Rapport de ZHPDiag v2013.4.20.122 par Nicolas Coolman, Update du 20/04/2013
Run by jean pierre at 21/04/2013 20:02:03
State : Version à jour.
WhiteList : Disable
High Elevated Privileges : OK
UAC : Activate by user


---\\ Web Browser
MSIE: Internet Explorer v10.0.9200.16540
MFIE: Mozilla Firefox 19.0 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 3Q6C9
Windows License : OK
~ Windows Remaining Initializations Number : 1
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Protection
Windows Defender W7

---\\ System Optimizer

---\\ Software Update
Adobe Flash Player 11 Plugin
Adobe Reader XI

---\\ System Information
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4043 MB (46% free)
System Restore: Activé (Enable)
System drive C: has 484 GB (72%) free of 673 GB

---\\ Logged in mode
~ Computer Name: HP
~ User Name: jean pierre
~ All Users Names: jean pierre, HomeGroupUser$, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\jean pierre\AppData\Roaming\
~ %Desktop% : C:\Users\jean pierre\Desktop\
~ %Favorites% : C:\Users\jean pierre\Favorites\
~ %LocalAppData% : C:\Users\jean pierre\AppData\Local\
~ %StartMenu% : C:\Users\jean pierre\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 484 Go of 673 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 22 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 4 Go)
F:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Security Center:  Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.11/11/2011 - 04:30:07.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.753C0848AE7872A3F59663078A517293] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.21/02/2013 - 11:15:07.) -- C:\Windows\System32\wininet.dll [2240512]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.21/11/2010 - 04:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.11/11/2011 - 04:32:10.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B8965FB53551B5455630A4B804D0791F] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.02/03/2013 - 07:04:53.) -- C:\Windows\system32\Drivers\ntfs.sys [1655656]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.DF8126BD41180351A093A3AD2FC8903B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.11/11/2011 - 04:28:17.) -- C:\Windows\system32\Drivers\volsnap.sys [296320]
~ Generic Processes:  Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/343
~ Mes Videos (My Videos) : 1/3
~ Mes Favoris (My Favorites) : 1/13
~ Mes Documents (My Documents) : 1/14
~ Mon Bureau (My Desktop) : 2/21410
~ Menu demarrer (Programs) : 1/23
~ Hidden Files:  Scanned in 00mn 06s



---\\ Processus lancés
[MD5.EE6269B47E49DAA450B11A12C9A25FD5] - (.HP - TouchControl.) -- C:\Program Files (x86)\HP SimplePass 2012\TouchControl.exe   [653128] [PID.2540]
[MD5.4DD0E131B84623C0955925C9B798FFA8] - (.HP - BioMonitor.) -- C:\Program Files (x86)\HP SimplePass 2012\BioMonitor.exe   [142664] [PID.3212]
[MD5.DC73E11DC27E7D9AEF884EBE816C4240] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe   [284440] [PID.4928]
[MD5.AE797B72D85E87D403FC11135507922C] - (.Renesas Electronics Corporation - USB 3.0 Monitor.) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe   [113288] [PID.4968]
[MD5.6C3DBE1AB6E79D29C53A2242044DCC76] - (.Hewlett-Packard Company - HP QuickWeb Utilities.) -- C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe   [169528] [PID.4980]
[MD5.BC6390A6736A5F4A048AC75168DD7869] - (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe   [574008] [PID.5000]
[MD5.8A3B69683E63808719D24E1C68C21CC7] - (.Hewlett-Packard Development Company, L.P. - HP On Screen Display.) -- C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe   [379960] [PID.5036]
[MD5.9F3655267BA37004F519ABDDB3AEE244] - (.Hewlett-Packard Development Company, L.P. - HP CoolSense.) -- C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe   [1342008] [PID.5096]
[MD5.FBAF93425D4B5A6C48ABB5B7F81088CD] - (.F-Secure Corporation - F-Secure Settings and Statistics.) -- C:\Program Files (x86)\Pack Sérénité\Sécurité\Common\FSM32.exe   [201128] [PID.4156]
[MD5.81800928E0F713DF31F3393CC26F4013] - (.Pas de propriétaire - DivX Update.) -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe   [1263952] [PID.4328]
[MD5.6E95474CB9E22BC9768EFA176C6A0A29] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe   [49208] [PID.1228]
[MD5.B7F55E2AE978D3D34F7876EE5D689AAE] - (.CyberLink - YouCam Mirage.) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe   [136488] [PID.6004]
[MD5.6F5386A655598F71BAAB2D6B63A69D6A] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe   [920472] [PID.1272]
[MD5.FC23F9D6BCBF9C25563DEEB9AC2514F9] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [6919680] [PID.7844]
[MD5.F80BDC0D9E7B9595E74B434446AD3781] - (.HP - HP Service.) -- C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe   [260424] [PID.964]
[MD5.3927397AC60D943DAF8808AFFED582B7] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [65192] [PID.852]
[MD5.650F111D5CDA64C10AE4B9D1BA9D4FFF] - (.Atheros - Atheros Coex Service Application.) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe   [146592] [PID.1324]
[MD5.CA793DCC1D5F619021EF1D37CC7A831E] - (.EasyBits Software AS - Shared EasyBits services for Windows.) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe   [514232] [PID.688]
[MD5.2346842F07E2AB64D1DC83A67FCCDFA1] - (.F-Secure Corporation - F-Secure Anti-Virus Scanning Service.) -- C:\Program Files (x86)\Pack Sérénité\Sécurité\Anti-Virus\fsgk32st.exe   [221608] [PID.2100]
[MD5.E7A33307A0816678AD50C7110EA50A33] - (.F-Secure Corporation - F-Secure Gatekeeper Handler 32-bit.) -- C:\Program Files (x86)\Pack Sérénité\Sécurité\Anti-Virus\FSGK32.exe   [622648] [PID.2140]
[MD5.8A556A81E9FF95BD9EB7207783E8FCF4] - (.F-Secure Corporation - F-Secure Management Agent.) -- C:\Program Files (x86)\Pack Sérénité\Sécurité\Common\FSMA32.exe   [188840] [PID.2164]
[MD5.491CE9B6321FB74E4B37AF2C47F98434] - (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe   [26680] [PID.2228]
[MD5.86E8C2EA0BAA47BE919072251DE6489F] - (.F-Secure Corporation - F-Secure DLL Hosting Plugin.) -- C:\Program Files (x86)\Pack Sérénité\Sécurité\Common\FSHDLL32.exe   [90536] [PID.2296]
[MD5.6C85719A21B3F62C2C76280F4BD36C7B] - (.Intel Corporation - Intel  IPT Host Interface Service.) -- C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe   [212944] [PID.2332]
[MD5.3D0978605A793E0F3384DD76BF788987] - (.Avanquest Software USA, Inc. - MXTask Background Service.) -- C:\Program Files (x86)\Pack Sérénité\Optimisation\mxtask.exe   [502304] [PID.2424]
[MD5.EA741F04557C13E0187DFBEE85922FE7] - (.F-Secure Corporation - F-Secure Scanner Manager 32-bit.) -- C:\Program Files (x86)\Pack Sérénité\Sécurité\Anti-Virus\fssm32.exe   [1019960] [PID.3356]
[MD5.42AEF6A385354ACA65FC210CE7CE4D7C] - (.F-Secure Corporation - F-Secure ORSP Service.) -- C:\Program Files (x86)\Pack Sérénité\Sécurité\ORSP Client\fsorsp.exe   [61088] [PID.3392]
[MD5.3970F0746068ADF25C4FB7E1642C7FD0] - (.F-Secure Corporation - FSAV Handler.) -- C:\Program Files (x86)\Pack Sérénité\Sécurité\Anti-Virus\fsav32.exe   [494648] [PID.4800]
[MD5.E7C7829BA0395E48F8C8FE16B8832344] - (.Hewlett-Packard Company - HP Software Framework WMI Service.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe   [994176] [PID.3620]
[MD5.D41861E56E7552C13674D7F147A02464] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe   [13592] [PID.5188]
[MD5.519D66259DF1672AABCE9D2E0ACC5552] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe   [325912] [PID.6940]
[MD5.1B71370AEC1115F80D9A4A209317C968] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe   [2656536] [PID.5344]
~ Processes Running:  Scanned in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\jean pierre\AppData\Roaming\Mozilla\Firefox\Profiles\tg9gs09d.default-1366550794221\prefs.js
M3 - MFPP: Plugins - [jean pierre] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [jean pierre] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [jean pierre] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [jean pierre] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [jean pierre] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [jean pierre] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [jean pierre] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [jean pierre - tg9gs09d.default-1366550794221] http://fr.yahoo.com
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.02.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll
P2 - FPN: [HKLM] [@divx.com/DivX VOD Helper,version=1.0.0] - (.DivX, LLC. - DivX VOD Helper Plug-in.) -- C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> [64Bits] - {326E768D-4182-46FD-9C16-1449A49795F4} . (.DivX, LLC - DivX Plus Web Player HTML5 <video> version.) -- C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: TSBHO Class [64Bits] - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} . (.HP - Website Log On.) -- C:\Program Files (x86)\HP SimplePass 2012\IEBHO.dll
O2 - BHO: IESpeakDoc [64Bits] - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} . (.Atheros Commnucations - Bluetooth IE PlugIn.) -- C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: Programme d’aide de l’Assistant de connexion au compte Microsoft [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.dll
O2 - BHO: LitmusBHO [64Bits] - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} . (.F-Secure Corporation - Litmus.) -- C:\Program Files (x86)\Pack Sérénité\Sécurité\NRS\iescript\baselitmus.dll



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe 
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe 
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe 
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe 
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) 
O4 - HKLM\..\Run: [AtherosBtStack] . (.Atheros Communications - Serveur Stack Bluetooth.) -- C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe 
O4 - HKLM\..\Run: [AthBtTray] . (.Atheros Commnucations - Bluetooth Tray.) -- C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe 
O4 - HKLM\..\Run: [SetDefault] . (.Hewlett-Packard Development Company, L.P. - SetDefault.) -- C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe 
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKCU\..\Run: [HP Photosmart 6510 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Photosmart 6510 series\Bin\ScanToPCActivationApp.exe 
O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe 
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe 
O4 - HKLM\..\Wow6432Node\Run: [NUSB3MON] . (.Renesas Electronics Corporation - USB 3.0 Monitor.) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe 
O4 - HKLM\..\Wow6432Node\Run: [HPQuickWebProxy] . (.Hewlett-Packard Company - HP QuickWeb Utilities.) -- C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe 
O4 - HKLM\..\Wow6432Node\Run: [HP Quick Launch] . (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe 
O4 - HKLM\..\Wow6432Node\Run: [HPOSD] . (.Hewlett-Packard Development Company, L.P. - HP On Screen Display.) -- C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe 
O4 - HKLM\..\Wow6432Node\Run: [HP CoolSense] . (.Hewlett-Packard Development Company, L.P. - HP CoolSense.) -- C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe 
O4 - HKLM\..\Wow6432Node\Run: [Easybits Recovery] . (.EasyBits Software AS - Pas de description.) -- C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe 
O4 - HKLM\..\Wow6432Node\Run: [F-Secure Manager] . (.F-Secure Corporation - F-Secure Settings and Statistics.) -- C:\Program Files (x86)\Pack Sérénité\Sécurité\Common\FSM32.exe 
O4 - HKLM\..\Wow6432Node\Run: [F-Secure TNB] . (.F-Secure Corporation - TNBUtil.) -- C:\Program Files (x86)\Pack Sérénité\Sécurité\FSGUI\TNBUtil.exe 
O4 - HKLM\..\Wow6432Node\Run: [DivXMediaServer] . (.DivX, LLC - DivX DLNA Media Server.) -- C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe 
O4 - HKLM\..\Wow6432Node\Run: [DivXUpdate] . (.Pas de propriétaire - DivX Update.) -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe 
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe 
O4 - HKLM\..\Wow6432Node\Run: [HPConnectionManager] . (.Hewlett-Packard Development Company L.P. - HPCMDelayStart Application.) -- C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe 
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-21-1050605776-950264177-1629886854-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKUS\S-1-5-21-1050605776-950264177-1629886854-1001\..\Run: [HP Photosmart 6510 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Photosmart 6510 series\Bin\ScanToPCActivationApp.exe 
~ Application:  Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\TaskBar: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.)  -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe 
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Programs: Microsoft SkyDrive.lnk . (.Microsoft Corporation - Microsoft SkyDrive.)  -- C:\Users\jean pierre\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe 
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.)  -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe 
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.)  -- C:\Windows\system32\eudcedit.exe 
O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.)  -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
O4 - GS\Desktop: activités pour enfants - Raccourci.lnk . (...)  -- C:\Users\jean pierre\Desktop\Nouveau dossier\activités pour enfants 
O4 - GS\Desktop: HP Photo Creations.lnk . (.Visan / RocketLife - PhotoProduct.exe.)  -- C:\Program Files (x86)\HP Photo Creations\PhotoProduct.exe 
O4 - GS\Desktop: Téléchargements - Raccourci.lnk . (...)  -- C:\Users\jean pierre\Downloads 
O4 - Global Startup: C:\Users\jean pierre\Desktop\Yahoo! France.URL . (...)  -- C:\Users\jean pierre\Desktop\Yahoo! France.URL
~ Global Startup:  Scanned in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} -- C:\Program Files (x86)\MICROS~2\Office14\ONBttnIE.dll (.not file.)
O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -- C:\Program Files (x86)\MICROS~2\Office14\ONBTTN~1.dll (.not file.)
~ IE Extra Buttons:  Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{10F41608-ADB5-43F3-AEA8-271990266344}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{3D74985D-5149-4800-A4F8-A733387CD56A}: DhcpNameServer = 172.168.51.52
O17 - HKLM\System\CS1\Services\Tcpip\..\{10F41608-ADB5-43F3-AEA8-271990266344}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{3D74985D-5149-4800-A4F8-A733387CD56A}: DhcpNameServer = 172.168.51.52
O17 - HKLM\System\CS2\Services\Tcpip\..\{10F41608-ADB5-43F3-AEA8-271990266344}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{3D74985D-5149-4800-A4F8-A733387CD56A}: DhcpNameServer = 172.168.51.52
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain:  Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- 
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon:  Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: AdBackup Service Controller (AdBackup Service Controller) . (.Oodrive - AdBackup.RemotingService.) - C:\Program Files\Pack Sérénité\Sauvegarde\Service\AdBackup.RemotingService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (64-bit).) - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service:  (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: Atheros Bt&Wlan Coex Agent (Atheros Bt&Wlan Coex Agent) . (.Atheros - Atheros Coex Service Application.) - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Service: AtherosSvc (AtherosSvc) . (.Atheros Commnucations - AdminService Application.) - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) . (.F-Secure Corporation - F-Secure Anti-Virus Scanning Service.) - C:\Program Files (x86)\Pack Sérénité\Sécurité\Anti-Virus\fsgk32st.exe
O23 - Service: TrueSuiteService (FPLService) . (.HP - HP Service.) - C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe
O23 - Service: F-Secure Management Agent (FSMA) . (.F-Secure Corporation - F-Secure Management Agent.) - C:\Program Files (x86)\Pack Sérénité\Sécurité\Common\FSMA32.exe
O23 - Service: HP Support Assistant Service (HP Support Assistant Service) . (...) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (.not file.)
O23 - Service: HP Auto (HPAuto) . (.Hewlett-Packard - HP Usage Improvement Tracking.) - C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
O23 - Service: HP Client Services (HPClientSvc) . (.Hewlett-Packard Company - HP Client Services.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
O23 - Service: HP Service (hpsrv) . (.Hewlett-Packard Company - HpService.) - C:\Windows\System32\Hpservice.exe
O23 - Service: HPWMISVC (HPWMISVC) . (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R (IconMan_R) . (.Realsil Microelectronics Inc. - Realtek Card Reader Icon Tool..) - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: Intel(R) Identity Protection Technology  (jhi_service) . (.Intel Corporation - Intel  IPT Host Interface Service.) - C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Optimisation Task Manager (Optimisation Task Manager) . (.Avanquest Software USA, Inc. - MXTask Background Service.) - C:\Program Files (x86)\PACKSR~1\OPTIMI~1\mxtask.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: C:\Windows\System32\stlang64.dll (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Intel(R) Management and Security Applica (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\Adobe Flash Player Updater.job   [1002]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\HP Photo Creations Communicator.job   [350]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\HPCeeScheduleForjean pierre.job   [356]
[MD5.EA856F4A46320389D1899B2CAA7BF40F] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe   [253656]
[MD5.68CAE7EE0ADFEF8CCB7B55AF2373472C] [APT] [HP Photo Creations Communicator] (...) -- C:\ProgramData\HP Photo Creations\Communicator.exe   [185472]
[MD5.8AA3B22B716A04AC8DD13318A40D708D] [APT] [HPCeeScheduleForjean pierre] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe   [95800]
[MD5.B7F55E2AE978D3D34F7876EE5D689AAE] [APT] [MirageAgent] (.CyberLink.) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe   [136488]
[MD5.1321DC81E317EE48C4D004775FB29AC9] [APT] [{609DD06C-5BA0-4E67-9E0B-8A8FA86E238F}] (.Nicolas Coolman.) -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe   [1916928]
[MD5.00000000000000000000000000000000] [APT] [{E11CE088-FFEA-4942-B796-8F70DD266B36}] (...) -- C:\Users\jean pierre\Downloads\dotnetfx35setup (1).exe (.not file.)   [0]



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\drivers\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (F-Secure HIPS) . (.F-Secure Corporation - HIPS 64-bit kernel module.) - C:\Program Files (x86)\Pack Sérénité\Sécurité\HIPS\drivers\fshs.sys
O41 - Driver:  (FSES) . (.F-Secure Corporation - F-Secure Email Interceptor.) - C:\Windows\System32\drivers\fses.sys
O41 - Driver:  (FSFW) . (.F-Secure Corporation - F-Secure Internet Shield Driver.) - C:\Windows\System32\drivers\fsdfw.sys
O41 - Driver:  (fsvista) . (...) - C:\Program Files (x86)\Pack Sérénité\Sécurité\Anti-Virus\minifilter\fsvista.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys



---\\ Logiciels installés (O42)
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441}
O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {3BF3599D-7F28-C60B-1C5D-82BFD4E5EF33}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader XI (11.0.02) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player
O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM][64Bits] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7}
O42 - Logiciel: AuthenTec TrueAPI - (.AuthenTec, Inc..) [HKLM][64Bits] -- {054EF02F-95D8-48F4-9EEB-2F9CE3072ED8}
O42 - Logiciel: Bejeweled 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-45bb666d-565f-4f6a-8b84-136687a893c9
O42 - Logiciel: Bluetooth Win7 Suite (64) - (.Atheros Communications.) [HKLM][64Bits] -- {230D1595-57DA-4933-8C4E-375797EBB7E1}
O42 - Logiciel: Cake Mania - (.WildTangent.) [HKLM][64Bits] -- WTA-a5152655-072c-4ef8-a70e-ccbc2e6f3e6d
O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {08523528-BA2F-43BB-87E3-252C081872B9}
O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-7f38085c-4fff-480a-a7bb-5ac7c50b437e
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9}
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {51C7AD07-C3F6-4635-8E8A-231306D810FE}
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {ED5776D5-59B4-46B7-AF81-5F2D94D7C640}
O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM][64Bits] -- DivX Setup
O42 - Logiciel: Cradle of Rome 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-414eb7ff-a964-485f-a623-e85c4a23edee
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: ESU for Microsoft Windows 7 SP1 - (.Hewlett-Packard.) [HKLM][64Bits] -- {E96CAA2A-0244-4A2A-8403-0C3C9534778B}
O42 - Logiciel: Evernote v. 4.2.3 - (.Evernote Corp..) [HKLM][64Bits] -- {F761359C-9CED-45AE-9A51-9D6605CD55C4}
O42 - Logiciel: FATE - (.WildTangent.) [HKLM][64Bits] -- WTA-5b99274d-6ddd-4524-a233-a573372794e1
O42 - Logiciel: Farm Frenzy - (.WildTangent.) [HKLM][64Bits] -- WTA-246f2b10-d41f-4a2f-98e4-31c47e6d9f96
O42 - Logiciel: Farmscapes - (.WildTangent.) [HKLM][64Bits] -- WTA-b26ebb97-cc0b-4e7e-9cbb-f75cb37b4796
O42 - Logiciel: Final Drive Fury - (.WildTangent.) [HKLM][64Bits] -- WTA-a15d9077-2b04-45fa-8b30-79f74d32fd82
O42 - Logiciel: Fishdom (TM) 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-265f2a1d-bc26-4a13-973a-9b68856ad5dc
O42 - Logiciel: Galerie de photos - (.Microsoft Corporation.) [HKLM][64Bits] -- {446CC8CE-0E90-44F7-ADD0-774B243EF090}
O42 - Logiciel: HP 3D DriveGuard - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {E04CE4EA-3CBB-4228-940D-3B8050E870C9}
O42 - Logiciel: HP Auto - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}
O42 - Logiciel: HP Client Services - (.Hewlett-Packard.) [HKLM][64Bits] -- {2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}
O42 - Logiciel: HP Connection Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {B65FCAA5-F3A6-4B3F-ABEE-CBC2B085796B}
O42 - Logiciel: HP CoolSense - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {16B7BDA1-B967-4D2D-8B27-E12727C28350}
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {07FA4960-B038-49EB-891B-9F95930AA544}
O42 - Logiciel: HP Documentation - (.Hewlett-Packard.) [HKLM][64Bits] -- {54F0ED3B-BD05-4B41-BCFC-E03FE2DDFF1D}
O42 - Logiciel: HP FWUpdateEDO2 - (.Hewlett-Packard.) [HKLM][64Bits] -- {415FA9AD-DA10-4ABE-97B6-5051D4795C90}
O42 - Logiciel: HP Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent hp Master Uninstall
O42 - Logiciel: HP Launch Box - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {BF1E75D0-E7AF-4BEA-9FBC-567F0C54BDF9}
O42 - Logiciel: HP On Screen Display - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {ED1BD69A-07E3-418C-91F1-D856582581BF}
O42 - Logiciel: HP Photo Creations - (.HP Photo Creations.) [HKLM][64Bits] -- HP Photo Creations
O42 - Logiciel: HP Power Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {E44578C7-4667-4124-8BC2-1161BCA54978}
O42 - Logiciel: HP Quick Launch - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {285F722C-0E45-47DE-B38E-5B3B10FA4A7C}
O42 - Logiciel: HP QuickWeb - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {BB4FC2AD-DF12-4EE1-8AA7-2C0A26B5E2FB}
O42 - Logiciel: HP Recovery Manager - (.Hewlett-Packard.) [HKLM][64Bits] -- {DBCD5E64-7379-4648-9444-8A6558DCB614}
O42 - Logiciel: HP Security Assistant - (.Hewlett-Packard.) [HKLM][64Bits] -- {0576788F-2993-455F-80CD-980114095103}
O42 - Logiciel: HP Setup - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1}
O42 - Logiciel: HP Setup Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {AE856388-AFAD-4753-81DF-D96B19D0A17C}
O42 - Logiciel: HP SimplePass 2012 - (.Hewlett-Packard.) [HKLM][64Bits] -- {423FBEB8-21C6-4720-A8DA-B19B06FDB607}
O42 - Logiciel: HP Software Framework - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {15A93797-70C8-47C5-931C-017593B58A7E}
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {85DF2EED-08BC-46FB-90DA-28B0D0A8E8A8}
O42 - Logiciel: HPDiagnosticAlert - (.Microsoft.) [HKLM][64Bits] -- {846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}
O42 - Logiciel: IDT Audio - (.IDT.) [HKLM][64Bits] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}
O42 - Logiciel: Insaniquarium Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-70640258-f6d8-4a47-b184-e473819d669b
O42 - Logiciel: Intel(R) Control Center - (.Intel Corporation.) [HKLM][64Bits] -- {F8A9085D-4C7A-41a9-8A77-C8998A96C421}
O42 - Logiciel: Intel(R) Display Audio Driver - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Intel(R) Identity Protection Technology 1.1.2.0 - (.Intel Corporation.) [HKLM][64Bits] -- {C01A86F5-56E7-101F-9BC9-E3F1025EB779}
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Jewel Match 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-7b901e39-7730-4d80-b202-19a8574a71fa
O42 - Logiciel: Jewel Quest II - (.WildTangent.) [HKLM][64Bits] -- WTA-f3216882-8a3e-4e56-9784-5e2b950087ad
O42 - Logiciel: Jewel Quest Solitaire 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-f4fd3bee-11f5-4feb-a952-7a8372346bde
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {400C31E4-796F-4E86-8FDC-C3C4FACC6847}
O42 - Logiciel: K-Lite Mega Codec Pack 9.7.5 - (...) [HKLM][64Bits] -- KLiteCodecPack_is1
O42 - Logiciel: Logiciel d'archivage WinRAR - (...) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Logiciel de base du périphérique HP Photosmart 6510 series - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {27D5236C-9A8C-49E1-9957-A47768D98F46}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}
O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: Magic Desktop - (.EasyBits Software AS.) [HKLM][64Bits] -- EasyBits Magic Desktop
O42 - Logiciel: Mahjongg Artifacts - (.WildTangent.) [HKLM][64Bits] -- WTA-cafafed7-5a55-48d4-aeb5-5ddb7211f4e4
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft SkyDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- SkyDriveSetup.exe
O42 - Logiciel: Mozilla Firefox 19.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 19.0 (x86 fr)
O42 - Logiciel: Mozilla Firefox 20.0.1 (x86 fr) - (.Mozilla.) [HKCU][64Bits] -- Mozilla Firefox 20.0.1 (x86 fr)
O42 - Logiciel: Mozilla Thunderbird 17.0.3 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Thunderbird 17.0.3 (x86 fr)
O42 - Logiciel: Mozilla Thunderbird 17.0.5 (x86 fr) - (.Mozilla.) [HKCU][64Bits] -- Mozilla Thunderbird 17.0.5 (x86 fr)
O42 - Logiciel: Mystery of Mortlake Mansion - (.WildTangent.) [HKLM][64Bits] -- WTA-492ea223-2cec-46f5-8957-137c82dd2a62
O42 - Logiciel: Optimisation - (.Avanquest Software.) [HKLM][64Bits] -- {5158974E-2D28-4018-9335-7694C2974746}
O42 - Logiciel: Plants vs. Zombies - Game of the Year - (.WildTangent.) [HKLM][64Bits] -- WTA-672cc857-eed8-4c50-ba09-dacf5ce1e592
O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WTA-ad22ab15-7468-4bed-a5f9-b87b5b14d92d
O42 - Logiciel: Ranch Rush 2 - Premium Edition - (.WildTangent.) [HKLM][64Bits] -- WTA-c0be6be7-ffcb-4eb4-b9f8-f5f4f905cd1d
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek PCIE Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {C1594429-8296-4652-BF54-9DBE4932A44C}
O42 - Logiciel: Renesas Electronics USB 3.0 Host Controller Driver - (.Renesas Electronics Corporation.) [HKLM][64Bits] -- InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}
O42 - Logiciel: Renesas Electronics USB 3.0 Host Controller Driver - (.Renesas Electronics Corporation.) [HKLM][64Bits] -- {5442DAB8-7177-49E1-8B22-09A049EA5996}
O42 - Logiciel: Sauvegarde - (...) [HKLM][64Bits] -- adbackup5
O42 - Logiciel: Skype™ 5.10 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}
O42 - Logiciel: Synaptics TouchPad Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: Sécurité - (...) [HKLM][64Bits] -- F-Secure Product 440
O42 - Logiciel: Torchlight - (.WildTangent.) [HKLM][64Bits] -- WTA-2354113e-7ffc-4cb6-80e3-0c6982669e73
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App
O42 - Logiciel: VC80CRTRedist - 8.0.50727.6195 - (.DivX, Inc.) [HKLM][64Bits] -- {933B4015-4618-4716-A828-5289FC03165F}
O42 - Logiciel: VIP Access SDK (1.0.1.2)  - (.Symantec Inc..) [HKLM][64Bits] -- VIP Access SDK
O42 - Logiciel: Validity WBF DDK - (.Validity Sensors, Inc..) [HKLM][64Bits] -- {79174AF2-6CB1-42F5-981E-66DCA49391D0}
O42 - Logiciel: Virtual Families - (.WildTangent.) [HKLM][64Bits] -- WTA-121a624f-6ea1-4d1a-a8fb-2561c5758e12
O42 - Logiciel: Virtual Villagers 4 - The Tree of Life - (.WildTangent.) [HKLM][64Bits] -- WTA-595195f9-3750-41e5-ab2c-a9ecfb327886
O42 - Logiciel: Wedding Dash - (.WildTangent.) [HKLM][64Bits] -- WTA-d1730c55-6c9d-496e-8e25-0cfe2cf15b0c
O42 - Logiciel: WildTangent Games App (HP Games) - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp
O42 - Logiciel: Zuma's Revenge - (.WildTangent.) [HKLM][64Bits] -- WTA-37dda738-b2ab-4cbb-8dd3-f0e3c1c6eada
O42 - Logiciel: opensource - (.Your Company Name.) [HKLM][64Bits] -- {3677D4D8-E5E0-49FC-B86E-06541CF00BBE}
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}



---\\ HKCU & HKLM Software Keys
[HKCU\Software\4shared]
[HKCU\Software\ATI]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\MarkAny]
[HKCU\Software\AppDataLow]
[HKCU\Software\Astonsoft]
[HKCU\Software\Atheros]
[HKCU\Software\AuthenTec]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\DivXNetworks]
[HKCU\Software\DivX]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\HP Photo Creations]
[HKCU\Software\HP]
[HKCU\Software\Haali]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\Icaros]
[HKCU\Software\Intel]
[HKCU\Software\Macromedia]
[HKCU\Software\MainConcept]
[HKCU\Software\MediaInfo]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\Northcode Inc]
[HKCU\Software\ODBC]
[HKCU\Software\Policies]
[HKCU\Software\Samsung]
[HKCU\Software\Skype]
[HKCU\Software\Symantec]
[HKCU\Software\Synaptics]
[HKCU\Software\TeleCharger]
[HKCU\Software\Thunderbird]
[HKCU\Software\Trolltech]
[HKCU\Software\Visan]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\darty_serenite]
[HKCU\Software\madshi]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\Atheros]
[HKLM\Software\BrowserChoice]
[HKLM\Software\CBSTEST]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Cyberlink]
[HKLM\Software\DivX]
[HKLM\Software\HPQ]
[HKLM\Software\HP]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\IDT]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\Khronos]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Norton]
[HKLM\Software\ODBC]
[HKLM\Software\One Time Password Providers]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SAMSUNG]
[HKLM\Software\Sonic]
[HKLM\Software\Synaptics]
[HKLM\Software\WinRAR]
[HKLM\Software\Wow6432Node\ATI Technologies]
[HKLM\Software\Wow6432Node\ATI]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\AppDataLow]
[HKLM\Software\Wow6432Node\Atheros]
[HKLM\Software\Wow6432Node\AuthenTec]
[HKLM\Software\Wow6432Node\Caphyon]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\CyberLink]
[HKLM\Software\Wow6432Node\Darty]
[HKLM\Software\Wow6432Node\Data fellows]
[HKLM\Software\Wow6432Node\DivXNetworks]
[HKLM\Software\Wow6432Node\DivX]
[HKLM\Software\Wow6432Node\EasyBits]
[HKLM\Software\Wow6432Node\Evernote]
[HKLM\Software\Wow6432Node\GNU]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\HaaliMkx]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HKLM\Software\Wow6432Node\IDT]
[HKLM\Software\Wow6432Node\Icaros]
[HKLM\Software\Wow6432Node\InstallShield]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\KLCodecPack]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\LAV]
[HKLM\Software\Wow6432Node\LogMeIn Rescue]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\RocketLife]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\Symantec]
[HKLM\Software\Wow6432Node\TGUID]
[HKLM\Software\Wow6432Node\Uniblue]
[HKLM\Software\Wow6432Node\VCOM]
[HKLM\Software\Wow6432Node\Validity]
[HKLM\Software\Wow6432Node\Visan]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\WildTangent]
[HKLM\Software\Wow6432Node\Win32 Services]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
[HKLM\Software\oodrive]



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 31/03/2013 - 17:45:27 - [119,658] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 08/05/2012 - 16:00:09 - [2,323] ----D C:\Program Files (x86)\AMD APP
O43 - CFD: 26/02/2013 - 09:16:37 - [0] ----D C:\Program Files (x86)\Astonsoft
O43 - CFD: 08/05/2012 - 16:05:15 - [2,714] ----D C:\Program Files (x86)\Atheros
O43 - CFD: 08/05/2012 - 16:00:00 - [66,593] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 08/05/2012 - 16:06:50 - [47,915] ----D C:\Program Files (x86)\Bluetooth Suite
O43 - CFD: 08/05/2012 - 16:04:55 - [4,136] ----D C:\Program Files (x86)\Cisco
O43 - CFD: 09/04/2013 - 16:30:09 - [340,978] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 08/05/2012 - 16:15:37 - [209,862] ----D C:\Program Files (x86)\CyberLink
O43 - CFD: 10/04/2013 - 08:08:44 - [153,735] ----D C:\Program Files (x86)\DivX
O43 - CFD: 10/11/2011 - 21:14:12 - [109,330] ----D C:\Program Files (x86)\EasyBits For Kids
O43 - CFD: 10/11/2011 - 20:53:42 - [139,012] ----D C:\Program Files (x86)\Evernote
O43 - CFD: 27/02/2013 - 15:34:56 - [0] ----D C:\Program Files (x86)\Google
O43 - CFD: 08/04/2013 - 20:32:59 - [459,169] ----D C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 25/02/2013 - 23:40:30 - [8,508] ----D C:\Program Files (x86)\HP
O43 - CFD: 10/11/2011 - 21:01:46 - [955,278] ----D C:\Program Files (x86)\HP Games
O43 - CFD: 22/03/2013 - 21:49:41 - [0,428] ----D C:\Program Files (x86)\HP Photo Creations
O43 - CFD: 08/05/2012 - 16:17:37 - [53,223] ----D C:\Program Files (x86)\HP SimplePass 2012
O43 - CFD: 17/04/2013 - 10:57:44 - [64,723] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 08/05/2012 - 16:09:48 - [37,771] ----D C:\Program Files (x86)\Intel
O43 - CFD: 10/04/2013 - 08:03:13 - [4,886] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 24/02/2013 - 16:51:17 - [69,735] ----D C:\Program Files (x86)\K-Lite Codec Pack
O43 - CFD: 09/04/2013 - 16:30:26 - [2,414] ----D C:\Program Files (x86)\MarkAny
O43 - CFD: 25/02/2013 - 23:32:34 - [0] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 23/02/2013 - 17:06:36 - [38,002] ----D C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 23/02/2013 - 17:16:57 - [555,374] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 13/03/2013 - 08:52:58 - [40,835] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 23/02/2013 - 21:54:24 - [5,397] ----D C:\Program Files (x86)\Microsoft SkyDrive
O43 - CFD: 10/11/2011 - 21:08:09 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 23/02/2013 - 17:10:14 - [7,789] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 15/04/2013 - 08:16:41 - [54,408] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 04/04/2013 - 18:23:01 - [43,407] ----D C:\Program Files (x86)\Mozilla Thunderbird
O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 23/02/2013 - 13:36:17 - [20,218] R---D C:\Program Files (x86)\Online Services
O43 - CFD: 23/02/2013 - 16:16:15 - [1052,680] ----D C:\Program Files (x86)\Pack Sérénité
O43 - CFD: 17/04/2013 - 11:11:24 - [0] ----D C:\Program Files (x86)\PC Connectivity Solution
O43 - CFD: 08/05/2012 - 16:01:27 - [16,518] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 07:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 08/05/2012 - 16:03:47 - [0,772] ----D C:\Program Files (x86)\Renesas Electronics
O43 - CFD: 09/04/2013 - 16:45:07 - [2,365] ----D C:\Program Files (x86)\Samsung
O43 - CFD: 23/02/2013 - 22:15:58 - [16,855] R---D C:\Program Files (x86)\Skype
O43 - CFD: 08/05/2012 - 16:22:56 - [0,727] ----D C:\Program Files (x86)\SymSilent
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 14/03/2013 - 17:18:03 - [10,569] ----D C:\Program Files (x86)\WildTangent Games
O43 - CFD: 26/02/2013 - 18:57:19 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 23/02/2013 - 17:07:22 - [161,426] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 26/02/2013 - 18:57:22 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 26/02/2013 - 18:57:22 - [5,092] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 26/02/2013 - 18:57:21 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 21/11/2010 - 05:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 26/02/2013 - 18:57:25 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 21/04/2013 - 20:02:15 - [16,333] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 31/03/2013 - 17:46:17 - [6,274] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 08/05/2012 - 16:05:55 - [0,051] ----D C:\Program Files (x86)\Common Files\Atheros
O43 - CFD: 08/05/2012 - 16:17:27 - [15,266] ----D C:\Program Files (x86)\Common Files\AuthenTec
O43 - CFD: 23/02/2013 - 17:10:26 - [0,095] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 10/04/2013 - 08:07:52 - [36,250] ----D C:\Program Files (x86)\Common Files\DivX Shared
O43 - CFD: 08/05/2012 - 16:00:24 - [13,605] ----D C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 08/05/2012 - 16:14:27 - [0,007] ----D C:\Program Files (x86)\Common Files\Intel Corporation
O43 - CFD: 13/03/2013 - 08:51:24 - [196,443] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 08/05/2012 - 15:57:22 - [0,155] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 09/04/2013 - 16:30:35 - [0,106] ----D C:\Program Files (x86)\Common Files\Samsung
O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 23/02/2013 - 22:15:58 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 23/02/2013 - 16:11:05 - [0] ----D C:\Program Files (x86)\Common Files\SWF Studio
O43 - CFD: 26/02/2013 - 18:57:20 - [10,310] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 14/03/2013 - 17:14:30 - [0,233] ----D C:\Program Files (x86)\Common Files\Telespree
O43 - CFD: 10/11/2011 - 21:05:41 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 23/02/2013 - 16:14:34 - [20,925] ----D C:\Program Files (x86)\Common Files\Wise Installation Wizard
O43 - CFD: 31/03/2013 - 17:47:10 - [149,097] ----D C:\ProgramData\Adobe
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 22/03/2013 - 17:23:40 - [0,021] ----D C:\ProgramData\Atheros
O43 - CFD: 08/05/2012 - 16:30:49 - [0,000] ----D C:\ProgramData\ATI
O43 - CFD: 23/02/2013 - 13:33:43 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 07/03/2013 - 16:26:15 - [0,013] ----D C:\ProgramData\CyberLink
O43 - CFD: 23/02/2013 - 16:14:44 - [0,207] ----D C:\ProgramData\Darty
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 10/04/2013 - 08:08:44 - [4,619] ----D C:\ProgramData\DivX
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 08/05/2012 - 16:17:32 - [51,230] ----D C:\ProgramData\Downloaded Installations
O43 - CFD: 23/02/2013 - 16:16:41 - [8,470] ----D C:\ProgramData\f-secure
O43 - CFD: 23/02/2013 - 13:33:43 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 23/02/2013 - 16:15:41 - [0,048] ----D C:\ProgramData\fssg
O43 - CFD: 14/03/2013 - 17:30:53 - [92,805] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 22/03/2013 - 21:48:32 - [1,380] ----D C:\ProgramData\HP
O43 - CFD: 23/03/2013 - 08:20:56 - [105,296] ----D C:\ProgramData\HP Photo Creations
O43 - CFD: 22/03/2013 - 17:21:41 - [0,001] ----D C:\ProgramData\Intel
O43 - CFD: 23/02/2013 - 13:33:43 - [0] --H-D C:\ProgramData\Menu Démarrer
O43 - CFD: 11/04/2013 - 12:09:43 - [398,062] -S--D C:\ProgramData\Microsoft
O43 - CFD: 11/04/2013 - 11:18:54 - [0,055] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 23/02/2013 - 16:46:12 - [0] ----D C:\ProgramData\Microsoft SkyDrive
O43 - CFD: 23/02/2013 - 13:33:43 - [0] --H-D C:\ProgramData\Modèles
O43 - CFD: 23/02/2013 - 16:50:39 - [0,000] ----D C:\ProgramData\Mozilla
O43 - CFD: 23/02/2013 - 15:34:34 - [0,014] ----D C:\ProgramData\Norton
O43 - CFD: 08/05/2012 - 16:15:56 - [19,797] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 09/04/2013 - 16:38:06 - [0] ----D C:\ProgramData\PC Suite
O43 - CFD: 17/04/2013 - 10:57:45 - [0,888] ----D C:\ProgramData\Samsung
O43 - CFD: 07/03/2013 - 16:24:28 - [36,511] ----D C:\ProgramData\Skype
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 08/05/2012 - 16:29:49 - [0,002] ----D C:\ProgramData\Synaptics
O43 - CFD: 08/05/2012 - 16:22:14 - [0,086] ----D C:\ProgramData\Temp
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 25/02/2013 - 23:51:02 - [0,421] ----D C:\ProgramData\Visan
O43 - CFD: 14/03/2013 - 17:18:03 - [231,864] ----D C:\ProgramData\WildTangent
O43 - CFD: 08/04/2013 - 20:33:08 - [39,643] ----D C:\ProgramData\{9BF4D58B-C6D6-467B-BC5A-FD0C1278F4AF}
O43 - CFD: 23/02/2013 - 16:11:05 - [0,004] -SH-D C:\Users\jean pierre\AppData\Roaming\.#
O43 - CFD: 23/02/2013 - 17:58:58 - [3,324] ----D C:\Users\jean pierre\AppData\Roaming\Adobe
O43 - CFD: 23/02/2013 - 13:41:01 - [0] ----D C:\Users\jean pierre\AppData\Roaming\Atheros
O43 - CFD: 23/02/2013 - 13:42:02 - [0] ----D C:\Users\jean pierre\AppData\Roaming\ATI
O43 - CFD: 07/03/2013 - 16:23:32 - [0,092] ----D C:\Users\jean pierre\AppData\Roaming\CyberLink
O43 - CFD: 23/02/2013 - 16:14:44 - [0,014] ----D C:\Users\jean pierre\AppData\Roaming\Darty
O43 - CFD: 25/02/2013 - 23:14:29 - [0,001] ----D C:\Users\jean pierre\AppData\Roaming\DeepBurner
O43 - CFD: 24/02/2013 - 16:52:37 - [0,137] ----D C:\Users\jean pierre\AppData\Roaming\DivX
O43 - CFD: 24/02/2013 - 12:24:37 - [0,003] ----D C:\Users\jean pierre\AppData\Roaming\Hewlett-Packard
O43 - CFD: 14/03/2013 - 17:14:43 - [0,602] ----D C:\Users\jean pierre\AppData\Roaming\hpqlog
O43 - CFD: 19/03/2013 - 09:58:18 - [0,004] ----D C:\Users\jean pierre\AppData\Roaming\HpUpdate
O43 - CFD: 23/02/2013 - 13:40:32 - [0] ----D C:\Users\jean pierre\AppData\Roaming\Identities
O43 - CFD: 23/02/2013 - 13:41:03 - [0,001] ----D C:\Users\jean pierre\AppData\Roaming\Intel Corporation
O43 - CFD: 23/02/2013 - 15:42:58 - [0,001] ----D C:\Users\jean pierre\AppData\Roaming\Macromedia
O43 - CFD: 09/05/2012 - 00:45:30 - [0] ----D C:\Users\jean pierre\AppData\Roaming\Media Center Programs
O43 - CFD: 24/02/2013 - 16:52:37 - [0,000] ----D C:\Users\jean pierre\AppData\Roaming\Media Player Classic
O43 - CFD: 11/04/2013 - 12:09:43 - [89,620] -S--D C:\Users\jean pierre\AppData\Roaming\Microsoft
O43 - CFD: 23/02/2013 - 16:51:15 - [20,184] ----D C:\Users\jean pierre\AppData\Roaming\Mozilla
O43 - CFD: 09/04/2013 - 16:38:06 - [0,000] ----D C:\Users\jean pierre\AppData\Roaming\PC Suite
O43 - CFD: 09/04/2013 - 16:43:02 - [2,792] ----D C:\Users\jean pierre\AppData\Roaming\Samsung
O43 - CFD: 07/03/2013 - 16:25:16 - [1,465] ----D C:\Users\jean pierre\AppData\Roaming\Skype
O43 - CFD: 23/02/2013 - 13:41:00 - [0] ----D C:\Users\jean pierre\AppData\Roaming\Synaptics
O43 - CFD: 26/02/2013 - 13:08:13 - [200,263] ----D C:\Users\jean pierre\AppData\Roaming\Thunderbird
O43 - CFD: 25/02/2013 - 23:51:02 - [0] ----D C:\Users\jean pierre\AppData\Roaming\Visan
O43 - CFD: 14/03/2013 - 17:18:07 - [4,934] ----D C:\Users\jean pierre\AppData\Roaming\WildTangent
O43 - CFD: 26/02/2013 - 12:23:58 - [0,000] ----D C:\Users\jean pierre\AppData\Roaming\Windows Live Writer
O43 - CFD: 25/02/2013 - 22:48:53 - [0,000] ----D C:\Users\jean pierre\AppData\Roaming\WinRAR
O43 - CFD: 23/02/2013 - 17:58:58 - [31,830] ----D C:\Users\jean pierre\AppData\Local\Adobe
O43 - CFD: 23/02/2013 - 13:34:00 - [0] ----D C:\Users\jean pierre\AppData\Local\Application Data
O43 - CFD: 23/02/2013 - 13:42:02 - [0,056] ----D C:\Users\jean pierre\AppData\Local\ATI
O43 - CFD: 23/02/2013 - 13:35:26 - [0,003] ----D C:\Users\jean pierre\AppData\Local\AuthenTec
O43 - CFD: 23/02/2013 - 13:41:11 - [0] ----D C:\Users\jean pierre\AppData\Local\BMExplorer
O43 - CFD: 21/04/2013 - 15:31:59 - [42,130] ----D C:\Users\jean pierre\AppData\Local\CrashDumps
O43 - CFD: 07/03/2013 - 16:23:31 - [0,005] ----D C:\Users\jean pierre\AppData\Local\CyberLink
O43 - CFD: 22/03/2013 - 21:55:12 - [0,358] ----D C:\Users\jean pierre\AppData\Local\Diagnostics
O43 - CFD: 09/04/2013 - 16:42:19 - [77,014] ----D C:\Users\jean pierre\AppData\Local\Downloaded Installations
O43 - CFD: 21/04/2013 - 13:58:26 - [0,157] ----D C:\Users\jean pierre\AppData\Local\ElevatedDiagnostics
O43 - CFD: 27/02/2013 - 15:34:49 - [0] ----D C:\Users\jean pierre\AppData\Local\Google
O43 - CFD: 03/03/2013 - 15:25:50 - [0,017] ----D C:\Users\jean pierre\AppData\Local\Hewlett-Packard
O43 - CFD: 23/02/2013 - 13:35:52 - [0,002] ----D C:\Users\jean pierre\AppData\Local\Hewlett-Packard_Company
O43 - CFD: 14/03/2013 - 17:32:06 - [0,000] ----D C:\Users\jean pierre\AppData\Local\Hewlett-Packard_Developme
O43 - CFD: 23/02/2013 - 13:34:00 - [0] ----D C:\Users\jean pierre\AppData\Local\Historique
O43 - CFD: 22/03/2013 - 17:23:43 - [0,161] ----D C:\Users\jean pierre\AppData\Local\HP
O43 - CFD: 26/02/2013 - 16:47:34 - [0] ----D C:\Users\jean pierre\AppData\Local\LogMeIn Rescue Applet
O43 - CFD: 27/02/2013 - 14:47:56 - [0] ----D C:\Users\jean pierre\AppData\Local\Macromedia
O43 - CFD: 05/03/2013 - 19:24:56 - [377,780] ----D C:\Users\jean pierre\AppData\Local\Microsoft
O43 - CFD: 23/02/2013 - 17:05:57 - [0] ----D C:\Users\jean pierre\AppData\Local\Microsoft Help
O43 - CFD: 23/02/2013 - 16:51:09 - [10,061] ----D C:\Users\jean pierre\AppData\Local\Mozilla
O43 - CFD: 24/02/2013 - 16:50:41 - [0] ----D C:\Users\jean pierre\AppData\Local\Programs
O43 - CFD: 23/02/2013 - 13:35:54 - [0,000] ----D C:\Users\jean pierre\AppData\Local\RemEngine
O43 - CFD: 17/04/2013 - 10:57:45 - [0] ----D C:\Users\jean pierre\AppData\Local\Samsung
O43 - CFD: 21/04/2013 - 20:00:37 - [234,317] ----D C:\Users\jean pierre\AppData\Local\Temp
O43 - CFD: 23/02/2013 - 13:34:00 - [0] ----D C:\Users\jean pierre\AppData\Local\Temporary Internet Files
O43 - CFD: 12/03/2013 - 10:54:43 - [30,320] ----D C:\Users\jean pierre\AppData\Local\Thunderbird
O43 - CFD: 23/02/2013 - 13:34:38 - [0] ----D C:\Users\jean pierre\AppData\Local\VirtualStore
O43 - CFD: 01/04/2013 - 18:30:24 - [0,059] ----D C:\Users\jean pierre\AppData\Local\Windows Live
O43 - CFD: 23/02/2013 - 16:25:02 - [0,618] ----D C:\Users\jean pierre\AppData\Local\Windows Live Writer
O43 - CFD: 14/07/2009 - 06:54:32 - [0,013] R---D C:\Users\jean pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 23/02/2013 - 15:29:31 - [0,000] R---D C:\Users\jean pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 14/07/2009 - 06:49:38 - [0,001] R---D C:\Users\jean pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 22/03/2013 - 21:57:17 - [0,002] R---D C:\Users\jean pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 02/03/2013 - 17:53:32 - [0] ----D C:\Users\jean pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ 1 Dossiers CLSID vides (CLSID Empty Folders)



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.1B179DAEFDD7CC67D1A76ED9DC7201F6] - 21/04/2013 - 19:00:39 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin   [512]
O44 - LFC:[MD5.A9BE9E5C85C3B3D9EB8C6879C5508E33] - 21/04/2013 - 17:52:20 ---A- . (...) -- C:\AdwCleaner[S2].txt   [366]
O44 - LFC:[MD5.E610FB41688EA7F83F4B747AB74C826E] - 21/04/2013 - 17:52:13 ---A- . (...) -- C:\AdwCleaner[R3].txt   [1044]
O44 - LFC:[MD5.9C511C2490F16D184B76E50EC8C6ADCB] - 21/04/2013 - 17:50:46 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [1098513]
O44 - LFC:[MD5.658183E33D4D8FEB5049D0D4377404D7] - 21/04/2013 - 17:47:35 ---A- . (...) -- C:\Windows\setupact.log   [73203]
O44 - LFC:[MD5.F9CED3C15B414F9C8D90CF22BEC94A5A] - 21/04/2013 - 17:47:34 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.64D60A8ECB4439AE3428F116991FD265] - 21/04/2013 - 17:46:30 ---A- . (...) -- C:\AdwCleaner[S1].txt   [2370]
O44 - LFC:[MD5.AB1BF7990C177F6931B7B1D0EE041C7C] - 21/04/2013 - 17:26:50 ---A- . (...) -- C:\AdwCleaner[R1].txt   [2585]
O44 - LFC:[MD5.2DD63857FB0CD420B342E8B07661E99D] - 17/04/2013 - 10:11:19 ---A- . (...) -- C:\Windows\DPINST.LOG   [25752]
O44 - LFC:[MD5.EBE6BB1EC79C12E9A9E8068986AED1D8] - 10/04/2013 - 07:04:48 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT   [342824]
O44 - LFC:[MD5.EBE6BB1EC79C12E9A9E8068986AED1D8] - 10/04/2013 - 07:04:48 RSHAD . (...) -- C:\Windows\System32\FNTCACHE.DAT   [342824]
O44 - LFC:[MD5.D5B800C7E730BDAFF36FE6FC64EB34A1] - 10/04/2013 - 06:51:20 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\SysNative\MRT.exe   [72702784]
O44 - LFC:[MD5.D5B800C7E730BDAFF36FE6FC64EB34A1] - 10/04/2013 - 06:51:20 RSHAD . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe   [72702784]
O44 - LFC:[MD5.E198851141465033273480C5EEAD5DE5] - 10/04/2013 - 06:49:26 ---A- . (.Microsoft Corporation - Microsoft® MSHTML Typelib.) -- C:\Windows\SysNative\mshtml.tlb   [2706432]
O44 - LFC:[MD5.E198851141465033273480C5EEAD5DE5] - 10/04/2013 - 06:49:26 ---A- . (.Microsoft Corporation - Microsoft® MSHTML Typelib.) -- C:\Windows\System32\mshtml.tlb   [2706432]
O44 - LFC:[MD5.1C3C4D34DCF354620B76B42620B4DFAD] - 10/04/2013 - 06:49:26 ---A- . (.Microsoft Corporation - Moteur de l’interface utilisateur d’Interne.) -- C:\Windows\SysNative\ieui.dll   [526336]
O44 - LFC:[MD5.1C3C4D34DCF354620B76B42620B4DFAD] - 10/04/2013 - 06:49:26 ---A- . (.Microsoft Corporation - Moteur de l’interface utilisateur d’Interne.) -- C:\Windows\System32\ieui.dll   [526336]
O44 - LFC:[MD5.A89103864B67CE1ED3BB5D48569D3D94] - 10/04/2013 - 06:49:26 ---A- . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\SysNative\ie4uinit.exe   [51712]
O44 - LFC:[MD5.A89103864B67CE1ED3BB5D48569D3D94] - 10/04/2013 - 06:49:26 RSHAD . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe   [51712]
O44 - LFC:[MD5.38BEBBC4CF9FE6566262F0037DF843BF] - 10/04/2013 - 06:49:25 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\SysNative\iesysprep.dll   [136704]
O44 - LFC:[MD5.38BEBBC4CF9FE6566262F0037DF843BF] - 10/04/2013 - 06:49:25 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\System32\iesysprep.dll   [136704]
O44 - LFC:[MD5.82F604599DE379AA539EE2DF48399DC5] - 10/04/2013 - 06:49:25 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\Windows\SysNative\iesetup.dll   [67072]
O44 - LFC:[MD5.82F604599DE379AA539EE2DF48399DC5] - 10/04/2013 - 06:49:25 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\Windows\System32\iesetup.dll   [67072]
O44 - LFC:[MD5.268E23EAEDF3FAF87A7A87F0257C9E87] - 10/04/2013 - 06:49:25 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\SysNative\msfeeds.dll   [603136]
O44 - LFC:[MD5.268E23EAEDF3FAF87A7A87F0257C9E87] - 10/04/2013 - 06:49:25 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll   [603136]
O44 - LFC:[MD5.F03E5925B7E99800B8BFE1332556E1E2] - 10/04/2013 - 06:49:25 ---A- . (.Microsoft Corporation - Registers custom PKEYs for IE.) -- C:\Windows\SysNative\RegisterIEPKEYs.exe   [89600]
O44 - LFC:[MD5.F03E5925B7E99800B8BFE1332556E1E2] - 10/04/2013 - 06:49:25 ---A- . (.Microsoft Corporation - Registers custom PKEYs for IE.) -- C:\Windows\System32\RegisterIEPKEYs.exe   [89600]
O44 - LFC:[MD5.F021824E70447D98DB6CCED4456A0891] - 10/04/2013 - 06:49:25 ---A- . (.Microsoft Corporation - Traitement de RunOnce complet avec interfac.) -- C:\Windows\SysNative\iernonce.dll   [39936]
O44 - LFC:[MD5.F021824E70447D98DB6CCED4456A0891] - 10/04/2013 - 06:49:25 ---A- . (.Microsoft Corporation - Traitement de RunOnce complet avec interfac.) -- C:\Windows\System32\iernonce.dll   [39936]
O44 - LFC:[MD5.85F1FE2D5EDBFD26066F5ABB9504A69C] - 10/04/2013 - 06:49:24 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\SysNative\iertutil.dll   [2647040]
O44 - LFC:[MD5.85F1FE2D5EDBFD26066F5ABB9504A69C] - 10/04/2013 - 06:49:24 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\System32\iertutil.dll   [2647040]
O44 - LFC:[MD5.29812E9971077BE3F8B9DC225CF9D454] - 10/04/2013 - 06:49:23 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysNative\urlmon.dll   [1365504]
O44 - LFC:[MD5.29812E9971077BE3F8B9DC225CF9D454] - 10/04/2013 - 06:49:23 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll   [1365504]
O44 - LFC:[MD5.8C1EFE99D4C9462EF2E10E7140B44D4A] - 10/04/2013 - 06:49:23 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\SysNative\jscript.dll   [855552]
O44 - LFC:[MD5.8C1EFE99D4C9462EF2E10E7140B44D4A] - 10/04/2013 - 06:49:23 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript.dll   [855552]
O44 - LFC:[MD5.DE3C3B1B4FA5FBF1F17BCD3B3AE1ED15] - 10/04/2013 - 06:49:21 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\SysNative\jscript9.dll   [3958784]
O44 - LFC:[MD5.DE3C3B1B4FA5FBF1F17BCD3B3AE1ED15] - 10/04/2013 - 06:49:21 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript9.dll   [3958784]
O44 - LFC:[MD5.194125E7839D4902F2490A70049E8F78] - 10/04/2013 - 06:49:20 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\SysNative\jsproxy.dll   [53248]
O44 - LFC:[MD5.194125E7839D4902F2490A70049E8F78] - 10/04/2013 - 06:49:20 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\System32\jsproxy.dll   [53248]
O44 - LFC:[MD5.753C0848AE7872A3F59663078A517293] - 10/04/2013 - 06:49:19 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\SysNative\wininet.dll   [2240512]
O44 - LFC:[MD5.753C0848AE7872A3F59663078A517293] - 10/04/2013 - 06:49:19 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll   [2240512]
O44 - LFC:[MD5.D744D5B8145C2303B19A288AF695E9AD] - 10/04/2013 - 06:49:18 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\SysNative\ieframe.dll   [15404544]
O44 - LFC:[MD5.D744D5B8145C2303B19A288AF695E9AD] - 10/04/2013 - 06:49:18 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\System32\ieframe.dll   [15404544]
O44 - LFC:[MD5.394ECD933CD66BADF97EA85A183B9E1E] - 10/04/2013 - 06:49:13 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysNative\mshtml.dll   [19230208]
O44 - LFC:[MD5.394ECD933CD66BADF97EA85A183B9E1E] - 10/04/2013 - 06:49:13 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll   [19230208]
O44 - LFC:[MD5.F4C640E85DB6450CB221E5224AA2AB51] - 10/04/2013 - 06:20:43 ---A- . (.Microsoft Corporation - Client ActiveX des services Bureau à distan.) -- C:\Windows\SysNative\mstscax.dll   [3717632]
O44 - LFC:[MD5.F4C640E85DB6450CB221E5224AA2AB51] - 10/04/2013 - 06:20:43 ---A- . (.Microsoft Corporation - Client ActiveX des services Bureau à distan.) -- C:\Windows\System32\mstscax.dll   [3717632]
O44 - LFC:[MD5.9F5C2F0CFEF95B4653E21443CDC0D587] - 10/04/2013 - 06:20:31 ---A- . (.Microsoft Corporation - Client avec accès à distance.) -- C:\Windows\SysNative\aaclient.dll   [158720]
O44 - LFC:[MD5.9F5C2F0CFEF95B4653E21443CDC0D587] - 10/04/2013 - 06:20:31 ---A- . (.Microsoft Corporation - Client avec accès à distance.) -- C:\Windows\System32\aaclient.dll   [158720]
O44 - LFC:[MD5.CE4157E4B1E5041D252EF38EB61E9F0C] - 10/04/2013 - 06:20:31 ---A- . (.Microsoft Corporation - Client de contrainte de quarantaine de la p.) -- C:\Windows\SysNative\tsgqec.dll   [44032]
O44 - LFC:[MD5.CE4157E4B1E5041D252EF38EB61E9F0C] - 10/04/2013 - 06:20:31 ---A- . (.Microsoft Corporation - Client de contrainte de quarantaine de la p.) -- C:\Windows\System32\tsgqec.dll   [44032]
O44 - LFC:[MD5.86F96630D28523F1C402C783F046DEF1] - 10/04/2013 - 06:19:23 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\SysNative\win32k.sys   [3153408]
O44 - LFC:[MD5.86F96630D28523F1C402C783F046DEF1] - 10/04/2013 - 06:19:23 RSHAD . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\System32\win32k.sys   [3153408]
O44 - LFC:[MD5.B8965FB53551B5455630A4B804D0791F] - 10/04/2013 - 06:19:17 RSHAD . (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\Drivers\ntfs.sys   [1655656]
O44 - LFC:[MD5.8F6322049018354F45F05A2FD2D4E5E0] - 10/04/2013 - 06:19:11 RSHAD . (.Microsoft Corporation - BitLocker Drive Encryption Driver.) -- C:\Windows\System32\Drivers\fvevol.sys   [223752]
O44 - LFC:[MD5.AC3232ED772403D38D64C18CD5A66FBD] - 10/04/2013 - 06:18:58 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\SysNative\ntoskrnl.exe   [5550424]
O44 - LFC:[MD5.AC3232ED772403D38D64C18CD5A66FBD] - 10/04/2013 - 06:18:58 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\System32\ntoskrnl.exe   [5550424]
O44 - LFC:[MD5.F0371DE302FFFF8F086661611BE60848] - 10/04/2013 - 06:18:46 ---A- . (.Microsoft Corporation - Gestionnaire de sessions Windows.) -- C:\Windows\SysNative\smss.exe   [112640]
O44 - LFC:[MD5.CEC1EDF4022DC4DCA40384DCEC672B0E] - 10/04/2013 - 06:18:46 ---A- . (.Microsoft Corporation - Processus d'exécution client-serveur.) -- C:\Windows\SysNative\csrsrv.dll   [43520]
O44 - LFC:[MD5.F0371DE302FFFF8F086661611BE60848] - 10/04/2013 - 06:18:46 RSHAD . (.Microsoft Corporation - Gestionnaire de sessions Windows.) -- C:\Windows\System32\smss.exe   [112640]
O44 - LFC:[MD5.CEC1EDF4022DC4DCA40384DCEC672B0E] - 10/04/2013 - 06:18:46 RSHAD . (.Microsoft Corporation - Processus d'exécution client-serveur.) -- C:\Windows\System32\csrsrv.dll   [43520]
O44 - LFC:[MD5.51FC7F53FC3AAEF39F9176C35275B5EC] - 09/04/2013 - 15:49:32 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI   [1571448]
O44 - LFC:[MD5.2AF978DDD33BA56BA36036DEDEE82FEF] - 09/04/2013 - 15:49:32 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat   [109632]
O44 - LFC:[MD5.AF9A1C8F92E6A65F045AC60B83182FE6] - 09/04/2013 - 15:49:32 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat   [133998]
O44 - LFC:[MD5.90EB7001FE56E3BF3D90A66D9BBAC4C0] - 09/04/2013 - 15:49:32 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat   [623136]
O44 - LFC:[MD5.3E3B8DED02D88986D1347E38A645C514] - 09/04/2013 - 15:49:32 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat   [711608]
O44 - LFC:[MD5.51FC7F53FC3AAEF39F9176C35275B5EC] - 09/04/2013 - 15:49:32 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI   [1571448]
O44 - LFC:[MD5.2AF978DDD33BA56BA36036DEDEE82FEF] - 09/04/2013 - 15:49:32 RSHAD . (...) -- C:\Windows\System32\perfc009.dat   [109632]
O44 - LFC:[MD5.AF9A1C8F92E6A65F045AC60B83182FE6] - 09/04/2013 - 15:49:32 RSHAD . (...) -- C:\Windows\System32\perfc00C.dat   [133998]
O44 - LFC:[MD5.90EB7001FE56E3BF3D90A66D9BBAC4C0] - 09/04/2013 - 15:49:32 RSHAD . (...) -- C:\Windows\System32\perfh009.dat   [623136]
O44 - LFC:[MD5.3E3B8DED02D88986D1347E38A645C514] - 09/04/2013 - 15:49:32 RSHAD . (...) -- C:\Windows\System32\perfh00C.dat   [711608]
O44 - LFC:[MD5.CC98D196AFAD3580E454DDED14BDAC7A] - 09/04/2013 - 15:36:05 RSHAD . (.MCCI Corporation - SAMSUNG USB Mobile Device (Windows 2000/XP.) -- C:\Windows\System32\Drivers\ss_bwh.sys   [15872]
O44 - LFC:[MD5.946684DEF391FA17A830091EA84E74FE] - 09/04/2013 - 15:36:05 RSHAD . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\ss_bcm.sys   [15360]
O44 - LFC:[MD5.48D9D00C2E0E72C3D4F52772C80355F6] - 09/04/2013 - 15:34:50 ---A- . (.Teruten Inc - File System Mini Filter Drvier.) -- C:\Windows\System32\Drivers\TFsExDisk.sys   [16448]
O44 - LFC:[MD5.1667A0F0E7161176DB6AB4ECACF4E307] - 09/04/2013 - 15:30:23 ---A- . (...) -- C:\aqua_bitmap.cpp   [2006]



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.1D17FA3277C06E47C9F835D6F91B5FCA] - 10/04/2013 - 06:48:00 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:[MD5.354404A209A9E396003605721E961209] - 10/04/2013 - 06:49:02 ---A- - C:\Windows\Prefetch\AgCx_SC1.db
O45 - LFCP:[MD5.304722736FEECC6F645B042EC8CDB522] - 20/04/2013 - 06:23:48 ---A- - C:\Windows\Prefetch\AgCx_SC4.db
O45 - LFCP:[MD5.59A8291281BCC227FEEEB426C6342695] - 21/04/2013 - 14:07:31 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf
O45 - LFCP:[MD5.5EB002A5513108D25AC855427B4E3175] - 21/04/2013 - 14:09:45 ---A- - C:\Windows\Prefetch\ACRORD32.EXE-D066635E.pf
O45 - LFCP:[MD5.958F21714EBBE3F6868BD2B6EB2E020C] - 21/04/2013 - 14:10:09 ---A- - C:\Windows\Prefetch\ADOBEARM.EXE-7105D3A2.pf
O45 - LFCP:[MD5.537A0C44574C92EBBC85671079A86760] - 21/04/2013 - 14:17:02 ---A- - C:\Windows\Prefetch\MSPAINT.EXE-76E10B24.pf
O45 - LFCP:[MD5.A974EDB1D607E72289B465FF8264C0FE] - 21/04/2013 - 14:26:55 ---A- - C:\Windows\Prefetch\HELPER.EXE-0A7740EE.pf
O45 - LFCP:[MD5.55915CFA23D1A000D95293CC12EE8110] - 21/04/2013 - 14:30:56 ---A- - C:\Windows\Prefetch\CONTROL.EXE-817F8F1D.pf
O45 - LFCP:[MD5.33BB7644DB3F5BC56156931250044EF6] - 21/04/2013 - 14:31:36 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-E69F695A.pf
O45 - LFCP:[MD5.DA74E52823B75125B259A0D929F118A9] - 21/04/2013 - 14:33:47 ---A- - C:\Windows\Prefetch\SYSTEMPROPERTIESADVANCED.EXE-68C7C4F0.pf
O45 - LFCP:[MD5.1B96BA2CEDA9E5E7BCD71290BF8A7E9F] - 21/04/2013 - 14:35:13 ---A- - C:\Windows\Prefetch\HELPPANE.EXE-FEDC965B.pf
O45 - LFCP:[MD5.EC89159E5E75F244B9A7B15D5EF6B007] - 21/04/2013 - 14:37:26 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-3E287BA5.pf
O45 - LFCP:[MD5.135BAC3FD6FFA93CB7A18983C7EA70F4] - 21/04/2013 - 14:41:09 ---A- - C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf
O45 - LFCP:[MD5.C1198EA90C7A0D23080D7900D8686F98] - 21/04/2013 - 15:24:57 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-32F5926D.pf
O45 - LFCP:[MD5.3EA84AC3F70FAA645B8A607117A9CF1F] - 21/04/2013 - 15:25:01 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-B2A9B82A.pf
O45 - LFCP:[MD5.8B549BA6CD50261DC9B461361FD2755D] - 21/04/2013 - 15:35:19 ---A- - C:\Windows\Prefetch\MPCMDRUN.EXE-B2817BC2.pf
O45 - LFCP:[MD5.ACC931DAF6415EF44C52E92F05AED941] - 21/04/2013 - 16:01:20 ---A- - C:\Windows\Prefetch\PLUGIN-HANG-UI.EXE-F3C09761.pf
O45 - LFCP:[MD5.DD9C89498A8803B4D7BA9776024A3C0F] - 21/04/2013 - 16:07:51 ---A- - C:\Windows\Prefetch\DEVICEDISPLAYOBJECTPROVIDER.E-17410B90.pf
O45 - LFCP:[MD5.5137D365D4C029266D640027415298EE] - 21/04/2013 - 16:07:54 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-82F19E68.pf
O45 - LFCP:[MD5.4D617643F4F24D5EE7C9EB8ABAF0D43C] - 21/04/2013 - 16:07:56 ---A- - C:\Windows\Prefetch\WUDFHOST.EXE-AFFEF87C.pf
O45 - LFCP:[MD5.3DAC351CCB746A79C8A0FFE7B18F40DC] - 21/04/2013 - 16:08:04 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-0E3FB84F.pf
O45 - LFCP:[MD5.A5F5D87F2972D3918DF70C4DE655C4CF] - 21/04/2013 - 16:56:28 ---A- - C:\Windows\Prefetch\MSFEEDSSYNC.EXE-6E6FBDF4.pf
O45 - LFCP:[MD5.CBEB2A274DEEF2635C6411E79BCF997B] - 21/04/2013 - 16:59:35 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-76936ED5.pf
O45 - LFCP:[MD5.95167EB670BE259ECD526A598A135D5D] - 21/04/2013 - 17:15:33 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-4F28A26F.pf
O45 - LFCP:[MD5.A5955D4E9648195F6B10DBE52BD552CC] - 21/04/2013 - 17:23:50 ---A- - C:\Windows\Prefetch\WINRAR.EXE-94E7D80C.pf
O45 - LFCP:[MD5.EF1A806B867A8E1BE367D05D855C73A5] - 21/04/2013 - 17:33:43 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.B02E137C1676668E481E1BC38AADA988] - 21/04/2013 - 17:33:43 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.C9BED256964C60EB2D9544EDCAB10613] - 21/04/2013 - 17:33:43 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.DAB1492F411AB5B4B936634226379904] - 21/04/2013 - 17:33:43 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.684B74B63F650A0ED911012B1D12E7F0] - 21/04/2013 - 17:36:32 ---A- - C:\Windows\Prefetch\MPC-HC.EXE-69B90F3F.pf
O45 - LFCP:[MD5.2D305774EE46F80D976EC664736115DD] - 21/04/2013 - 17:36:58 ---A- - C:\Windows\Prefetch\MEDIAINFO.EXE-39009265.pf
O45 - LFCP:[MD5.0E22253CF3BA1FDAD4BF0DF6FDBA1AEA] - 21/04/2013 - 17:42:25 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-ECB71776.pf
O45 - LFCP:[MD5.5BEE897BA9A3BD0AD512334242EA4FA0] - 21/04/2013 - 17:42:33 ---A- - C:\Windows\Prefetch\THUNDERBIRD.EXE-A0DA674F.pf
O45 - LFCP:[MD5.19ADB025A20C562495052D14ABD73E46] - 21/04/2013 - 17:46:50 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:[MD5.09EE1A5C2447762CFAB967950392D8D6] - 21/04/2013 - 17:48:23 ---A- - C:\Windows\Prefetch\FLASHUTIL32_11_6_602_180_PLUG-EC891B56.pf
O45 - LFCP:[MD5.2CE94F90ACD1FD818DDBDC5591BE87CC] - 21/04/2013 - 17:48:23 ---A- - C:\Windows\Prefetch\HPTASKBAR2.EXE-92C2D360.pf
O45 - LFCP:[MD5.372F6491390B4D36C16023EC8296707A] - 21/04/2013 - 17:48:23 ---A- - C:\Windows\Prefetch\HPTASKBAR3.EXE-A6188DE5.pf
O45 - LFCP:[MD5.01F6EDD4ADB01A54EF77371DFA375E32] - 21/04/2013 - 17:48:23 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.DE78B5511349E4CE472777A822F504FF] - 21/04/2013 - 17:48:23 ---A- - C:\Windows\Prefetch\UNSECAPP.EXE-A02905A6.pf
O45 - LFCP:[MD5.4557FE162323B53076BEAD04368229B2] - 21/04/2013 - 17:48:45 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-40DD444D.pf
O45 - LFCP:[MD5.257BC49281F720F7A31E0BFA92DF9565] - 21/04/2013 - 17:49:07 ---A- - C:\Windows\Prefetch\MOM.EXE-42E9F9DF.pf
O45 - LFCP:[MD5.A68AA62FF1CB9AE63BCD959B69436149] - 21/04/2013 - 17:49:08 ---A- - C:\Windows\Prefetch\CCC.EXE-B637C9BF.pf
O45 - LFCP:[MD5.DCF407996ED1F06FB0621DD2E90DCAC0] - 21/04/2013 - 17:49:08 ---A- - C:\Windows\Prefetch\MMLOADDRV.EXE-4072A3B8.pf
O45 - LFCP:[MD5.4A121758B521C66EC4630FBAF83E5AE7] - 21/04/2013 - 17:49:41 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf
O45 - LFCP:[MD5.21B45E76E81C5019D6583E2BAF0E78C4] - 21/04/2013 - 17:49:42 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-57D17DAF.pf
O45 - LFCP:[MD5.4602CAD30EC73D5F0B087DCD250C9CC9] - 21/04/2013 - 17:49:43 ---A- - C:\Windows\Prefetch\CSC.EXE-A3B8D95D.pf
O45 - LFCP:[MD5.04F51EEDDF500F67C68E863F7A15AB2C] - 21/04/2013 - 17:49:43 ---A- - C:\Windows\Prefetch\CVTRES.EXE-069169FB.pf
O45 - LFCP:[MD5.277E6C6A718F58585EB47449A51808A3] - 21/04/2013 - 17:49:53 ---A- - C:\Windows\Prefetch\IASTORDATAMGRSVC.EXE-C086B157.pf
O45 - LFCP:[MD5.4899EF691F786A9DD30CDDA9487B13EF] - 21/04/2013 - 17:49:53 ---A- - C:\Windows\Prefetch\LMS.EXE-8C70F87D.pf
O45 - LFCP:[MD5.DECF55E0B07CED00F9AA6ED0F30EDE65] - 21/04/2013 - 17:49:54 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-05F624AB.pf
O45 - LFCP:[MD5.7ABBF7F40FBCA577F40E8EA659F24DED] - 21/04/2013 - 17:49:58 ---A- - C:\Windows\Prefetch\UNS.EXE-E6E49771.pf
O45 - LFCP:[MD5.5C4B11A142DC4028CD6286FE0DD5444A] - 21/04/2013 - 17:50:05 ---A- - C:\Windows\Prefetch\HPCONNECTIONMANAGER.EXE-4032C2F3.pf
O45 - LFCP:[MD5.16DA6C7188B18AA0861D17B28FAB9E5C] - 21/04/2013 - 17:51:41 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf
O45 - LFCP:[MD5.2F713B5ACF30098AC329BD74D5EC51B7] - 21/04/2013 - 17:52:02 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-DE9673F9.pf
O45 - LFCP:[MD5.FDDF8C93DE6F9DC3B8441492036EEB36] - 21/04/2013 - 17:52:12 ---A- - C:\Windows\Prefetch\ADWCLEANER.EXE-9190A043.pf
O45 - LFCP:[MD5.BFAE8B3B6F0F6A91BE88C6A79F074C30] - 21/04/2013 - 17:52:58 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-E2C2633A.pf
O45 - LFCP:[MD5.FD7B329253372102848540CE02E73786] - 21/04/2013 - 18:00:47 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf
O45 - LFCP:[MD5.EB7387B56929C8EE4118A71B10AD2F3D] - 21/04/2013 - 18:00:57 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-02CC9EFF.pf
O45 - LFCP:[MD5.51393B8382E001F56CB09CA38B72F80D] - 21/04/2013 - 18:17:00 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-216D9C35.pf
O45 - LFCP:[MD5.3BE8D94911E65EA3EB36909903274E8B] - 21/04/2013 - 18:37:37 ---A- - C:\Windows\Prefetch\Layout.ini
O45 - LFCP:[MD5.2EFFF855CA69646CC238A3DE77D42D71] - 21/04/2013 - 18:47:39 ---A- - C:\Windows\Prefetch\CSC.EXE-BE9AC2DF.pf
O45 - LFCP:[MD5.413D3145907B126832293CB19A92E418] - 21/04/2013 - 18:47:39 ---A- - C:\Windows\Prefetch\CVTRES.EXE-2B9D810D.pf
O45 - LFCP:[MD5.54C4053F15C2320FAF1E1A9870740DBD] - 21/04/2013 - 18:47:40 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-230FC512.pf
O45 - LFCP:[MD5.7401DD6559E5C63BC6871C4C3C8E857A] - 21/04/2013 - 18:47:43 ---A- - C:\Windows\Prefetch\W32TM.EXE-1101AF41.pf
O45 - LFCP:[MD5.83B9266E3FCAD85BD3DFC40B2ACC6FD0] - 21/04/2013 - 18:47:47 ---A- - C:\Windows\Prefetch\SDIAGNHOST.EXE-8D72177C.pf
O45 - LFCP:[MD5.ECA4F125228C514DBD139CB39391BEBE] - 21/04/2013 - 18:47:47 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf
O45 - LFCP:[MD5.CCBE285CFC11ABA7FAC90043B662C9B8] - 21/04/2013 - 18:47:47 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf
O45 - LFCP:[MD5.818779E7885203F4E53EC8FB9AFED26B] - 21/04/2013 - 18:47:50 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf
O45 - LFCP:[MD5.A3F4E4F48645A210A6BF707D8D73DE66] - 21/04/2013 - 18:47:57 ---A- - C:\Windows\Prefetch\PING.EXE-7E94E73E.pf
O45 - LFCP:[MD5.402867C9F1919C5A20640686B6D2C83E] - 21/04/2013 - 18:54:11 ---A- - C:\Windows\Prefetch\FSWSCS.EXE-6B0A5CA9.pf
O45 - LFCP:[MD5.D35A563422AFC31C075F59CF11E35089] - 21/04/2013 - 18:55:00 ---A- - C:\Windows\Prefetch\COMMUNICATOR.EXE-DBCABFD0.pf
O45 - LFCP:[MD5.B02F96B5AA0BD89ADF0A6918DC7B8F2F] - 21/04/2013 - 18:55:10 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf
O45 - LFCP:[MD5.5A03C51680F3B0BD4CD00764E4C19C4F] - 21/04/2013 - 18:55:48 ---A- - C:\Windows\Prefetch\FIREFOX.EXE-18ACFCFF.pf
O45 - LFCP:[MD5.672AAAE1D3E7AC9B8FF932427A6EAD32] - 21/04/2013 - 18:55:59 ---A- - C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-F1B02F03.pf
O45 - LFCP:[MD5.44C33786E8EA58B07C54AFAC0B3ABBA7] - 21/04/2013 - 18:56:00 ---A- - C:\Windows\Prefetch\FLASHPLAYERPLUGIN_11_6_602_18-F01D2D2D.pf
O45 - LFCP:[MD5.50AABF584F11EE29B4165FDE4DFAC765] - 21/04/2013 - 18:56:01 ---A- - C:\Windows\Prefetch\AUDIODG.EXE-BDFD3029.pf
O45 - LFCP:[MD5.4C785812DF212746D00C075D605A3BFA] - 21/04/2013 - 18:57:11 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-C2F4EC7D.pf
O45 - LFCP:[MD5.28F9F7C4A485357DB6081F171C5148F4] - 21/04/2013 - 18:57:14 ---A- - C:\Windows\Prefetch\ZHPDIAG2.EXE-79CE7B72.pf
O45 - LFCP:[MD5.D5531C31CE79673A8A0AFB2AD1587565] - 21/04/2013 - 18:57:14 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-201554EA.pf
O45 - LFCP:[MD5.68914481B5618C7F44A5056D976A25DD] - 21/04/2013 - 18:57:30 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf
O45 - LFCP:[MD5.A37D39D541688FB4DE6F07F3FC65CBC2] - 21/04/2013 - 18:57:47 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-B0F8131B.pf
O45 - LFCP:[MD5.5E8CD0CAF888EAED7AA46983B2567398] - 21/04/2013 - 18:57:58 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf
O45 - LFCP:[MD5.97A99C9C3477BFFA517D9158C7F96115] - 21/04/2013 - 18:59:47 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-1050605776-950264177-1629886854-1001.db
O45 - LFCP:[MD5.A6AD20ED94B75A45205F50C9E8DD7D8E] - 21/04/2013 - 18:59:47 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-1050605776-950264177-1629886854-1001.db
O45 - LFCP:[MD5.0F02DF9811891A6AD12D533EB774B6E1] - 21/04/2013 - 19:00:00 ---A- - C:\Windows\Prefetch\LADS.EXE-046BC4A8.pf
O45 - LFCP:[MD5.7D95A85F64DD56F35B084C2134AB2108] - 21/04/2013 - 19:00:03 ---A- - C:\Windows\Prefetch\WSQMCONS.EXE-118B52B7.pf
O45 - LFCP:[MD5.788711A25F3F079E5942851EA12AFA9A] - 21/04/2013 - 19:00:33 ---A- - C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf
O45 - LFCP:[MD5.845BD760A6699CC2C87B4B8AA1F0D1B5] - 21/04/2013 - 19:00:34 ---A- - C:\Windows\Prefetch\NSLOOKUP.EXE-8DBC12C3.pf
O45 - LFCP:[MD5.D375D0842E6F14620A9519BAEA658803] - 21/04/2013 - 19:00:37 ---A- - C:\Windows\Prefetch\MBR.EXE-836B8DE9.pf
O45 - LFCP:[MD5.7309D3409DD3F7EBA8F77115CE261D5C] - 21/04/2013 - 19:00:38 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf
O45 - LFCP:[MD5.DAF519339B8B319F7A0433EFCAE24C14] - 21/04/2013 - 19:00:38 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-C0081E0D.pf
O45 - LFCP:[MD5.3FA4660E5DA3444CE69CD6A79F0D90AA] - 21/04/2013 - 19:00:39 ---A- - C:\Windows\Prefetch\MBRCHECK.EXE-2CA9EB2F.pf
O45 - LFCP:[MD5.26B4465B071C97CFE66925DC4DFB364B] - 21/04/2013 - 19:00:42 ---A- - C:\Windows\Prefetch\IGFXSRVC.EXE-96A493A4.pf
O45 - LFCP:[MD5.0BCCC434A38DBA452D0F399A45AB061F] - 21/04/2013 - 19:00:48 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf
O45 - LFCP:[MD5.B37A7440587239BF4A5686D4F8FFBF31] - 21/04/2013 - 19:00:51 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf
O45 - LFCP:[MD5.B2664ED2831384AC0F140885D8B20317] - 21/04/2013 - 19:00:51 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
O45 - LFCP:[MD5.7D16156F869A783BF0BA70B79D2EB199] - 21/04/2013 - 19:01:12 ---A- - C:\Windows\Prefetch\HPNETWORKCOMMUNICATOR.EXE-3E07D61A.pf
O45 - LFCP:[MD5.41EBCD50CF94685BDB837A9330A09CA3] - 21/04/2013 - 19:01:38 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-55A533F0.pf
O45 - LFCP:[MD5.CAD99FAF57E455C2B5F2B2A901531FF1] - 21/04/2013 - 19:01:47 ---A- - C:\Windows\Prefetch\ZHPHEP.EXE-EBD3B8D7.pf
O45 - LFCP:[MD5.3C7272FD8919823F997D0870FDA155E2] - 21/04/2013 - 19:01:56 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-A8DE6D5B.pf
O45 - LFCP:[MD5.711825E68CD0D18A31A7E208E363B020] - 21/04/2013 - 19:01:57 ---A- - C:\Windows\Prefetch\ZHPDIAG.EXE-0D117CAF.pf
O45 - LFCP:[MD5.02B61EC09BDF627605930A15BC879D76] - 21/04/2013 - 19:02:07 ---A- - C:\Windows\Prefetch\CMD.EXE-AC113AA8.pf
O45 - LFCP:[MD5.692B3B20F9C8F30431F6A10795173D37] - 21/04/2013 - 19:02:07 ---A- - C:\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf
O45 - LFCP:[MD5.6F6FC5182363CE17A99A02D349A3BF06] - 21/04/2013 - 19:02:07 ---A- - C:\Windows\Prefetch\CSCRIPT.EXE-0FB3F22C.pf
O45 - LFCP:[MD5.528807DAC58EC4C5624846C78E9037F0] - 21/04/2013 - 19:02:14 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-6768A320.pf
O45 - LFCP:[MD5.E0242811A19894C7BACD25E3678F534C] - 21/04/2013 - 19:02:15 ---A- - C:\Windows\Prefetch\PV.EXE-34B75B82.pf
O45 - LFCP:[MD5.0A3AA40A6C7702BCA457DB7338706D48] - 21/04/2013 - 19:02:16 ---A- - C:\Windows\Prefetch\SUBINACL.EXE-AB0CE9D9.pf
O45 - LFCP:[MD5.DE83DA0AA131FF9B9E6E89AAAE3A0EC7] - 21/04/2013 - 19:02:23 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-D8414F97.pf
O45 - LFCP:[MD5.01628ADFFF201A05C5C31AC0C28D11BC] - 21/04/2013 - 19:03:06 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-AD598958.pf



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "EnableShellExecuteHooks"=1



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.5C368F4B04ED2A923E6AFCA2D37BAFF5] - 27/05/2011 - 10:20:12 ---A- . (.Hewlett-Packard Company - HP Accelerometer.) -- C:\Windows\System32\Drivers\Accelerometer.sys   [43320]
O58 - SDL:[MD5.F87FBE8B104DF9C35CD52909B8D28A4A] - 23/02/2013 - 15:17:11 ---A- . (...) -- C:\Windows\SysWOW64\drivers\fsbts.sys   [33408]
~ Drivers:  Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 18/04/2013 - 06:58:41 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\1\4A\2C98Fd01   [36687]
O61 - LFC: 18/04/2013 - 06:58:41 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\D\5F\EB712d01   [56694]
O61 - LFC: 18/04/2013 - 09:00:46 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\1\B0\C2E8Cd01   [45662]
O61 - LFC: 18/04/2013 - 09:00:46 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\5\E2\567F3d01   [56301]
O61 - LFC: 18/04/2013 - 09:00:46 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\9\28\DE021d01   [64681]
O61 - LFC: 18/04/2013 - 09:00:46 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\A\92\F3805d01   [127436]
O61 - LFC: 18/04/2013 - 09:00:46 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\B\9F\84ED3d01   [29512]
O61 - LFC: 18/04/2013 - 09:00:46 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\C\40\54D5Ed01   [30343]
O61 - LFC: 18/04/2013 - 09:00:46 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\F\A6\34BFAd01   [53592]
O61 - LFC: 18/04/2013 - 09:01:02 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\0\AE\8F6EBd01   [24818]
O61 - LFC: 18/04/2013 - 09:01:02 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\1\C1\5A62Ad01   [20877]
O61 - LFC: 18/04/2013 - 09:01:02 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\E\BA\823EDd01   [21541]
O61 - LFC: 18/04/2013 - 09:43:30 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\1\0D\5D62Ed01   [66628]
O61 - LFC: 18/04/2013 - 09:43:30 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\4\A0\7AB7Cd01   [53165]
O61 - LFC: 18/04/2013 - 15:24:30 ---A- C:\Users\jean pierre\Downloads\EBOOK Multipliez toutes les plantes du jardin.pdf   [83131014]
O61 - LFC: 18/04/2013 - 15:27:47 ---A- C:\Users\jean pierre\AppData\Local\Temp\l1LuMy2q.rar.part   [0]
O61 - LFC: 18/04/2013 - 15:33:57 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\persdict.dat   [58]
O61 - LFC: 18/04/2013 - 15:38:27 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\pop.sfr-1.fr\Sent   [4721]
O61 - LFC: 18/04/2013 - 15:40:12 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\history.mab   [9577]
O61 - LFC: 18/04/2013 - 16:07:09 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\pop.sfr-1.fr\Sent.msf   [4466]
O61 - LFC: 18/04/2013 - 21:54:38 ---A- C:\Users\jean pierre\Downloads\emule\TrAcS2\scr.jpg   [237671]
O61 - LFC: 19/04/2013 - 06:55:51 ---A- C:\Users\jean pierre\Downloads\161.gif   [129891]
O61 - LFC: 19/04/2013 - 07:11:46 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\9\93\EA574d01   [45924]
O61 - LFC: 19/04/2013 - 10:49:36 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\0\FB\05138d01   [58925]
O61 - LFC: 19/04/2013 - 10:49:36 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\A\B3\1E483d01   [17031]
O61 - LFC: 19/04/2013 - 10:50:23 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\7\EF\54DC2d01   [61859]
O61 - LFC: 19/04/2013 - 10:50:23 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\F\12\62DECd01   [63180]
O61 - LFC: 19/04/2013 - 15:01:02 ---A- C:\Users\jean pierre\AppData\Roaming\Microsoft\Office\Recent\jardin 2013.LNK   [1170]
O61 - LFC: 19/04/2013 - 17:50:46 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\pop.sfr.fr\Inbox   [54884]
O61 - LFC: 19/04/2013 - 17:50:46 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\pop.sfr.fr\Trash   [231844]
O61 - LFC: 19/04/2013 - 17:51:12 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\A\52\8108Ed01   [76909]
O61 - LFC: 19/04/2013 - 17:51:29 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\pop.sfr.fr\Trash.msf   [8980]
O61 - LFC: 20/04/2013 - 06:45:03 ---A- C:\Users\jean pierre\AppData\Local\CrashDumps\firefox.exe.7076.dmp   [4560145]
O61 - LFC: 20/04/2013 - 07:14:03 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\pop.sfr.fr\Inbox.msf   [16286]
O61 - LFC: 20/04/2013 - 09:50:53 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\1\E2\9F7D9d01   [89034]
O61 - LFC: 20/04/2013 - 09:50:53 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\D\0D\84DCFd01   [85876]
O61 - LFC: 20/04/2013 - 09:52:27 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\8\0D\D77B9d01   [33747]
O61 - LFC: 20/04/2013 - 09:53:29 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\3\E5\CE54Bd01   [21096]
O61 - LFC: 20/04/2013 - 09:53:29 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\5\6F\651BFd01   [23865]
O61 - LFC: 20/04/2013 - 09:53:29 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\5\B3\C4BD6d01   [16620]
O61 - LFC: 20/04/2013 - 09:53:29 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\7\8F\2AF6Bd01   [17963]
O61 - LFC: 20/04/2013 - 09:53:29 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\B\D6\DFA41d01   [17588]
O61 - LFC: 20/04/2013 - 09:53:30 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\1\2B\E176Ad01   [21380]
O61 - LFC: 20/04/2013 - 09:53:30 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\4\45\00719d01   [22937]
O61 - LFC: 20/04/2013 - 09:53:30 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\5\01\CEDBAd01   [22937]
O61 - LFC: 20/04/2013 - 09:53:30 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\6\F7\C4956d01   [22942]
O61 - LFC: 20/04/2013 - 09:53:30 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\7\B2\3DED8d01   [19064]
O61 - LFC: 20/04/2013 - 09:53:30 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\9\F1\7F13Cd01   [22937]
O61 - LFC: 20/04/2013 - 09:53:30 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\A\D9\D5DF7d01   [22895]
O61 - LFC: 20/04/2013 - 09:53:30 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\B\D3\F44BBd01   [20531]
O61 - LFC: 20/04/2013 - 09:53:31 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\2\9A\C4E3Ad01   [50459]
O61 - LFC: 20/04/2013 - 09:53:31 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\3\37\00E86d01   [31424]
O61 - LFC: 20/04/2013 - 09:54:40 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\3\F2\9D6F8d01   [28012]
O61 - LFC: 20/04/2013 - 09:58:29 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\cookies.sqlite   [524288]
O61 - LFC: 20/04/2013 - 10:01:57 ---A- C:\Users\jean pierre\Downloads\Magazine MAXI CUISINE HS N.3 - Special cuisine italienne.pdf   [36148184]
O61 - LFC: 20/04/2013 - 12:19:02 ---A- C:\Users\jean pierre\AppData\Local\Temp\WER1F14.tmp.WERInternalMetadata.xml   [3378]
O61 - LFC: 20/04/2013 - 14:53:26 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\addons.sqlite   [524288]
O61 - LFC: 20/04/2013 - 14:59:57 ---A- C:\Users\jean pierre\AppData\Roaming\Microsoft\Office\Recent\Peinture a la Ferme.LNK   [1089]
O61 - LFC: 20/04/2013 - 15:00:52 ---A- C:\Users\jean pierre\AppData\Roaming\Microsoft\Office\Recent\Photos exceptionnelles.LNK   [1104]
O61 - LFC: 20/04/2013 - 15:00:52 --H-- C:\Users\jean pierre\AppData\Roaming\Microsoft\Office\Recent\index.dat   [1397]
O61 - LFC: 20/04/2013 - 15:07:15 ---A- C:\Users\jean pierre\AppData\Local\CrashDumps\firefox.exe.5412.dmp   [4839857]
O61 - LFC: 20/04/2013 - 21:37:56 ---A- C:\Users\jean pierre\Pictures\2013-04-21 Romy avril 2013\Romy avril 2013 006.JPG   [1399051]
O61 - LFC: 20/04/2013 - 21:38:45 ---A- C:\Users\jean pierre\Pictures\2013-04-21 Romy avril 2013\Romy avril 2013 007.JPG   [2778770]
O61 - LFC: 20/04/2013 - 21:39:44 ---A- C:\Users\jean pierre\Pictures\2013-04-21 Romy avril 2013\Romy avril 2013 008.JPG   [2771709]
O61 - LFC: 20/04/2013 - 21:40:04 ---A- C:\Users\jean pierre\Pictures\2013-04-21 Romy avril 2013\Romy avril 2013 009.JPG   [2555712]
O61 - LFC: 20/04/2013 - 21:40:21 ---A- C:\Users\jean pierre\Pictures\2013-04-21 Romy avril 2013\Romy avril 2013 010.JPG   [2692922]
O61 - LFC: 21/04/2013 - 08:04:23 ---A- C:\Users\jean pierre\AppData\Local\Temp\Favorites1.png   [3101]
O61 - LFC: 21/04/2013 - 08:04:23 ---A- C:\Users\jean pierre\AppData\Local\Temp\Favorites2.png   [2661]
O61 - LFC: 21/04/2013 - 08:04:24 ---A- C:\Users\jean pierre\AppData\Local\Temp\Mails1.png   [2982]
O61 - LFC: 21/04/2013 - 08:04:24 ---A- C:\Users\jean pierre\AppData\Local\Temp\Mails2.png   [2193]
O61 - LFC: 21/04/2013 - 08:04:24 ---A- C:\Users\jean pierre\AppData\Local\Temp\Mails3.png   [2193]
O61 - LFC: 21/04/2013 - 09:31:53 ---A- C:\Users\jean pierre\AppData\Local\CrashDumps\firefox.exe.3208.dmp   [4557782]
O61 - LFC: 21/04/2013 - 09:58:54 ---A- C:\Users\jean pierre\AppData\Local\Temp\qiI7YPdr.pdf.part   [0]
O61 - LFC: 21/04/2013 - 12:15:56 ---A- C:\Users\jean pierre\AppData\Local\Diagnostics\2126795493\2013042111.000\results.xsl   [49097]
O61 - LFC: 21/04/2013 - 12:16:19 ---A- C:\Users\jean pierre\AppData\Local\Diagnostics\2126795493\2013042111.000\DeviceDiagnostic.0.debugreport.xml   [1350]
O61 - LFC: 21/04/2013 - 12:16:19 ---A- C:\Users\jean pierre\AppData\Local\Diagnostics\2126795493\2013042111.000\NetworkDiagnostics.0.debugreport.xml   [1323]
O61 - LFC: 21/04/2013 - 12:16:19 ---A- C:\Users\jean pierre\AppData\Local\Diagnostics\2126795493\2013042111.000\PrinterDiagnostic.0.debugreport.xml   [19375]
O61 - LFC: 21/04/2013 - 12:16:19 ---A- C:\Users\jean pierre\AppData\Local\Diagnostics\2126795493\2013042111.000\ResultReport.xml   [54728]
O61 - LFC: 21/04/2013 - 12:16:19 ---A- C:\Users\jean pierre\AppData\Local\Diagnostics\2126795493\2013042111.000\results.xml   [323]
O61 - LFC: 21/04/2013 - 12:17:08 ---A- C:\Users\jean pierre\AppData\Local\CrashDumps\firefox.exe.10096.dmp   [4557357]
O61 - LFC: 21/04/2013 - 12:22:22 ---A- C:\Users\jean pierre\AppData\Local\CrashDumps\dllhost.exe.9500.dmp   [4218065]
O61 - LFC: 21/04/2013 - 12:25:21 ---A- C:\Users\jean pierre\AppData\Local\CrashDumps\dllhost.exe.10004.dmp   [4124826]
O61 - LFC: 21/04/2013 - 12:36:07 ---A- C:\Users\jean pierre\AppData\Local\Diagnostics\2126795493\2013042111.001\results.xsl   [49097]
O61 - LFC: 21/04/2013 - 12:36:15 ---A- C:\Users\jean pierre\AppData\Local\Diagnostics\2126795493\2013042111.001\DeviceDiagnostic.0.debugreport.xml   [1350]
O61 - LFC: 21/04/2013 - 12:36:15 ---A- C:\Users\jean pierre\AppData\Local\Diagnostics\2126795493\2013042111.001\NetworkDiagnostics.0.debugreport.xml   [1323]
O61 - LFC: 21/04/2013 - 12:36:15 ---A- C:\Users\jean pierre\AppData\Local\Diagnostics\2126795493\2013042111.001\PrinterDiagnostic.0.debugreport.xml   [2812]
O61 - LFC: 21/04/2013 - 12:36:15 ---A- C:\Users\jean pierre\AppData\Local\Diagnostics\2126795493\2013042111.001\ResultReport.xml   [54422]
O61 - LFC: 21/04/2013 - 12:36:15 ---A- C:\Users\jean pierre\AppData\Local\Diagnostics\2126795493\2013042111.001\results.xml   [323]
O61 - LFC: 21/04/2013 - 12:36:15 ---A- C:\Users\jean pierre\AppData\Local\Diagnostics\2126795493\latest.cab   [14453]
O61 - LFC: 21/04/2013 - 12:43:28 ---A- C:\Users\jean pierre\AppData\Local\HP\AtInstall\HPDeviceSetupTimeSizeLog.txt   [2483]
O61 - LFC: 21/04/2013 - 12:43:39 ---A- C:\Users\jean pierre\AppData\Local\HP\AtInstall\HPSoftwareTimeSizeLog.txt   [1460]
O61 - LFC: 21/04/2013 - 12:56:11 ---A- C:\Users\jean pierre\AppData\Local\Temp\FXSTIFFDebugLogFile.txt   [0]
O61 - LFC: 21/04/2013 - 12:58:52 ---A- C:\Users\jean pierre\AppData\Local\Temp\MATS-Temp\Results\Imprimante_result.cab   [19062]
O61 - LFC: 21/04/2013 - 12:59:18 ---A- C:\Users\jean pierre\AppData\Local\CrashDumps\WLXPhotoGallery.exe.7132.dmp   [5391531]
O61 - LFC: 21/04/2013 - 12:59:18 ---A- C:\Users\jean pierre\AppData\Local\Windows Live\uxcore_WLXPhotoGallery_00.etl   [4096]
O61 - LFC: 21/04/2013 - 13:00:46 ---A- C:\Users\jean pierre\AppData\Local\CrashDumps\dllhost.exe.2448.dmp   [3940513]
O61 - LFC: 21/04/2013 - 14:11:55 ---A- C:\Users\jean pierre\AppData\Roaming\Adobe\Acrobat\11.0\JSCache\GlobSettings   [24]
O61 - LFC: 21/04/2013 - 14:11:56 ---A- C:\Users\jean pierre\AppData\Roaming\Adobe\Acrobat\11.0\TMDocs.sav   [36]
O61 - LFC: 21/04/2013 - 14:11:56 ---A- C:\Users\jean pierre\AppData\Roaming\Adobe\Acrobat\11.0\TMGrpPrm.sav   [54]
O61 - LFC: 21/04/2013 - 14:19:20 ---A- C:\Users\jean pierre\AppData\Local\CrashDumps\dllhost.exe.2328.dmp   [4194537]
O61 - LFC: 21/04/2013 - 14:20:19 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\E\70\C3329d01   [28589]
O61 - LFC: 21/04/2013 - 14:20:19 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\E\86\2ACABd01   [24196]
O61 - LFC: 21/04/2013 - 14:20:19 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\F\0B\7F5A3d01   [26738]
O61 - LFC: 21/04/2013 - 14:20:19 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\F\63\1DC79d01   [44391]
O61 - LFC: 21/04/2013 - 14:20:20 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\3\73\69E62d01   [227702]
O61 - LFC: 21/04/2013 - 14:20:20 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\4\0D\4C327d01   [24530]
O61 - LFC: 21/04/2013 - 14:20:20 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\5\6F\C4BAAd01   [27183]
O61 - LFC: 21/04/2013 - 14:20:20 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\9\E9\924DBd01   [92713]
O61 - LFC: 21/04/2013 - 14:31:59 ---A- C:\Users\jean pierre\AppData\Local\CrashDumps\dllhost.exe.7216.dmp   [3792316]
O61 - LFC: 21/04/2013 - 15:24:28 ---A- C:\Users\jean pierre\Downloads\ZHPDiag2.exe   [5589503]
O61 - LFC: 21/04/2013 - 16:41:23 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\E\C5\190DCd01   [63519]
O61 - LFC: 21/04/2013 - 16:45:23 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\5\A3\B681Dd01   [33747]
O61 - LFC: 21/04/2013 - 16:45:23 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\blocklist.xml   [33747]
O61 - LFC: 21/04/2013 - 17:04:17 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\pop.sfr.fr\Sent   [105886157]
O61 - LFC: 21/04/2013 - 17:04:29 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\directoryTree.json   [36]
O61 - LFC: 21/04/2013 - 17:04:33 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\permissions.sqlite   [65536]
O61 - LFC: 21/04/2013 - 17:04:34 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\abook.mab   [2634]
O61 - LFC: 21/04/2013 - 17:26:14 ---A- C:\Users\jean pierre\Downloads\adwcleaner.exe   [613083]
O61 - LFC: 21/04/2013 - 17:27:16 ---A- C:\Users\jean pierre\AppData\Local\Temp\emCH+3Xh.exe.part   [613083]
O61 - LFC: 21/04/2013 - 17:36:31 ---A- C:\Users\jean pierre\AppData\Roaming\Media Player Classic\default.mpcpl   [109]
O61 - LFC: 21/04/2013 - 17:42:23 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\parent.lock   [0]
O61 - LFC: 21/04/2013 - 17:42:27 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\prefs.js   [17390]
O61 - LFC: 21/04/2013 - 17:42:48 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\pop.sfr.fr\popstate.dat   [216]
O61 - LFC: 21/04/2013 - 17:43:09 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\pop.sfr-1.fr\Inbox   [17859294]
O61 - LFC: 21/04/2013 - 17:43:09 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\pop.sfr-1.fr\Trash   [65642955]
O61 - LFC: 21/04/2013 - 17:43:09 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\pop.sfr-1.fr\popstate.dat   [1067]
O61 - LFC: 21/04/2013 - 17:43:14 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\global-messages-db.sqlite   [4096000]
O61 - LFC: 21/04/2013 - 17:43:36 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\pop.sfr.fr\Sent.msf   [6967]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\_CACHE_001_   [1180404]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\_CACHE_002_   [3755355]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\_CACHE_003_   [5490827]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\Cache\_CACHE_MAP_   [65812]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Local\Thunderbird\Profiles\e8ra5cco.default\_CACHE_CLEAN_   [1]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\pop.sfr-1.fr\Inbox.msf   [82890]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\pop.sfr-1.fr\Trash.msf   [1850792]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\smart mailboxes\Inbox.msf   [1709]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\Mail\smart mailboxes\Trash.msf   [1658]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\cert8.db   [65536]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\folderTree.json   [387]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\key3.db   [16384]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\localstore.rdf   [13636]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\panacea.dat   [4642]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\session.json   [385]
O61 - LFC: 21/04/2013 - 17:43:37 ---A- C:\Users\jean pierre\AppData\Roaming\Thunderbird\Profiles\e8ra5cco.default\virtualFolders.dat   [478]
O61 - LFC: 21/04/2013 - 17:46:40 --HA- C:\Users\jean pierre\AppData\Local\IconCache.db   [8842667]
O61 - LFC: 21/04/2013 - 17:48:58 ---A- C:\Users\jean pierre\AppData\Local\ATI\ACE\Manifest.Bin   [29689]
O61 - LFC: 21/04/2013 - 17:48:58 ---A- C:\Users\jean pierre\AppData\Local\ATI\ACE\Manifest.xml   [21587]
O61 - LFC: 21/04/2013 - 17:49:43 ---A- C:\Users\jean pierre\AppData\Local\ATI\ACE\Profiles.xml   [7375]
~ 11 Fichiers temporaires (Temporary files)



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS:  Scanned in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 28/12/2011 - C:\Windows\system32\drivers\afd.sys (AFD)  .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - 01/10/2011 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag)  .(.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\atapi.sys (atapi)  .(.Microsoft Corporation - ATAPI IDE Miniport Driver.) - LEGACY_ATAPI
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\Beep.sys (Beep)  .(.Microsoft Corporation - BEEP Driver.) - LEGACY_BEEP
O64 - Services: CurCS - 04/07/2012 - C:\Windows\system32\browser.dll (bowser)  .(.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) - LEGACY_BOWSER
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\cdfs.sys (cdfs)  .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\clfs.sys (CLFS)  .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\cng.sys (CNG)  .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\dfsc.sys (DfsC)  .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
O64 - Services: CurCS - 22/12/2009 - C:\Windows\System32\drivers\dgderdrv.sys (dgderdrv)  .(.Devguru Co., Ltd - Device Error Recovery SDK(x64).) - LEGACY_DGDERDRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\discache.sys (discache)  .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
O64 - Services: CurCS - 11/11/2011 - C:\Windows\system32\drivers\dxgkrnl.sys (DXGKrnl)  .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
O64 - Services: CurCS - 27/02/2013 - Pas de propriétaire (F-Secure Gatekeeper)  .(...) - LEGACY_F-SECURE_GATEKEEPER
O64 - Services: CurCS - 18/11/2009 - C:\Program Files (x86)\Pack Sérénité\Sécurité\HIPS\drivers\fshs.sys (F-Secure HIPS)  .(.F-Secure Corporation - HIPS 64-bit kernel module.) - LEGACY_F-SECURE_HIPS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\fastfat.sys (fastfat)  .(.Microsoft Corporation - Fast FAT File System Driver.) - LEGACY_FASTFAT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\fileinfo.sys (FileInfo)  .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\fltmgr.sys (FltMgr)  .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR
O64 - Services: CurCS - 23/02/2013 - Pas de propriétaire (fsbts)  .(...) - LEGACY_FSBTS
O64 - Services: CurCS - 23/02/2013 - C:\Windows\System32\drivers\fses.sys (FSES)  .(.F-Secure Corporation - F-Secure Email Interceptor.) - LEGACY_FSES
O64 - Services: CurCS - 18/11/2009 - C:\Windows\System32\drivers\fsdfw.sys (FSFW)  .(.F-Secure Corporation - F-Secure Internet Shield Driver.) - LEGACY_FSFW
O64 - Services: CurCS - 18/11/2009 - Pas de propriétaire (fsvista)  .(...) - LEGACY_FSVISTA
O64 - Services: CurCS - 24/01/2013 - C:\Windows\system32\drivers\fvevol.sys (fvevol)  .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\http.sys (HTTP)  .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy)  .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
O64 - Services: CurCS - 09/08/2011 - C:\Windows\System32\DRIVERS\igdpmd64.sys (intelkmd)  .(.Intel Corporation - Intel Graphics Kernel Mode Driver.) - LEGACY_INTELKMD
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\ksecdd.sys (KSecDD)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\ksecpkg.sys (KSecPkg)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\lltdio.sys (lltdio)  .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\luafv.sys (luafv)  .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\mountmgr.sys (mountmgr)  .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\FirewallAPI.dll (mpsdrv)  .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb10)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb20)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
O64 - Services: CurCS - 21/11/2010 - C:\Windows\System32\drivers\msahci.sys (msahci)  .(.Microsoft Corporation - MS AHCI 1.0 Standard Driver.) - LEGACY_MSAHCI
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\msisadrv.sys (msisadrv)  .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\mup.sys (Mup)  .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\nwifi.sys (NativeWifiP)  .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP
O64 - Services: CurCS - 22/08/2012 - C:\Windows\system32\drivers\ndis.sys (NDIS)  .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
O64 - Services: CurCS - 21/11/2010 - C:\Windows\System32\DRIVERS\ndisuio.sys (Ndisuio)  .(.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\netbios.sys (NetBIOS)  .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\netbt.sys (NetBT)  .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy)  .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\pcw.sys (pcw)  .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\peauth.sys (PEAUTH)  .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
O64 - Services: CurCS - 21/11/2010 - C:\Windows\System32\drivers\pacer.sys (Psched)  .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (rdbss)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD)  .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD)  .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP)  .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\rspndr.sys (rspndr)  .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\spldr.sys (spldr)  .(.Microsoft Corporation - loader for security processor.) - LEGACY_SPLDR
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\srvsvc.dll (srv)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\srvsvc.dll (srv2)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
O64 - Services: CurCS - 11/11/2011 - C:\Windows\System32\DRIVERS\srvnet.sys (srvnet)  .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\tcpipcfg.dll (Tcpip)  .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP
O64 - Services: CurCS - 03/10/2012 - C:\Windows\System32\drivers\tcpipreg.sys (tcpipreg)  .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\tcpipcfg.dll (tdx)  .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX
O64 - Services: CurCS - 22/12/2009 - C:\Windows\system32\Drivers\TFsExDisk.sys (TFsExDisk)  .(.Teruten Inc - File System Mini Filter Drvier.) - LEGACY_TFSEXDISK
O64 - Services: CurCS - 21/11/2010 - C:\Windows\System32\DRIVERS\udfs.sys (udfs)  .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\vga.sys (VgaSave)  .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\volmgrx.sys (volmgrx)  .(.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) - LEGACY_VOLMGRX
O64 - Services: CurCS - 11/11/2011 - C:\Windows\System32\drivers\volsnap.sys (volsnap)  .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\vwififlt.sys (vwififlt)  .(.Microsoft Corporation - Virtual WiFi Filter Driver.) - LEGACY_VWIFIFLT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\rascfg.dll (Wanarpv6)  .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6
O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\Wdf01000.sys (Wdf01000)  .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\wfplwf.sys (WfpLwf)  .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF
O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\WudfPf.sys (WudfPf)  .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKLM\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys:  Scanned in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {8C1C4555-A52D-4614-949A-B81F3C82363D} - (Propositions de recherche Amazon.fr) - http://www.amazon.fr
O69 - SBI: SearchScopes [HKCU] {B224AA02-F7C8-3A2B-859F-560B80767E4A} - (Yahoo!) - http://kl.startnow.com
O69 - SBI: SearchScopes [HKCU] {b7fca997-d0fb-4fe0-8afd-255e89cf9671} - (Yahoo) - http://fr.search.yahoo.com
O69 - SBI: SearchScopes [HKCU] {d43b3890-80c7-4010-a95d-1e77b5924dc3} - (Wikipedia) - http://fr.wikipedia.org
O69 - SBI: SearchScopes [HKCU] {D944BB61-2E34-4DBF-A683-47E505C587DC} - (eBay) - http://rover.ebay.com
~ Keys:  Scanned in 00mn 00s



---\\ Crack & Keygen Files (O82)
C:\Users\jean pierre\Desktop\Nouveau dossier\jardin\jeux\Easyusetools_for_Keygen.rar
C:\Users\jean pierre\Desktop\Nouveau dossier\jardin\jeux\Easyusetools_for_Keygen.rar
~ Files:  Scanned in 00mn 15s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll   [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll   [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll   [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll   [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll   [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll   [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll   [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll   [2428952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll   [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [70656]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll   [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll   [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll   [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll   [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [100864]



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.0E816F0CA91F67FDD1C57B5C3BC4F77E] [SPRF][24/02/2013] (.DivX, LLC - DivX Setup.) -- C:\Users\jean pierre\AppData\Local\Temp\DivXSetup.exe   [934208]
[MD5.171F1BB73D0238A7A56126D3459ECDCD] [SPRF][15/10/2008] (...) -- C:\Users\jean pierre\AppData\Local\Temp\Extract.exe   [50432]
[MD5.D4C28DF4DDF92C4D44D195A6E50AEB58] [SPRF][27/02/2013] (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller 11.6 r602.) -- C:\Users\jean pierre\AppData\Local\Temp\fp_pl_pfs_installer.exe   [16473456]
[MD5.ED9745E95419AD06F460A6D0A2DF1102] [SPRF][18/11/2009] (.F-Secure Corporation - F-Secure Product Information DLL.) -- C:\Users\jean pierre\AppData\Local\Temp\fsprod.dll   [192936]
[MD5.E183E76900263563E360CB31C4AB4022] [SPRF][05/02/2010] (.F-Secure Corporation - F-Secure Setup File Management DLL.) -- C:\Users\jean pierre\AppData\Local\Temp\fssfm.dll   [356776]
[MD5.9D10F99A6712E28F8ACD5641E3A7EA6B] [SPRF][09/06/2010] (.Microsoft Corporation - Office Source Engine.) -- C:\Users\jean pierre\AppData\Local\Temp\ose00000.exe   [149352]
[MD5.ED4A75C4516A229EB6143E29018C1C6D] [SPRF][05/02/2010] (.F-Secure Corporation - F-Secure Setup preconfigurator.) -- C:\Users\jean pierre\AppData\Local\Temp\preconfig.exe   [184744]
[MD5.F12DEEAFFE4DDB3C2BDDE9A5CBA3340D] [SPRF][24/02/2013] (.Hewlett Packard Inc - HP Software Framework.) -- C:\Users\jean pierre\AppData\Local\Temp\SP56878.exe   [6600328]
[MD5.BC49F02DEA03EDF87483823C9182F732] [SPRF][01/02/2013] (.Hewlett-Packard - Pas de description.) -- C:\Users\jean pierre\AppData\Local\Temp\SP57232.exe   [9933608]
[MD5.53490613D7362803ADAA9B9CD7D293F9] [SPRF][08/04/2013] (.Hewlett-Packard - Pas de description.) -- C:\Users\jean pierre\AppData\Local\Temp\sp58915.exe   [41580520]
[MD5.239CB72E0605A43BF856BCD49712D1FA] [SPRF][27/09/2012] (.Hewlett-Packard Company - HP Support Assistant Uninstaller.) -- C:\Users\jean pierre\AppData\Local\Temp\UninstallHPSA.exe   [114080]
[MD5.ED9C141309C79B1C87777AC62DAF92C3] [SPRF][24/02/2013] (...) -- C:\Users\jean pierre\AppData\Local\Temp\wajam_install.exe   [444056]  =>Toolbar.Wajam
~ Files:  Scanned in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-TCP-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-DCOM-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-RAServer-Out-TCP-NoScope-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-RAServer-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe
O87 - FAEL: "CoreNet-DNS-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-IPHTTPS-Out" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-P2PHost-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-In-TCP" | In - None - P6 - TRUE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "RVM-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-VDS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-VDS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-WMP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-WMP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "SNMPTRAP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "SNMPTRAP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "WPDMTP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{A6AB1600-1046-49AE-A631-0FC3B058AD39}" | In - None - P6 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O87 - FAEL: "{1CEF2013-2A1A-43FF-A974-77615389DC15}" |In - Domain - P6 - TRUE | .(...) -- C:\Windows\system32\ezSharedSvcHost.exe (.not file.)
O87 - FAEL: "{0D5AEF27-0446-496D-B52C-94E0BCAF5A7F}" | In - Domain - P6 - TRUE | .(.EasyBits Software AS - EasyBits Magic Desktop for Kids.) -- C:\Program Files (x86)\EasyBits For Kids\ezDesktop.exe
O87 - FAEL: "MCX-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-QWave-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-MCX2SVC-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-Prov-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - MCX2 Provisioning library.) -- C:\Windows\ehome\mcx2prov.exe
O87 - FAEL: "MCX-PlayTo-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-McrMgr-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Media Center Extender Manager.) -- C:\Windows\ehome\mcrmgr.exe
O87 - FAEL: "MCX-PlayTo-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-FDPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "{7C95EF18-AE41-47C5-82C9-C81AD16BCE69}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{2DEC4F53-82C5-4662-9174-4BFD6AE31A2A}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{F6AEAD7A-F03F-4B34-A436-D2BA64763477}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{B8C9E61B-F0DE-4483-B85A-54A07FFF1385}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{AA91112C-AC3A-4A4E-AC89-EB9F4E9108DF}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{20201DE4-1AA5-48E8-A6F8-ED244C55550C}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{468B7AF7-C0FC-4262-85B8-95A58B467150}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{0DDE2D12-DC2F-435A-8980-D988DB3208DC}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{453D8309-BADB-4605-82A6-8B59F2B5186D}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{62389E86-A918-44E1-B8C1-3946A0D3553F}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{3F2F2311-E797-4065-8DBF-6C59A5BAA152}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{F641AF5C-0FDE-4610-8C9F-6913B0A1D1F0}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{6AFAC46B-86CC-4D85-B38E-EC9DAE9B59EC}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{36D49A51-4FD9-40ED-B53D-FEA590557C78}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{EA3A56EE-EE56-4348-856F-A0ED0EFDBF33}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{3E25C92E-9A95-4EC7-8C34-ED9D03B24474}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{67E9E7E2-605A-4789-B208-F9D12335FF9A}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{AF67420D-B1A2-441C-8C58-92E57CA3BE65}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "{030C83B9-DC7A-4193-9950-4AF5E2E56D04}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{097ADF0F-FBFC-46BD-8457-E0A738AE15B6}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{A9D14EA9-146A-45B1-9007-1B0E0DE61EEC}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Microsoft SkyDrive.) -- C:\Users\jean pierre\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
O87 - FAEL: "{0965777D-8352-4950-817F-F65422351CF1}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Communications Platform.) -- C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
O87 - FAEL: "{81F7ED24-D1F3-494E-B3FB-4A91B58B9858}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O87 - FAEL: "{9776E9A2-6637-45C8-9897-C2528C84D864}" | In - None - P17 - TRUE | .(.Hewlett-Packard Co. - DeviceSetup.exe.) -- C:\Program Files\HP\HP Photosmart 6510 series\Bin\DeviceSetup.exe
O87 - FAEL: "{7110755D-CC14-40BF-9758-D436473CEE49}" | In - None - P17 - TRUE | .(.Hewlett-Packard Co. - HPNetworkCommunicator.) -- C:\Program Files\HP\HP Photosmart 6510 series\Bin\HPNetworkCommunicator.exe
O87 - FAEL: "{A98BD3B0-66CC-4E79-B745-9229BE5979C2}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{FDE03A4C-1755-460E-98F4-3595A0C489A1}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{EA6B5BA9-679A-4F0E-BA86-B94BF81E6A71}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Microsoft OneNote.) -- C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.exe
O87 - FAEL: "{47DF215F-AAF7-4394-B0FC-A3ED98E31D42}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Microsoft OneNote.) -- C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.exe
O87 - FAEL: "{4451AA7D-F977-4919-9AEA-0CFEC930B838}" | In - Private - P6 - TRUE | .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\Windows\SysWOW64\muzapp.exe
O87 - FAEL: "{CB048297-2554-4A3A-8252-9C6F718C6A70}" | In - Private - P17 - TRUE | .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\Windows\SysWOW64\muzapp.exe



---\\ Scan Additionnel (O88)
Database Version : v2.11632 - (20/04/2013)
Clés trouvées (Keys found) : 5
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 1
Fichiers trouvés  (Files found) : 1

[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS]   =>Toolbar.Bing
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32]   =>Toolbar.Bing
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]   =>Toolbar.Bing
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]   =>Toolbar.Bing
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]   =>Toolbar.Bing
C:\Users\jean pierre\AppData\Local\Temp\Installer   =>Adware.InstallPedia
C:\Users\jean pierre\AppData\Local\Temp\wajam_install.exe  =>Toolbar.Wajam
~ Additionnel Scan: 219770 Items scanned in 00mn 12s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "0694AF70830BBE9498B1F95939A05A44" . (.HP Customer Experience Enhancements.) -- C:\Windows\Installer\{07FA4960-B038-49EB-891B-9F95930AA544}\ARPPRODUCTICON.exe
O90 - PUC: "0D57E1FBFA7EAEB4F9CB65F7C045DB9F" . (.HP Launch Box.) -- C:\Windows\Installer\{BF1E75D0-E7AF-4BEA-9FBC-567F0C54BDF9}\_853F67D554F05449430E7E.exe
O90 - PUC: "1A8032144B37B62A758AEB28A7ADB99F" . (.Catalyst Control Center Profiles Mobile.) -- C:\Windows\Installer\{412308A1-73B4-A26B-57A8-BE827ADA9BF9}\ARPPRODUCTICON.exe
O90 - PUC: "1ADB7B61769BD2D4B8721E72722C3805" . (.HP CoolSense.) -- C:\Windows\Installer\{16B7BDA1-B967-4D2D-8B27-E12727C28350}\_853F67D554F05449430E7E.exe
O90 - PUC: "1B641C2DD849FE743878D5C1B689F0C7" . (.Windows Live Writer.) -- C:\Windows\Installer\{D2C146B1-948D-47EF-8387-5D1C6B980F7C}\ApplicationIcon.ico
O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon
O90 - PUC: "2A7527EE2A93F2D4D9CA9F2FB5A81E8D" . (.Skype™ 5.10.) -- C:\Windows\Installer\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}\SkypeIcon.exe
O90 - PUC: "2C1A65825C073CE4FA7F5E5BE155032A" . (.HP Client Services.) -- C:\Windows\Installer\{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}\ARPPRODUCTICON.exe
O90 - PUC: "2FA471971BC65F2489E166CD4A39190D" . (.Validity WBF DDK.) -- C:\Windows\Installer\{79174AF2-6CB1-42F5-981E-66DCA49391D0}\ValidityLogo.ico
O90 - PUC: "46E5DCBD973784644944A85685CD6B41" . (.HP Recovery Manager.) -- C:\Windows\Installer\{DBCD5E64-7379-4648-9444-8A6558DCB614}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "5951D032AD753394C8E4737579BE7B1E" . (.Bluetooth Win7 Suite (64).) -- C:\Windows\Installer\{230D1595-57DA-4933-8C4E-375797EBB7E1}\ARPPRODUCTICON.exe
O90 - PUC: "5AACF56B6A3FF3B4BAEEBC2C0B5897B6" . (.HP Connection Manager.) -- C:\Windows\Installer\{B65FCAA5-F3A6-4B3F-ABEE-CBC2B085796B}\ARPPRODUCTICON.exe
O90 - PUC: "5F68A10C7E65F101B99C3E1F20E57B97" . (.Intel(R) Identity Protection Technology 1.1.2.0.) -- C:\Windows\Installer\{C01A86F5-56E7-101F-9BC9-E3F1025EB779}\ARPPRODUCTICON.exe
O90 - PUC: "68AB67CA7DA76301B744BA0000000010" . (.Adobe Reader XI (11.0.02) - Français.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico
O90 - PUC: "79739A518C075C7439C11057395BA8E7" . (.HP Software Framework.) -- C:\Windows\Installer\{15A93797-70C8-47C5-931C-017593B58A7E}\app_1.exe
O90 - PUC: "7976FA706FC0BBFFDF3ECC153D5B3F24" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{07AF6797-0CF6-FFBB-FDE3-CC51D3B5F342}\ARPPRODUCTICON.exe
O90 - PUC: "7B65D4CC81F6B0747843BADC57CB4F1F" . (.HP Auto.) -- C:\Windows\Installer\{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}\ARPPRODUCTICON.exe
O90 - PUC: "7C43C21609E58D74B9C5F017D78D7262" . (.swMSM.) -- C:\Windows\Installer\{612C34C7-5E90-47D8-9B5C-0F717DD82726}\ARPPRODUCTICON.exe
O90 - PUC: "7C87544E76644214B82C1116CB5A9487" . (.HP Power Manager.) -- C:\Windows\Installer\{E44578C7-4667-4124-8BC2-1161BCA54978}\_853F67D554F05449430E7E.exe
O90 - PUC: "82532580F2ABBB34783E52C28081279B" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{08523528-BA2F-43BB-87E3-252C081872B9}\ARPPRODUCTICON.exe
O90 - PUC: "883658EADAFA357418FD9DB6910D1AC7" . (.HP Setup Manager.) -- C:\Windows\Installer\{AE856388-AFAD-4753-81DF-D96B19D0A17C}\ARPPRODUCTICON.exe
O90 - PUC: "8994BF104C33134458DE70E9E3FE7ED5" . (.YouCam.) -- C:\Windows\Installer\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\ARPPRODUCTICON.exe
O90 - PUC: "8BAD244577171E94B822900A94AE9569" . (.Renesas Electronics USB 3.0 Host Controller Driver.) -- C:\Windows\Installer\{5442DAB8-7177-49E1-8B22-09A049EA5996}\ARPPRODUCTICON.exe
O90 - PUC: "8BEBF3246C1202748AAD1BB960DF6B70" . (.HP SimplePass 2012.) -- C:\Windows\Installer\{423FBEB8-21C6-4720-A8DA-B19B06FDB607}\ARPPRODUCTICON.exe
O90 - PUC: "8D4D77630E5ECF948BE66045C10FB0EB" . (.opensource.) -- C:\Windows\Installer\{3677D4D8-E5E0-49FC-B86E-06541CF00BBE}\ARPPRODUCTICON.exe
O90 - PUC: "99957AC5EDD385B73349834A8ED24866" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{5CA75999-3DDE-7B58-3394-38A4E82D8466}\ARPPRODUCTICON.exe
O90 - PUC: "A3628D5C18D4979819ED1B100246F25C" . (.Catalyst Control Center.) -- C:\Windows\Installer\{C5D8263A-4D81-8979-91DE-B10120642FC5}\ARPPRODUCTICON.exe
O90 - PUC: "A96DB1DE3E70C814191F8D65855218FB" . (.HP On Screen Display.) -- C:\Windows\Installer\{ED1BD69A-07E3-418C-91F1-D856582581BF}\_853F67D554F05449430E7E.exe
O90 - PUC: "ADA116F5C89BBBD4DAED14F48054E7FC" . (.Windows Live Family Safety.) -- C:\Windows\Installer\{5F611ADA-B98C-4DBB-ADDE-414F08457ECF}\fssicon.ico
O90 - PUC: "AE4EC40EBBC3822449D0B308058E079C" . (.HP 3D DriveGuard.) -- C:\Windows\Installer\{E04CE4EA-3CBB-4228-940D-3B8050E870C9}\controlPanelIcon.exe
O90 - PUC: "B3DE0F4550DB14B4CBCF0EF32EDDFFD1" . (.HP Documentation.) -- C:\Windows\Installer\{54F0ED3B-BD05-4B41-BCFC-E03FE2DDFF1D}\NotebookDocs.exe
O90 - PUC: "C227F58254E0ED743BE8B5B301AFA4C7" . (.HP Quick Launch.) -- C:\Windows\Installer\{285F722C-0E45-47DE-B38E-5B3B10FA4A7C}\_853F67D554F05449430E7E.exe
O90 - PUC: "C6325D72C8A91E9499754A77869DF864" . (.Logiciel de base du périphérique HP Photosmart 6510 series.) -- C:\Windows\Installer\{27D5236C-9A8C-49E1-9957-A47768D98F46}\ARP_Icon
O90 - PUC: "C953167FDEC9EA54A915D96650DC554C" . (.Evernote v. 4.2.3.) -- C:\Windows\Installer\{F761359C-9CED-45AE-9A51-9D6605CD55C4}\Evernote.ico
O90 - PUC: "D276F30548C6A844F8F8B43CA58C4314" . (.AMD APP SDK Runtime.) -- C:\Windows\Installer\{503F672D-6C84-448A-8F8F-4BC35AC83441}\ARPPRODUCTICON.exe
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "D7DAA531A4BFC0087E2F850DB239C683" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{135AAD7D-FB4A-800C-E7F2-58D02B936C38}\ARPPRODUCTICON.exe
O90 - PUC: "D9953FB382F7B06CC1D528FB4D5EFE33" . (.AMD Catalyst Install Manager.) -- C:\Windows\Installer\{3BF3599D-7F28-C60B-1C5D-82BFD4E5EF33}\ARPPRODUCTICON.exe
O90 - PUC: "DA2CF4BB21FD1EE4A87AC2A0625B2EBF" . (.HP QuickWeb.) -- C:\Windows\Installer\{BB4FC2AD-DF12-4EE1-8AA7-2C0A26B5E2FB}\ARPPRODUCTICON.exe
O90 - PUC: "DEE2FD58CB80BF6409AD820B0D8A8E8A" . (.HP Update.) -- C:\Windows\Installer\{85DF2EED-08BC-46FB-90DA-28B0D0A8E8A8}\ARPPRODUCTICON.exe
O90 - PUC: "E5E5322F18873924B9F6402B06F9FB0F" . (.Windows Live Messenger.) -- C:\Windows\Installer\{F2235E5E-7881-4293-9B6F-04B2609FBFF0}\MsblIco.Exe
O90 - PUC: "F20FE4508D594F84E9BEF2C93E70E28D" . (.AuthenTec TrueAPI.) -- C:\Windows\Installer\{054EF02F-95D8-48F4-9EEB-2F9CE3072ED8}\ARPPRODUCTICON.exe
O90 - PUC: "F54567811B747A08F2891D57AD893A29" . (.ccc-utility64.) -- C:\Windows\Installer\{1876545F-47B1-80A7-2F98-D175DA98A392}\ARPPRODUCTICON.exe
O90 - PUC: "F88767503992F55408DC891041901530" . (.HP Security Assistant.) -- C:\Windows\Installer\{0576788F-2993-455F-80CD-980114095103}\_853F67D554F05449430E7E.exe
O90 - PUC: "FA9D7E5F6F0603A4783EE49AD423C21E" . (.HP Setup.) -- C:\Windows\Installer\{F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1}\ARPPRODUCTICON.exe



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 18/02/2011 14336 |  (AdBackup Service Controller) . (.Oodrive.) - C:\Program Files\Pack Sérénité\Sauvegarde\Service\AdBackup.RemotingService.exe
SR - | Auto 18/12/2012 65192 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 14/03/2013 253656 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 03/03/2009 89600 |  (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Program Files\IDT\WDM\AESTSr64.exe
SR - | Auto 01/10/2011 204288 |  (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 31/08/2011 146592 |  (Atheros Bt&Wlan Coex Agent) . (.Atheros.) - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
SR - | Auto 31/08/2011 103584 |  (AtherosSvc) . (.Atheros Commnucations.) - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
SR - | Auto ??\??\???? 0 |  (ezSharedSvc) . (.EasyBits Software AS.) - C:\Windows\System32\ezSharedSvcHost.exe
SR - | Auto 18/11/2009 221608 |  (F-Secure Gatekeeper Handler Starter) . (.F-Secure Corporation.) - C:\Program Files (x86)\Pack Sérénité\Sécurité\Anti-Virus\fsgk32st.exe
SR - | Auto 26/08/2011 260424 |  (FPLService) . (.HP.) - C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe
SR - | Demand 18/11/2009 846248 |  (FSDFWD) . (.F-Secure Corporation.) - C:\Program Files (x86)\Pack Sérénité\Sécurité\FWES\Program\fsdfwd.exe
SR - | Auto 18/11/2009 188840 |  (FSMA) . (.F-Secure Corporation.) - C:\Program Files (x86)\Pack Sérénité\Sécurité\Common\FSMA32.exe
SR - | Demand 23/02/2013 61088 |  (FSORSPClient) . (.F-Secure Corporation.) - C:\Program Files (x86)\Pack Sérénité\Sécurité\ORSP Client\fsorsp.exe
SS - | Demand 12/10/2010 206072 |  (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
SS - | Auto  0 |  (HP Support Assistant Service) . (...) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
SR - | Auto 16/02/2011 682040 |  (HPAuto) . (.Hewlett-Packard.) - C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
SR - | Auto 11/10/2010 346168 |  (HPClientSvc) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
SS - | Demand 13/09/2011 1098296 |  (hpCMSrv) . (.Hewlett-Packard Development Company L.P..) - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
SR - | Demand 14/03/2012 994176 |  (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
SR - | Auto 27/05/2011 30520 |  (hpsrv) . (.Hewlett-Packard Company.) - C:\Windows\System32\Hpservice.exe
SR - | Auto 11/07/2011 26680 |  (HPWMISVC) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
SR - | Auto 20/05/2011 13592 |  (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SR - | Auto 29/06/2011 2413056 |  (IconMan_R) . (.Realsil Microelectronics Inc..) - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
SR - | Auto 23/02/2011 212944 |  (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
SR - | Auto 09/08/2011 325912 |  (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 04/02/2011 502304 | C:\Program Files (x86)\PACKSR~1\OPTIMI~1\mxtask.exe (Optimisation Task Manager) . (.Avanquest Software USA, Inc..) - C:\Program Files (x86)\Pack Sérénité\Optimisation\mxtask.exe
SS - | Auto 13/07/2012 160944 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SR - | Auto 02/06/2011 301568 |  (STacSV) . (.IDT, Inc..) - C:\Program Files\IDT\WDM\STacSV64.exe
SR - | Auto 09/08/2011 2656536 |  (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto  0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services:  Scanned in 00mn 00s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by jean pierre at 21/04/2013 20:03:51

device: opened successfully
user: error reading MBR 

Disk trace:
error: Read  Descripteur non valide
kernel: error reading MBR 



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by jean pierre at 21/04/2013 20:03:53

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR:  Scanned in 00mn 04s



End of the scan (1778 lines in 01mn 49s)(2)