blue screen!!

batman73 · le 10 Sep 2010 07:37

Bonjour,

Il y a quelques semaines,je decidais de monter moi meme mon ordi avec vos bons conseils (voir message),tout allait bien jusque là,sauf qu'hier,patatra.. blue screen!!!
Je n'avais encore jamais connu ca!
L'ordi s'est eteint et à redemmarer seul,j'ai de suite recherhcer une solution à ce probleme,et j'ai trouvé sur un forum un message disant qu'il fallait supprimer les fichiers minidump,ce que j'ai fait.
Mais hier soir,rebelote,au moment ou j'allais eteindre mon ordi,de nouveau l'ecran bleu!
Et là,les degats sont visibles,windows me dit que je n'ai pas d'antivirus,alors que si!
Chrome m'affiche sans cesse un message d'erreur comme quoi je dois changer mon profil,et pas mal d'onglets de la barre de navigation ont disparu!!

Helllpppp,je precise que je suis sous windows 7

merci pour vos reponses

reg35 · le 10 Sep 2010 11:14

salut
ta du chopper un virus... :-?

tu as quel antivirus?
je pensses que tu va pouvoir telecharger hijackthis et lancer un scan.
il va te generer un rapport, dont tu va nous copier coller le rapport sur ton prochain message
une fois ton rapport collé, tu le selectionne entierementet tu click sur l'icone "quote" juste au dessus du message afin de ne pas avoir un message trop grand au final. :wink:

ps rapelles nous ta configuration complete stp :wink:

batman73 · le 10 Sep 2010 12:03

Code: Tout sélectionner: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:58:00, on 10/09/2010 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\lilyetbatman\Downloads\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll O4 - HKLM\..\Run: [BCU] "C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe" O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [EPSON Stylus DX8400 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICEE.EXE /FU "C:\Windows\TEMP\E_SCDD3.tmp" /EF "HKCU" O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup O4 - HKCU\..\Run: [Sony Ericsson PC Companion] "C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /Background O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe O13 - Gopher Prefix: O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 8541 bytes

Voici le rapport avec hijackthis,j'utilise avast comme anti virus.
je te joins la confi de l'ordi dans le message suivant...

merci

EDIT Skynet : balises [code] ajoutées.

EDIT Bis :

Bon apparemment j'ai pas reussi à raccourcir le message!! lol desolée

voici la configuration de l'ordi:
Xigmatek Asgard II

Corsair Power CX - 400W

Gigabyte GA-MA785GT-UD3H

AMD Athlon™ II X3 440

Western Digital Caviar Blue S-ATA 640 Go - 16 Mo

Samsung SH-S223L - OEM, noir

Microsoft Windows 7 Edition Familiale Premium 64 bits (oem)

OCZ DDR3 2 x 2 Go PC10600 Gold Edition

On ne se moque pas! j'ai repris le panier d'achat de l'ordi de mon homme,car je n'ai aucune idée de ce que contiens l'ordi sinon!!

EDIT Ter :

je rajoute ca au cas ou:

Signature du problème
Nom d’événement du problème : BlueScreen
Version du système: 6.1.7600.2.0.0.768.3
Identificateur de paramètres régionaux: 1036

Informations complémentaires sur le problème
BCCode: 9f
BCP1: 0000000000000003
BCP2: FFFFFA8005670A00
BCP3: FFFFF80000B9C518
BCP4: FFFFFA80044C9810
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1

bernard53 · le 10 Sep 2010 19:31

Bonsoir

Supprimes juste cela qui est dans ton rapport HIT.. qui est le mal venu.

C:\Program Files (x86)\Ask.com
passe ensuite Malwaresbytes.

Installe Malewarebytes' Antimalware,
Téléchargement

*** Met-le à jour puis choisi, Exécuter un examen complet

*** Si une infection est trouvée, coche la case a coté et valides avec l’Onglet Supprimer la sélection

Poste le rapport final.
*** il est conseillé de désactivé Tea-Timer si tu as Spybot-S&D juste le temps du scan.

Voici comment faire: Lancez Spybot-S&D, passez en Mode avancé via le Menu Mode (en haut) → cliquez sur Oui--> choisissez Outils dans la barre de navigation sur la gauche -->Résident et là vous pouvez décocher les cases situées devant les deux outils.

ensuite ceci pour tes blue screen

Télécharger whocrashedSetup

Ou <<ICI>>

Installer le logiciel et une fois installé cliquez sur Analyse

Laisse Internet connecté . Si tu as une anomalie mets-le rapport ici.

batman73 · le 11 Sep 2010 09:23

Merci pour ton message bernard,
j'ai voulu desinstaller dans un premier temps la barre d'outils de Ask,je lance la procedure et là...ecran bleu!!
C'est donc apparemment ce truc qui met le bazard???
je vais lancer malware...

EDIT :

voici le rapport malwarebytes,rien trouvé!

Code: Tout sélectionner: Malwarebytes' Anti-Malware 1.46 http://www.malwarebytes.org Version de la base de données: 4594 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 11/09/2010 10:48:32 mbam-log-2010-09-11 (10-48-32).txt Type d'examen: Examen complet (C:\|) Elément(s) analysé(s): 215336 Temps écoulé: 22 minute(s), 33 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté)

bernard53 · le 11 Sep 2010 12:40

Pour ton soucis de "Ask" fait ceci alors.

* Télécharge >> OTL <<sur ton bureau.

* Fait un double-clic sur l'icône d'OTL pour le lancer
/!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"

* Assure-toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case "Rapport minimal " soit cochée.

* Copies et colles le contenue de cette citation dans la partie inférieure d'OTL " Personnalisation"

netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
vstor32.sys
ahcix86s.sys
nvrd32.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles

* Cliques sur l'icône "Analyse" (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un ou deux rapports vont s'ouvrir "OTL.Txt" et ( ou ) "Extras.Txt"( dans certains cas).
* Copie et colle le ou les rapports dans ta réponse stp...
* Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés

batman73 · le 11 Sep 2010 13:21

voici le rapport avec OTL

Code: Tout sélectionner: OTL logfile created on: 11/09/2010 14:13:13 - Run 1 OTL by OldTimer - Version 3.2.11.0 Folder = C:\Users\lilyetbatman\Downloads 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 71,00% Memory free 7,00 Gb Paging File | 5,00 Gb Available in Paging File | 77,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 596,07 Gb Total Space | 546,30 Gb Free Space | 91,65% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: LILYETBATMAN-PC Current User Name: lilyetbatman Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - C:\Users\lilyetbatman\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software) PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) PRC - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe (Avanquest Software) PRC - C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (OpenOffice.org) PRC - C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) PRC - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe () PRC - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation) PRC - C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation) PRC - C:\Program Files (x86)\Gigabyte\EasySaver\essvr.exe () PRC - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe (DeviceVM, Inc.) PRC - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.) [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - C:\Users\lilyetbatman\Downloads\OTL.exe (OldTimer Tools) MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation) [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - (avast! Web Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) SRV:[b]64bit:[/b] - (avast! Mail Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) SRV:[b]64bit:[/b] - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) SRV:[b]64bit:[/b] - (LBTServ) -- C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe (Logitech, Inc.) SRV:[b]64bit:[/b] - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD) SRV:[b]64bit:[/b] - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SRV - (Sony Ericsson PCCompanion) -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe (Avanquest Software) SRV - (clr_optimization_v4.0.30319_64) -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (ES lite Service) -- C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE () SRV - (BCUService) -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe (DeviceVM, Inc.) SRV - (EPSON_PM_RPCV4_01) EPSON V3 Service4(01) -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (SEIKO EPSON CORPORATION) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software) DRV:[b]64bit:[/b] - (LUsbFilt) -- C:\Windows\SysNative\drivers\LUsbFilt.sys (Logitech, Inc.) DRV:[b]64bit:[/b] - (LMouFilt) -- C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.) DRV:[b]64bit:[/b] - (LHidFilt) -- C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.) DRV:[b]64bit:[/b] - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek ) DRV:[b]64bit:[/b] - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.) DRV:[b]64bit:[/b] - (RTHDMIAzAudService) -- C:\Windows\SysNative\drivers\RtHDMIVX.sys (Realtek Semiconductor Corp.) DRV:[b]64bit:[/b] - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:[b]64bit:[/b] - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:[b]64bit:[/b] - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:[b]64bit:[/b] - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:[b]64bit:[/b] - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:[b]64bit:[/b] - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:[b]64bit:[/b] - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof () DRV:[b]64bit:[/b] - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:[b]64bit:[/b] - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:[b]64bit:[/b] - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:[b]64bit:[/b] - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV:[b]64bit:[/b] - (USBModem) -- C:\Windows\SysNative\drivers\lgx64modem.sys (LG Electronics Inc.) DRV:[b]64bit:[/b] - (UsbDiag) -- C:\Windows\SysNative\drivers\lgx64diag.sys (LG Electronics Inc.) DRV:[b]64bit:[/b] - (usbbus) -- C:\Windows\SysNative\drivers\lgx64bus.sys (LG Electronics Inc.) DRV:[b]64bit:[/b] - (LVUVC64) QuickCam Orbit/Sphere MP(UVC) -- C:\Windows\SysNative\drivers\lvuvc64.sys (Logitech Inc.) DRV:[b]64bit:[/b] - (LVUSBS64) -- C:\Windows\SysNative\drivers\LVUSBS64.sys (Logitech Inc.) DRV:[b]64bit:[/b] - (lvpopf64) -- C:\Windows\SysNative\drivers\lvpopf64.sys (Logitech Inc.) DRV - (gdrv) -- C:\Windows\gdrv.sys (Windows (R) Server 2003 DDK provider) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://home.microsoft.com/access/allinone.asp IE - HKCU\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/08/25 21:34:50 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/08/25 21:34:50 | 000,000,000 | ---D | M] [2010/08/13 14:48:13 | 000,000,000 | ---D | M] -- C:\Users\lilyetbatman\AppData\Roaming\mozilla\Extensions [2010/09/11 08:54:05 | 000,000,000 | ---D | M] -- C:\Users\lilyetbatman\AppData\Roaming\mozilla\Firefox\Profiles\4igfrf9o.default\extensions [2010/09/09 19:24:54 | 000,000,000 | ---D | M] -- C:\Users\lilyetbatman\AppData\Roaming\mozilla\Firefox\Profiles\4igfrf9o.default\extensions\ChoiceGuard@Microsoft [2010/08/13 15:03:36 | 000,000,000 | ---D | M] -- C:\Users\lilyetbatman\AppData\Roaming\mozilla\Firefox\Profiles\4igfrf9o.default\extensions\toolbar@ask.com [2010/08/15 10:47:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions [2010/08/14 22:54:30 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010/08/15 10:47:51 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010/07/17 05:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll [2010/07/23 02:44:11 | 000,001,516 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\amazon-france.xml [2010/07/23 02:44:11 | 000,001,822 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml [2010/07/23 02:44:11 | 000,000,757 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\eBay-france.xml [2010/07/23 02:44:11 | 000,001,426 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-fr.xml [2010/07/23 02:44:11 | 000,000,956 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\yahoo-france.xml O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Objet d'aide à la navigation SFR) - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files (x86)\SFR\Kit\SFRNavErrorHelper.dll (SFR) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O4:[b]64bit:[/b] - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [BCU] C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKCU..\Run: [EPSON Stylus DX8400 Series] C:\Windows\SysWow64\spool\DRIVERS\x64\3\E_IATICEE.EXE File not found O4 - HKCU..\Run: [ISUSPM Startup] C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation) O4 - HKCU..\Run: [msnmsgr] C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation) O4 - HKCU..\Run: [Sony Ericsson PC Companion] C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe () O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - Startup: C:\Users\lilyetbatman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:[b]64bit:[/b] - Winlogon\Notify\LBTWlgn: DllName - Reg Error: Key error. - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{c2c929a4-a9c9-11df-b487-6cf0497ad37f}\Shell - "" = AutoRun O33 - MountPoints2\{c2c929a4-a9c9-11df-b487-6cf0497ad37f}\Shell\AutoRun\command - "" = E:\USBAutoRun.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010/09/11 11:07:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Sony Shared [2010/09/11 11:07:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony Media Go Install [2010/09/11 10:25:21 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\Malwarebytes [2010/09/11 10:25:15 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010/09/11 10:25:14 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010/09/11 10:25:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2010/09/11 10:25:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010/09/10 19:47:14 | 000,020,048 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys [2010/09/10 19:47:13 | 000,121,936 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys [2010/09/10 19:47:11 | 000,028,752 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys [2010/09/10 19:47:08 | 000,051,280 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys [2010/09/10 19:47:05 | 000,061,008 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys [2010/09/10 19:46:51 | 000,167,592 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe [2010/09/10 19:46:51 | 000,038,848 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr [2010/09/10 17:40:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2010/09/10 17:35:43 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\Diagnostics [2010/09/08 13:24:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition [2010/09/08 13:23:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft [2010/09/08 13:23:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live SkyDrive [2010/09/08 13:23:07 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2010/09/08 13:16:47 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2010/09/08 10:47:51 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll [2010/09/08 10:47:51 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll [2010/09/08 10:47:51 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll [2010/09/08 10:47:51 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll [2010/09/08 10:47:03 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll [2010/09/08 10:47:02 | 004,068,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll [2010/09/08 10:47:02 | 001,888,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL [2010/09/08 10:47:02 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL [2010/09/08 10:47:02 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll [2010/09/08 10:47:02 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll [2010/09/08 10:47:01 | 003,181,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll [2010/09/08 10:45:37 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\Windows Live [2010/08/25 21:34:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2010/08/25 21:34:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2010/08/25 10:08:16 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll [2010/08/20 23:16:50 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\Apple Computer [2010/08/20 23:05:08 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\Desktop\TELEPHONE [2010/08/20 23:01:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Ericsson [2010/08/20 23:01:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony Ericsson [2010/08/20 22:47:59 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\Sony [2010/08/20 22:47:25 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\Podcasts [2010/08/20 22:47:25 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\Documents\Media Go [2010/08/20 22:47:01 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\Downloaded Installations [2010/08/20 22:46:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Corporation [2010/08/20 22:46:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony [2010/08/20 22:45:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2010/08/20 22:45:45 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\Apple [2010/08/20 22:45:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2010/08/20 22:45:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2010/08/20 22:39:49 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\Sony Setup [2010/08/20 22:39:49 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\Sony [2010/08/20 10:05:23 | 000,025,640 | ---- | C] (Windows (R) Server 2003 DDK provider) -- C:\Windows\gdrv.sys [2010/08/20 10:00:33 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\AdobeUM [2010/08/20 10:00:14 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\Documents\My eBooks [2010/08/20 09:57:32 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallShield [2010/08/20 09:57:31 | 000,073,728 | ---- | C] (InstallShield Software Corporation) -- C:\Windows\SysWow64\ISUSPM.cpl [2010/08/19 19:17:19 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2010/08/18 13:10:10 | 000,258,048 | ---- | C] (LG Electronics Inc.) -- C:\Windows\esn.dll [2010/08/18 13:10:10 | 000,180,224 | ---- | C] (LG Electronics) -- C:\Windows\AuthDll.dll [2010/08/18 13:10:10 | 000,090,112 | ---- | C] (LG Electronics) -- C:\Windows\LGMobileDL.dll [2010/08/18 10:16:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0 [2010/08/17 19:58:39 | 001,164,728 | ---- | C] (NuMedia Soft, Inc.) -- C:\Windows\SysWow64\NMSDVDXU.dll [2010/08/17 19:58:39 | 000,630,784 | ---- | C] (ComponentOne) -- C:\Windows\SysWow64\vsflex8u.ocx [2010/08/17 19:58:39 | 000,419,240 | ---- | C] (VideoSoft) -- C:\Windows\SysWow64\Vsflex7L.ocx [2010/08/17 19:58:38 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\LG Electronics [2010/08/17 19:58:28 | 000,244,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Msflxgrd.ocx [2010/08/17 19:58:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LG Electronics [2010/08/17 19:58:00 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\Documents\LG Electronics [2010/08/17 19:57:58 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\InstallShield [2010/08/17 14:01:56 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\Microsoft Games [2010/08/17 13:52:47 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\ijjigame [2010/08/17 13:45:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\REACTOR [2010/08/17 11:11:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2010/08/17 11:11:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2010/08/17 11:11:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2010/08/17 11:10:44 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\Adobe [2010/08/16 13:48:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ABBYY FineReader 6.0 Sprint [2010/08/16 13:47:46 | 000,000,000 | ---D | C] -- C:\ProgramData\EPSON [2010/08/16 13:46:30 | 000,129,536 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\SysNative\E_ILMCEE.DLL [2010/08/16 13:46:30 | 000,086,528 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\SysNative\E_IBCBCEE.DLL [2010/08/16 13:46:28 | 000,008,704 | ---- | C] (SEIKO EPSON CORP.) -- C:\Windows\SysNative\E_GCINST.DLL [2010/08/16 13:46:25 | 000,000,000 | ---D | C] -- C:\Program Files\EPSON [2010/08/16 13:45:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\epson [2010/08/16 13:45:51 | 000,101,888 | ---- | C] (SEIKO EPSON CORP.) -- C:\Windows\SysNative\esxcwiad.dll [2010/08/15 14:07:53 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\OpenOffice.org [2010/08/15 10:48:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2010/08/15 10:47:50 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2010/08/15 10:47:50 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2010/08/15 10:47:50 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2010/08/14 22:56:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\JRE [2010/08/14 22:55:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenOffice.org 3 [2010/08/14 22:54:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010/08/14 22:54:29 | 000,423,656 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010/08/14 22:54:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2010/08/14 21:54:50 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat [2010/08/14 21:54:50 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat [2010/08/14 18:25:41 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll [2010/08/14 18:25:41 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll [2010/08/14 18:25:41 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe [2010/08/14 18:25:41 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe [2010/08/14 18:25:41 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll [2010/08/14 18:25:41 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll [2010/08/14 18:25:41 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll [2010/08/14 18:25:41 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll [2010/08/14 18:25:32 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe [2010/08/14 14:04:14 | 001,736,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2010/08/14 14:04:13 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2010/08/14 14:04:13 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vbscript.dll [2010/08/14 14:04:12 | 014,629,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2010/08/14 14:04:11 | 011,406,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2010/08/14 14:04:10 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll [2010/08/14 14:04:10 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll [2010/08/14 14:04:09 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL [2010/08/14 14:04:09 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL [2010/08/14 14:03:59 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll [2010/08/14 14:03:59 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll [2010/08/14 14:03:59 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll [2010/08/14 14:03:59 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll [2010/08/14 14:03:59 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe [2010/08/14 14:03:59 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe [2010/08/14 14:03:58 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe [2010/08/14 14:03:58 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe [2010/08/14 14:03:58 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe [2010/08/14 14:03:58 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe [2010/08/14 14:03:58 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe [2010/08/14 14:03:58 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe [2010/08/14 14:03:58 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll [2010/08/14 14:03:58 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll [2010/08/14 14:03:58 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll [2010/08/14 14:03:58 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll [2010/08/14 14:03:45 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll [2010/08/14 14:03:45 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll [2010/08/14 14:03:42 | 005,507,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2010/08/14 14:03:41 | 003,955,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2010/08/14 14:03:41 | 003,899,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2010/08/14 14:03:37 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2010/08/14 14:03:37 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2010/08/14 14:03:37 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2010/08/14 14:03:37 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2010/08/14 14:03:37 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2010/08/14 14:03:37 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2010/08/14 14:03:31 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2010/08/14 14:03:31 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe [2010/08/14 14:03:31 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe [2010/08/14 14:03:29 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2010/08/14 14:03:29 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2010/08/14 14:03:29 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2010/08/14 14:03:29 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2010/08/14 14:03:29 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2010/08/14 14:03:29 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2010/08/14 14:03:28 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll [2010/08/14 14:03:28 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtutils.dll [2010/08/14 14:03:13 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll [2010/08/14 14:03:11 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2010/08/14 14:03:10 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll [2010/08/14 14:03:10 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll [2010/08/14 14:03:10 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll [2010/08/14 14:03:10 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll [2010/08/14 14:03:10 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax [2010/08/14 14:03:10 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax [2010/08/14 14:03:10 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax [2010/08/14 14:03:09 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll [2010/08/14 14:03:09 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax [2010/08/14 14:03:00 | 001,572,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll [2010/08/14 14:02:59 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll [2010/08/14 14:02:59 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll [2010/08/14 14:02:59 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll [2010/08/14 14:02:58 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2010/08/14 14:02:58 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2010/08/14 14:02:54 | 001,446,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2010/08/14 14:02:48 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll [2010/08/14 14:02:46 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2010/08/14 14:02:46 | 000,293,888 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2010/08/14 14:02:46 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll [2010/08/14 14:02:46 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll [2010/08/14 14:02:46 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2010/08/14 14:02:46 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2010/08/13 23:08:27 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\Desktop\FILM [2010/08/13 23:07:43 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\vlc [2010/08/13 23:07:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN [2010/08/13 22:48:01 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\Cyberlink [2010/08/13 22:46:50 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\Documents\CyberLink [2010/08/13 22:46:49 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\CyberLink [2010/08/13 22:46:29 | 000,000,000 | ---D | C] -- C:\ProgramData\CyberLink [2010/08/13 22:46:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\CyberLink [2010/08/13 22:45:09 | 000,505,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp71.dll [2010/08/13 22:45:09 | 000,353,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr71.dll [2010/08/13 22:45:09 | 000,029,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3a.dll [2010/08/13 22:44:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Temp [2010/08/13 19:30:38 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2010/08/13 19:30:38 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wintrust.dll [2010/08/13 19:30:37 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll [2010/08/13 19:30:37 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll [2010/08/13 19:29:21 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed [2010/08/13 19:29:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SFR [2010/08/13 19:26:22 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\Adobe [2010/08/13 17:34:52 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2010/08/13 16:54:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton [2010/08/13 16:53:35 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller [2010/08/13 16:53:08 | 000,097,792 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RTNUninst64.dll [2010/08/13 16:52:56 | 000,236,544 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys [2010/08/13 16:52:30 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\ATI [2010/08/13 16:52:30 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\ATI [2010/08/13 16:52:30 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2010/08/13 16:50:52 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM [2010/08/13 16:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek [2010/08/13 16:50:45 | 001,596,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkHDM64.dll [2010/08/13 16:50:45 | 001,285,632 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RHDMEx64.dll [2010/08/13 16:50:45 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DHT64.dll [2010/08/13 16:50:45 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DAA64.dll [2010/08/13 16:50:45 | 000,201,472 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\RtHDMIVX.sys [2010/08/13 16:50:45 | 000,056,320 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RHCoInst64.dll [2010/08/13 16:50:43 | 000,513,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll [2010/08/13 16:50:43 | 000,417,824 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll [2010/08/13 16:50:43 | 000,332,320 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll [2010/08/13 16:50:43 | 000,211,376 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll [2010/08/13 16:50:43 | 000,193,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll [2010/08/13 16:50:43 | 000,150,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll [2010/08/13 16:50:43 | 000,149,536 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll [2010/08/13 16:50:42 | 001,652,256 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll [2010/08/13 16:50:42 | 001,419,296 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll [2010/08/13 16:50:42 | 001,167,904 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll [2010/08/13 16:50:42 | 000,611,872 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl [2010/08/13 16:50:42 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll [2010/08/13 16:50:42 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll [2010/08/13 16:50:42 | 000,064,544 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll [2010/08/13 16:50:41 | 000,311,296 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll [2010/08/13 16:50:40 | 000,294,400 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll [2010/08/13 16:50:40 | 000,166,400 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll [2010/08/13 16:50:40 | 000,108,032 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll [2010/08/13 16:50:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek [2010/08/13 16:50:39 | 000,831,488 | R--- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2010/08/13 16:50:39 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp [2010/08/13 16:50:35 | 000,000,000 | ---D | C] -- C:\Program Files\ATI [2010/08/13 16:49:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies [2010/08/13 16:49:44 | 000,446,464 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\ATIDEMGX.dll [2010/08/13 16:49:17 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2010/08/13 16:48:31 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\DeviceVM [2010/08/13 16:48:09 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2010/08/13 16:48:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gigabyte [2010/08/13 16:47:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield [2010/08/13 16:44:00 | 000,000,000 | R--D | C] -- C:\Users\lilyetbatman\Searches [2010/08/13 16:43:59 | 000,000,000 | -H-D | C] -- C:\Users\lilyetbatman\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned [2010/08/13 16:43:51 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\Identities [2010/08/13 16:43:49 | 000,000,000 | R--D | C] -- C:\Users\lilyetbatman\Contacts [2010/08/13 16:43:47 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\VirtualStore [2010/08/13 16:43:40 | 000,000,000 | --SD | C] -- C:\Users\lilyetbatman\AppData\Roaming\Microsoft [2010/08/13 16:43:40 | 000,000,000 | R--D | C] -- C:\Users\lilyetbatman\Videos [2010/08/13 16:43:40 | 000,000,000 | R--D | C] -- C:\Users\lilyetbatman\Saved Games [2010/08/13 16:43:40 | 000,000,000 | R--D | C] -- C:\Users\lilyetbatman\Pictures [2010/08/13 16:43:40 | 000,000,000 | R--D | C] -- C:\Users\lilyetbatman\Music [2010/08/13 16:43:40 | 000,000,000 | R--D | C] -- C:\Users\lilyetbatman\Links [2010/08/13 16:43:40 | 000,000,000 | R--D | C] -- C:\Users\lilyetbatman\Favorites [2010/08/13 16:43:40 | 000,000,000 | R--D | C] -- C:\Users\lilyetbatman\Downloads [2010/08/13 16:43:40 | 000,000,000 | R--D | C] -- C:\Users\lilyetbatman\Documents [2010/08/13 16:43:40 | 000,000,000 | R--D | C] -- C:\Users\lilyetbatman\Desktop [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\Voisinage réseau [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\Voisinage d'impression [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\AppData\Local\Temporary Internet Files [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\SendTo [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\Recent [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\Modèles [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\Documents\Mes vidéos [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\Documents\Mes images [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\Mes documents [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\Menu Démarrer [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\Documents\Ma musique [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\Local Settings [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\AppData\Local\Historique [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\Cookies [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\Application Data [2010/08/13 16:43:40 | 000,000,000 | -HSD | C] -- C:\Users\lilyetbatman\AppData\Local\Application Data [2010/08/13 16:43:40 | 000,000,000 | -H-D | C] -- C:\Users\lilyetbatman\AppData [2010/08/13 16:43:40 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\Temp [2010/08/13 16:43:40 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\Microsoft [2010/08/13 16:43:40 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\Media Center Programs [2010/08/13 16:43:34 | 000,000,000 | -HSD | C] -- C:\Recovery [2010/08/13 16:43:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Modèles [2010/08/13 16:43:34 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mes vidéos [2010/08/13 16:43:34 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mes images [2010/08/13 16:43:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Démarrer [2010/08/13 16:43:34 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Ma musique [2010/08/13 16:43:34 | 000,000,000 | -HSD | C] -- C:\Program Files\Fichiers communs [2010/08/13 16:43:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoris [2010/08/13 16:43:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Bureau [2010/08/13 16:38:22 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2010/08/13 16:35:56 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2010/08/13 16:35:38 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2010/08/13 15:22:51 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\Documents\Mes fichiers reçus [2010/08/13 14:55:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GreedyTorrent [2010/08/13 14:53:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ask.com [2010/08/13 14:53:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uTorrent [2010/08/13 14:52:56 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\uTorrent [2010/08/13 14:48:13 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\Mozilla [2010/08/13 14:48:13 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\Mozilla [2010/08/13 14:48:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2010/08/13 14:40:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech [2010/08/13 14:40:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\LogiShrd [2010/08/13 14:40:02 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\Leadertech [2010/08/13 14:39:40 | 000,018,960 | ---- | C] (Logitech, Inc.) -- C:\Windows\SysNative\drivers\LNonPnP.sys [2010/08/13 14:39:25 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\LogiShrd [2010/08/13 14:39:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Logishrd [2010/08/13 14:39:20 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech [2010/08/13 14:38:50 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd [2010/08/13 14:38:41 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\Logitech [2010/08/13 14:38:41 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\Logishrd [2010/08/13 14:30:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MUSICMATCH [2010/08/13 13:57:58 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\Tracing [2010/08/13 13:57:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight [2010/08/13 13:56:57 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll [2010/08/13 13:56:57 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll [2010/08/13 13:55:45 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft [2010/08/13 13:55:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live [2010/08/13 13:49:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Windows Live [2010/08/13 13:48:59 | 001,266,512 | ---- | C] (Microsoft Corporation) -- C:\Users\lilyetbatman\Desktop\wlsetup-custom.exe [2010/08/13 13:44:10 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Roaming\Macromedia [2010/08/13 13:42:38 | 000,000,000 | ---D | C] -- C:\Users\lilyetbatman\AppData\Local\Google [2010/08/13 13:42:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google [2010/08/13 13:41:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software [2010/08/13 13:41:43 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010/09/11 14:14:41 | 001,310,720 | -HS- | M] () -- C:\Users\lilyetbatman\ntuser.dat [2010/09/11 14:03:45 | 000,001,074 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010/09/11 13:55:10 | 000,001,078 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010/09/11 13:55:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010/09/11 11:07:32 | 000,001,885 | ---- | M] () -- C:\Users\Public\Desktop\Media Go.lnk [2010/09/11 10:59:24 | 001,549,700 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010/09/11 10:59:24 | 000,704,242 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat [2010/09/11 10:59:24 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010/09/11 10:59:24 | 000,130,548 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat [2010/09/11 10:59:24 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010/09/11 10:26:28 | 000,015,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010/09/11 10:26:28 | 000,015,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010/09/11 10:25:17 | 000,001,013 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010/09/11 10:19:13 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\Windows\gdrv.sys [2010/09/11 10:19:13 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010/09/11 10:19:00 | 402,006,801 | ---- | M] () -- C:\Windows\MEMORY.DMP [2010/09/11 10:18:57 | 2817,384,448 | -HS- | M] () -- C:\hiberfil.sys [2010/09/10 19:47:15 | 000,001,852 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk [2010/09/10 19:47:05 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt [2010/09/10 19:44:38 | 002,952,024 | -H-- | M] () -- C:\Users\lilyetbatman\AppData\Local\IconCache.db [2010/09/09 19:26:04 | 000,524,288 | -HS- | M] () -- C:\Users\lilyetbatman\ntuser.dat{7f09d1cf-bc33-11df-8d9a-6cf0497ad37f}.TMContainer00000000000000000002.regtrans-ms [2010/09/09 19:26:04 | 000,524,288 | -HS- | M] () -- C:\Users\lilyetbatman\ntuser.dat{7f09d1cf-bc33-11df-8d9a-6cf0497ad37f}.TMContainer00000000000000000001.regtrans-ms [2010/09/09 19:26:04 | 000,065,536 | -HS- | M] () -- C:\Users\lilyetbatman\ntuser.dat{7f09d1cf-bc33-11df-8d9a-6cf0497ad37f}.TM.blf [2010/09/08 13:21:26 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\lvuvc.hs [2010/09/07 17:12:17 | 000,038,848 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr [2010/09/07 17:11:54 | 000,167,592 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe [2010/09/07 16:52:29 | 000,051,280 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys [2010/09/07 16:52:09 | 000,121,936 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys [2010/09/07 16:47:49 | 000,028,752 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys [2010/09/07 16:47:33 | 000,061,008 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys [2010/09/07 16:47:10 | 000,020,048 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys [2010/08/25 21:34:46 | 000,001,845 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2010/08/21 14:03:23 | 000,002,014 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk [2010/08/20 10:47:29 | 000,013,494 | ---- | M] () -- C:\Users\lilyetbatman\Documents\resiliation bouygues.odt [2010/08/20 09:56:36 | 000,000,010 | ---- | M] () -- C:\Windows\GSetup.ini [2010/08/19 13:50:00 | 000,018,960 | ---- | M] (Logitech, Inc.) -- C:\Windows\SysNative\drivers\LNonPnP.sys [2010/08/17 15:10:28 | 000,013,686 | ---- | M] () -- C:\Users\lilyetbatman\Documents\annonce assistante mat.odt [2010/08/16 13:45:52 | 000,000,934 | ---- | M] () -- C:\Users\Public\Desktop\EPSON Scan.lnk [2010/08/15 14:08:26 | 000,001,239 | ---- | M] () -- C:\Users\lilyetbatman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2010/08/15 10:41:20 | 000,062,952 | ---- | M] () -- C:\Users\lilyetbatman\AppData\Local\GDIPFONTCACHEV1.DAT [2010/08/15 10:40:28 | 000,289,296 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010/08/14 22:56:20 | 000,001,152 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.2.lnk [2010/08/13 22:44:26 | 000,353,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr71.dll [2010/08/13 22:44:26 | 000,029,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3a.dll [2010/08/13 22:44:25 | 000,505,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp71.dll [2010/08/13 18:52:45 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010/08/13 16:51:56 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin [2010/08/13 16:51:08 | 000,524,288 | -HS- | M] () -- C:\Users\lilyetbatman\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2010/08/13 16:51:08 | 000,524,288 | -HS- | M] () -- C:\Users\lilyetbatman\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2010/08/13 16:51:08 | 000,065,536 | -HS- | M] () -- C:\Users\lilyetbatman\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2010/08/13 16:43:40 | 000,000,020 | -HS- | M] () -- C:\Users\lilyetbatman\ntuser.ini [2010/08/13 16:39:17 | 000,053,560 | ---- | M] () -- C:\Windows\SysWow64\license.rtf [2010/08/13 16:39:17 | 000,053,560 | ---- | M] () -- C:\Windows\SysNative\license.rtf [2010/08/13 14:53:37 | 000,000,971 | ---- | M] () -- C:\Users\lilyetbatman\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk [2010/08/13 14:48:09 | 000,001,967 | ---- | M] () -- C:\Users\lilyetbatman\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk [2010/08/13 13:56:07 | 000,002,022 | ---- | M] () -- C:\Users\lilyetbatman\Desktop\Windows Live Messenger .lnk [2010/08/13 13:49:03 | 001,266,512 | ---- | M] (Microsoft Corporation) -- C:\Users\lilyetbatman\Desktop\wlsetup-custom.exe [2010/08/13 13:43:44 | 000,002,243 | ---- | M] () -- C:\Users\lilyetbatman\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2010/08/13 13:36:11 | 000,001,457 | ---- | M] () -- C:\Users\lilyetbatman\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010/09/11 11:07:26 | 000,001,885 | ---- | C] () -- C:\Users\Public\Desktop\Media Go.lnk [2010/09/11 10:25:17 | 000,001,013 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010/09/10 19:47:15 | 000,001,852 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk [2010/09/09 19:26:04 | 000,524,288 | -HS- | C] () -- C:\Users\lilyetbatman\ntuser.dat{7f09d1cf-bc33-11df-8d9a-6cf0497ad37f}.TMContainer00000000000000000002.regtrans-ms [2010/09/09 19:26:04 | 000,524,288 | -HS- | C] () -- C:\Users\lilyetbatman\ntuser.dat{7f09d1cf-bc33-11df-8d9a-6cf0497ad37f}.TMContainer00000000000000000001.regtrans-ms [2010/09/09 19:26:04 | 000,065,536 | -HS- | C] () -- C:\Users\lilyetbatman\ntuser.dat{7f09d1cf-bc33-11df-8d9a-6cf0497ad37f}.TM.blf [2010/08/25 21:34:46 | 000,001,845 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2010/08/20 10:47:27 | 000,013,494 | ---- | C] () -- C:\Users\lilyetbatman\Documents\resiliation bouygues.odt [2010/08/19 19:17:12 | 402,006,801 | ---- | C] () -- C:\Windows\MEMORY.DMP [2010/08/18 13:10:10 | 000,221,291 | ---- | C] () -- C:\Windows\Imei_dll.dll [2010/08/18 13:10:10 | 000,040,960 | ---- | C] () -- C:\Windows\Sublock.dll [2010/08/17 15:10:26 | 000,013,686 | ---- | C] () -- C:\Users\lilyetbatman\Documents\annonce assistante mat.odt [2010/08/17 11:11:51 | 000,002,014 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk [2010/08/16 13:45:52 | 000,000,934 | ---- | C] () -- C:\Users\Public\Desktop\EPSON Scan.lnk [2010/08/15 14:08:26 | 000,001,239 | ---- | C] () -- C:\Users\lilyetbatman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2010/08/14 22:56:20 | 000,001,152 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.2.lnk [2010/08/13 18:52:45 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010/08/13 16:53:08 | 000,067,584 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll [2010/08/13 16:51:56 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2010/08/13 16:49:44 | 000,018,440 | ---- | C] () -- C:\Windows\atiogl.xml [2010/08/13 16:47:38 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini [2010/08/13 16:43:40 | 001,310,720 | -HS- | C] () -- C:\Users\lilyetbatman\ntuser.dat [2010/08/13 16:43:40 | 000,524,288 | -HS- | C] () -- C:\Users\lilyetbatman\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2010/08/13 16:43:40 | 000,524,288 | -HS- | C] () -- C:\Users\lilyetbatman\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2010/08/13 16:43:40 | 000,262,144 | -HS- | C] () -- C:\Users\lilyetbatman\ntuser.dat.LOG1 [2010/08/13 16:43:40 | 000,065,536 | -HS- | C] () -- C:\Users\lilyetbatman\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2010/08/13 16:43:40 | 000,000,290 | ---- | C] () -- C:\Users\lilyetbatman\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk [2010/08/13 16:43:40 | 000,000,272 | ---- | C] () -- C:\Users\lilyetbatman\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk [2010/08/13 16:43:40 | 000,000,020 | -HS- | C] () -- C:\Users\lilyetbatman\ntuser.ini [2010/08/13 16:43:40 | 000,000,000 | -HS- | C] () -- C:\Users\lilyetbatman\ntuser.dat.LOG2 [2010/08/13 16:35:38 | 2817,384,448 | -HS- | C] () -- C:\hiberfil.sys [2010/08/13 15:33:18 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\lvuvc.hs [2010/08/13 14:53:37 | 000,000,971 | ---- | C] () -- C:\Users\lilyetbatman\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk [2010/08/13 14:48:09 | 000,001,967 | ---- | C] () -- C:\Users\lilyetbatman\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk [2010/08/13 13:56:07 | 000,002,022 | ---- | C] () -- C:\Users\lilyetbatman\Desktop\Windows Live Messenger .lnk [2010/08/13 13:43:44 | 000,002,243 | ---- | C] () -- C:\Users\lilyetbatman\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2010/08/13 13:42:44 | 000,001,078 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010/08/13 13:42:43 | 000,001,074 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010/08/13 13:42:29 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt [2010/08/13 13:36:11 | 000,001,457 | ---- | C] () -- C:\Users\lilyetbatman\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009/07/13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [2007/11/07 08:44:20 | 000,855,040 | ---- | M] (Microsoft Corporation) -- C:\install.exe [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys [2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys [2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys [color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color] [2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll [2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll [2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll [2009/07/14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll [color=#A23BEC]< MD5 for: IASTORV.SYS >[/color] [2009/07/14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysWow64\DriverStore\FileRepository\iastorv.inf_amd64_neutral_18cccb83b34e1453\iaStorV.sys [2009/07/14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys [color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color] [2009/07/14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll [2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll [2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll [2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll [color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color] [2009/07/14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysWow64\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvstor.sys [2009/07/14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color] [2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll [2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll [2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll [2009/07/14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll [color=#A23BEC]< %systemroot%\*. /mp /s >[/color] [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color] < End of report >

batman73 · le 11 Sep 2010 13:30

RAPPORT AVEC WHOCRASHED

Code: Tout sélectionner: Crash dump directory: C:\Windows\Minidump Crash dumps are enabled on your computer. On Sat 11/09/2010 08:19:06 your computer crashed This was likely caused by the following module: ntoskrnl.exe Bugcheck code: 0xA (0xF00287F, 0x2, 0x1, 0xFFFFF80002F06905) Error: IRQL_NOT_LESS_OR_EQUAL Dump file: C:\Windows\Minidump\091110-19000-01.dmp file path: C:\Windows\system32\ntoskrnl.exe product: Microsoft® Windows® Operating System company: Microsoft Corporation description: NT Kernel & System The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time. On Mon 06/09/2010 14:59:18 your computer crashed This was likely caused by the following module: ntoskrnl.exe Bugcheck code: 0x9F (0x3, 0xFFFFFA8005670A00, 0xFFFFF80000B9C518, 0xFFFFFA80044C9810) Error: DRIVER_POWER_STATE_FAILURE Dump file: C:\Windows\Minidump\090610-16489-01.dmp file path: C:\Windows\system32\ntoskrnl.exe product: Microsoft® Windows® Operating System company: Microsoft Corporation description: NT Kernel & System The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time. On Thu 19/08/2010 17:17:21 your computer crashed This was likely caused by the following module: ntoskrnl.exe Bugcheck code: 0xA (0x28, 0x2, 0x0, 0xFFFFF80002EC8518) Error: IRQL_NOT_LESS_OR_EQUAL Dump file: C:\Windows\Minidump\081910-26707-01.dmp file path: C:\Windows\system32\ntoskrnl.exe product: Microsoft® Windows® Operating System company: Microsoft Corporation description: NT Kernel & System The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time. -------------------------------------------------------------------------------- Conclusion -------------------------------------------------------------------------------- 3 crash dumps have been found and analyzed. Note that it's not always possible to state with certainty whether a reported driver is really responsible for crashing your system or that the root cause is in another module. Nonetheless it's suggested you look for updates for the products that these drivers belong to and regularly visit Windows update or enable automatic updates for Windows. In case a piece of malfunctioning hardware is causing trouble, a search with Google on the bug check errors together with the model name and brand of your computer may help you investigate this further.

Skynet · le 11 Sep 2010 14:39

Bonjour,

j'ai corrigé vos messages.

Un rapport ne se met pas entre les balises [quote][/quote]votre rapport[quote][/quote].

Mais comme ceci [code]votre rapport[/code].

Merci.

bernard53 · le 11 Sep 2010 15:25

OK fait ceci.

* Fait un double-clic sur l'icône d'OTL pour le lancer
/!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"

* Assure-toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case " Rapport minimal" soit cochée.

* Copies et colles le contenue de cette citation dans la partie inférieure d'OTL "Personnalisation"

:OTL
[2010/08/13 15:03:36 | 000,000,000 | ---D | M] -- C:\Users\lilyetbatman\AppData\Roaming\mozilla\Firefox\Profiles\4igfrf9o.default\extensions\toolbar@ask.com
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
:Files
C:\Program Files (x86)\Ask.com
:Commands
[emptytemp]

* Cliques sur l'icône Correction (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un ou deux rapports vont s'ouvrir "OTL.Txt" et ( ou ) "Extras.Txt"( dans certains cas).
* Copie et colle le ou les rapports dans ta réponse stp...
* Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés

batman73 · le 11 Sep 2010 19:25

voilà le rapport

Code: Tout sélectionner: All processes killed Error: Unable to interpret <OTL> in the current context! Error: Unable to interpret <[2010/08/13 15:03:36 | 000,000,000 | ---D | M] -- C:\Users\lilyetbatman\AppData\Roaming\mozilla\Firefox\Profiles\4igfrf9o.default\extensions\toolbar@ask.com > in the current context! Error: Unable to interpret <O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. > in the current context! Error: Unable to interpret <O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) > in the current context! Error: Unable to interpret <O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) > in the current context! Error: Unable to interpret <O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) > in the current context! Error: Unable to interpret <O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found > in the current context! Error: Unable to interpret <O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found > in the current context! Error: Unable to interpret <O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found > in the current context! ========== FILES ========== C:\Program Files (x86)\Ask.com folder moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: lilyetbatman ->Temp folder emptied: 538732853 bytes ->Temporary Internet Files folder emptied: 56023762 bytes ->Java cache emptied: 656750 bytes ->FireFox cache emptied: 42126446 bytes ->Google Chrome cache emptied: 219907971 bytes ->Flash cache emptied: 37402 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 19711415 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50674 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 837,00 mb OTL by OldTimer - Version 3.2.11.0 log created on 09112010_202040 Files\Folders moved on Reboot... C:\Users\lilyetbatman\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. File move failed. C:\Windows\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot...

Skynet · le 11 Sep 2010 21:39

lol batman73 :lol:

, j'ai de nouveau corrigé.

C'était presque ça...

Donc maintenant les bonnes balises sont sélectionnées, mais il en faut seulement deux et non quatre.

Tu as écrit :

[code][/code].....Ton rapport.......blabla.....[code][/code]

Alors que c'est juste ça qu'il faut mettre :

[code].....Ton rapport.......blabla.....[/code]

Ecris-les à la main si tu n'arrives pas

.

@+

batman73 · le 12 Sep 2010 10:07

de nouveau l'ecran bleu au demarrage de l'ordi!!!

bernard53 · le 12 Sep 2010 11:56

batman73 a écrit:de nouveau l'ecran bleu au demarrage de l'ordi!!!

Ok fait ceci maintenant.

1-Démarrer>exécuter>tapes cmd puis chkdsk X: /f /r

X étant la lettre de ton DD qui doit être surement C.

mets bien un espace entre chkdsk et X: puis entre X: et /f puis entre /f et /r

batman73 · le 12 Sep 2010 14:33

manip faite,mais il me met ceci: acces refusé,vous n'avez pas de privilèges suffisants,vous devez invoqué cet utilitaire dans un mode d'execution elevé.

blue screen!!

blue screen!!

Re: blue screen!!

Re: blue screen!!

Re: blue screen!!

Re: blue screen!!

Re: blue screen!!

Re: blue screen!!

Re: blue screen!!

Re: blue screen!!

Re: blue screen!!

Re: blue screen!!

Re: blue screen!!

Sujets similaires

Qui est en ligne