.exe -- (uArcCapture)
    SRV - [2010/09/30 23:44:46 | 000,246,520 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService)
    SRV - [2010/03/18 22:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
    SRV - [2010/03/18 20:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
    SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


    ========== Driver Services (SafeList) ==========

    DRV:64bit: - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
    DRV:64bit: - [2011/10/01 09:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
    DRV:64bit: - [2011/10/01 09:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
    DRV:64bit: - [2011/10/01 09:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
    DRV:64bit: - [2011/10/01 09:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
    DRV:64bit: - [2011/09/16 02:34:38 | 000,392,752 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
    DRV:64bit: - [2011/08/20 14:13:16 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
    DRV:64bit: - [2011/08/20 14:13:16 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
    DRV:64bit: - [2011/06/10 07:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
    DRV:64bit: - [2011/05/13 19:58:16 | 000,030,008 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt)
    DRV:64bit: - [2011/05/13 19:57:58 | 000,043,320 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer)
    DRV:64bit: - [2011/03/28 09:14:48 | 009,319,424 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
    DRV:64bit: - [2011/03/28 08:09:12 | 000,303,616 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
    DRV:64bit: - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
    DRV:64bit: - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
    DRV:64bit: - [2011/02/09 20:59:52 | 000,168,008 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\windows\SysNative\drivers\MfeEpePc.sys -- (MfeEpePc)
    DRV:64bit: - [2011/02/07 16:50:26 | 000,063,336 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DAMDrv64.sys -- (DAMDrv)
    DRV:64bit: - [2011/01/31 12:04:42 | 000,174,168 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
    DRV:64bit: - [2011/01/27 11:52:00 | 000,520,192 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
    DRV:64bit: - [2011/01/27 07:57:12 | 012,273,408 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdpmd64.sys -- (intelkmd)
    DRV:64bit: - [2011/01/13 03:51:44 | 000,439,320 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
    DRV:64bit: - [2011/01/08 17:16:24 | 002,698,240 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
    DRV:64bit: - [2011/01/07 05:07:32 | 000,279,200 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
    DRV:64bit: - [2011/01/07 05:07:30 | 000,201,376 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP)
    DRV:64bit: - [2011/01/07 05:07:30 | 000,154,272 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP)
    DRV:64bit: - [2011/01/07 05:07:30 | 000,055,456 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT)
    DRV:64bit: - [2011/01/07 05:07:28 | 000,036,000 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort)
    DRV:64bit: - [2011/01/07 05:07:26 | 000,298,144 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP)
    DRV:64bit: - [2011/01/07 05:07:26 | 000,028,832 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)
    DRV:64bit: - [2010/12/21 19:21:16 | 001,826,048 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
    DRV:64bit: - [2010/12/03 02:02:58 | 000,025,912 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
    DRV:64bit: - [2010/11/22 10:50:19 | 000,069,152 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\Lbd.sys -- (Lbd)
    DRV:64bit: - [2010/11/20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
    DRV:64bit: - [2010/11/20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
    DRV:64bit: - [2010/11/20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
    DRV:64bit: - [2010/11/11 09:46:00 | 000,032,192 | ---- | M] (ArcSoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ArcSoftVCapture.sys -- (ARCVCAM)
    DRV:64bit: - [2010/10/20 03:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R)
    DRV:64bit: - [2010/10/14 22:28:16 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
    DRV:64bit: - [2009/09/02 11:29:06 | 000,626,688 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\emOEM64.sys -- (USB28xxOEM)
    DRV:64bit: - [2009/09/01 15:31:42 | 000,649,984 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\emBDA64.sys -- (USB28xxBGA)
    DRV:64bit: - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
    DRV:64bit: - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
    DRV:64bit: - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
    DRV:64bit: - [2009/07/14 01:21:48 | 000,038,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
    DRV:64bit: - [2009/06/10 23:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)
    DRV:64bit: - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
    DRV:64bit: - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
    DRV:64bit: - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
    DRV:64bit: - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
    DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
    DRV:64bit: - [2007/05/14 17:06:18 | 000,027,520 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb)
    DRV - [2011/12/04 21:52:30 | 000,017,152 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\kernexplorer64.sys -- (Lavasoft Kernexplorer)
    DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


    ========== Standard Registry (SafeList) ==========


    ========== Internet Explorer ==========

    IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPCOM/9
    IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com/HPCOM/9
    IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
    IE:64bit: - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
    IE:64bit: - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://fr.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
    IE:64bit: - HKLM\..\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}: "URL" = http://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPCOM/9
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com/HPCOM/9
    IE - HKLM\..\SearchScopes,DefaultScope = {ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
    IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
    IE - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://fr.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
    IE - HKLM\..\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}: "URL" = http://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox


    IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

    IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



    IE - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPCOM/9
    IE - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02
    IE - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://home.microsoft.com/access/allinone.asp
    IE - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.sfr.fr/kit/adsl/
    IE - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
    IE - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=111020&babsrc=SP_ss&mntrId=ccc4fe3f00000000000068a3c4fb48ed
    IE - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
    IE - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://fr.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
    IE - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001\..\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}: "URL" = http://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox
    IE - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

    ========== FireFox ==========

    FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
    FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
    FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)"
    FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?affID=111020&babsrc=HP_ss&mn..."
    FF - prefs.js..keyword.URL: "http://redirecterror.sfr.fr/?q="

    FF - user.js..keyword.URL: "http://redirecterror.sfr.fr/?q="

    FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
    FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
    FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
    FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
    FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\otis@digitalpersona.com: c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\ [2011/05/03 03:18:03 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Users\Floriane\components [2012/03/22 23:17:12 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Users\Floriane\plugins
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Users\Floriane\components [2012/03/22 23:17:12 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Users\Floriane\plugins

    [2011/08/19 23:19:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Floriane\AppData\Roaming\mozilla\Extensions
    [2012/04/25 18:46:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Floriane\AppData\Roaming\mozilla\Firefox\Profiles\rhm4tsup.default\extensions
    [2011/10/18 18:25:12 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Floriane\AppData\Roaming\mozilla\Firefox\Profiles\rhm4tsup.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}

    O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
    O2 - BHO: (Objet d'aide à la navigation SFR) - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files (x86)\SFR\Kit\SFRNavErrorHelper.dll (SFR)
    O2 - BHO: (File Sanitizer for HP ProtectTools) - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)
    O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
    O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
    O4:64bit: - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)
    O4:64bit: - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications)
    O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
    O4:64bit: - HKLM..\Run: [HPPowerAssistant] C:\Program Files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe ()
    O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
    O4:64bit: - HKLM..\Run: [MfeEpePcMonitor] C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe ()
    O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
    O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
    O4 - HKLM..\Run: [] File not found
    O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
    O4 - HKLM..\Run: [DTRun] c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe (ArcSoft Inc.)
    O4 - HKLM..\Run: [File Sanitizer] C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe (Hewlett-Packard)
    O4 - HKLM..\Run: [HPConnectionManager] c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe (Hewlett-Packard Development Company L.P.)
    O4 - HKLM..\Run: [HPQuickWebProxy] c:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe (Hewlett-Packard Company)
    O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
    O4 - HKLM..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe (PDF Complete Inc)
    O4 - HKLM..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe (Hewlett-Packard Company)
    O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
    O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
    O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
    O4 - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001..\Run: [Connexion SFR 9props.exe] C:\Program Files (x86)\SFR\Kit\9props.exe (SFR)
    O4 - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001..\Run: [Neuf Media Center] C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe (SFR)
    O4 - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
    O4 - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
    O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
    O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
    O4 - HKU\S-1-5-21-1181001813-4277704327-3909577942-1001..\RunOnce: [FlashPlayerUpdate] C:\windows\SysWOW64\Macromed\Flash\FlashUtil10v_Plugin.exe -update plugin File not found
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
    O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Floriane\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
    O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Floriane\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
    O8 - Extra context menu item: Free YouTube Download - C:\Users\Floriane\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
    O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Floriane\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
    O9:64bit: - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found
    O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
    O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
    O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
    O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
    O1364bit: - gopher Prefix: missing
    O13 - gopher Prefix: missing
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{470D50CB-A8EF-4EDA-81DB-C5F695B584A8}: DhcpNameServer = 192.168.1.1
    O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
    O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
    O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
    O20:64bit: - HKLM Winlogon: UserInit - (c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe) - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe (DigitalPersona, Inc.)
    O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
    O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
    O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
    O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation)
    O20 - Winlogon\Notify\DeviceNP: DllName - (DeviceNP.dll) - C:\windows\SysWow64\DeviceNP.dll (Hewlett-Packard Company)
    O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
    O32 - HKLM CDRom: AutoRun - 1
    O34 - HKLM BootExecute: (autocheck autochk *)
    O34 - HKLM BootExecute: (lsdelete)
    O35:64bit: - HKLM\..comfile [open] -- "%1" %*
    O35:64bit: - HKLM\..exefile [open] -- "%1" %*
    O35 - HKLM\..comfile [open] -- "%1" %*
    O35 - HKLM\..exefile [open] -- "%1" %*
    O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
    O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
    O37 - HKLM\...com [@ = comfile] -- "%1" %*
    O37 - HKLM\...exe [@ = exefile] -- "%1" %*
    O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
    O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
    O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)



    Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
    Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
    Drivers32: vidc.cvid - C:\windows\SysWow64\iccvid.dll (Radius Inc.)

    CREATERESTOREPOINT
    Restore point Set: OTL Restore Point

    ========== Files/Folders - Created Within 30 Days ==========

    [2012/04/24 21:05:03 | 000,000,000 | ---D | C] -- C:\Users\Floriane\AppData\Roaming\WebPlayerBdd
    [2012/04/24 21:00:48 | 000,000,000 | ---D | C] -- C:\Users\Floriane\AppData\Local\Babylon
    [2012/04/24 21:00:46 | 000,000,000 | ---D | C] -- C:\Users\Floriane\AppData\Roaming\Babylon
    [2012/04/24 21:00:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
    [2012/04/19 14:40:01 | 000,000,000 | ---D | C] -- C:\ProgramData\iMesh
    [2012/04/19 14:40:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iMesh Applications
    [2012/04/19 14:39:34 | 000,000,000 | ---D | C] -- C:\ProgramData\{6DFE6B59-3F4E-45AF-A9D0-5EDC43DD23AF}
    [2012/04/16 12:19:52 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll
    [2012/04/16 12:19:52 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll
    [2012/04/16 12:19:51 | 002,311,168 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll
    [2012/04/16 12:19:51 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\url.dll
    [2012/04/16 12:19:50 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript.dll
    [2012/04/16 12:19:50 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll
    [2012/04/16 12:19:50 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\url.dll
    [2012/04/16 12:19:50 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll
    [2012/04/16 12:19:49 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl
    [2012/04/16 12:19:49 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl
    [2012/04/16 12:19:49 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript.dll
    [2012/04/16 12:19:23 | 005,559,152 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntoskrnl.exe
    [2012/04/16 12:19:22 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntkrnlpa.exe
    [2012/04/16 12:19:21 | 003,913,072 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntoskrnl.exe
    [2012/04/16 12:15:10 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\imagehlp.dll
    [2012/04/16 12:15:10 | 000,023,408 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\drivers\fs_rec.sys
    [2012/04/16 12:15:09 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wintrust.dll

    ========== Files - Modified Within 30 Days ==========

    [2012/04/25 19:41:34 | 000,019,760 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    [2012/04/25 19:41:34 | 000,019,760 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    [2012/04/25 19:40:18 | 001,664,118 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
    [2012/04/25 19:40:18 | 000,745,970 | ---- | M] () -- C:\windows\SysNative\perfh00C.dat
    [2012/04/25 19:40:18 | 000,652,812 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
    [2012/04/25 19:40:18 | 000,149,198 | ---- | M] () -- C:\windows\SysNative\perfc00C.dat
    [2012/04/25 19:40:18 | 000,121,486 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
    [2012/04/25 19:34:36 | 000,000,035 | ---- | M] () -- C:\Users\Public\Documents\AtherosServiceConfig.ini
    [2012/04/25 19:32:47 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
    [2012/04/25 19:32:44 | 4226,113,536 | -HS- | M] () -- C:\hiberfil.sys
    [2012/04/25 18:50:43 | 000,001,316 | ---- | M] () -- C:\Users\Floriane\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
    [2012/04/25 18:50:43 | 000,001,292 | ---- | M] () -- C:\Users\Floriane\Desktop\Spybot - Search & Destroy.lnk
    [2012/04/25 18:15:21 | 000,010,535 | ---- | M] () -- C:\Users\Floriane\updates.xml
    [2012/04/25 18:15:21 | 000,000,057 | ---- | M] () -- C:\Users\Floriane\active-update.xml
    [2012/04/24 21:05:02 | 000,000,097 | ---- | M] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
    [2012/04/24 21:01:14 | 000,000,237 | ---- | M] () -- C:\user.js
    [2012/04/19 14:40:03 | 000,001,140 | ---- | M] () -- C:\Users\Floriane\Application Data\Microsoft\Internet Explorer\Quick Launch\iMesh.lnk
    [2012/04/19 13:54:37 | 000,000,064 | ---- | M] () -- C:\windows\SysWow64\rp_stats.dat
    [2012/04/19 13:54:37 | 000,000,044 | ---- | M] () -- C:\windows\SysWow64\rp_rules.dat
    [2012/04/18 20:14:03 | 000,000,350 | ---- | M] () -- C:\windows\tasks\HPCeeScheduleForFLORIANE-HP$.job

    ========== Files Created - No Company Name ==========

    [2012/04/25 18:15:21 | 000,010,535 | ---- | C] () -- C:\Users\Floriane\updates.xml
    [2012/04/25 18:15:21 | 000,000,057 | ---- | C] () -- C:\Users\Floriane\active-update.xml
    [2012/04/24 21:05:02 | 000,000,097 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
    [2012/04/24 21:01:13 | 000,000,237 | ---- | C] () -- C:\user.js
    [2012/04/19 14:40:03 | 000,001,140 | ---- | C] () -- C:\Users\Floriane\Application Data\Microsoft\Internet Explorer\Quick Launch\iMesh.lnk
    [2011/12/04 21:52:58 | 000,000,064 | ---- | C] () -- C:\windows\SysWow64\rp_stats.dat
    [2011/12/04 21:52:58 | 000,000,044 | ---- | C] () -- C:\windows\SysWow64\rp_rules.dat
    [2011/09/28 19:09:23 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
    [2011/08/19 23:19:37 | 000,000,000 | ---- | C] () -- C:\windows\nsreg.dat
    [2011/06/17 06:19:49 | 000,003,120 | ---- | C] () -- C:\windows\SysWow64\drivers\wdeccdf.sys
    [2011/06/17 06:07:57 | 000,000,000 | ---- | C] () -- C:\windows\ativpsrm.bin
    [2011/06/17 06:05:07 | 000,003,914 | ---- | C] () -- C:\windows\SysWow64\atipblup.dat
    [2011/06/17 06:04:01 | 000,025,984 | ---- | C] () -- C:\windows\snuvcdsm.exe
    [2011/06/17 06:04:01 | 000,015,497 | ---- | C] () -- C:\windows\snp2uvc.ini
    [2011/05/03 03:42:26 | 000,003,120 | ---- | C] () -- C:\windows\SysWow64\drivers\wdecibj.sys
    [2011/05/03 03:24:11 | 000,000,178 | ---- | C] () -- C:\windows\SysWow64\HPPA.ini
    [2011/05/03 03:18:23 | 000,003,120 | ---- | C] () -- C:\windows\SysWow64\drivers\wdecied.sys
    [2011/05/03 02:50:35 | 001,691,604 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI
    [2011/03/28 21:10:12 | 000,059,904 | ---- | C] () -- C:\windows\SysWow64\OVDecode.dll
    [2011/03/17 19:05:12 | 000,003,914 | ---- | C] () -- C:\windows\SysWow64\atipblag.dat
    [2011/02/26 00:32:12 | 000,012,144 | ---- | C] () -- C:\windows\HPun2430Version.dll
    [2011/02/12 05:07:16 | 000,000,256 | R--- | C] () -- C:\windows\SysWow64\DPSCEL.dll.hpsign
    [2011/02/12 05:07:16 | 000,000,256 | R--- | C] () -- C:\windows\SysWow64\DPFPApi.dll.hpsign
    [2011/02/12 05:07:16 | 000,000,256 | R--- | C] () -- C:\windows\SysWow64\DPClback.dll.hpsign
    [2011/02/12 05:04:36 | 000,000,256 | R--- | C] () -- C:\windows\SysWow64\DPLic.dll.hpsign
    [2011/02/04 00:09:24 | 000,366,176 | ---- | C] () -- C:\windows\SysWow64\flcdlmsg.dll
    [2011/02/03 05:49:02 | 000,000,256 | R--- | C] () -- C:\windows\SysWow64\DPFPApiUI.dll.hpsign
    [2011/02/03 05:47:42 | 000,000,256 | R--- | C] () -- C:\windows\SysWow64\DPPassFilter.dll.hpsign
    [2011/02/03 05:47:42 | 000,000,256 | R--- | C] () -- C:\windows\SysWow64\DPCrProv.dll.hpsign
    [2011/01/30 01:49:32 | 000,017,232 | ---- | C] () -- C:\windows\SysWow64\CoHpCasl.exe
    [2011/01/27 07:55:20 | 000,960,940 | ---- | C] () -- C:\windows\SysWow64\igkrng600.bin
    [2011/01/27 07:55:20 | 000,213,332 | ---- | C] () -- C:\windows\SysWow64\igfcg600m.bin
    [2011/01/27 07:55:20 | 000,145,804 | ---- | C] () -- C:\windows\SysWow64\igcompkrng600.bin
    [2011/01/22 21:40:54 | 000,000,256 | ---- | C] () -- C:\windows\SysWow64\vcsAPIShared.dll.hpsign
    [2011/01/11 05:03:08 | 086,271,980 | ---- | C] () -- C:\windows\SysWow64\BioTrustFace.dat
    [2010/12/07 07:16:34 | 000,181,072 | ---- | C] () -- C:\windows\SysWow64\PassThroughOTP.dll
    [2010/12/07 07:16:34 | 000,000,256 | ---- | C] () -- C:\windows\SysWow64\PassThroughOTP.dll.hpsign

    ========== LOP Check ==========

    [2012/04/24 21:00:46 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\Babylon
    [2011/08/17 10:39:00 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\DigitalPersona
    [2012/01/23 19:24:01 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\DVDVideoSoft
    [2011/10/18 18:25:12 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\DVDVideoSoftIEHelpers
    [2011/12/22 16:02:53 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\MAGIX
    [2012/04/06 23:14:14 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\SoftGrid Client
    [2011/08/17 10:47:13 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\Synaptics
    [2011/08/17 10:51:28 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\TP
    [2012/04/24 21:05:03 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\WebPlayerBdd
    [2012/02/02 18:26:13 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\WildTangent
    [2012/03/01 08:14:03 | 000,032,482 | ---- | M] () -- C:\windows\Tasks\SCHEDLGU.TXT

    ========== Purity Check ==========



    ========== Custom Scans ==========

    < %APPDATA%\*. >
    [2011/08/19 23:09:59 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\Adobe
    [2011/10/18 18:35:23 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\Apple Computer
    [2012/01/10 21:51:56 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\ArcSoft
    [2011/08/17 10:48:18 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\ATI
    [2011/08/20 14:28:57 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\Avira
    [2012/04/24 21:00:46 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\Babylon
    [2011/08/17 10:39:00 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\DigitalPersona
    [2012/01/23 19:24:01 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\DVDVideoSoft
    [2011/10/18 18:25:12 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\DVDVideoSoftIEHelpers
    [2011/08/17 10:43:05 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\Hewlett-Packard
    [2012/02/14 14:55:09 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\hpqLog
    [2011/08/17 10:46:53 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\Identities
    [2011/08/17 10:47:17 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\Intel Corporation
    [2011/08/19 23:10:02 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\Macromedia
    [2011/12/22 16:02:53 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\MAGIX
    [2012/04/25 18:13:15 | 000,000,000 | --SD | M] -- C:\Users\Floriane\AppData\Roaming\Microsoft
    [2011/08/19 23:19:47 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\Mozilla
    [2012/04/23 22:44:09 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\Skype
    [2011/11/21 19:53:36 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\skypePM
    [2012/04/06 23:14:14 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\SoftGrid Client
    [2011/08/17 10:47:13 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\Synaptics
    [2011/08/17 10:51:28 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\TP
    [2012/04/24 21:05:03 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\WebPlayerBdd
    [2012/02/02 18:26:13 | 000,000,000 | ---D | M] -- C:\Users\Floriane\AppData\Roaming\WildTangent

    < %APPDATA%\*.exe /s >

    < %SYSTEMDRIVE%\*.* >
    [2012/04/25 19:32:41 | 000,053,537 | ---- | M] () -- C:\aaw7boot.log
    [2009/07/14 03:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr
    [2012/04/25 19:32:44 | 4226,113,536 | -HS- | M] () -- C:\hiberfil.sys
    [2012/04/25 19:32:44 | 4226,113,536 | -HS- | M] () -- C:\pagefile.sys
    [2011/08/19 22:56:55 | 021,037,056 | RHS- | M] () -- C:\SafeBoot.fs
    [2011/08/19 22:56:53 | 000,393,216 | RHS- | M] () -- C:\SafeBoot.rsv
    [2012/04/24 21:01:14 | 000,000,237 | ---- | M] () -- C:\user.js

    < %systemroot%\*. /mp /s >

    < %systemroot%\System32\config\*.sav >

    < %systemroot%\Tasks\*.job /lockedfiles >

    < %systemroot%\system32\drivers\*.sys /lockedfiles >

    < %systemroot%\system32\*.dll /lockedfiles >

    < MD5 for: EXPLORER.EXE >
    [2011/02/26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
    [2011/02/25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
    [2011/02/25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
    [2011/02/26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
    [2010/11/20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
    [2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
    [2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
    [2010/11/20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

    < MD5 for: IEXPLORE.EXE >
    [2011/11/27 16:27:46 | 000,748,336 | ---- | M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639 -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    [2011/11/27 16:27:46 | 000,748,336 | ---- | M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639 -- C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_17a944edb4ca4c7a\iexplore.exe
    [2011/11/27 16:27:45 | 000,754,480 | ---- | M] (Microsoft Corporation) MD5=F1424C1B9B1813BF825E45DF3790BC8A -- C:\Program Files\Internet Explorer\iexplore.exe
    [2011/11/27 16:27:45 | 000,754,480 | ---- | M] (Microsoft Corporation) MD5=F1424C1B9B1813BF825E45DF3790BC8A -- C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_0d549a9b80698a7f\iexplore.exe

    < MD5 for: SVCHOST.EXE >
    [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
    [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
    [2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\windows\SysNative\svchost.exe
    [2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

    < MD5 for: USERINIT.EXE >
    [2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
    [2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
    [2010/11/20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\windows\SysNative\userinit.exe
    [2010/11/20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

    < MD5 for: WINLOGON.EXE >
    [2010/11/20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\windows\SysNative\winlogon.exe
    [2010/11/20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe

    < End of report >
    25 Avril 2012 20:21:15

    rapport Extras :
    OTL Extras logfile created on: 25/04/2012 19:54:27 - Run 1
    OTL by OldTimer - Version 3.2.42.0 Folder = C:\Users\Floriane\Downloads
    64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

    3,94 Gb Total Physical Memory | 1,76 Gb Available Physical Memory | 44,80% Memory free
    7,87 Gb Paging File | 5,06 Gb Available in Paging File | 64,25% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 274,96 Gb Total Space | 193,23 Gb Free Space | 70,28% Space Free | Partition Type: NTFS
    Drive E: | 17,83 Gb Total Space | 2,71 Gb Free Space | 15,18% Space Free | Partition Type: NTFS
    Drive F: | 4,98 Gb Total Space | 0,00 Gb Free Space | 0,03% Space Free | Partition Type: FAT32
    Drive G: | 7,67 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

    Computer Name: FLORIANE-HP | User Name: Floriane | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

    ========== Extra Registry (SafeList) ==========


    ========== File Associations ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
    .url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation)

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
    .cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation)

    [HKEY_USERS\S-1-5-21-1181001813-4277704327-3909577942-1001\SOFTWARE\Classes\<extension>]
    .html [@ = FirefoxHTML] -- C:\Users\Floriane\firefox.exe (Mozilla Corporation)

    ========== Shell Spawning ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
    batfile [open] -- "%1" %*
    cmdfile [open] -- "%1" %*
    comfile [open] -- "%1" %*
    exefile [open] -- "%1" %*
    helpfile [open] -- Reg Error: Key error.
    htmlfile [edit] -- Reg Error: Key error.
    htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
    inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
    InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
    InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
    piffile [open] -- "%1" %*
    regfile [merge] -- Reg Error: Key error.
    scrfile [config] -- "%1"
    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
    scrfile [open] -- "%1" /S
    txtfile [edit] -- Reg Error: Key error.
    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
    Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [explore] -- Reg Error: Value error.
    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
    batfile [open] -- "%1" %*
    cmdfile [open] -- "%1" %*
    comfile [open] -- "%1" %*
    cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
    exefile [open] -- "%1" %*
    helpfile [open] -- Reg Error: Key error.
    htmlfile [edit] -- Reg Error: Key error.
    htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
    inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
    piffile [open] -- "%1" %*
    regfile [merge] -- Reg Error: Key error.
    scrfile [config] -- "%1"
    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
    scrfile [open] -- "%1" /S
    txtfile [edit] -- Reg Error: Key error.
    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
    Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [explore] -- Reg Error: Value error.
    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    ========== Security Center Settings ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
    "cval" = 1

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
    "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
    "AntiVirusOverride" = 0
    "AntiSpywareOverride" = 0
    "FirewallOverride" = 0

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

    ========== Firewall Settings ==========

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
    "DisableNotifications" = 0
    "EnableFirewall" = 1

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
    "DisableNotifications" = 0
    "EnableFirewall" = 1

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
    "DisableNotifications" = 0
    "EnableFirewall" = 1

    ========== Authorized Applications List ==========


    ========== HKEY_LOCAL_MACHINE Uninstall List ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
    "{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
    "{230D1595-57DA-4933-8C4E-375797EBB7E1}" = Bluetooth Win7 Suite (64)
    "{3D8EDF72-13CC-4E51-AAB6-32A20524D2E0}" = HP Power Assistant
    "{422BA615-2133-4DC0-8673-09C8CC7557F2}" = HP ProtectTools Security Manager
    "{439760BC-7737-4386-9B1D-A90A3E8A22EA}" = Apple Mobile Device Support
    "{483D5A49-A26B-4CB8-AA2D-0D1811322061}" = HP DayStarter
    "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
    "{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
    "{555ECC75-AB3B-6434-8900-2BBA4F91F107}" = ccc-utility64
    "{55B52830-024A-443E-AF61-61E1E71AFA1B}" = Device Access Manager for HP ProtectTools
    "{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector
    "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
    "{63E42DE7-C468-31B0-E373-173C67C87B88}" = ATI Catalyst Install Manager
    "{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
    "{7D1C63D1-6520-49DA-B738-958133526E80}" = HP HotKey Support
    "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
    "{83DA38AB-1014-41C2-A3CD-E2B93832A71A}" = HP 3D DriveGuard
    "{8A0041CD-277C-4C1F-BFE4-7AC508B20B4C}" = Drive Encryption For HP ProtectTools
    "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
    "{90140000-006D-040C-1000-0000000FF1CE}" = Microsoft Office « Démarrer en un clic » 2010
    "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
    "{997C9EC4-B53D-479D-81B7-0AEC8D174BA1}" = iTunes
    "{ACA53F68-B003-4D0E-9C3D-0C4EE09D08A8}" = Privacy Manager for HP ProtectTools
    "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
    "{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}" = HP Auto
    "{D3A775F2-2674-4452-8D80-1FC1446052EE}" = Face Recognition for HP ProtectTools
    "{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
    "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
    "{FB06FBC7-3CE3-50D9-1803-CC28E5ADF780}" = WMV9/VC-1 Video Playback
    "{FFC3E41D-2C2B-45B7-9AD9-5EA19572DD26}" = Validity Fingerprint Sensor Driver
    "HPProtectTools" = HP ProtectTools Security Manager
    "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
    "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
    "SynTPDeinstKey" = Synaptics Pointing Device Driver

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "{03046EBB-CB7C-4B98-BEFB-690EB955DA22}" = HP Setup
    "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
    "{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
    "{08F10409-00BB-8843-4813-37FDDD972CB1}" = CCC Help Chinese Standard
    "{08FB6F00-7D8D-5474-B70D-607638405BEB}" = CCC Help Korean
    "{09F56A49-A7B1-4AAB-95B9-D13094254AD1}" = Windows Live UX Platform Language Pack
    "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
    "{0BE5C4DB-8EA2-483D-BD71-D7EB09040CDE}" = Windows Live UX Platform Language Pack
    "{0DEA342C-15CB-4F52-97B6-06A9C4B9C06F}" = SDK
    "{11C9A461-DD9D-4C71-85A4-6DCE7F99CC44}" = HP Wallpaper
    "{12379137-5A34-8311-A00C-4571E468F507}" = CCC Help Polish
    "{1392513C-F92A-2893-E263-071E943CB4B8}" = Catalyst Control Center InstallProxy
    "{1529490E-DC67-A7DA-E7FE-789B929E67F0}" = CCC Help Norwegian
    "{190A7D93-3823-439C-91B9-ADCE3EC2A6A2}" = ArcSoft Webcam Sharing Manager
    "{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
    "{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
    "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
    "{20976B1F-E910-404D-9261-C16EE7E12DC8}" = HP QuickWeb
    "{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
    "{26604C7E-A313-4D12-867F-7C6E7820BE4C}" = JMicron Flash Media Controller Driver
    "{2A07C35B-8384-4DA4-9A95-442B6C89A073}" = Windows Live Essentials
    "{2E07A6AE-C2EC-05DB-8344-B562E5D9E341}" = CCC Help Swedish
    "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
    "{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
    "{344A1AA2-AC8E-4741-BDB0-65B68FDA883C}" = HP SoftPaq Download Manager
    "{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
    "{399C37FB-08AF-493B-BFED-20FBD85EDF7F}" = HP Webcam Driver
    "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
    "{3E918CE9-BDA6-282D-0E19-E11DF8004ABE}" = CCC Help Thai
    "{4114A073-7385-4742-8A5E-A5788FAC838F}" = ArcSoft TotalMedia
    "{4441B01C-0AF2-6EE7-CDB3-AD0DB41E7147}" = CCC Help Hungarian
    "{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
    "{4B21E4B2-89B8-499D-803A-34ABF929401E}" = HP Connection Manager
    "{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
    "{4F31F4D3-4CA9-4997-BD3C-C957726E06E3}" = MAGIX Vidéo easy SOS Cassettes vidéo 4
    "{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module
    "{531000B3-DBEE-4115-BBF3-DA48B67C053F}" = HP Software Setup
    "{54C65FE7-83BD-4A5B-A9B4-41F793C5F241}" = HP System Default Settings
    "{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
    "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
    "{668643A5-48DD-B0E9-62E1-1FDA18D54F66}" = CCC Help Finnish
    "{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
    "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
    "{69EA3784-E961-76A2-6C11-7B83AA50E56A}" = CCC Help Czech
    "{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
    "{6A9C9BE1-14A3-42ED-A388-42E30A1412E9}" = HP Documentation
    "{6CD0AC60-66DD-417F-B865-E3BC789E2975}" = MAGIX Speed burnR (MSI)
    "{6D6ADF03-B257-4EA5-BBC1-1D145AF8D514}" = File Sanitizer For HP ProtectTools
    "{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
    "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
    "{71543470-E3F8-6A06-08C8-783CD286D2BA}" = CCC Help German
    "{737DCE46-824C-40BA-8776-81D9D1DB04AB}" = Catalyst Control Center - Branding
    "{73FC3510-6421-40F7-9503-EDAE4D0CF70D}" = Windows Live Photo Common
    "{76BAC71B-00A7-BBFA-5DAE-EEB0DF9F4098}" = CCC Help English
    "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
    "{7CF1347C-61F6-C495-127C-912FD6CB432D}" = CCC Help Japanese
    "{7E85CE3E-53E2-4BC7-9D16-7435BFE93EF1}" = MAGIX Screenshare
    "{80C45B94-2BA0-8E23-95A7-8A9FCD836EFD}" = PX Profile Update
    "{85BE1D9F-FC67-E84E-F73A-BC7125E3B717}" = CCC Help Portuguese
    "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
    "{8D85149E-D7A0-4920-BEBF-B6CEDFED8D1E}" = MAGIX USB-Videowandler 2
    "{8DC069E7-893C-41E1-9442-DE89FEC33371}" = Xobni Core
    "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
    "{8FB495A1-4A3F-4C1D-BD27-3F3AB2E66763}" = iMesh
    "{90140011-0066-040C-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - Français
    "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
    "{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
    "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    "{9BD262D0-B788-4546-A0A5-F4F56EC3834B}" = Windows Live Photo Common
    "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    "{9E48FF52-082C-4CC2-BB67-6E10D09C0431}" = Windows Live UX Platform Language Pack
    "{A1EFCBD2-B171-E24D-FAD2-4E711A312DEF}" = CCC Help Danish
    "{A60B3BF0-954B-42AF-B8D8-2C1D34B613AA}" = Windows Live Photo Gallery
    "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
    "{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
    "{AB9F8790-4ECB-1BFA-1B80-21DCD40664C3}" = CCC Help Greek
    "{AC76BA86-7AD7-1036-7B44-A93000000001}" = Adobe Reader 9.3 - Français
    "{ADC70B7A-530B-46E3-8384-48D22681A41E}" = Theft Recovery for HP ProtectTools
    "{AE6BF609-EF6A-8764-85EE-6CC65602D88E}" = CCC Help Chinese Traditional
    "{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
    "{B26B64E8-DB83-7904-2DF9-F92A7ABC14D9}" = Catalyst Control Center Localization All
    "{B3575D00-27EF-49C2-B9E0-14B3D954E992}" = Apple Application Support
    "{B3E31950-C92F-BCD9-963D-A520887A262A}" = CCC Help Turkish
    "{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
    "{B7F60A16-7A7B-41FB-9AE3-DE9E324FBA06}" = HP Software Framework
    "{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}" = Energy Star Digital Logo
    "{BE211EBE-AC92-515C-D122-A9DD0BC9FFA9}" = Catalyst Control Center
    "{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
    "{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program
    "{C6CD49BC-E6A5-F247-0489-F3188F300A8E}" = Catalyst Control Center Profiles Mobile
    "{C7C60D93-E5B7-82D7-44A4-E3EE404B56A3}" = CCC Help Dutch
    "{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
    "{C9E14402-3631-4182-B377-6B0DFB1C0339}" = QuickTime
    "{CB7224D9-6DCA-43F1-8F83-6B1E39A00F92}" = Windows Live Movie Maker
    "{CBD548E9-E421-7B51-5732-2F63B37589E2}" = CCC Help French
    "{CD95F661-A5C4-44F5-A6AA-ECDD91C240C1}" = WinZip 15.0
    "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
    "{CFC1988A-F492-4BC5-B6F7-683A95718AE9}" = HP ESU for Microsoft Windows 7
    "{D2131BFA-A0D6-4FDE-8614-75B07A9B15EE}" = Windows Live UX Platform Language Pack
    "{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
    "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
    "{D7922D23-642E-0649-A3C9-38F9E0FA263E}" = CCC Help Russian
    "{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
    "{DEF91E0F-D266-453D-B6F2-1BA002B40CB6}" = Windows Live Essentials
    "{DF2035BE-5820-4965-BD97-7FAF8D4A7879}" = Microsoft_VC90_CRT_x86
    "{DF63FA79-75AE-45D6-715E-81E92F134702}" = CCC Help Italian
    "{E02FBF01-0DE3-4BCB-89E8-D300FEFC3289}" = HP Support Assistant
    "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
    "{E2531547-0789-690E-9F12-3EDBDBC64DA8}" = CCC Help Spanish
    "{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
    "{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
    "{ED16B700-D91F-44B0-867C-7EB5253CA38D}" = Raccolta foto di Windows Live
    "{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module
    "{F07E6C5F-6AE1-72B3-8659-08E2ABB86DF8}" = Catalyst Control Center Graphics Previews Common
    "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
    "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Display Audio Driver
    "{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
    "{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
    "{F761359C-9CED-45AE-9A51-9D6605CD55C4}" = Evernote v. 4.2.2
    "{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}" = Realtek Ethernet Controller All-In-One Windows Driver
    "{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
    "{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
    "{FF3DFA01-1E98-46B4-A065-DA8AD47C9598}" = Windows Live Movie Maker
    "Ad-Aware" = Ad-Aware
    "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
    "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
    "ArcSoft TotalMedia" = ArcSoft TotalMedia
    "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
    "Free Studio_is1" = Free Studio version 5.2.1
    "Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.10.15.1228
    "InstallShield_{ADC70B7A-530B-46E3-8384-48D22681A41E}" = Theft Recovery for HP ProtectTools
    "MAGIX_MSI_Video_easy_4_RYVT" = MAGIX Vidéo easy SOS Cassettes vidéo 4
    "Mozilla Firefox 5.0 (x86 fr)" = Mozilla Firefox 5.0 (x86 fr)
    "My HP Game Console" = HP Game Console
    "Office14.Click2Run" = Microsoft Office « Démarrer en un clic » 2010
    "PDF Complete" = PDF Complete Special Edition
    "SFR_Kit" = SFR - Kit de connexion
    "SFR_Media Center" = SFR - Media Center
    "WildTangent hp Master Uninstall" = HP Games
    "WinLiveSuite" = Windows Live Essentials
    "WT087330" = Bounce Symphony
    "WT087361" = FATE
    "WT087380" = John Deere Drive Green
    "WT087394" = Penguins!
    "WT087396" = Polar Bowler
    "WT087428" = Bejeweled 2 Deluxe
    "WT087453" = Chuzzle Deluxe
    "WT087480" = Insaniquarium Deluxe
    "WT087485" = Jewel Quest II
    "WT087490" = Jewel Quest Solitaire
    "WT087501" = Plants vs. Zombies
    "WT087510" = Slingo Deluxe
    "WT087513" = Virtual Villagers - The Secret City
    "WT087519" = Wedding Dash
    "WT087533" = Zuma Deluxe
    "WT087536" = Diner Dash 2 Restaurant Rescue
    "WT089303" = Build-a-Lot - The Elizabethan Era
    "WT089308" = Blasterball 3
    "WT089328" = Farm Frenzy
    "WT089359" = Cake Mania
    "WT089362" = Agatha Christie - Peril at End House

    ========== HKEY_USERS Uninstall List ==========

    [HKEY_USERS\S-1-5-21-1181001813-4277704327-3909577942-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "Mozilla Firefox 11.0 (x86 fr)" = Mozilla Firefox 11.0 (x86 fr)

    ========== Last 10 Event Log Errors ==========

    [ Application Events ]
    Error - 24/03/2012 09:19:13 | Computer Name = Floriane-HP | Source = ATIeRecord | ID = 16398
    Description = ATI EEU failed to post message to CCC

    Error - 24/03/2012 09:19:13 | Computer Name = Floriane-HP | Source = ATIeRecord | ID = 16398
    Description = ATI EEU failed to post message to CCC

    Error - 24/03/2012 09:19:13 | Computer Name = Floriane-HP | Source = ATIeRecord | ID = 16398
    Description = ATI EEU failed to post message to CCC

    Error - 24/03/2012 09:19:13 | Computer Name = Floriane-HP | Source = ATIeRecord | ID = 16398
    Description = ATI EEU failed to post message to CCC

    Error - 24/03/2012 09:19:13 | Computer Name = Floriane-HP | Source = ATIeRecord | ID = 16398
    Description = ATI EEU failed to post message to CCC

    Error - 24/03/2012 09:19:13 | Computer Name = Floriane-HP | Source = ATIeRecord | ID = 16398
    Description = ATI EEU failed to post message to CCC

    Error - 24/03/2012 09:19:13 | Computer Name = Floriane-HP | Source = ATIeRecord | ID = 16398
    Description = ATI EEU failed to post message to CCC

    Error - 24/03/2012 09:19:13 | Computer Name = Floriane-HP | Source = ATIeRecord | ID = 16398
    Description = ATI EEU failed to post message to CCC

    Error - 24/03/2012 13:58:08 | Computer Name = Floriane-HP | Source = ATIeRecord | ID = 16398
    Description = ATI EEU failed to post message to CCC

    Error - 25/03/2012 05:01:41 | Computer Name = Floriane-HP | Source = ATIeRecord | ID = 16398
    Description = ATI EEU failed to post message to CCC

    [ Hewlett-Packard Events ]
    Error - 08/10/2011 12:14:01 | Computer Name = Floriane-HP | Source = Hewlett-Packard | ID = 0
    Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\101108061357.xml
    File not created by asset agent

    Error - 15/12/2011 12:17:00 | Computer Name = Floriane-HP | Source = Hewlett-Packard | ID = 0
    Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\121115051657.xml
    File not created by asset agent

    Error - 01/01/2012 14:31:17 | Computer Name = Floriane-HP | Source = Hewlett-Packard | ID = 0
    Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\011201073109.xml
    File not created by asset agent

    Error - 05/04/2012 10:28:33 | Computer Name = Floriane-HP | Source = Hewlett-Packard | ID = 0
    Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\041205042829.xml
    File not created by asset agent

    Error - 05/04/2012 10:28:35 | Computer Name = Floriane-HP | Source = Hewlett-Packard | ID = 0
    Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\041205042833.xml
    File not created by asset agent

    [ HP Connection Manager Events ]
    Error - 06/02/2012 17:30:13 | Computer Name = Floriane-HP | Source = hpCMSrv | ID = 5
    Description = 2012/02/06 22:30:13.730|000006A8|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
    failed [hr:0x800706BA]

    Error - 06/02/2012 17:30:13 | Computer Name = Floriane-HP | Source = hpCMSrv | ID = 5
    Description = 2012/02/06 22:30:13.761|000006A8|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
    failed [hr:0x800706BA]

    Error - 06/02/2012 17:30:13 | Computer Name = Floriane-HP | Source = hpCMSrv | ID = 5
    Description = 2012/02/06 22:30:13.761|000006A8|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
    failed [hr:0x800706BA]

    Error - 10/02/2012 08:45:56 | Computer Name = Floriane-HP | Source = hpCMSrv | ID = 5
    Description = 2012/02/10 13:45:56.952|0000038C|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
    failed [hr:0x800706BA]

    Error - 10/02/2012 08:45:57 | Computer Name = Floriane-HP | Source = hpCMSrv | ID = 5
    Description = 2012/02/10 13:45:57.046|0000038C|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
    failed [hr:0x800706BA]

    Error - 10/02/2012 08:45:57 | Computer Name = Floriane-HP | Source = hpCMSrv | ID = 5
    Description = 2012/02/10 13:45:57.171|0000038C|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
    failed [hr:0x800706BA]

    Error - 10/02/2012 08:45:57 | Computer Name = Floriane-HP | Source = hpCMSrv | ID = 5
    Description = 2012/02/10 13:45:57.233|0000038C|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
    failed [hr:0x800706BA]

    Error - 10/02/2012 08:45:57 | Computer Name = Floriane-HP | Source = hpCMSrv | ID = 5
    Description = 2012/02/10 13:45:57.280|0000038C|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
    failed [hr:0x800706BA]

    Error - 12/02/2012 14:06:33 | Computer Name = Floriane-HP | Source = hpCMSrv | ID = 5
    Description = 2012/02/12 19:06:33.641|0000149C|Error |CWLAN::StateChanged|Fire_StateChanged
    failed [hr:0x800706BA]

    Error - 12/02/2012 14:06:33 | Computer Name = Floriane-HP | Source = hpCMSrv | ID = 5
    Description = 2012/02/12 19:06:33.656|0000149C|Error |CBluetooth::StateChanged|Fire_StateChanged
    failed [hr:0x800706BA]

    [ HP Power Assistant Events ]
    Error - 23/12/2011 15:07:59 | Computer Name = Floriane-HP | Source = HP PA Application | ID = 1001
    Description = An error occurred in HP Power Assistant application. Please restart
    HP Power Assistant application. Additional details may be available in the Details
    section. DETAILS Level value needs to be an integer between 0 and 100, got 102UpdateBatteryPredictions()
    has bad values. Check PMCCapabilities.XML and PMCData.XML if in emulation mode

    Error - 23/12/2011 15:08:58 | Computer Name = Floriane-HP | Source = HP PA Application | ID = 1001
    Description = An error occurred in HP Power Assistant application. Please restart
    HP Power Assistant application. Additional details may be available in the Details
    section. DETAILS Level value needs to be an integer between 0 and 100, got 101UpdateBatteryPredictions()
    has bad values. Check PMCCapabilities.XML and PMCData.XML if in emulation mode

    Error - 23/12/2011 15:09:58 | Computer Name = Floriane-HP | Source = HP PA Application | ID = 1001
    Description = An error occurred in HP Power Assistant application. Please restart
    HP Power Assistant application. Additional details may be available in the Details
    section. DETAILS Level value needs to be an integer between 0 and 100, got 101UpdateBatteryPredictions()
    has bad values. Check PMCCapabilities.XML and PMCData.XML if in emulation mode

    Error - 23/12/2011 15:10:57 | Computer Name = Floriane-HP | Source = HP PA Application | ID = 1001
    Description = An error occurred in HP Power Assistant application. Please restart
    HP Power Assistant application. Additional details may be available in the Details
    section. DETAILS Level value needs to be an integer between 0 and 100, got 101UpdateBatteryPredictions()
    has bad values. Check PMCCapabilities.XML and PMCData.XML if in emulation mode

    Error - 23/12/2011 15:11:56 | Computer Name = Floriane-HP | Source = HP PA Application | ID = 1001
    Description = An error occurred in HP Power Assistant application. Please restart
    HP Power Assistant application. Additional details may be available in the Details
    section. DETAILS Level value needs to be an integer between 0 and 100, got 101UpdateBatteryPredictions()
    has bad values. Check PMCCapabilities.XML and PMCData.XML if in emulation mode

    Error - 23/12/2011 15:12:55 | Computer Name = Floriane-HP | Source = HP PA Application | ID = 1001
    Description = An error occurred in HP Power Assistant application. Please restart
    HP Power Assistant application. Additional details may be available in the Details
    section. DETAILS Level value needs to be an integer between 0 and 100, got 101UpdateBatteryPredictions()
    has bad values. Check PMCCapabilities.XML and PMCData.XML if in emulation mode

    Error - 23/12/2011 15:13:54 | Computer Name = Floriane-HP | Source = HP PA Application | ID = 1001
    Description = An error occurred in HP Power Assistant application. Please restart
    HP Power Assistant application. Additional details may be available in the Details
    section. DETAILS Level value needs to be an integer between 0 and 100, got 101UpdateBatteryPredictions()
    has bad values. Check PMCCapabilities.XML and PMCData.XML if in emulation mode

    Error - 23/12/2011 15:14:53 | Computer Name = Floriane-HP | Source = HP PA Application | ID = 1001
    Description = An error occurred in HP Power Assistant application. Please restart
    HP Power Assistant application. Additional details may be available in the Details
    section. DETAILS Level value needs to be an integer between 0 and 100, got 101UpdateBatteryPredictions()
    has bad values. Check PMCCapabilities.XML and PMCData.XML if in emulation mode

    Error - 17/01/2012 15:53:03 | Computer Name = Floriane-HP | Source = HP PA Application | ID = 1001
    Description = An error occurred in HP Power Assistant application. Please restart
    HP Power Assistant application. Additional details may be available in the Details
    section. DETAILS Level value needs to be an integer between 0 and 100, got 101UpdateBatteryPredictions()
    has bad values. Check PMCCapabilities.XML and PMCData.XML if in emulation mode

    Error - 17/01/2012 15:54:02 | Computer Name = Floriane-HP | Source = HP PA Application | ID = 1001
    Description = An error occurred in HP Power Assistant application. Please restart
    HP Power Assistant application. Additional details may be available in the Details
    section. DETAILS Level value needs to be an integer between 0 and 100, got 101UpdateBatteryPredictions()
    has bad values. Check PMCCapabilities.XML and PMCData.XML if in emulation mode

    [ System Events ]
    Error - 23/04/2012 11:14:37 | Computer Name = Floriane-HP | Source = BTHUSB | ID = 327697
    Description = La carte locale Bluetooth a échoué d'une manière indéterminée et ne
    sera pas utilisée. Le pilote a été déchargée.

    Error - 23/04/2012 11:14:58 | Computer Name = Floriane-HP | Source = Service Control Manager | ID = 7011
    Description = Le dépassement de délai (30000 millisecondes) a été atteint lors de
    l’attente de la réponse transactionnelle du service hpHotkeyMonitor.

    Error - 23/04/2012 16:44:22 | Computer Name = Floriane-HP | Source = DCOM | ID = 10010
    Description =

    Error - 24/04/2012 13:32:47 | Computer Name = Floriane-HP | Source = BTHUSB | ID = 327697
    Description = La carte locale Bluetooth a échoué d'une manière indéterminée et ne
    sera pas utilisée. Le pilote a été déchargée.

    Error - 24/04/2012 13:34:52 | Computer Name = Floriane-HP | Source = Service Control Manager | ID = 7009
    Description = Le dépassement de délai (30000 millisecondes) a été atteint lors de
    l’attente de la connexion du service Steam Client Service.

    Error - 24/04/2012 13:34:52 | Computer Name = Floriane-HP | Source = Service Control Manager | ID = 7000
    Description = Le service Steam Client Service n’a pas pu démarrer en raison de l’erreur :
    %%1053

    Error - 24/04/2012 16:26:14 | Computer Name = Floriane-HP | Source = DCOM | ID = 10010
    Description =

    Error - 25/04/2012 11:54:15 | Computer Name = Floriane-HP | Source = BTHUSB | ID = 327697
    Description = La carte locale Bluetooth a échoué d'une manière indéterminée et ne
    sera pas utilisée. Le pilote a été déchargée.

    Error - 25/04/2012 13:31:22 | Computer Name = Floriane-HP | Source = DCOM | ID = 10010
    Description =

    Error - 25/04/2012 13:32:46 | Computer Name = Floriane-HP | Source = BTHUSB | ID = 327697
    Description = La carte locale Bluetooth a échoué d'une manière indéterminée et ne
    sera pas utilisée. Le pilote a été déchargée.


    < End of report >
    Tom's guide dans le monde
    • Allemagne
    • Italie
    • Irlande
    • Royaume Uni
    • Etats Unis
    Suivre Tom's Guide
    Inscrivez-vous à la Newsletter
    • ajouter à twitter
    • ajouter à facebook
    • ajouter un flux RSS