Rapport de ZHPDiag v1.34.68 par Nicolas Coolman, Update du 29/01/2013
Run by Manu at 01/02/2013 13:12:49
State : Version à jour.
UAC : Deactivate by program


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 18.0.1 v18.0.1 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 9YQTR
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3948 MB (63% free)
System Restore: Activé (Enable)
System drive C: has 62 GB (52%) free of 120 GB

---\\ Logged in mode
~ Computer Name: MANU-PORTABLE
~ User Name: Manu
~ All Users Names: Manu, HomeGroupUser$, ASPNET, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Manu\AppData\Roaming\
~ %Desktop% : C:\Users\Manu\Desktop\
~ %Favorites% : C:\Users\Manu\Favorites\
~ %LocalAppData% : C:\Users\Manu\AppData\Local\
~ %StartMenu% : C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 62 Go of 120 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 302 Go of 325 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ Hard drive, Flash drive, Thumb drive (Free 227 Go of 233 Go)
G:\ Hard drive, Flash drive, Thumb drive (Free 217 Go of 233 Go)
H:\ CD-ROM drive (Free 0 Go of 3 Go)
R:\ Hard drive, Flash drive, Thumb drive (Free 11 Go of 21 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  Out Of Date
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.5121DB613E10A46A3C5085B479026AA7] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.14/11/2012 - 07:04:11.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.E453ACF4E7D44E5530B5D5F2B9CA8563] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.31/08/2012 - 19:19:35.) -- C:\Windows\system32\Drivers\ntfs.sys [1659760]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 0/4
~ Mes musiques (My Musics) : 0/367
~ Mes Videos (My Videos) : 0/2
~ Mes Favoris (My Favorites) : 0/516
~ Mes Documents (My Documents) : 0/1
~ Mon Bureau (My Desktop) : 1/59
~ Menu demarrer (Programs) : 0/41
~ Scan Hidden Files in 00mn 03s



---\\ Processus lancés
[MD5.C2D105C7D23F550217EA6896959CF080] - (.Uniblue Systems Ltd - Uniblue SpeedUpMyPC Monitor.) -- C:\Program Files (x86)\Uniblue\SpeedUpMyPC\spmonitor.exe   [26008] [PID.2904]
[MD5.1498D6A26774FEEA98C2D9630F9B6B86] - (.Uniblue Systems Ltd - Uniblue SpeedUpMyPC.) -- C:\Program Files (x86)\Uniblue\SpeedUpMyPC\sump.exe   [394632] [PID.2912]
[MD5.868E3486E7EC522330344152A5535783] - (.ASUS - SmartLogon Application.) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe   [305720] [PID.2960]
[MD5.5BB1F77C8AF725A15EC9366498D275BB] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe   [5732992] [PID.3028]
[MD5.4F17353DA4564D44EA81C6C954811946] - (.TomTom - MyTomTom.) -- C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe   [436728] [PID.2628]
[MD5.F6987FF6C6D683F79FDCE707B071A997] - (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe   [955392] [PID.2704]
[MD5.C7391769FCD6E04196EE8CA831E2C7E8] - (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe   [59872] [PID.2820]
[MD5.19384B2D2976C16971DA567653D5DF95] - (.Apple Inc. - ApplePhotoStreams.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe   [59872] [PID.2968]
[MD5.C26B09276755E0698B31CF0BAE0BF182] - (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe   [59280] [PID.3776]
[MD5.5C396DDE6AAFFB64ABC0E0FD88F53553] - (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe   [3054136] [PID.3256]
[MD5.BEE83619A26F90A6C8273F9CA9680397] - (.asus - ControlDeck.) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe   [1080448] [PID.800]
[MD5.DFB71D057E0F2AB6BAC4BC6154DA9FD9] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [5632512] [PID.2692]
[MD5.18E5C2F937F9DEB8C282DF66A3761925] - (.ASUS - ASLDR Service.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe   [84536] [PID.1476]
[MD5.7910158929571214A959D5A6D16DD9C0] - (.ASUS - GFNEXSrv.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe   [96896] [PID.1512]
[MD5.3927397AC60D943DAF8808AFFED582B7] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [65192] [PID.1948]
[MD5.A5299D04ED225D64CF07A568A3E1BF8C] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe   [55184] [PID.1972]
[MD5.A1C148801B4AF64847AEB9F3AD9594EF] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe   [262144] [PID.1200]
[MD5.7CF1B716372B89568AE4C0FE769F5869] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe   [335872] [PID.1236]
[MD5.8E4179A38CF72AC6D8D651A72AE88580] - (.ASUS - HControl.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe   [182912] [PID.3608]
[MD5.149126216A694E6BA84E92ECA77AAE3B] - (.ASUS - ATKOSD.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe   [2488888] [PID.3888]
[MD5.4A7C441D99D86704D194E7678873B95D] - (.ASUS - WDC.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe   [174648] [PID.3920]
[MD5.7F7A03D03FA18A0DB2DAC37A8D620E7F] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe   [7168] [PID.4396]
[MD5.41118D920B2B268C0ADC36421248CDCF] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe   [2314240] [PID.4716]
~ Scan Processes Running in 00mn 01s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\2a2ep6q6.default\prefs.js
M3 - MFPP: Plugins - [Manu] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Manu] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Manu] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Manu] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Manu] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Manu] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\Web Search.xml
M3 - MFPP: Plugins - [Manu] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Manu] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [Manu - 2a2ep6q6.default] www.google.fr
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\NPOFF12.DLL
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.5.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll
P2 - FPN: [HKLM] [@divx.com/DivX VOD Helper,version=1.0.0] - (.DivX, LLC. - DivX VOD Helper Plug-in.) -- C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.7.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.7.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.7.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
~ Scan Firefox Browser in 00mn 01s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com
R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 2



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> [64Bits] - {326E768D-4182-46FD-9C16-1449A49795F4} . (.DivX, LLC - DivX Plus Web Player HTML5 <video> version.) -- C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHT
O2 - BHO: (no name) [64Bits] - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: smartdownloader Class [64Bits] - {F1AF26F8-1828-4279-ABCE-074EF3235BD7} . (.TODO: <Company name> - TODO: <File description>.) -- C:\Program Files (x86)\SockshareDownloader\smarterdownloader.dll
~ Scan BHO in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [ETDWare] C:\Program Files (x86)\Elantech\ETDCtrl.exe (.not file.) 
O4 - HKLM\..\Run: [AmIcoSinglun64] . (.AlcorMicro Co., Ltd. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe 
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe 
O4 - HKLM\..\Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe (.not file.) 
O4 - HKLM\..\Run: [EvtMgr6] . (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe 
O4 - HKCU\..\Run: [MyTomTomSA.exe] . (.TomTom - MyTomTom.) -- C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe 
O4 - HKCU\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe 
O4 - HKCU\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe 
O4 - HKCU\..\Run: [ApplePhotoStreams] . (.Apple Inc. - ApplePhotoStreams.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe 
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe 
O4 - HKUS\S-1-5-21-212477057-714126500-519854081-1000\..\Run: [MyTomTomSA.exe] . (.TomTom - MyTomTom.) -- C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe 
O4 - HKUS\S-1-5-21-212477057-714126500-519854081-1000\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe 
O4 - HKUS\S-1-5-21-212477057-714126500-519854081-1000\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe 
O4 - HKUS\S-1-5-21-212477057-714126500-519854081-1000\..\Run: [ApplePhotoStreams] . (.Apple Inc. - ApplePhotoStreams.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe 
O4 - HKUS\S-1-5-21-212477057-714126500-519854081-1000\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe 
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Programme d'installation de Microsoft .NET Compact Framework.lnk . (...)  -- C:\Users\Manu\AppData\Roaming\Microsoft\Installer\{7A0BAED2-066E-4B4F-8FA5-472A4655F4C2}
O4 - Global Startup: C:\Users\Manu\Desktop\Connexion réseau sans fil - Raccourci.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Manu\Desktop\DivX Plus Converter.lnk . (.DivX, Inc..)  -- C:\Program Files (x86)\DivX\DivX Plus Converter\DivXConverterLauncher.exe
O4 - Global Startup: C:\Users\Manu\Desktop\EndItAll.lnk . (.Ziff Davis Media, Inc..)  -- C:\Program Files (x86)\EndItAll\enditall.exe
O4 - Global Startup: C:\Users\Manu\Desktop\Filmotech.lnk . (...)  -- C:\Program Files (x86)\Filmotech\Filmotech.exe
O4 - Global Startup: C:\Users\Manu\Desktop\Géoportail 3D.lnk . (.DIGINEXT.)  -- C:\Program Files (x86)\VirtualGeo3-GP\Geoportail3D.exe
O4 - Global Startup: C:\Users\Manu\Desktop\iCloud.URL . (.DIGINEXT.)  -- C:\Users\Manu\Desktop\iCloud.URL
O4 - Global Startup: C:\Users\Manu\Desktop\JDownloader.lnk . (.AppWork GmbH.)  -- C:\Program Files (x86)\JDownloader\JDownloaderPortable.exe
O4 - Global Startup: C:\Users\Manu\Desktop\Localiser mon iPhone.lnk . (.Apple Inc..)  -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudWeb.exe
O4 - Global Startup: C:\Users\Manu\Desktop\PoiEdit - Raccourci.lnk . (.Dnote Software.)  -- C:\Program Files (x86)\Dnote Software\PoiEdit2007\PoiEdit.exe
O4 - Global Startup: C:\Users\Manu\Desktop\Powerline AV Utility.lnk . (.D-Link Corporation.)  -- C:\Program Files (x86)\D-Link\Powerline AV Utility\Viper32.exe
O4 - Global Startup: C:\Users\Manu\Desktop\SIWPortable - Raccourci.lnk . (.Topala Software Solutions.)  -- C:\SIWPortable\SIWPortable.exe
O4 - Global Startup: C:\Users\Manu\Desktop\Virtual DJ.lnk . (.Atomix Productions.)  -- C:\Program Files (x86)\VirtualDJ\virtualdj.exe
O4 - Global Startup: C:\Users\Manu\Desktop\Windows Explorer.lnk . (.Microsoft Corporation.)  -- C:\Windows\explorer.exe
O4 - Global Startup: C:\Users\Manu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\JDownloader.lnk . (.AppWork GmbH.)  -- C:\Program Files (x86)\JDownloader\JDownloaderPortable.exe
O4 - Global Startup: C:\Users\Manu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Manu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE
O4 - Global Startup: C:\Users\Manu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk . (.Google Inc..)  -- C:\Program Files (x86)\Google\Picasa3\Picasa3.exe
O4 - Global Startup: C:\Users\Manu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\SpeedUpMyPC.lnk . (.Uniblue Systems Ltd.)  -- C:\Program Files (x86)\Uniblue\SpeedUpMyPC\Launcher.exe
~ Scan Global Startup in 00mn 59s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ Scan IE Control Panel in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
~ Scan Winsock in 00mn 00s



---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
O15 - Trusted Zone: [HKCU\...\Domains] http.geoportail.fr
O15 - Trusted Zone: [HKCU\...\Domains\www] http.geoportail.fr
O15 - Trusted Zone: [HKLM\...\Domains] http.geoportail.fr
O15 - Trusted Zone: [HKLM\...\Domains\www] http.geoportail.fr
~ Scan IE Zone Confiance in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{0D397198-C465-4FF6-806C-2CF1670275D0}: NameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{801394EB-95B6-45CB-8A9D-4B11358888D8}: NameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{7FC66374-089C-4B1F-A772-55F0B59541FC}: DhcpNameServer = 192.168.124.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{AEAECCED-D26A-40B9-AE55-9DECAA88FB3C}: DhcpNameServer = 62.201.142.102 62.201.142.102 62.201.142.102 62.201.142.102
O17 - HKLM\System\CCS\Services\Tcpip\..\{7FC66374-089C-4B1F-A772-55F0B59541FC}: DhcpDomain = lan
O17 - HKLM\System\CS1\Services\Tcpip\..\{0D397198-C465-4FF6-806C-2CF1670275D0}: NameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{801394EB-95B6-45CB-8A9D-4B11358888D8}: NameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{7FC66374-089C-4B1F-A772-55F0B59541FC}: DhcpNameServer = 192.168.124.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{AEAECCED-D26A-40B9-AE55-9DECAA88FB3C}: DhcpNameServer = 62.201.142.102 62.201.142.102 62.201.142.102 62.201.142.102
O17 - HKLM\System\CS1\Services\Tcpip\..\{7FC66374-089C-4B1F-A772-55F0B59541FC}: DhcpDomain = lan
O17 - HKLM\System\CS2\Services\Tcpip\..\{0D397198-C465-4FF6-806C-2CF1670275D0}: NameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{801394EB-95B6-45CB-8A9D-4B11358888D8}: NameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{7FC66374-089C-4B1F-A772-55F0B59541FC}: DhcpNameServer = 192.168.124.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{AEAECCED-D26A-40B9-AE55-9DECAA88FB3C}: DhcpNameServer = 62.201.142.102 62.201.142.102 62.201.142.102 62.201.142.102
O17 - HKLM\System\CS2\Services\Tcpip\..\{7FC66374-089C-4B1F-A772-55F0B59541FC}: DhcpDomain = lan
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: skyline [64Bits] - {3a4f9195-65a8-11d5-85c1-0001023952c1} . (.Skyline software systems Inc. - TerraExplorerX DLL.) -- C:\Program Files (x86)\Skyline\TerraExplorer\TerraExplorerX.dll
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: LBTWlgn . (.Logitech, Inc. - Logitech Bluetooth Service.) -- c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
~ Scan Winlogon in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AFBAgent (AFBAgent) . (.ASUSTeK Computer Inc. - ASUS FastBoot.) - C:\Windows\system32\FBAgent.exe
O23 - Service:  (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) . (.ASUS - ASLDR Service.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) . (.ASUS - GFNEXSrv.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Technologie de stockage Intel(R) Rapid (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Intel(R) Management & Security Applicati (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
~ Scan Services in 00mn 07s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (sdnclean64.exe) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\SpeedUpMyPC.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\spmonitor.job
[MD5.6E571CD299C38EF9DCC5DA779E3B8AFA] [APT] [Apple Diagnostics] (.Apple Inc..) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe
[MD5.51459B4AF1611AFA37F839C92CFAEC10] [APT] [ASUS P4G] (.ASUS.) -- C:\Program Files\P4G\BatteryLife.exe
[MD5.868E3486E7EC522330344152A5535783] [APT] [ASUS SmartLogon Console Sensor] (.ASUS.) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
[MD5.BEE83619A26F90A6C8273F9CA9680397] [APT] [ASUSControlDeck] (.asus.) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
[MD5.5BB1F77C8AF725A15EC9366498D275BB] [APT] [ATKOSD2] (.ASUS.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
[MD5.00000000000000000000000000000000] [APT] [Go for FilesUpdate] (...) -- C:\Program Files (x86)\GoforFiles\GFFUpdater.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [GoforFilesUpdate] (...) -- C:\Program Files (x86)\GoforFiles\GFFUpdater.exe (.not file.)
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
[MD5.1498D6A26774FEEA98C2D9630F9B6B86] [APT] [SpeedUpMyPC] (.Uniblue Systems Ltd.) -- C:\Program Files (x86)\Uniblue\SpeedUpMyPC\sump.exe
[MD5.C2D105C7D23F550217EA6896959CF080] [APT] [spmonitor] (.Uniblue Systems Ltd.) -- C:\Program Files (x86)\Uniblue\SpeedUpMyPC\spmonitor.exe
[MD5.C3816316D4BCFC238E9CC8ECA4037541] [APT] [SRS Premium Sound] (.SRS Labs, Inc..) -- C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\srspremiumpanel_64.exe
[MD5.00000000000000000000000000000000] [APT] [{005F681C-B7F2-400F-942C-299F2243642B}] (...) -- C:\Program Files (x86)\InstallShield Installation Information\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}\setup.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{134064BC-F9DD-4B6B-B497-63E6A359F568}] (...) -- C:\Users\Manu\Desktop\documentstogoiphn4.0001.010.exe (.not file.)
[MD5.4F17353DA4564D44EA81C6C954811946] [APT] [{21D70459-413F-4CFC-8FEA-765BBC0B64FF}] (.TomTom.) -- C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe
[MD5.4F17353DA4564D44EA81C6C954811946] [APT] [{3C4B6CD7-B03C-4B2F-8C46-5A1E6066B7F8}] (.TomTom.) -- C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe
[MD5.00000000000000000000000000000000] [APT] [{49D9F608-09A2-48A3-B1A7-2A61303829DD}] (...) -- I:\Logiciels_et_utilitaires_divers\Divers Videos et Divx\Easy video soft\EasyVideoSoft.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{8650EDCD-D636-4E5B-9699-DDF12ECE45DF}] (...) -- I:\Logiciels_et_utilitaires_divers\Maintenance utilitaires etc pc\Driver CANOSCAN Lide 25 Windows 7\lide25vst6411011aen\SetupSG.exe (.not file.)
[MD5.4F17353DA4564D44EA81C6C954811946] [APT] [{8E518EEE-6824-4F74-AB48-4C9DA4899A11}] (.TomTom.) -- C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe
[MD5.00000000000000000000000000000000] [APT] [{915DE4E6-CEEC-49D8-9FA5-A9652A2CB050}] (...) -- I:\Logiciels_et_utilitaires_divers\Divers Videos et Divx\Easy video soft\EasyVideoSoft.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{9A06DDD5-BA1D-41DB-8763-07CBB01ED03B}] (...) -- C:\Users\Manu\NeoDivX Suite\NeoDivXSuite.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{9B7AB6AE-D7EA-428F-828B-B1A29047510A}] (...) -- C:\Program Files (x86)\Canon\CanoScan Toolbox Ver4.9\CSTBox.exe (.not file.)
[MD5.66E6E367F96BEF03AA0DAF9D32F09D57] [APT] [{BFD891E8-E57B-4124-8153-24A1CF8F575E}] (.SyncQuick.) -- C:\Program Files\SyncQuick\SyncQuick Nas Manager\SyncQuick NAS Manager.exe
[MD5.00000000000000000000000000000000] [APT] [{C26B7DB6-6797-4D72-83DD-7616AE2160AA}] (...) -- C:\Program Files (x86)\Canon\CanoScan Toolbox Ver4.9\CSTBox.exe (.not file.)
[MD5.4F17353DA4564D44EA81C6C954811946] [APT] [{C369C3A1-DF5E-4010-B0FF-9BB0AB5B4E0B}] (.TomTom.) -- C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe
[MD5.00000000000000000000000000000000] [APT] [{E2EBE2EF-F7D4-4B45-BB26-96B317D9E6A5}] (...) -- C:\Program Files (x86)\Canon\CanoScan Toolbox Ver4.9\CSTBox.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{E84579ED-E11A-49F1-BB0D-10C39CE3D344}] (...) -- C:\Program Files (x86)\Canon\CanoScan Toolbox Ver4.9\CSTBox.exe (.not file.)
[MD5.C5DA9DCF1DA637F557C2FAC3E57D3EAD] [APT] [{E9BFEED3-B98E-4963-A896-F870E4B62E01}] (.Jordan Russell.) -- C:\Program Files (x86)\WinASPI\unins000.exe
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
~ Scan Scheduled Task in 00mn 06s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\Windows\System32\DRIVERS\dtsoftbus01.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
O41 - Driver: C:\Windows\System32\drivers\ws2ifsl.sys (ws2ifsl) . (.Microsoft Corporation - Couche IFS Winsock2.) - C:\Windows\system32\drivers\ws2ifsl.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: AHV content for Acrobat and Flash - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD}
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441}
O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {81D00339-968D-15D1-3499-8431658E896F}
O42 - Logiciel: AMD Drag and Drop Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F55458B0-DCA9-38C9-6C8D-829F22463A55}
O42 - Logiciel: AMD Media Foundation Decoders - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {E6F5D8BE-0B00-6DD9-18F9-D4045798FCBE}
O42 - Logiciel: ASUS AI Recovery - (.ASUS.) [HKLM][64Bits] -- {38253529-D97D-4901-AE53-5CC9736D3A2E}
O42 - Logiciel: ASUS FancyStart - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {2B81872B-A054-48DA-BE3B-FA5C164C303A}
O42 - Logiciel: ASUS LifeFrame3 - (.ASUS.) [HKLM][64Bits] -- {1DBD1F12-ED93-49C0-A7CC-56CBDE488158}
O42 - Logiciel: ASUS Power4Gear Hybrid - (.ASUS.) [HKLM][64Bits] -- {9B6239BF-4E85-4590-8D72-51E30DB1A9AA}
O42 - Logiciel: ASUS SmartLogon - (.ASUS.) [HKLM][64Bits] -- {64452561-169F-4A36-A2FF-B5E118EC65F5}
O42 - Logiciel: ASUS USB2.0 UVC VGA WebCam - (.Sonix.) [HKLM][64Bits] -- ASUS USB2.0 UVC VGA WebCam
O42 - Logiciel: ASUS Video Magic - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: ASUS Video Magic - (.CyberLink Corp..) [HKLM][64Bits] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: ASUS Virtual Camera - (.asus.) [HKLM][64Bits] -- {EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}
O42 - Logiciel: ATI AVIVO64 Codecs - (.ATI Technologies Inc..) [HKLM][64Bits] -- {BEE7DC03-E310-8AD4-F45D-B5A5163F697F}
O42 - Logiciel: ATK Package - (.ASUS.) [HKLM][64Bits] -- {AB5C933E-5C7D-4D30-B314-9C83A49B94BE}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {14DC0059-00F1-4F62-BD1A-AB23CD51A95E}
O42 - Logiciel: Adobe Anchor Service CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {90176341-0A8B-4CCC-A78D-F862228A6B95}
O42 - Logiciel: Adobe Asset Services CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
O42 - Logiciel: Adobe Bridge CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {9C9824D9-9000-4373-A6A5-D0E5D4831394}
O42 - Logiciel: Adobe Bridge Start Meeting - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {08B32819-6EEF-4057-AEDA-5AB681A36A23}
O42 - Logiciel: Adobe BridgeTalk Plugin CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E}
O42 - Logiciel: Adobe CMaps - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
O42 - Logiciel: Adobe Camera Raw 4.0 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
O42 - Logiciel: Adobe Color - Photoshop Specific - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A2D81E70-2A98-4A08-A628-94388B063C5E}
O42 - Logiciel: Adobe Color Common Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
O42 - Logiciel: Adobe Color EU Recommended Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {73B5D990-04EA-4751-B10F-5534770B91F2}
O42 - Logiciel: Adobe Color JA Extra Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
O42 - Logiciel: Adobe Color NA Extra Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}
O42 - Logiciel: Adobe Creative Suite 3 Web Premium - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {69B6B4A5-1C4D-4F16-BB11-A4EB9A439116}
O42 - Logiciel: Adobe Default Language CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
O42 - Logiciel: Adobe Device Central CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
O42 - Logiciel: Adobe ExtendScript Toolkit 2 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
O42 - Logiciel: Adobe Extension Manager CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {BE5F3842-8309-4754-92D5-83E02E6077A3}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin 64-bit - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Fonts All - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {6ABE0BEE-D572-4FE8-B434-9E72A289431B}
O42 - Logiciel: Adobe Help Viewer CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {04AF207D-9A77-465A-8B76-991F6AB66245}
O42 - Logiciel: Adobe Linguistics CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {54793AA1-5001-42F4-ABB6-C364617C6078}
O42 - Logiciel: Adobe MotionPicture Color Files - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {6B708481-748A-4EB4-97C1-CD386244FF77}
O42 - Logiciel: Adobe PDF Library Files - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
O42 - Logiciel: Adobe Photoshop CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {C1FA4B3B-1625-4922-9C9D-780E8FCE161A}
O42 - Logiciel: Adobe Reader X (10.1.5) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Adobe Setup - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {BE136F60-5D0F-4663-8B32-938A3EFD3FCB}
O42 - Logiciel: Adobe Stock Photos CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {29E5EA97-5F74-4A57-B8B2-D4F169117183}
O42 - Logiciel: Adobe Type Support - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
O42 - Logiciel: Adobe Update Manager CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {E69AE897-9E0B-485C-8552-7841F48D42D8}
O42 - Logiciel: Adobe Version Cue CS3 Client - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D0DFF92A-492E-4C40-B862-A74A173C25C5}
O42 - Logiciel: Adobe WAS CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {C5BD220A-EFE8-48A5-B70E-9503D535FACE}
O42 - Logiciel: Adobe WinSoft Linguistics Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
O42 - Logiciel: Adobe XMP Panels CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {802771A9-A856-4A41-ACF7-1450E523C923}
O42 - Logiciel: Ajouter ou supprimer Adobe Creative Suite 3 Web Premium - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe_e7f691c6f2bf7b70c25ea19f3d73b6e
O42 - Logiciel: Alcor Micro USB Card Reader - (.Alcor Micro Corp..) [HKLM][64Bits] -- InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {CCE825DB-347A-4004-A186-5F4A6FDD8547}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {D70884EA-E2CE-4539-91DB-4766CC1E5F5F}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM][64Bits] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}
O42 - Logiciel: AviSynth 2.5 - (.Pas de propriétaire.) [HKLM][64Bits] -- AviSynth
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: Bouygues Telecom Mes services en un clic - (.Bouygues Telecom.) [HKLM][64Bits] -- Bouygues-BboxMini.649F13D0CDF968A472A16014E8BC8A2ED131D04E.1
O42 - Logiciel: Bouygues Telecom Mes services en un clic - (.Bouygues Telecom.) [HKLM][64Bits] -- {8ED44FA5-DB47-4BF8-646C-4D5590D0363D}
O42 - Logiciel: CDDRV_Installer - (.Logitech.) [HKLM][64Bits] -- {0C826C5B-B131-423A-A229-C71B3CACCD6A}
O42 - Logiciel: Canon CanoScan Toolbox 5.0 - (.Pas de propriétaire.) [HKLM][64Bits] -- CanoScan Toolbox 5.0
O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}
O42 - Logiciel: Choice Guard - (.Microsoft Corporation.) [HKLM][64Bits] -- {8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
O42 - Logiciel: Compel Adaptec WinASPI - (.Pas de propriétaire.) [HKLM][64Bits] -- Compel install Adaptec WinASPI-4.6.0(1021)_is1
O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM][64Bits] -- DivX Setup
O42 - Logiciel: ControlDeck - (.ASUS.) [HKLM][64Bits] -- {5B65EF64-1DFA-414A-8C94-7BB726158E21}
O42 - Logiciel: D-Link Powerline AV Utility - (.D-Link Corporation..) [HKLM][64Bits] -- D-Link Powerline AV Utility
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
O42 - Logiciel: Driver Genius Professional Edition - (.Driver-Soft Inc..) [HKLM][64Bits] -- Driver Genius Professional Edition_is1
O42 - Logiciel: ETDWare PS/2-X64 10.0.7.3_WHQL - (.ELAN Microelectronic Corp..) [HKLM][64Bits] -- Elantech
O42 - Logiciel: EndItAll 2.0 - (.Ziff Davis Media, Inc..) [HKLM][64Bits] -- EndItAll_is1
O42 - Logiciel: Fast Boot - (.ASUS.) [HKLM][64Bits] -- {13F4A7F3-EABC-4261-AF6B-1317777F0755}
O42 - Logiciel: Filmotech v3.16 - (.Pas de propriétaire.) [HKLM][64Bits] -- Filmotech_is1
O42 - Logiciel: Game Park Console - (.Oberon Media, Inc..) [HKLM][64Bits] -- {E71E60C1-533E-45A5-8D80-E475E88D2B17}_is1
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Internet Mobile 3G+ Bouygues Telecom  - (.Bouygues Telecom.) [HKLM][64Bits] -- {6B8C9E66-AB67-4B64-BFB9-76E8EE234A09}
O42 - Logiciel: JDownloader 0.9 - (.AppWork GmbH.) [HKLM][64Bits] -- 5513-1208-7298-9440
O42 - Logiciel: Java 7 Update 7 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86417007FF}
O42 - Logiciel: Java 7 Update 7 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217007FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}
O42 - Logiciel: K-Lite Codec Pack 9.6.0 (Full) - (.Pas de propriétaire.) [HKLM][64Bits] -- KLiteCodecPack_is1
O42 - Logiciel: Logiciel Logitech Unifying 2.10 - (.Logitech.) [HKLM][64Bits] -- Logitech Unifying
O42 - Logiciel: Logitech SetPoint 6.32 - (.Logitech.) [HKLM][64Bits] -- sp6
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2721691) - (.Microsoft Corporation.) [HKLM][64Bits] -- {355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2758694) - (.Microsoft Corporation.) [HKLM][64Bits] -- {1D95BA90-F4F8-47EC-A882-441C99D30C1E}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB973685) - (.Microsoft Corporation.) [HKLM][64Bits] -- {859DFA95-E4A6-48CD-B88E-A3E483E89B44}
O42 - Logiciel: MediaMonkey 4.0 - (.Ventis Media Inc..) [HKLM][64Bits] -- MediaMonkey_is1
O42 - Logiciel: Microsoft .NET Compact Framework 1.0 SP3 - (.Microsoft.) [HKLM][64Bits] -- {7A0BAED2-066E-4B4F-8FA5-472A4655F4C2}
O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {C78D3032-9DFD-41D0-9DE9-58EAE750CBA4}
O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {DC911ADF-7B60-40F2-A112-FB1EB6402D07}
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM][64Bits] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM][64Bits] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
O42 - Logiciel: Mozilla Firefox 18.0.1 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 18.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: MyTomTom 3.2.0.802 - (.TomTom.) [HKLM][64Bits] -- MyTomTom
O42 - Logiciel: Neodivx - (.Neodivx.) [HKLM][64Bits] -- {F2589BC9-19E5-4660-A404-7F7EC3E41CBB}
O42 - Logiciel: Open Cellar - (.Matthieu DUCROCQ.) [HKLM][64Bits] -- {1F0944C8-C099-4E12-8F0C-617316731B58}
O42 - Logiciel: PDF Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM][64Bits] -- Picasa 3
O42 - Logiciel: PoiEdit - (.Pas de propriétaire.) [HKLM][64Bits] -- PoiEdit
O42 - Logiciel: Qualcomm Atheros Client Installation Program - (.Qualcomm Atheros.) [HKLM][64Bits] -- {28006915-2739-4EBE-B5E8-49B25D32EB33}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}
O42 - Logiciel: Realtek HDMI Audio Driver for ATI - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {5449FB4F-1802-4D5B-A6D8-087DB1142147}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: SRS Premium Sound Control Panel - (.SRS Labs, Inc..) [HKLM][64Bits] -- {F762EF18-309E-4A3F-A9E8-419CA2E4FCF1}
O42 - Logiciel: SpeedUpMyPC - (.Uniblue Systems Ltd.) [HKLM][64Bits] -- {E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
O42 - Logiciel: SuperCopier2 - (.Pas de propriétaire.) [HKLM][64Bits] -- SuperCopier2
O42 - Logiciel: SyncQuick Backup 5.0 - (.SyncQuick.) [HKLM][64Bits] -- {E40B3589-F8DB-4B50-B4C6-72422CFCC431}
O42 - Logiciel: SyncQuick NAS Manager - (.SyncQuick.) [HKLM][64Bits] -- {CB71EE84-8DA6-403A-AF5F-0AA79D4AA73B}
O42 - Logiciel: TerraExplorer - (.Skyline Software Systems, Inc..) [HKLM][64Bits] -- TerraExplorer
O42 - Logiciel: USB2.0 UVC VGA WebCam - (.Sonix.) [HKLM][64Bits] -- USB2.0 UVC VGA WebCam
O42 - Logiciel: VC80CRTRedist - 8.0.50727.6195 - (.DivX, Inc.) [HKLM][64Bits] -- {933B4015-4618-4716-A828-5289FC03165F}
O42 - Logiciel: VLC media player 2.0.5 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: Virtual DJ - Atomix Productions - (.Pas de propriétaire.) [HKLM][64Bits] -- Virtual DJ - Atomix Productions
O42 - Logiciel: VirtualGeo³ pour le Géoportail - (.Diginext.) [HKLM][64Bits] -- VGeo3 GP
O42 - Logiciel: Visual Studio C++ 10.0 Runtime - (.TomTom International B.V..) [HKLM][64Bits] -- {4412F224-3849-4461-A3E9-DEEF8D252790}
O42 - Logiciel: Visual Studio C++ 9.0 Runtime - (.TomTom International B.V..) [HKLM][64Bits] -- {08C7A49D-2B12-46F6-8B41-26D3B0D1C01F}
O42 - Logiciel: WinFlash - (.ASUS.) [HKLM][64Bits] -- {8F21291E-0444-4B1D-B9F9-4370A73E346D}
O42 - Logiciel: Wireless Console 3 - (.ASUS.) [HKLM][64Bits] -- {20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}
O42 - Logiciel: aTube Catcher - (.DsNET Corp.) [HKLM][64Bits] -- aTube Catcher
O42 - Logiciel: eReg - (.Logitech, Inc..) [HKLM][64Bits] -- {3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}
O42 - Logiciel: erLT - (.Logitech, Inc..) [HKLM][64Bits] -- {A498D9EB-927B-459B-85D6-DD6EF8C2C564}
O42 - Logiciel: ffdshow - (.Milan Cutka.) [HKLM][64Bits] -- ffdshow
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {0E5D76AD-A3FB-48D5-8400-8903B10317D3}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\AMD]
[HKCU\Software\ATI]
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\Angryziber]
[HKCU\Software\AppDataLow\ISWVolatile]
[HKCU\Software\AppDataLow\InstallDaddy]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\Simplytech]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Borland]
[HKCU\Software\Bouygues]
[HKCU\Software\CanonBJ]
[HKCU\Software\Canon]
[HKCU\Software\CheckPoint]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\DT Soft]
[HKCU\Software\DVD Shrink]
[HKCU\Software\Diginext]
[HKCU\Software\DivXNetworks]
[HKCU\Software\DivX]
[HKCU\Software\Dnote Software]
[HKCU\Software\ECAREME]
[HKCU\Software\Earth Resource Mapping]
[HKCU\Software\Elantech]
[HKCU\Software\Freeware]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\GoforFiles]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\IM Providers]
[HKCU\Software\Icaros]
[HKCU\Software\JavaSoft]
[HKCU\Software\Leadertech]
[HKCU\Software\LogiShrd]
[HKCU\Software\Logitech]
[HKCU\Software\Macromedia]
[HKCU\Software\MainConcept]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MediaInfo]
[HKCU\Software\MediaMonkey]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\OTi]
[HKCU\Software\PC SOFT]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\Realtek]
[HKCU\Software\Ripp-it]
[HKCU\Software\SFX TEAM]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\Skyline]
[HKCU\Software\Software]
[HKCU\Software\Softwrap]
[HKCU\Software\Sysinternals]
[HKCU\Software\TeleCharger]
[HKCU\Software\TomTom]
[HKCU\Software\Trolltech]
[HKCU\Software\Usbfix]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VirtualDJ]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Winamp]
[HKCU\Software\Wow6432Node]
[HKCU\Software\Yernar Shambayev (ProcessText Group)]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\dskMetrics]
[HKCU\Software\ej-technologies]
[HKCU\Software\geissplugin]
[HKCU\Software\madshi]
[HKLM\Software\AMD]
[HKLM\Software\ASUS]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\ATK0100]
[HKLM\Software\AVS4YOU]
[HKLM\Software\Adobe]
[HKLM\Software\Alienware]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\CheckPoint]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CoreSecurity]
[HKLM\Software\CrazyLoader]
[HKLM\Software\Cyberlink]
[HKLM\Software\DivX]
[HKLM\Software\Dolby]
[HKLM\Software\ECAREME]
[HKLM\Software\EnigmaSoftwareGroup]
[HKLM\Software\GEAR Software]
[HKLM\Software\Google]
[HKLM\Software\Huawei technologies]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\Khronos]
[HKLM\Software\Logishrd]
[HKLM\Software\Logitech]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\PctelEapPeer Authentication]
[HKLM\Software\Policies]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SONIX]
[HKLM\Software\SRS Labs]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\SmsiEapPeer Authentication]
[HKLM\Software\Sonic]
[HKLM\Software\Wow6432Node\AMD]
[HKLM\Software\Wow6432Node\ASUS]
[HKLM\Software\Wow6432Node\ATI Technologies]
[HKLM\Software\Wow6432Node\ATI]
[HKLM\Software\Wow6432Node\Adaptec]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\AsLdr]
[HKLM\Software\Wow6432Node\Atheros Communications Inc.]
[HKLM\Software\Wow6432Node\Atheros]
[HKLM\Software\Wow6432Node\Bouygues]
[HKLM\Software\Wow6432Node\Canon]
[HKLM\Software\Wow6432Node\CheckPoint]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\D-Link]
[HKLM\Software\Wow6432Node\DT Soft]
[HKLM\Software\Wow6432Node\Diginext]
[HKLM\Software\Wow6432Node\DivXNetworks]
[HKLM\Software\Wow6432Node\DivX]
[HKLM\Software\Wow6432Node\Driver-Soft]
[HKLM\Software\Wow6432Node\Emsisoft]
[HKLM\Software\Wow6432Node\FLEXlm License Manager]
[HKLM\Software\Wow6432Node\GNU]
[HKLM\Software\Wow6432Node\GoforFiles]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\HaaliMkx]
[HKLM\Software\Wow6432Node\Huawei technologies]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\KLCodecPack]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\LAV]
[HKLM\Software\Wow6432Node\Licenses]
[HKLM\Software\Wow6432Node\Logitech]
[HKLM\Software\Wow6432Node\Look@LAN]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Macrovision]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\NeoDivx Suite]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Oberon Media]
[HKLM\Software\Wow6432Node\OldTimer Tools]
[HKLM\Software\Wow6432Node\PCTools]
[HKLM\Software\Wow6432Node\Poikosoft]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Qualcomm Atheros]
[HKLM\Software\Wow6432Node\RealNetworks]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Safer Networking Limited]
[HKLM\Software\Wow6432Node\Skyline]
[HKLM\Software\Wow6432Node\SmithMicro]
[HKLM\Software\Wow6432Node\SmsiEapPeer Authentication]
[HKLM\Software\Wow6432Node\SuppHelpDir]
[HKLM\Software\Wow6432Node\Swearware]
[HKLM\Software\Wow6432Node\Techcity]
[HKLM\Software\Wow6432Node\TomTom]
[HKLM\Software\Wow6432Node\Uniblue]
[HKLM\Software\Wow6432Node\Valve]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\VirtualDJ]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\Windows]
[HKLM\Software\Wow6432Node\WlanSdk]
[HKLM\Software\Wow6432Node\Wow6432Node]
[HKLM\Software\Wow6432Node\ZTEUSBDriverFlag]
[HKLM\Software\Wow6432Node\adawaretb]
[HKLM\Software\Wow6432Node\ej-technologies]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
[HKLM\Software\ZTEUSBDriverFlag]
[HKLM\Software\swearware]
~ Scan Softwares in 00mn 01s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 14/04/2012 - 05:17:22 - [694,707] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 24/09/2012 - 17:49:14 - [2,145] ----D C:\Program Files (x86)\AMD APP
O43 - CFD: 13/12/2010 - 04:06:58 - [2,896] ----D C:\Program Files (x86)\AmIcoSingLun
O43 - CFD: 08/09/2012 - 16:22:48 - [2,316] ----D C:\Program Files (x86)\Apple Software Update
O43 - CFD: 22/04/2012 - 07:27:16 - [79,384] ----D C:\Program Files (x86)\ASUS
O43 - CFD: 24/09/2012 - 17:48:38 - [61,070] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 23/12/2012 - 16:19:28 - [3,837] ----D C:\Program Files (x86)\AviSynth 2.5
O43 - CFD: 18/11/2011 - 18:02:45 - [0] ----D C:\Program Files (x86)\AVS4YOU
O43 - CFD: 23/11/2012 - 19:09:06 - [32,619] ----D C:\Program Files (x86)\Bbox
O43 - CFD: 23/11/2012 - 19:09:09 - [0,219] ----D C:\Program Files (x86)\BboxUpdate
O43 - CFD: 08/09/2012 - 16:22:39 - [0,602] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 09/07/2012 - 17:48:53 - [48,354] ----D C:\Program Files (x86)\Bouygues Telecom
O43 - CFD: 23/11/2012 - 19:20:34 - [0,705] ----D C:\Program Files (x86)\Bouygues Telecom Mes services en un clic
O43 - CFD: 27/04/2012 - 23:32:32 - [8,854] ----D C:\Program Files (x86)\Canon
O43 - CFD: 17/01/2013 - 00:27:09 - [1088,771] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 21/04/2012 - 18:13:33 - [12,465] ----D C:\Program Files (x86)\CyberLink
O43 - CFD: 27/12/2012 - 23:44:58 - [1,886] ----D C:\Program Files (x86)\D-Link
O43 - CFD: 22/12/2012 - 18:54:07 - [26,650] ----D C:\Program Files (x86)\DAEMON Tools Lite
O43 - CFD: 23/12/2012 - 09:19:35 - [140,607] ----D C:\Program Files (x86)\DivX
O43 - CFD: 19/04/2011 - 18:17:46 - [4,742] ----D C:\Program Files (x86)\Dnote Software
O43 - CFD: 20/09/2012 - 08:21:37 - [3,000] ----D C:\Program Files (x86)\docXConverter3
O43 - CFD: 24/09/2012 - 13:47:28 - [23,864] ----D C:\Program Files (x86)\Driver-Soft
O43 - CFD: 07/12/2012 - 19:39:27 - [38,179] ----D C:\Program Files (x86)\DsNET Corp
O43 - CFD: 04/10/2011 - 20:16:02 - [0,853] ----D C:\Program Files (x86)\EndItAll
O43 - CFD: 23/12/2012 - 08:42:42 - [0,048] ----D C:\Program Files (x86)\ffdshow
O43 - CFD: 27/10/2012 - 19:01:30 - [35,643] ----D C:\Program Files (x86)\Filmotech
O43 - CFD: 21/11/2011 - 07:16:05 - [0] ----D C:\Program Files (x86)\FoxTabMusicConverter
O43 - CFD: 31/01/2013 - 18:50:36 - [4,643] ----D C:\Program Files (x86)\GoforFiles
O43 - CFD: 14/04/2012 - 05:40:01 - [194,160] ----D C:\Program Files (x86)\Google
O43 - CFD: 24/09/2012 - 17:50:26 - [64,675] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 24/09/2012 - 17:54:02 - [33,737] ----D C:\Program Files (x86)\Intel
O43 - CFD: 14/12/2012 - 05:24:27 - [6,231] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 14/12/2012 - 20:34:07 - [152,491] ----D C:\Program Files (x86)\iTunes
O43 - CFD: 20/09/2012 - 07:51:17 - [123,910] ----D C:\Program Files (x86)\Java
O43 - CFD: 29/01/2013 - 18:20:33 - [65,626] ----D C:\Program Files (x86)\JDownloader
O43 - CFD: 23/12/2012 - 08:59:38 - [87,659] ----D C:\Program Files (x86)\K-Lite Codec Pack
O43 - CFD: 02/01/2013 - 22:49:52 - [0,002] ----D C:\Program Files (x86)\Look@LAN
O43 - CFD: 05/03/2011 - 15:41:27 - [21,610] ----D C:\Program Files (x86)\Matthieu DUCROCQ
O43 - CFD: 28/11/2012 - 07:35:48 - [53,819] ----D C:\Program Files (x86)\MediaMonkey
O43 - CFD: 14/04/2012 - 05:36:57 - [0,195] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 24/04/2012 - 10:46:11 - [34,534] ----D C:\Program Files (x86)\Microsoft .NET Compact Framework 1.0 SP3
O43 - CFD: 22/07/2011 - 17:11:23 - [480,562] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 26/09/2012 - 08:50:50 - [1,182] ----D C:\Program Files (x86)\Microsoft Security Client
O43 - CFD: 14/05/2012 - 18:53:00 - [36,641] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 04/03/2011 - 06:25:29 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 04/03/2011 - 06:26:58 - [2,087] ----D C:\Program Files (x86)\Microsoft Sync Framework
O43 - CFD: 17/01/2013 - 00:26:48 - [0,014] ----D C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 17/01/2013 - 00:27:09 - [3,554] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 06/03/2011 - 07:33:27 - [7,789] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 18/11/2011 - 12:26:03 - [0,293] ----D C:\Program Files (x86)\MIKSOFT
O43 - CFD: 19/01/2013 - 19:57:45 - [45,948] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 19/01/2013 - 23:38:21 - [0,212] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 14/07/2009 - 06:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 13/12/2010 - 03:46:05 - [0,147] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 24/09/2012 - 19:47:21 - [17,389] ----D C:\Program Files (x86)\MyTomTom 3
O43 - CFD: 23/12/2012 - 18:22:49 - [22,033] ----D C:\Program Files (x86)\Neodivx
O43 - CFD: 16/01/2013 - 19:09:50 - [2,003] ----D C:\Program Files (x86)\PC Tools
O43 - CFD: 24/09/2012 - 17:50:46 - [0,036] ----D C:\Program Files (x86)\Qualcomm Atheros
O43 - CFD: 30/11/2012 - 20:02:27 - [72,326] ----D C:\Program Files (x86)\QuickTime
O43 - CFD: 13/12/2010 - 04:05:59 - [26,264] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 16/01/2013 - 07:16:14 - [0] ----D C:\Program Files (x86)\Red Sky
O43 - CFD: 14/07/2009 - 06:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 14/04/2012 - 05:33:51 - [0,025] ----D C:\Program Files (x86)\RescuePRO DEMO
O43 - CFD: 21/04/2012 - 17:54:52 - [0,108] ----D C:\Program Files (x86)\Ripp-it_AM
O43 - CFD: 23/12/2012 - 08:51:06 - [0,974] ----D C:\Program Files (x86)\Satsuki Decoder Pack
O43 - CFD: 17/01/2013 - 20:05:17 - [0,482] ----D C:\Program Files (x86)\SEAF
O43 - CFD: 01/02/2013 - 03:53:35 - [0] ----D C:\Program Files (x86)\SIWPortable
O43 - CFD: 07/05/2012 - 05:18:23 - [33,275] ----D C:\Program Files (x86)\Skyline
O43 - CFD: 01/12/2012 - 22:45:47 - [0,276] ----D C:\Program Files (x86)\SockshareDownloader
O43 - CFD: 16/01/2013 - 18:53:20 - [0] ----D C:\Program Files (x86)\SockshareDownloader.com
O43 - CFD: 16/01/2013 - 23:14:37 - [1,294] ----D C:\Program Files (x86)\Spybot - Search & Destroy 2
O43 - CFD: 04/03/2011 - 20:14:00 - [1,191] ----D C:\Program Files (x86)\SuperCopier2
O43 - CFD: 23/11/2012 - 18:51:31 - [0,016] ----D C:\Program Files (x86)\Techcity
O43 - CFD: 24/09/2012 - 17:41:28 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 20/09/2012 - 07:18:37 - [0,043] ----D C:\Program Files (x86)\TomTom International B.V
O43 - CFD: 16/01/2013 - 19:29:15 - [0,722] ----D C:\Program Files (x86)\Toolbar Cleaner
O43 - CFD: 23/06/2012 - 23:04:29 - [24,459] ----D C:\Program Files (x86)\Uniblue
O43 - CFD: 14/07/2009 - 05:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 09/05/2011 - 17:31:58 - [94,421] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 17/06/2012 - 09:32:43 - [19,108] ----D C:\Program Files (x86)\VirtualDJ
O43 - CFD: 19/11/2012 - 10:23:24 - [123,350] ----D C:\Program Files (x86)\VirtualGeo3-GP
O43 - CFD: 15/10/2011 - 19:29:10 - [0] ----D C:\Program Files (x86)\VS Revo Group
O43 - CFD: 23/12/2012 - 16:25:59 - [0,180] ----D C:\Program Files (x86)\WinASPI
O43 - CFD: 22/04/2012 - 07:55:44 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 12/01/2012 - 09:05:34 - [132,286] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 04/03/2011 - 06:24:27 - [0,234] ----D C:\Program Files (x86)\Windows Live SkyDrive
O43 - CFD: 13/03/2011 - 18:43:57 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 13/03/2011 - 18:43:57 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 06:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 13/03/2011 - 18:43:57 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 13/03/2011 - 18:43:57 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 13/03/2011 - 18:43:57 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 14/04/2012 - 06:04:36 - [3,547] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 01/02/2013 - 13:13:03 - [11,867] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 28/06/2011 - 09:31:34 - [502,851] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 23/11/2012 - 19:31:25 - [40,070] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 14/12/2012 - 20:33:38 - [153,447] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 24/09/2012 - 17:49:10 - [0,473] ----D C:\Program Files (x86)\Common Files\ATI Technologies
O43 - CFD: 18/11/2011 - 18:02:45 - [0,171] ----D C:\Program Files (x86)\Common Files\AVSMedia
O43 - CFD: 14/06/2011 - 00:20:11 - [0,259] ----D C:\Program Files (x86)\Common Files\ControlDeck
O43 - CFD: 17/01/2013 - 00:27:09 - [0,082] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 23/12/2012 - 09:19:04 - [23,581] ----D C:\Program Files (x86)\Common Files\DivX Shared
O43 - CFD: 27/04/2012 - 22:51:36 - [2,009] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 24/09/2012 - 19:48:31 - [0,176] ----D C:\Program Files (x86)\Common Files\Intel Corporation
O43 - CFD: 20/09/2012 - 07:51:58 - [1,184] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 14/04/2012 - 05:59:38 - [1,847] ----D C:\Program Files (x86)\Common Files\LogiShrd
O43 - CFD: 04/03/2011 - 07:06:34 - [0,625] ----D C:\Program Files (x86)\Common Files\Macrovision Shared
O43 - CFD: 17/01/2013 - 00:27:11 - [241,046] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 13/12/2010 - 03:42:15 - [0,338] ----D C:\Program Files (x86)\Common Files\Oberon Media
O43 - CFD: 16/01/2013 - 19:35:38 - [2,909] ----D C:\Program Files (x86)\Common Files\PC Tools
O43 - CFD: 10/07/2012 - 07:57:18 - [2,105] ----D C:\Program Files (x86)\Common Files\PctelEapPeer Authentication
O43 - CFD: 13/12/2010 - 04:04:32 - [0,159] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 04/03/2011 - 07:02:46 - [1,772] ----D C:\Program Files (x86)\Common Files\PX Storage Engine
O43 - CFD: 14/07/2009 - 04:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 14/07/2009 - 04:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 30/12/2012 - 20:20:15 - [1,033] ----D C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 11/07/2012 - 19:26:38 - [42,259] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 04/03/2011 - 06:22:35 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 16/01/2013 - 22:41:36 - [31,174] ----D C:\Program Files (x86)\Common Files\Wise Installation Wizard
O43 - CFD: 14/12/2012 - 20:34:10 - [2,775] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 18/04/2012 - 06:56:16 - [13,121] ----D C:\ProgramData\Adobe
O43 - CFD: 13/12/2010 - 04:06:57 - [0,000] ----D C:\ProgramData\AmUStor
O43 - CFD: 08/09/2012 - 21:33:09 - [191,299] ----D C:\ProgramData\Apple
O43 - CFD: 08/09/2012 - 21:34:46 - [82,581] ----D C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - 06:08:56 - [0] ----D C:\ProgramData\Application Data
O43 - CFD: 15/06/2011 - 01:26:28 - [0,009] ----D C:\ProgramData\ASUS
O43 - CFD: 24/09/2012 - 17:49:51 - [0,000] ----D C:\ProgramData\ATI
O43 - CFD: 18/11/2011 - 12:43:09 - [0] ----D C:\ProgramData\AVS4YOU
O43 - CFD: 10/07/2012 - 07:57:04 - [3,204] ----D C:\ProgramData\Bouygues Telecom
O43 - CFD: 05/03/2011 - 15:43:00 - [0,167] --H-D C:\ProgramData\CanonBJ
O43 - CFD: 24/09/2012 - 13:45:43 - [0,004] ----D C:\ProgramData\CheckPoint
O43 - CFD: 21/04/2012 - 18:04:29 - [0,025] ----D C:\ProgramData\CyberLink
O43 - CFD: 22/12/2012 - 18:56:27 - [0,002] ----D C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 14/07/2009 - 06:08:56 - [0] ----D C:\ProgramData\Desktop
O43 - CFD: 23/12/2012 - 09:19:35 - [4,637] ----D C:\ProgramData\DivX
O43 - CFD: 14/07/2009 - 06:08:56 - [0] ----D C:\ProgramData\Documents
O43 - CFD: 24/09/2012 - 22:17:22 - [0,009] ----D C:\ProgramData\DriverGenius
O43 - CFD: 14/04/2012 - 05:14:34 - [0] ----D C:\ProgramData\eMule
O43 - CFD: 15/09/2012 - 06:17:18 - [0,610] ----D C:\ProgramData\eSellerate
O43 - CFD: 14/07/2009 - 06:08:56 - [0] ----D C:\ProgramData\Favorites
O43 - CFD: 04/03/2011 - 07:36:34 - [0,001] ----D C:\ProgramData\FLEXnet
O43 - CFD: 24/09/2012 - 17:44:12 - [3,828] ----D C:\ProgramData\LogiShrd
O43 - CFD: 21/04/2012 - 17:59:57 - [0,031] ----D C:\ProgramData\Logitech
O43 - CFD: 16/01/2013 - 19:59:04 - [0,003] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 12/03/2012 - 11:12:22 - [0,535] ----D C:\ProgramData\MediaMonkey
O43 - CFD: 16/01/2013 - 23:11:13 - [907,458] -S--D C:\ProgramData\Microsoft
O43 - CFD: 17/01/2013 - 00:27:52 - [0,254] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 02/06/2012 - 08:35:45 - [0,034] ----D C:\ProgramData\Mozilla
O43 - CFD: 04/10/2011 - 20:15:39 - [2,290] ----D C:\ProgramData\OberonGameConsole
O43 - CFD: 07/01/2013 - 18:00:40 - [0,002] ----D C:\ProgramData\P4G
O43 - CFD: 16/01/2013 - 19:34:47 - [0] ----D C:\ProgramData\PC Tools
O43 - CFD: 24/09/2012 - 17:50:42 - [0,021] ----D C:\ProgramData\Qualcomm Atheros
O43 - CFD: 07/05/2012 - 05:18:23 - [0,111] ----D C:\ProgramData\Skyline
O43 - CFD: 16/01/2013 - 21:31:31 - [0,432] ----D C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 14/07/2009 - 06:08:56 - [0] ----D C:\ProgramData\Start Menu
O43 - CFD: 05/10/2011 - 19:27:07 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 16/01/2013 - 19:34:53 - [0] ---AD C:\ProgramData\Temp
O43 - CFD: 14/07/2009 - 06:08:56 - [0] ----D C:\ProgramData\Templates
O43 - CFD: 05/03/2011 - 16:12:57 - [0,002] ----D C:\ProgramData\Windows Genuine Advantage
O43 - CFD: 08/09/2012 - 21:35:18 - [0,004] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
O43 - CFD: 19/03/2012 - 20:04:47 - [79,403] ----D C:\Users\Manu\AppData\Roaming\.minecraft
O43 - CFD: 10/04/2012 - 20:00:25 - [20,457] ----D C:\Users\Manu\AppData\Roaming\Adobe
O43 - CFD: 11/09/2012 - 13:39:38 - [1231,025] ----D C:\Users\Manu\AppData\Roaming\Apple Computer
O43 - CFD: 05/10/2011 - 08:42:10 - [13,905] ----D C:\Users\Manu\AppData\Roaming\Asus WebStorage
O43 - CFD: 04/03/2011 - 06:31:05 - [0] ----D C:\Users\Manu\AppData\Roaming\ATI
O43 - CFD: 18/11/2011 - 12:43:04 - [0,001] ----D C:\Users\Manu\AppData\Roaming\AVS4YOU
O43 - CFD: 23/11/2012 - 19:20:35 - [0,001] ----D C:\Users\Manu\AppData\Roaming\Bouygues-BboxMini.649F13D0CDF968A472A16014E8BC8A2ED131D04E.1
O43 - CFD: 27/04/2012 - 23:32:50 - [0] ----D C:\Users\Manu\AppData\Roaming\Canon
O43 - CFD: 24/09/2012 - 19:12:57 - [0,030] ----D C:\Users\Manu\AppData\Roaming\CheckPoint
O43 - CFD: 15/02/2012 - 09:18:05 - [0,021] ----D C:\Users\Manu\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
O43 - CFD: 18/12/2011 - 07:42:16 - [0,002] ----D C:\Users\Manu\AppData\Roaming\CyberLink
O43 - CFD: 22/12/2012 - 18:56:24 - [1,321] ----D C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 23/12/2012 - 15:22:35 - [0,257] ----D C:\Users\Manu\AppData\Roaming\DivX
O43 - CFD: 23/12/2012 - 15:56:26 - [0,000] ----D C:\Users\Manu\AppData\Roaming\DVD Shrink
O43 - CFD: 23/12/2012 - 06:07:41 - [0,000] ----D C:\Users\Manu\AppData\Roaming\dvdcss
O43 - CFD: 21/05/2011 - 06:02:37 - [0] ----D C:\Users\Manu\AppData\Roaming\EeeStorageUploader
O43 - CFD: 01/01/2013 - 17:32:50 - [0,221] ----D C:\Users\Manu\AppData\Roaming\Filmotech_prefs
O43 - CFD: 15/11/2011 - 05:42:10 - [1,669] ----D C:\Users\Manu\AppData\Roaming\FLV Blaster
O43 - CFD: 02/12/2012 - 11:09:20 - [0,005] ----D C:\Users\Manu\AppData\Roaming\GoforFiles
O43 - CFD: 14/04/2012 - 05:32:14 - [0] ----D C:\Users\Manu\AppData\Roaming\Google
O43 - CFD: 04/03/2011 - 06:30:32 - [0] ----D C:\Users\Manu\AppData\Roaming\Identities
O43 - CFD: 24/09/2012 - 19:48:17 - [0,001] ----D C:\Users\Manu\AppData\Roaming\Intel Corporation
O43 - CFD: 16/01/2013 - 19:30:52 - [0,001] ----D C:\Users\Manu\AppData\Roaming\LavasoftStatistics
O43 - CFD: 13/04/2012 - 10:25:32 - [0,000] ----D C:\Users\Manu\AppData\Roaming\Leadertech
O43 - CFD: 16/04/2012 - 12:50:42 - [0,443] ----D C:\Users\Manu\AppData\Roaming\Logishrd
O43 - CFD: 16/04/2012 - 12:44:54 - [0,023] ----D C:\Users\Manu\AppData\Roaming\Logitech
O43 - CFD: 05/03/2011 - 19:01:57 - [0,011] ----D C:\Users\Manu\AppData\Roaming\Macromedia
O43 - CFD: 16/01/2013 - 19:59:29 - [5,624] ----D C:\Users\Manu\AppData\Roaming\Malwarebytes
O43 - CFD: 14/07/2009 - 08:44:38 - [0] ----D C:\Users\Manu\AppData\Roaming\Media Center Programs
O43 - CFD: 23/12/2012 - 09:05:07 - [0,000] ----D C:\Users\Manu\AppData\Roaming\Media Player Classic
O43 - CFD: 16/01/2013 - 18:27:08 - [36,465] ----D C:\Users\Manu\AppData\Roaming\MediaMonkey
O43 - CFD: 23/01/2013 - 18:31:06 - [198,046] -S--D C:\Users\Manu\AppData\Roaming\Microsoft
O43 - CFD: 17/01/2013 - 12:16:25 - [0] ----D C:\Users\Manu\AppData\Roaming\Microsoftt
O43 - CFD: 04/03/2011 - 07:36:45 - [22,074] ----D C:\Users\Manu\AppData\Roaming\Mozilla
O43 - CFD: 04/03/2011 - 08:44:12 - [0,710] ----D C:\Users\Manu\AppData\Roaming\SoftGrid Client
O43 - CFD: 05/10/2011 - 19:31:47 - [0] ----D C:\Users\Manu\AppData\Roaming\System
O43 - CFD: 16/01/2013 - 19:05:00 - [0,006] ----D C:\Users\Manu\AppData\Roaming\TestApp
O43 - CFD: 24/08/2011 - 10:02:42 - [0,457] ----D C:\Users\Manu\AppData\Roaming\TomTom
O43 - CFD: 04/03/2011 - 07:53:11 - [0] ----D C:\Users\Manu\AppData\Roaming\TP
O43 - CFD: 23/06/2012 - 23:04:31 - [18,369] ----D C:\Users\Manu\AppData\Roaming\Uniblue
O43 - CFD: 21/01/2013 - 20:49:01 - [0,077] ----D C:\Users\Manu\AppData\Roaming\vlc
O43 - CFD: 28/02/2012 - 08:37:50 - [0,000] ----D C:\Users\Manu\AppData\Roaming\WinRAR
O43 - CFD: 01/02/2013 - 13:03:21 - [6,828] ----D C:\Users\Manu\AppData\Local\16D66FF1-0E5F-4397-8BCF-30AF8A03CD23.aplzod
O43 - CFD: 28/02/2012 - 13:37:13 - [0,002] -SH-D C:\Users\Manu\AppData\Local\5e1db356
O43 - CFD: 15/02/2012 - 11:02:46 - [15,641] ----D C:\Users\Manu\AppData\Local\Adobe
O43 - CFD: 08/09/2012 - 16:22:50 - [0] ----D C:\Users\Manu\AppData\Local\Apple
O43 - CFD: 11/09/2012 - 13:39:38 - [86,656] ----D C:\Users\Manu\AppData\Local\Apple Computer
O43 - CFD: 04/03/2011 - 06:20:52 - [0] ----D C:\Users\Manu\AppData\Local\Application Data
O43 - CFD: 20/01/2013 - 19:13:57 - [0,004] ----D C:\Users\Manu\AppData\Local\ApplicationHistory
O43 - CFD: 05/10/2011 - 19:39:17 - [0] ----D C:\Users\Manu\AppData\Local\Apps
O43 - CFD: 15/06/2011 - 01:26:26 - [1,310] ----D C:\Users\Manu\AppData\Local\ASUS
O43 - CFD: 04/03/2011 - 06:31:05 - [0,059] ----D C:\Users\Manu\AppData\Local\ATI
O43 - CFD: 09/07/2012 - 17:52:12 - [0,466] ----D C:\Users\Manu\AppData\Local\Bouygues Telecom
O43 - CFD: 18/12/2011 - 07:54:57 - [0,007] ----D C:\Users\Manu\AppData\Local\Cyberlink
O43 - CFD: 05/10/2011 - 19:39:17 - [0] ----D C:\Users\Manu\AppData\Local\Deployment
O43 - CFD: 27/01/2013 - 02:57:14 - [0] ----D C:\Users\Manu\AppData\Local\Diagnostics
O43 - CFD: 16/11/2012 - 10:12:25 - [0,001] ----D C:\Users\Manu\AppData\Local\DIGINEXT
O43 - CFD: 16/01/2013 - 19:29:49 - [19,279] ----D C:\Users\Manu\AppData\Local\Downloaded Installations
O43 - CFD: 16/01/2013 - 07:09:28 - [0,106] ----D C:\Users\Manu\AppData\Local\DownTango
O43 - CFD: 19/05/2012 - 07:31:26 - [0,012] ----D C:\Users\Manu\AppData\Local\Easy CD-DA Extractor
O43 - CFD: 03/01/2013 - 21:46:10 - [0,630] ----D C:\Users\Manu\AppData\Local\ElevatedDiagnostics
O43 - CFD: 05/10/2011 - 19:31:47 - [3,758] ----D C:\Users\Manu\AppData\Local\Films
O43 - CFD: 02/12/2012 - 19:21:36 - [512,977] ----D C:\Users\Manu\AppData\Local\Google
O43 - CFD: 04/03/2011 - 06:20:52 - [0] ----D C:\Users\Manu\AppData\Local\Historique
O43 - CFD: 24/09/2012 - 17:44:43 - [0] ----D C:\Users\Manu\AppData\Local\Logishrd
O43 - CFD: 12/03/2012 - 11:00:54 - [16,792] ----D C:\Users\Manu\AppData\Local\MediaMonkey
O43 - CFD: 23/01/2013 - 18:26:58 - [381,387] ----D C:\Users\Manu\AppData\Local\Microsoft
O43 - CFD: 27/07/2011 - 19:26:03 - [0,321] ----D C:\Users\Manu\AppData\Local\Microsoft Games
O43 - CFD: 20/01/2013 - 02:59:43 - [0,426] ----D C:\Users\Manu\AppData\Local\Microsoft Help
O43 - CFD: 04/10/2011 - 20:15:40 - [361,164] ----D C:\Users\Manu\AppData\Local\Mozilla
O43 - CFD: 01/10/2011 - 18:02:56 - [0,264] ----D C:\Users\Manu\AppData\Local\PoiEdit
O43 - CFD: 04/03/2011 - 06:21:06 - [0,039] ----D C:\Users\Manu\AppData\Local\Power2Go
O43 - CFD: 23/12/2012 - 08:56:37 - [0] ----D C:\Users\Manu\AppData\Local\Programs
O43 - CFD: 01/12/2012 - 22:45:47 - [0,001] ----D C:\Users\Manu\AppData\Local\PutLockerDownloader
O43 - CFD: 04/03/2011 - 07:53:01 - [0,184] ----D C:\Users\Manu\AppData\Local\SoftGrid Client
O43 - CFD: 04/03/2011 - 06:22:37 - [0,008] ----D C:\Users\Manu\AppData\Local\SRS Labs
O43 - CFD: 01/02/2013 - 13:12:30 - [25,576] ---AD C:\Users\Manu\AppData\Local\Temp
O43 - CFD: 04/03/2011 - 06:20:52 - [0] ----D C:\Users\Manu\AppData\Local\Temporary Internet Files
O43 - CFD: 24/08/2011 - 10:02:42 - [8,247] ----D C:\Users\Manu\AppData\Local\TomTom
O43 - CFD: 26/11/2012 - 21:38:45 - [7,179] ----D C:\Users\Manu\AppData\Local\VirtualStore
O43 - CFD: 05/10/2011 - 20:13:00 - [0,000] ----D C:\Users\Manu\AppData\Local\WDSetup
O43 - CFD: 14/07/2009 - 05:54:32 - [0,014] R---D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 04/10/2011 - 20:16:04 - [0,000] R---D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 13/12/2010 - 03:35:51 - [0,002] ----D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
O43 - CFD: 18/12/2011 - 08:30:39 - [0,000] ----D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
O43 - CFD: 23/11/2012 - 19:09:10 - [0,004] ----D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bbox - Bouygues Telecom
O43 - CFD: 27/12/2012 - 23:44:59 - [0,004] ----D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\D-Link
O43 - CFD: 24/06/2012 - 10:00:50 - [0] ----D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FoxTab Music Converter
O43 - CFD: 22/12/2011 - 06:50:31 - [0,000] ----D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 14/07/2009 - 05:49:38 - [0,001] R---D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 01/12/2012 - 22:45:30 - [0,002] ----D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SockshareDownloader.com
O43 - CFD: 20/01/2013 - 00:04:38 - [0] R---D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 04/03/2011 - 20:14:01 - [0,008] ----D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SuperCopier2
O43 - CFD: 13/05/2012 - 19:13:37 - [0,003] ----D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SyncQuick
O43 - CFD: 17/06/2012 - 09:32:01 - [0] ----D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Virtual DJ
O43 - CFD: 05/08/2011 - 18:18:02 - [0] ----D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinASPI
O43 - CFD: 14/04/2012 - 06:04:36 - [0] ----D C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ Scan Program Folder in 00mn 25s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.27F25467466EF216E39E88A1FA2DD233] - 31/01/2013 - 17:41:04  . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\perfc009.dat   [44544]
O44 - LFC:[MD5.E6D7E474C79A6057F1E7B5F07FFB2F41] - 31/01/2013 - 17:41:04  . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\perfc00C.dat   [44544]
O44 - LFC:[MD5.4001A24D5BF35A69BC31855AD079CE39] - 31/01/2013 - 17:41:04  . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\perfh009.dat   [44544]
O44 - LFC:[MD5.F0625A6D1EE77ECCE0E277E701C67E3B] - 31/01/2013 - 17:41:04  . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\perfh00C.dat   [44544]
O44 - LFC:[MD5.67B6D9570D1D50C71CF7D3801B71FE66] - 31/01/2013 - 17:41:04 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI   [1589624]
O44 - LFC:[MD5.27F25467466EF216E39E88A1FA2DD233] - 31/01/2013 - 17:41:04 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat   [112044]
O44 - LFC:[MD5.E6D7E474C79A6057F1E7B5F07FFB2F41] - 31/01/2013 - 17:41:04 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat   [137280]
O44 - LFC:[MD5.4001A24D5BF35A69BC31855AD079CE39] - 31/01/2013 - 17:41:04 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat   [628968]
O44 - LFC:[MD5.F0625A6D1EE77ECCE0E277E701C67E3B] - 31/01/2013 - 17:41:04 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat   [718376]
O44 - LFC:[MD5.67B6D9570D1D50C71CF7D3801B71FE66] - 31/01/2013 - 17:41:04 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI   [1589624]
O44 - LFC:[MD5.C27772DA98D59FAC1FA9F68CFF7BD3DE] - 01/02/2013 - 13:10:19 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [1800156]
O44 - LFC:[MD5.8618A82BAC11A01ED70ACCA48CC56C52] - 01/02/2013 - 13:06:42 ---A- . (...) -- C:\Windows\setupact.log   [1512]
O44 - LFC:[MD5.2343864A85907D4E23BBABD0B17968F0] - 01/02/2013 - 13:06:38 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.1FFC8A1430C9DA950200A3805D6A1B37] - 01/02/2013 - 09:45:18 ---A- . (...) -- C:\Windows\PFRO.log   [126552]
O44 - LFC:[MD5.94BCE5A03EF5F9340AD9095E0D409C82] - 30/01/2013 - 11:53:22  . (...) -- C:\Windows\System32\MpSigStub.exe   [420064]
O44 - LFC:[MD5.8D5112D5A3C70394DDB9E863146A6B50] - 22/01/2013 - 20:57:17 ---A- . (...) -- C:\TempCmd.txt   [60]
O44 - LFC:[MD5.A7F9DF6D971A2EE71EB38D68CCAE26B8] - 20/01/2013 - 03:36:40 ---A- . (...) -- C:\SeafLog.txt   [1010]
O44 - LFC:[MD5.36B33C83D5B8ED32D958A92BB189820A] - 20/01/2013 - 03:27:32 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin   [512]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 20/01/2013 - 00:25:50 ---A- . (...) -- C:\UsbFix.txt   [0]
O44 - LFC:[MD5.3184603BFCCC0CA46B03843B92F9C171] - 20/01/2013 - 00:21:19 ---A- . (...) -- C:\UsbFix_Upload_Me_MANU-PORTABLE.zip   [46905]
O44 - LFC:[MD5.C90DBB66E429E4BC01831DAE7FB9EDB2] - 17/01/2013 - 19:16:28  . (...) -- C:\Windows\System32\ServiceFilter.ini   [1589624]
O44 - LFC:[MD5.C90DBB66E429E4BC01831DAE7FB9EDB2] - 17/01/2013 - 19:16:28 ---A- . (...) -- C:\Windows\SysNative\ServiceFilter.ini   [1655]
O44 - LFC:[MD5.1A9845B1C224AA0C5FA731D8D365C595] - 17/01/2013 - 13:21:38 ---A- . (...) -- C:\Windows\SysNative\AutoRunFilter.ini   [3182]
O44 - LFC:[MD5.809D0EAEFB05175840B15D3676ED86E1] - 17/01/2013 - 00:30:36  . (.Microsoft - Système de classement ESRB.) -- C:\Windows\System32\FNTCACHE.DAT   [51712]
O44 - LFC:[MD5.809D0EAEFB05175840B15D3676ED86E1] - 17/01/2013 - 00:30:36 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT   [2358184]
O44 - LFC:[MD5.560596AF4ACE932A943BB12829056752] - 17/01/2013 - 00:23:06 ---A- . (...) -- C:\Windows\win.ini   [505]
O44 - LFC:[MD5.3CF3D4A45CC2AF973DBC30EC8D33252B] - 17/01/2013 - 00:04:29 ---A- . (...) -- C:\Windows\system.ini   [215]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/01/2013 - 22:43:46 ----- . (...) -- C:\autoexec.bat   [0]
O44 - LFC:[MD5.A65BA863A4E5B660CB139C0087D6F7AE] - 16/01/2013 - 07:01:51 ---A- . (.Pas de propriétaire - Toolbar_Exe_Launcher_Form.) -- C:\Windows\Launcher.exe   [15360]
O44 - LFC:[MD5.1D036C5ADF06A1FFFAE8AFAE6233A64C] - 16/01/2013 - 07:01:47 ----- . (...) -- C:\SetSearchAndHomepageInBrowserLog.txt   [337]
O44 - LFC:[MD5.8ACC1EFC15C4EA1243FF0A48B397BCC1] - 11/01/2013 - 18:04:53  . (...) -- C:\Windows\System32\MRT.exe   [420064]
O44 - LFC:[MD5.4489D5D2CB4BA0799F3FB4625DE181CF] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classement GRB.) -- C:\Windows\SysNative\grb.rs   [21504]
O44 - LFC:[MD5.4489D5D2CB4BA0799F3FB4625DE181CF] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classement GRB.) -- C:\Windows\System32\grb.rs   [21504]
O44 - LFC:[MD5.6D540AF9B183FC97DC4CC54369561548] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classement PEGI au Portugal.) -- C:\Windows\SysNative\pegi-pt.rs   [20480]
O44 - LFC:[MD5.6D540AF9B183FC97DC4CC54369561548] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classement PEGI au Portugal.) -- C:\Windows\System32\pegi-pt.rs   [20480]
O44 - LFC:[MD5.661AE5EAC62C4598DD01795CEB915BAE] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classement PEGI.) -- C:\Windows\SysNative\pegi.rs   [20480]
O44 - LFC:[MD5.661AE5EAC62C4598DD01795CEB915BAE] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classement PEGI.) -- C:\Windows\System32\pegi.rs   [20480]
O44 - LFC:[MD5.C4B0793E4B97AA36A2A8C81A7AA1979A] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\SysNative\pegibbfc.rs   [44544]
O44 - LFC:[MD5.C4B0793E4B97AA36A2A8C81A7AA1979A] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\pegibbfc.rs   [44544]
O44 - LFC:[MD5.5C48A43FC30FC61ECB1335DC646686BC] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classement USK.) -- C:\Windows\SysNative\usk.rs   [30720]
O44 - LFC:[MD5.5C48A43FC30FC61ECB1335DC646686BC] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classement USK.) -- C:\Windows\System32\usk.rs   [30720]
O44 - LFC:[MD5.A2E0F1E01A0983E9C94565BBEC862BF7] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classification COB-AU.) -- C:\Windows\SysNative\cob-au.rs   [40960]
O44 - LFC:[MD5.A2E0F1E01A0983E9C94565BBEC862BF7] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classification COB-AU.) -- C:\Windows\System32\cob-au.rs   [40960]
O44 - LFC:[MD5.65A8302C7551CFE45FAA2BC085C9E7E2] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classification DJCTQ.) -- C:\Windows\SysNative\djctq.rs   [15360]
O44 - LFC:[MD5.65A8302C7551CFE45FAA2BC085C9E7E2] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classification DJCTQ.) -- C:\Windows\System32\djctq.rs   [15360]
O44 - LFC:[MD5.54B11BB2AFBC3D5EBA9C96F0C1820B9B] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classification FPB.) -- C:\Windows\SysNative\fpb.rs   [46592]
O44 - LFC:[MD5.54B11BB2AFBC3D5EBA9C96F0C1820B9B] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classification FPB.) -- C:\Windows\System32\fpb.rs   [46592]
O44 - LFC:[MD5.997938D423CE830161CB6059434E3C9F] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classification OFLC-NZ.) -- C:\Windows\SysNative\oflc-nz.rs   [45568]
O44 - LFC:[MD5.997938D423CE830161CB6059434E3C9F] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de classification OFLC-NZ.) -- C:\Windows\System32\oflc-nz.rs   [45568]
O44 - LFC:[MD5.EBB73E4E8CA01089CF74ECE506EB7607] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de notation CSRR.) -- C:\Windows\SysNative\csrr.rs   [43520]
O44 - LFC:[MD5.EBB73E4E8CA01089CF74ECE506EB7607] - 09/01/2013 - 19:48:18 ---A- . (.Microsoft - Système de notation CSRR.) -- C:\Windows\System32\csrr.rs   [43520]
O44 - LFC:[MD5.D0C01412FBF59C1C25630C49F0C1B803] - 09/01/2013 - 19:48:17 ---A- . (.Microsoft - Système de classement CERO.) -- C:\Windows\SysNative\cero.rs   [55296]
O44 - LFC:[MD5.D0C01412FBF59C1C25630C49F0C1B803] - 09/01/2013 - 19:48:17 ---A- . (.Microsoft - Système de classement CERO.) -- C:\Windows\System32\cero.rs   [55296]
O44 - LFC:[MD5.51D25C805A01A2C4F930F9720CF51FFE] - 09/01/2013 - 19:48:17 ---A- . (.Microsoft - Système de classement ESRB.) -- C:\Windows\SysNative\esrb.rs   [51712]
O44 - LFC:[MD5.51D25C805A01A2C4F930F9720CF51FFE] - 09/01/2013 - 19:48:17 ---A- . (.Microsoft - Système de classement ESRB.) -- C:\Windows\System32\esrb.rs   [51712]
O44 - LFC:[MD5.4773EB5962548068547214A620E9ACC3] - 09/01/2013 - 19:48:17 ---A- . (.Microsoft - Système de classement OFLC.) -- C:\Windows\SysNative\oflc.rs   [23552]
O44 - LFC:[MD5.4773EB5962548068547214A620E9ACC3] - 09/01/2013 - 19:48:17 ---A- . (.Microsoft - Système de classement OFLC.) -- C:\Windows\System32\oflc.rs   [23552]
O44 - LFC:[MD5.9BB05674E013C35F4DAED51F5015355D] - 09/01/2013 - 19:48:17 ---A- . (.Microsoft - Système de classement PEGI en Finlande.) -- C:\Windows\SysNative\pegi-fi.rs   [20480]
O44 - LFC:[MD5.9BB05674E013C35F4DAED51F5015355D] - 09/01/2013 - 19:48:17 ---A- . (.Microsoft - Système de classement PEGI en Finlande.) -- C:\Windows\System32\pegi-fi.rs   [20480]
O44 - LFC:[MD5.1BCDB508143B517F21BBDAC10F5777BF] - 09/01/2013 - 19:47:59  . (.Microsoft - Système de classification COB-AU.) -- C:\Windows\System32\conhost.exe   [40960]
O44 - LFC:[MD5.1153AC6E133AA849853DFD407B086B80] - 30/11/2012 - 00:15:43 ---A- . (...) -- C:\Windows\SysNative\locale.nls   [420064]
O44 - LFC:[MD5.1153AC6E133AA849853DFD407B086B80] - 30/11/2012 - 00:15:43 ---A- . (...) -- C:\Windows\System32\locale.nls   [420064]
O44 - LFC:[MD5.639774C9ACD063F028F6084ABF5593AD] - 23/11/2012 - 04:13:57  . (...) -- C:\Windows\System32\taskhost.exe   [1589624]
~ Scan Files in 00mn 13s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.6AB3737BE24320707AF3071FB25ACCF6] - 01/02/2013 - 01:43:05 ---A- - C:\Windows\Prefetch\Layout.ini
O45 - LFCP:[MD5.1DB46822895754620750D7C827A98500] - 01/02/2013 - 01:46:11 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-411A328D.pf
O45 - LFCP:[MD5.7CBBB4B61CDC04045FC3987799A2A04E] - 01/02/2013 - 01:53:11 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf
O45 - LFCP:[MD5.B4CAF880B2836142FDA00BFB95558F6A] - 01/02/2013 - 01:53:15 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf
O45 - LFCP:[MD5.4271AA7208303B0C5AE32BF7BD0AB0E8] - 01/02/2013 - 03:50:12 ---A- - C:\Windows\Prefetch\DXDIAG.EXE-1F1A4BF5.pf
O45 - LFCP:[MD5.2333D7238825A2EF7F42997BC425675F] - 01/02/2013 - 03:50:22 ---A- - C:\Windows\Prefetch\DXDIAG.EXE-E91B0059.pf
O45 - LFCP:[MD5.8BA6B0DC9912BA66C9156609A221802C] - 01/02/2013 - 03:55:16 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-8293B1FD.pf
O45 - LFCP:[MD5.C7F90DA5A4EF047A32B71576A56132B0] - 01/02/2013 - 03:58:53 ---A- - C:\Windows\Prefetch\SIWPORTABLE_2011.10.29.PAF.EX-A796FF68.pf
O45 - LFCP:[MD5.28DDFBFB94B5820A7402BCBFD227A55E] - 01/02/2013 - 03:59:46 ---A- - C:\Windows\Prefetch\SIWPORTABLE.EXE-008C7F3B.pf
O45 - LFCP:[MD5.F2CF455C428C59E36E708F09BFFD51DC] - 01/02/2013 - 04:00:49 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-76936ED5.pf
O45 - LFCP:[MD5.FBAD02D6BD4521D425DF5671AA2BB3CC] - 01/02/2013 - 04:02:22 ---A- - C:\Windows\Prefetch\WMIAPSRV.EXE-29F35ED0.pf
O45 - LFCP:[MD5.997C57B6B0B7AB2D2266D084D37A6C2A] - 01/02/2013 - 04:06:04 ---A- - C:\Windows\Prefetch\RAREXTLOADER.EXE-8405D981.pf
O45 - LFCP:[MD5.2DDCA78C26649B040A49236590D4B093] - 01/02/2013 - 04:14:50 ---A- - C:\Windows\Prefetch\PRINTISOLATIONHOST.EXE-E0CD10A9.pf
O45 - LFCP:[MD5.10FF1217415E3B8939A4198FB5017EAB] - 01/02/2013 - 04:14:50 ---A- - C:\Windows\Prefetch\SPLWOW64.EXE-297C4568.pf
O45 - LFCP:[MD5.06239FBED3B2B005D4FFB760FA2FF5A4] - 01/02/2013 - 04:23:05 ---A- - C:\Windows\Prefetch\XPSRCHVW.EXE-FEB3BF01.pf
O45 - LFCP:[MD5.3C1782E43715CFD0751BF23B084A60D2] - 01/02/2013 - 04:34:38 ---A- - C:\Windows\Prefetch\HELPPANE.EXE-FEDC965B.pf
O45 - LFCP:[MD5.6EB2EB72E3A082F7562AA7B41ADF3BE2] - 01/02/2013 - 04:35:29 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-E2C2633A.pf
O45 - LFCP:[MD5.D24B11F3A5709CE88B0C410E0952CDF1] - 01/02/2013 - 04:40:59 ---A- - C:\Windows\Prefetch\MDM.EXE-EA9906DF.pf
O45 - LFCP:[MD5.2ABB61D40012F83F7A4778C1312682E9] - 01/02/2013 - 04:46:58 ---A- - C:\Windows\Prefetch\WMPLAYER.EXE-26C72A86.pf
O45 - LFCP:[MD5.FD557B92C113A8B8CAC030C81E3FE0C2] - 01/02/2013 - 04:50:35 ---A- - C:\Windows\Prefetch\EWORKER.EXE-5A2E38A9.pf
O45 - LFCP:[MD5.6736E3155324CF97C8CD1ED3957E4089] - 01/02/2013 - 04:50:36 ---A- - C:\Windows\Prefetch\FFMPEG.DLL-AE9601B9.pf
O45 - LFCP:[MD5.F844C14B20229F1C6EA87D9989C59503] - 01/02/2013 - 04:51:26 ---A- - C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf
O45 - LFCP:[MD5.5A3BF6F53E612DCE550D1590FEDE8F4E] - 01/02/2013 - 05:07:37 ---A- - C:\Windows\Prefetch\DTLITE.EXE-368347E6.pf
O45 - LFCP:[MD5.146930363B134CB1A6C35BC60B633F03] - 01/02/2013 - 05:20:06 ---A- - C:\Windows\Prefetch\YCT.EXE-7C95F1C6.pf
O45 - LFCP:[MD5.1AF9FE777AC12E8FC9EAB47BD2E95788] - 01/02/2013 - 09:47:18 ---A- - C:\Windows\Prefetch\OUTLOOK.EXE-1DD230C3.pf
O45 - LFCP:[MD5.50F4D0514EDE67BB7871905E93892DDF] - 01/02/2013 - 09:48:46 ---A- - C:\Windows\Prefetch\MSFEEDSSYNC.EXE-6E6FBDF4.pf
O45 - LFCP:[MD5.A4BCFB5A62387746D48C57935D32FC9F] - 01/02/2013 - 09:51:02 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-DE9673F9.pf
O45 - LFCP:[MD5.84307265719D2BC6C5E80C55ED77F9D1] - 01/02/2013 - 11:59:10 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf
O45 - LFCP:[MD5.9D28FD77DDBBEAC8880E48629B09B8DA] - 01/02/2013 - 12:01:05 ---A- - C:\Windows\Prefetch\AgCx_SC2.db
O45 - LFCP:[MD5.CF0AAE7B0310DA1829F167ADD46AAB76] - 01/02/2013 - 12:44:00 ---A- - C:\Windows\Prefetch\ELANTPCFG64.EXE-578825C3.pf
O45 - LFCP:[MD5.597CA5F3F7B87F98BBBC0269FFE557CF] - 01/02/2013 - 12:44:09 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:[MD5.2DBF381803DE74A816C416A73A799BBE] - 01/02/2013 - 12:45:09 ---A- - C:\Windows\Prefetch\AgCx_SC1.db
O45 - LFCP:[MD5.283C898BBA0B0BA45A542331B50BD4FC] - 01/02/2013 - 12:48:10 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-212477057-714126500-519854081-1000.db
O45 - LFCP:[MD5.1963CF3F0B3CFBC05AD3D9E2AC869EAF] - 01/02/2013 - 12:48:10 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf
O45 - LFCP:[MD5.0964317BA5432735C4666BB10C1A10BE] - 01/02/2013 - 12:48:11 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-212477057-714126500-519854081-1000.db
O45 - LFCP:[MD5.686E0A33BA68610701F4B0519ACCA971] - 01/02/2013 - 12:49:19 ---A- - C:\Windows\Prefetch\MPCMDRUN.EXE-6AA90EA5.pf
O45 - LFCP:[MD5.3D0C19AA2462A93151B760FD76F09410] - 01/02/2013 - 12:49:50 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-FDB87F72.pf
O45 - LFCP:[MD5.6FC7000F74884F8B76842BC36B9A3F3C] - 01/02/2013 - 12:49:52 ---A- - C:\Windows\Prefetch\ZHPDIAG2.EXE-CD10E419.pf
O45 - LFCP:[MD5.287EA1FD748E5BFAA20F36995CA2DE0C] - 01/02/2013 - 12:49:52 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-76EAC4D3.pf
O45 - LFCP:[MD5.7356FDB547DC46C5859A4518C5A8B95C] - 01/02/2013 - 13:03:18 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-37549B7E.pf
O45 - LFCP:[MD5.9C99DD4B2BD853F8E32B1A81FC552628] - 01/02/2013 - 13:03:25 ---A- - C:\Windows\Prefetch\SMSS.EXE-E9C28FC6.pf
O45 - LFCP:[MD5.92D6F230ADF35E7B3CC0737C018A25DB] - 01/02/2013 - 13:03:29 ---A- - C:\Windows\Prefetch\SMARTLOGON.EXE-8F794AF5.pf
O45 - LFCP:[MD5.82CA84DB03C0C2FAA546A9F0404096CB] - 01/02/2013 - 13:03:30 ---A- - C:\Windows\Prefetch\ATBROKER.EXE-2E15A492.pf
O45 - LFCP:[MD5.11A690991AFD7B10BA66A41942F3459C] - 01/02/2013 - 13:03:35 ---A- - C:\Windows\Prefetch\CSRSS.EXE-3FE41F7E.pf
O45 - LFCP:[MD5.E643BF3ABE0C2FAB58881D16D008B450] - 01/02/2013 - 13:03:35 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf
O45 - LFCP:[MD5.4DBF754F6FECD4311692D631CA60F026] - 01/02/2013 - 13:03:35 ---A- - C:\Windows\Prefetch\WINLOGON.EXE-B020DC41.pf
O45 - LFCP:[MD5.993E75A0959BD4BC82E1C8885E240EBB] - 01/02/2013 - 13:03:36 ---A- - C:\Windows\Prefetch\ATIECLXX.EXE-48B31DFA.pf
O45 - LFCP:[MD5.18AB5BB49953F84990FF0C913496F81C] - 01/02/2013 - 13:03:38 ---A- - C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf
O45 - LFCP:[MD5.61F4DAEC656A68B7D72C02A920451E5A] - 01/02/2013 - 13:03:40 ---A- - C:\Windows\Prefetch\HCONTROL.EXE-B5B27562.pf
O45 - LFCP:[MD5.6FBF38560F32B91F5EC3486ACD3704EB] - 01/02/2013 - 13:03:40 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf
O45 - LFCP:[MD5.4D0E70E2FCB44FB2C0A8C982784803BF] - 01/02/2013 - 13:03:40 ---A- - C:\Windows\Prefetch\USERINIT.EXE-2257A3E7.pf
O45 - LFCP:[MD5.DABA203832B84D7EEBBE4E3DAE63F07A] - 01/02/2013 - 13:03:45 ---A- - C:\Windows\Prefetch\ETDCTRLHELPER.EXE-44990BDC.pf
O45 - LFCP:[MD5.14704CB336C1F8D3ACEA4BE6DA852397] - 01/02/2013 - 13:03:46 ---A- - C:\Windows\Prefetch\AUDIODG.EXE-BDFD3029.pf
O45 - LFCP:[MD5.705FFD37ADFDE7843255A16FAFA8AE0D] - 01/02/2013 - 13:03:46 ---A- - C:\Windows\Prefetch\RAVCPL64.EXE-D6B4B613.pf
O45 - LFCP:[MD5.35E319565862165CC1B98555310D5B53] - 01/02/2013 - 13:05:53 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-D8414F97.pf
O45 - LFCP:[MD5.19F05CA6257478B08E35214DB5EB8964] - 01/02/2013 - 13:06:02 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.CA45909C7ED5E3D3E9DAA2C69CC51DC5] - 01/02/2013 - 13:06:02 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:[MD5.3A8DBC3B923E4DF38902496AE038F842] - 01/02/2013 - 13:06:03 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.02B7C33F64D5C42949C750A4642B7E80] - 01/02/2013 - 13:06:03 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.4241A4658E0D96C28C1C98C93A05F040] - 01/02/2013 - 13:06:03 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.CAEF64C08665870F78F30045843840E1] - 01/02/2013 - 13:07:49 ---A- - C:\Windows\Prefetch\LOGITECHUPDATE.EXE-008242B1.pf
O45 - LFCP:[MD5.FF9D2AF12B02DDADF79C7E8BA3D8E770] - 01/02/2013 - 13:07:49 ---A- - C:\Windows\Prefetch\LULNCHR.EXE-37645C64.pf
O45 - LFCP:[MD5.F68BD6B5EA4D8D4F1D4ADCE2B4FC9DCD] - 01/02/2013 - 13:07:49 ---A- - C:\Windows\Prefetch\LULNCHR.EXE-4FB3C747.pf
O45 - LFCP:[MD5.9CAF782974E455BF81DBF4EDC2B68568] - 01/02/2013 - 13:08:01 ---A- - C:\Windows\Prefetch\SRSPREMIUMPANEL_64.EXE-69917D19.pf
O45 - LFCP:[MD5.887A44BC3A11F598E96BD25EA08AD893] - 01/02/2013 - 13:08:12 ---A- - C:\Windows\Prefetch\FIREFOX.EXE-18ACFCFF.pf
O45 - LFCP:[MD5.CAA8C22455963A52079C86A05924E593] - 01/02/2013 - 13:08:33 ---A- - C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-F1B02F03.pf
O45 - LFCP:[MD5.5C46AD63246889761A53A660BDD71994] - 01/02/2013 - 13:08:34 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf
O45 - LFCP:[MD5.AA15AD6771C034CBB8D3C9EB2BAD78AC] - 01/02/2013 - 13:08:56 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf
O45 - LFCP:[MD5.BD9FCBD26C3E1C492E7B8AD96362CC00] - 01/02/2013 - 13:08:57 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-B95715F5.pf
O45 - LFCP:[MD5.799866BE507880C9CCEBEBB84AD6EDBA] - 01/02/2013 - 13:08:57 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-57D17DAF.pf
O45 - LFCP:[MD5.721BDF14DFB4534794B9BB520B29CBC3] - 01/02/2013 - 13:09:09 ---A- - C:\Windows\Prefetch\IASTORDATAMGRSVC.EXE-C086B157.pf
O45 - LFCP:[MD5.704F70EA798F928FF6DBA14A80632CA7] - 01/02/2013 - 13:09:13 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-DD6406E8.pf
O45 - LFCP:[MD5.E21713243D1254183BF27622D707E9D5] - 01/02/2013 - 13:09:17 ---A- - C:\Windows\Prefetch\CSC.EXE-4C85A8F6.pf
O45 - LFCP:[MD5.8CCF84501447FFF691B6DB580EF5B306] - 01/02/2013 - 13:09:17 ---A- - C:\Windows\Prefetch\CVTRES.EXE-CDAB491C.pf
O45 - LFCP:[MD5.B7A1008D69D1B60D907F9281FD2628FE] - 01/02/2013 - 13:09:17 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-B0F8131B.pf
O45 - LFCP:[MD5.017B1B1FAB04DF4D53643721C10EFF51] - 01/02/2013 - 13:09:18 ---A- - C:\Windows\Prefetch\UNS.EXE-E6E49771.pf
O45 - LFCP:[MD5.4252CB3E2B1BFC34B85D57903D4D47A8] - 01/02/2013 - 13:09:42 ---A- - C:\Windows\Prefetch\PRESENTATIONFONTCACHE.EXE-73BE9E78.pf
O45 - LFCP:[MD5.95D8787EA82B088D9E8F6DC99083DFF1] - 01/02/2013 - 13:10:39 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-87432CEE.pf
O45 - LFCP:[MD5.B93777B6D1E4F0A893C438FB1371A8E9] - 01/02/2013 - 13:10:43 ---A- - C:\Windows\Prefetch\ADWCLEANER.EXE-D37C4D7A.pf
O45 - LFCP:[MD5.D3BCD3EC6A8C155AECE18DFB7B920A91] - 01/02/2013 - 13:10:43 ---A- - C:\Windows\Prefetch\CMD.EXE-4A81B364.pf
O45 - LFCP:[MD5.C010355BA9E1488B756B28410A0159FF] - 01/02/2013 - 13:10:43 ---A- - C:\Windows\Prefetch\PING.EXE-7E94E73E.pf
O45 - LFCP:[MD5.935B57F958CA16D2C151637400B37450] - 01/02/2013 - 13:10:43 ---A- - C:\Windows\Prefetch\REG.EXE-E7E8BD26.pf
O45 - LFCP:[MD5.21046D530B6FD7EE1CD79BE6A7EC2C5D] - 01/02/2013 - 13:10:55 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf
O45 - LFCP:[MD5.94D3A799AD51C48C15952904266331A3] - 01/02/2013 - 13:11:07 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-ECB71776.pf
O45 - LFCP:[MD5.853A55ABE85FE02C58DEC923CF10ED5A] - 01/02/2013 - 13:11:17 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf
O45 - LFCP:[MD5.82417ADF63A59722A54A3BB113DB940D] - 01/02/2013 - 13:11:34 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-97F6A314.pf
O45 - LFCP:[MD5.3E931E5379ABBFBBD5AD9DCC5FA20E1A] - 01/02/2013 - 13:12:07 ---A- - C:\Windows\Prefetch\MBRCHECK.EXE-2CA9EB2F.pf
O45 - LFCP:[MD5.EE942422BC21139638D3BE79B1C8CEC3] - 01/02/2013 - 13:12:43 ---A- - C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf
O45 - LFCP:[MD5.AA3FA55F9BB27B1C60548B0EB1ED06C1] - 01/02/2013 - 13:12:48 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf
O45 - LFCP:[MD5.ED332A4B6F6B3E2A98CD5DAEC4A2E9AF] - 01/02/2013 - 13:12:53 ---A- - C:\Windows\Prefetch\ZHPDIAG.EXE-0D117CAF.pf
O45 - LFCP:[MD5.723EDF779346F24A8D24BFF2C9D08046] - 01/02/2013 - 13:12:56 ---A- - C:\Windows\Prefetch\CMD.EXE-AC113AA8.pf
O45 - LFCP:[MD5.DFEF5E83FECDC70DD54B956BA393F1FC] - 01/02/2013 - 13:12:56 ---A- - C:\Windows\Prefetch\CSCRIPT.EXE-0FB3F22C.pf
O45 - LFCP:[MD5.D0E30F58C60431DED0E8FEC351A79B37] - 01/02/2013 - 13:13:00 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-6768A320.pf
O45 - LFCP:[MD5.FEFC965122341D4C2C142711491DBF54] - 01/02/2013 - 13:13:01 ---A- - C:\Windows\Prefetch\PV.EXE-34B75B82.pf
O45 - LFCP:[MD5.0872358340B7B3B24036BC3B0822BAE2] - 01/02/2013 - 13:14:06 ---A- - C:\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf
O45 - LFCP:[MD5.1259696880987C0621230FB13A3FCE78] - 01/02/2013 - 13:14:06 ---A- - C:\Windows\Prefetch\SUBINACL.EXE-AB0CE9D9.pf
O45 - LFCP:[MD5.0C95CF83562A77A040304D659D8E9C50] - 01/02/2013 - 13:14:18 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-AD598958.pf
O45 - LFCP:[MD5.548234F007D91ABFF9E3B99DA916C82E] - 29/01/2013 - 18:15:26 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.4E3915C79D6376620DAE40186232ACCD] - 29/01/2013 - 18:16:39 ---A- - C:\Windows\Prefetch\AgCx_SC4.db
O45 - LFCP:[MD5.930CACD7276500F7E537AD8080CA28ED] - 30/01/2013 - 18:21:32 ---A- - C:\Windows\Prefetch\WUDFHOST.EXE-AFFEF87C.pf
O45 - LFCP:[MD5.BBA9D74880AF94B9DC5F1335CE2A57FF] - 30/01/2013 - 18:43:53 ---A- - C:\Windows\Prefetch\MPC-HC.EXE-69B90F3F.pf
O45 - LFCP:[MD5.F1BA342875815004D9171E715BE9B638] - 30/01/2013 - 22:29:31 ---A- - C:\Windows\Prefetch\JDOWNLOADERPORTABLE.EXE-F8DC7CA8.pf
O45 - LFCP:[MD5.FA66B69C82FF75A37A1D5262024A7BB6] - 30/01/2013 - 22:29:40 ---A- - C:\Windows\Prefetch\JAVAW.EXE-2699CD1A.pf
O45 - LFCP:[MD5.33FD18ACF42BFC40C1888AC473489AB7] - 30/01/2013 - 22:30:50 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-2E0B1501.pf
O45 - LFCP:[MD5.4BDF49B4A374FE71EB80B03E6A23CFAF] - 30/01/2013 - 23:29:55 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-6683447B.pf
O45 - LFCP:[MD5.D5C8697A51896B513B4DB8E7764A9ECB] - 31/01/2013 - 00:27:52 ---A- - C:\Windows\Prefetch\SPNOTIFIER.EXE-8C178813.pf
O45 - LFCP:[MD5.0D7C682162048A0B34CB4AC460ACD6BE] - 31/01/2013 - 17:44:21 ---A- - C:\Windows\Prefetch\DEVICEDISPLAYOBJECTPROVIDER.E-17410B90.pf
O45 - LFCP:[MD5.F3E4EFFF46C9BE431A8F3835AF59B483] - 31/01/2013 - 17:44:25 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-27CA0737.pf
O45 - LFCP:[MD5.EE69B9459B4CE71C44F305B273DBE099] - 31/01/2013 - 18:25:08 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf
O45 - LFCP:[MD5.BC0323F536F6F4849426ABC54A0311C3] - 31/01/2013 - 18:25:12 ---A- - C:\Windows\Prefetch\AM_DELTA_PATCH_1.143.1166.0.E-38A82BC6.pf
O45 - LFCP:[MD5.232F89FCCA9D4B4557BC4723CD3428D0] - 31/01/2013 - 18:25:12 ---A- - C:\Windows\Prefetch\MPSIGSTUB.EXE-6CB27A06.pf
O45 - LFCP:[MD5.458AAFFE77FF10F14BFD0B4815FC4437] - 31/01/2013 - 18:28:46 ---A- - C:\Windows\Prefetch\EXCEL.EXE-16800A1F.pf
O45 - LFCP:[MD5.3371AFADA92F22DD46315B57EC06F713] - 31/01/2013 - 18:42:36 ---A- - C:\Windows\Prefetch\INSTALLER.EXE-9DE612AA.pf
O45 - LFCP:[MD5.A154008A9FEFB21A0516AFA7B115F81F] - 31/01/2013 - 18:44:34 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-6A473D35.pf
O45 - LFCP:[MD5.9ADA68C31851DF4B93C83CA8B22EB8A8] - 31/01/2013 - 18:44:47 ---A- - C:\Windows\Prefetch\LE_DERNIER_TRAPPEUR_[DVDRIP]_-34F724C6.pf
O45 - LFCP:[MD5.71577448ADB0B50D78545FFBE6C0F8E0] - 31/01/2013 - 18:45:16 ---A- - C:\Windows\Prefetch\GOFORFILES.EXE-0946FD19.pf
O45 - LFCP:[MD5.E9FEB15EF17BFBD04898F3731F11C86E] - 31/01/2013 - 18:50:21 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-7FAA2E4C.pf
O45 - LFCP:[MD5.CF02E45B46CF5BA6D28CAF96CA5106D0] - 31/01/2013 - 18:50:21 ---A- - C:\Windows\Prefetch\UNINSTALL.EXE-5CFCADFB.pf
O45 - LFCP:[MD5.7BC81F1F98731755D8A2F3C718DDB145] - 31/01/2013 - 19:41:21 ---A- - C:\Windows\Prefetch\ADOBEARM.EXE-7105D3A2.pf
O45 - LFCP:[MD5.DDD1FDAD2972C4DFF63C28C93D3C78DD] - 31/01/2013 - 19:42:48 ---A- - C:\Windows\Prefetch\POWERPNT.EXE-E0C7CE05.pf
O45 - LFCP:[MD5.A779CDC7529071BF04ACB746AD099912] - 31/01/2013 - 21:09:26 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf
O45 - LFCP:[MD5.DE8A8A9483C6669BF8C2FF159F094152] - 31/01/2013 - 23:30:26 ---A- - C:\Windows\Prefetch\ACRORD32.EXE-97743AA9.pf
O45 - LFCP:[MD5.EF331326DEED5C16623EF40284ACE5A4] - 31/01/2013 - 23:31:14 ---A- - C:\Windows\Prefetch\PICASAPHOTOVIEWER.EXE-2A8AC753.pf
O45 - LFCP:[MD5.3AF87A574357F9BA194A500523A469F4] - 31/01/2013 - 23:31:18 ---A- - C:\Windows\Prefetch\PICASAUPDATER.EXE-C47D8BF0.pf
~ Scan Prefetcher in 00mn 01s



---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "C:\Users\Manu\AppData\Local\Temp\sahost.exe" [Enabled] .(...) -- C:\Users\Manu\AppData\Local\Temp\sahost.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Users\Manu\AppData\Local\Temp\lnyjdoar.exe" [Enabled] .(...) -- C:\Users\Manu\AppData\Local\Temp\lnyjdoar.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Users\Manu\AppData\Roaming\svhost.exe" [Enabled] .(...) -- C:\Users\Manu\AppData\Roaming\svhost.exe (.not file.)
~ Scan Keys in 00mn 00s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
~ Scan Keys in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s



---\\ MountPoints2 Shell Key (O51) (None)

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\Adobe ARM  [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher  [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe
O53 - SMSR:HKLM\...\startupreg\APSDaemon  [Key] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O53 - SMSR:HKLM\...\startupreg\ASUS Screen Saver Protector  [Key] . (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe
O53 - SMSR:HKLM\...\startupreg\ASUSWebStorage  [Key] . (...) -- C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\ATKMEDIA  [Key] . (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O53 - SMSR:HKLM\...\startupreg\Bouygues Connection Manager  [Key] . (.Bouygues - Internet Mobile 3G+ Bouygues Telecom.) -- C:\Program Files (x86)\Bouygues Telecom\Internet 3G+\Bouygues.exe
O53 - SMSR:HKLM\...\startupreg\Boxore Client  [Key] . (...) -- C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\CLMLServer  [Key] . (...) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\com.apple.dav.bookmarks.daemon  [Key] . (.Apple Inc. - BookmarkDAV_client.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe
O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite  [Key] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O53 - SMSR:HKLM\...\startupreg\DivXMediaServer  [Key] . (.Pas de propriétaire - DivX DLNA Media Server.) -- C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O53 - SMSR:HKLM\...\startupreg\DivXUpdate  [Key] . (.Pas de propriétaire - DivX Update.) -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
O53 - SMSR:HKLM\...\startupreg\eicgcy5s5obfxohxlxflrsmf  [Key] . (...) -- C:\Users\Manu\AppData\Roaming\Microsoftt\svuhost.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\facemoods  [Key] . (...) -- C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\gameflakeSA  [Key] . (...) -- C:\Users\Manu\AppData\Local\gameflakeSA\bin\1.0.10.0\gameflakeSA.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\HControlUser  [Key] . (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O53 - SMSR:HKLM\...\startupreg\IAStorIcon  [Key] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
O53 - SMSR:HKLM\...\startupreg\LogiScrollApp  [Key] . (...) -- C:\Program Files\Logitech\FlowScroll\KhalScroll.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\msnmsgr  [Key] . (...) -- ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\RemoteControl9  [Key] . (...) -- C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\RtHDVCpl  [Key] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O53 - SMSR:HKLM\...\startupreg\Setwallpaper  [Key] . (...) -- c:\programdata\SetWallpaper.cmd (.not file.)
O53 - SMSR:HKLM\...\startupreg\snp2uvc  [Key] . (.Sonix Technology Co., Ltd. - CameraMonitor Application.) -- C:\Windows\vsnp2uvc.exe
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched  [Key] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O53 - SMSR:HKLM\...\startupreg\SweetIM  [Key] . (...) -- C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Sweetpacks Communicator  [Key] . (...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Syncables  [Key] . (...) -- C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\SyncQuickBackup5  [Key] . (.SyncQuick - SyncQuick Backup 5.0.) -- C:\Program Files\SyncQuick\SyncQuick Backup 5.0\SyncQuickBackup5.exe
O53 - SMSR:HKLM\...\startupreg\SyncQuickNasUtil  [Key] . (.SyncQuick - NasBackupStartup.) -- C:\Program Files\SyncQuick\SyncQuick NAS Manager\NasBackupStartup.exe
O53 - SMSR:HKLM\...\startupreg\TomTomHOME.exe  [Key] . (...) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\UnlockerAssistant  [Key] . (...) -- C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\UpdateLBPShortCut  [Key] . (...) -- C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\UpdateP2GoShortCut  [Key] . (...) -- C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\UpdatePSTShortCut  [Key] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe
O53 - SMSR:HKLM\...\startupreg\Windows Mobile-based device management  [Key] . (.Microsoft Corporation - Gestionnaire pour appareils Windows Mobile.) -- C:\Windows\WindowsMobile\wmdcBase.exe
O53 - SMSR:HKLM\...\startupreg\Wireless Console 3  [Key] . (.Pas de propriétaire - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
O53 - SMSR:HKLM\...\startupreg\ZoneAlarm Installer  [Key] . (...) -- C:\Program Files (x86)\CheckPoint\Install\Launcher.exe (.not file.)
~ Scan SMSR Keys in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=3
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=3
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=0
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys   [491088]
O58 - SDL:[MD5.0450B9DA892E7F3AB8EE817D4E835C0B] - 24/07/2012 - 07:03:48 ----- . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN device driver.) -- C:\Windows\System32\athrx.sys   [3718144]
O58 - SDL:[MD5.B979979AB8027F7F53FB16EC4229B7DB] - 10/09/1999 - 12:06:00 ---A- . (.Adaptec - ASPI for WIN32 Kernel Driver.) -- C:\Windows\SysWOW64\drivers\Aspi32.sys   [25244]
O58 - SDL:[MD5.1E715247EFFFDDA938C085913045D599] - 23/07/2011 - 17:22:14 ---A- . (.Smith Micro Inc. - Smith Micro NDIS 5.0 Protocol Driver.) -- C:\Windows\SysWOW64\PCTINDIS5.sys   [32408]
~ Scan Drivers in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC:Last File Created 01/02/2013 - 05:05:45 ---A- C:\Users\Manu\AppData\Local\Temp\wmplog00.sqm   [1774]
O61 - LFC:Last File Created 01/02/2013 - 05:07:05 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\IconsCache\1025B069EC266928A8702B2EBDDA1B01.ico   [4286]
O61 - LFC:Last File Created 01/02/2013 - 05:07:30 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImgList.dat   [90]
O61 - LFC:Last File Created 01/02/2013 - 05:07:35 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\ajax_0bd1b2effe1b48a8b7bd46e87de1f583.dat   [734]
O61 - LFC:Last File Created 01/02/2013 - 05:07:35 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\ajax_4aa59b811676f1853c3a3a59b7a9254a.dat   [160]
O61 - LFC:Last File Created 01/02/2013 - 05:07:35 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\ajax_7f03d980002aa2de0a312a47e0734b8e.dat   [155448]
O61 - LFC:Last File Created 01/02/2013 - 05:07:35 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_503cad2fe48416caaba73946a85aa2e5.dat   [2090]
O61 - LFC:Last File Created 01/02/2013 - 05:07:35 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_c5a4177812794492ecdf3c4ae87fe81e.dat   [926]
O61 - LFC:Last File Created 01/02/2013 - 05:07:36 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_135fd02e44101de947f314e88ab35118.dat   [2110]
O61 - LFC:Last File Created 01/02/2013 - 05:07:36 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_19dd2dba9d5cd82acbe2afaac5ed8584.dat   [4538]
O61 - LFC:Last File Created 01/02/2013 - 05:07:36 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_2622f4fa275b0da630fe901e53c0b79b.dat   [2864]
O61 - LFC:Last File Created 01/02/2013 - 05:07:36 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_30fc5bd1f7e1237c73b95b46036b9fc5.dat   [15940]
O61 - LFC:Last File Created 01/02/2013 - 05:07:36 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_3812a8d56f27a84577aeaf123ea7838f.dat   [2088]
O61 - LFC:Last File Created 01/02/2013 - 05:07:36 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_4b42bc59d9408427002136a9324a60dd.dat   [2044]
O61 - LFC:Last File Created 01/02/2013 - 05:07:36 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_534f5a3827fa5660507b27b0e49ccb73.dat   [8268]
O61 - LFC:Last File Created 01/02/2013 - 05:07:36 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_535ff5b9996cd8e7a0bb300f257e05eb.dat   [3012]
O61 - LFC:Last File Created 01/02/2013 - 05:07:36 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_777afe7951218f035e20ea92ff644592.dat   [2180]
O61 - LFC:Last File Created 01/02/2013 - 05:07:36 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_927551fec5b082cd44b3b8b35c96e167.dat   [3128]
O61 - LFC:Last File Created 01/02/2013 - 05:07:36 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_940bbe5f7f6202c8fc0c05efd1d33056.dat   [1974]
O61 - LFC:Last File Created 01/02/2013 - 05:07:36 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_ee59b2853921505ce194b5b4478d200d.dat   [2398]
O61 - LFC:Last File Created 01/02/2013 - 05:07:36 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\pic_f4f7ce2117f4c0839059388215335986.dat   [2212]
O61 - LFC:Last File Created 01/02/2013 - 05:07:44 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\ajax_d92580040575528ac64717971ea63c31.dat   [898]
O61 - LFC:Last File Created 01/02/2013 - 05:07:49 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageCatalog.xml   [543]
O61 - LFC:Last File Created 01/02/2013 - 05:07:54 ---A- C:\Users\Manu\AppData\Roaming\DAEMON Tools Lite\ImageInfoCache\notice_0fa734c7feb2e4864d5de7320cb88fa5.dat   [8]
O61 - LFC:Last File Created 01/02/2013 - 05:17:27 ---A- C:\Users\Manu\AppData\Roaming\Microsoft\Outlook\Outlook.NK2   [65950]
O61 - LFC:Last File Created 01/02/2013 - 05:20:13 ---A- C:\Users\Manu\AppData\Local\Temp\atcMRUList.idx   [486]
O61 - LFC:Last File Created 01/02/2013 - 05:23:23 ---A- C:\Users\Manu\AppData\Roaming\Microsoft\Office\VB12.pip   [152]
O61 - LFC:Last File Created 01/02/2013 - 05:23:24 ---A- C:\Users\Manu\AppData\Roaming\Microsoft\Office\Excel12.pip   [1560]
O61 - LFC:Last File Created 01/02/2013 - 09:47:18 ---A- C:\Users\Manu\AppData\Local\16D66FF1-0E5F-4397-8BCF-30AF8A03CD23.aplzod\alarms.db   [6144]
O61 - LFC:Last File Created 01/02/2013 - 13:03:21 ---A- C:\Users\Manu\AppData\Local\16D66FF1-0E5F-4397-8BCF-30AF8A03CD23.aplzod\main.db   [7153664]
O61 - LFC:Last File Created 01/02/2013 - 13:03:21 ---A- C:\Users\Manu\AppData\Roaming\Microsoft\Office\MSOut12.pip   [1776]
O61 - LFC:Last File Created 01/02/2013 - 13:03:21 ---A- C:\Users\Manu\AppData\Roaming\Microsoft\Outlook\Outlook.xml   [3654]
O61 - LFC:Last File Created 01/02/2013 - 13:07:23 ---A- C:\Users\Manu\Links\Flux de photos.lnk   [154]
O61 - LFC:Last File Created 01/02/2013 - 13:07:28 ---A- C:\Users\Manu\AppData\Local\TomTom\HOME3\cache\cache-status.xml   [2489]
O61 - LFC:Last File Created 01/02/2013 - 13:07:28 ---A- C:\Users\Manu\AppData\Roaming\Uniblue\SpeedUpMyPC\settings.dat   [1392]
O61 - LFC:Last File Created 01/02/2013 - 13:07:31 ---A- C:\Users\Manu\AppData\Roaming\Apple Computer\MediaStream\local.db   [81920]
O61 - LFC:Last File Created 01/02/2013 - 13:07:31 ---A- C:\Users\Manu\AppData\Roaming\Uniblue\SpeedUpMyPC\state.sqlite   [84992]
O61 - LFC:Last File Created 01/02/2013 - 13:08:31 ---A- C:\Users\Manu\AppData\Local\SRS Labs\SRS Premium Sound\SRS_Premium_Sound_NoPreset_Settings.xml   [7840]
O61 - LFC:Last File Created 29/01/2013 - 06:22:17 ---A- C:\Users\Manu\AppData\Roaming\Apple Computer\Preferences\com.apple.mmcs.plist   [1895]
O61 - LFC:Last File Created 29/01/2013 - 06:22:19 ---A- C:\Users\Manu\AppData\Roaming\Apple Computer\MediaStream\dl\.cs\ChunkStoreDatabase   [131072]
O61 - LFC:Last File Created 29/01/2013 - 06:22:19 ---A- C:\Users\Manu\AppData\Roaming\Apple Computer\MediaStream\dl\.cs\ChunkStoreDatabase-journal   [57968]
O61 - LFC:Last File Created 29/01/2013 - 06:22:20 ---A- C:\Users\Manu\AppData\Roaming\Apple Computer\MediaStream\Thumbnails\My_Photo_Stream-67fa36faa180163a9616632be3802272.png   [626904]
O61 - LFC:Last File Created 30/01/2013 - 07:40:07 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\ioqueue\slingshot.ioq   [0]
O61 - LFC:Last File Created 30/01/2013 - 07:40:17 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\scanlist.txt   [66]
O61 - LFC:Last File Created 30/01/2013 - 07:40:17 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\thumbindex.db   [3672280]
O61 - LFC:Last File Created 30/01/2013 - 07:40:17 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\wordhash.dat   [4976056]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\albumdata_category.pmp   [2336]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\albumdata_date.pmp   [4652]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\albumdata_description.pmp   [637]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\albumdata_inisync.pmp   [4596]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\albumdata_location.pmp   [599]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\albumdata_music.pmp   [599]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\albumdata_name.pmp   [10110]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\albumdata_token.pmp   [14842]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\albums_0.db   [18721428]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\albums_index.db   [6920]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\bigthumbs_index.db   [1224272]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\catdata_catpri.pmp   [31]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\facetemplatesV2_index.db   [703832]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\imagedata_filetype.pmp   [234624]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\previews_index.db   [1184384]
O61 - LFC:Last File Created 30/01/2013 - 07:40:18 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\thumbs_index.db   [703832]
O61 - LFC:Last File Created 30/01/2013 - 07:40:19 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2Albums\frexcludefolders.txt   [82]
O61 - LFC:Last File Created 30/01/2013 - 07:40:19 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2Albums\watchedfolders.txt   [143]
O61 - LFC:Last File Created 30/01/2013 - 07:40:19 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\cache\cacheindex_lastfetch.pmp   [44]
O61 - LFC:Last File Created 30/01/2013 - 07:40:19 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\facetags.txt   [0]
O61 - LFC:Last File Created 30/01/2013 - 07:40:19 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\repository.dat   [293]
O61 - LFC:Last File Created 30/01/2013 - 07:40:19 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\saverlist.txt   [0]
O61 - LFC:Last File Created 30/01/2013 - 07:40:19 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\starlist.txt   [82]
O61 - LFC:Last File Created 30/01/2013 - 07:40:19 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\tags.txt   [0]
O61 - LFC:Last File Created 30/01/2013 - 07:40:19 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\thumbs2_index.db   [703832]
O61 - LFC:Last File Created 30/01/2013 - 07:40:19 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\db3\usernames.dat   [8]
O61 - LFC:Last File Created 30/01/2013 - 07:40:19 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\ioqueue\albumsafe.ioq   [0]
O61 - LFC:Last File Created 30/01/2013 - 07:40:19 ---A- C:\Users\Manu\AppData\Local\Google\Picasa2\ioqueue\filesafe.ioq   [0]
O61 - LFC:Last File Created 30/01/2013 - 18:22:21 ---A- C:\Users\Manu\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK   [795]
O61 - LFC:Last File Created 30/01/2013 - 18:22:23 ---A- C:\Users\Manu\AppData\Roaming\Microsoft\Office\Recent\Liste Divx_Dvd_Jeux.LNK   [987]
O61 - LFC:Last File Created 30/01/2013 - 18:40:02 ---A- C:\Users\Manu\AppData\Roaming\Microsoft\Forms\OUTLOOK.box   [7680]
O61 - LFC:Last File Created 30/01/2013 - 18:43:57 ---A- C:\Users\Manu\AppData\Roaming\Media Player Classic\default.mpcpl   [97]
O61 - LFC:Last File Created 30/12/1899 - 13:05:55 --HA- C:\Users\Manu\AppData\Local\IconCache.db   [3180826]
O61 - LFC:Last File Created 30/12/1899 - 18:22:23 --H-- C:\Users\Manu\AppData\Roaming\Microsoft\Office\Recent\index.dat   [2020]
O61 - LFC:Last File Created 30/12/1899 - 19:40:52 -SHA- C:\Users\Manu\AppData\Local\Temp\Cookies\index.dat   [16384]
O61 - LFC:Last File Created 30/12/1899 - 19:40:52 -SHA- C:\Users\Manu\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\index.dat   [32768]
O61 - LFC:Last File Created 30/12/1899 - 19:40:52 -SHA- C:\Users\Manu\AppData\Local\Temp\History\History.IE5\index.dat   [16384]
O61 - LFC:Last File Created 31/01/2013 - 00:27:26 ---A- C:\Users\Manu\AppData\Roaming\Uniblue\SpeedUpMyPC\history\latest_scan_results.xml   [4694]
O61 - LFC:Last File Created 31/01/2013 - 06:05:23 ---A- C:\Users\Manu\AppData\Roaming\Uniblue\SpeedUpMyPC\backup\20130131.060522.zip   [658]
O61 - LFC:Last File Created 31/01/2013 - 06:05:28 ---A- C:\Users\Manu\AppData\Roaming\Uniblue\SpeedUpMyPC\history\20130131-002726_repair.xml   [2833]
O61 - LFC:Last File Created 31/01/2013 - 06:05:32 ---A- C:\Users\Manu\AppData\Roaming\Uniblue\SpeedUpMyPC\last_fix_results.dat   [5321]
O61 - LFC:Last File Created 31/01/2013 - 06:05:32 ---A- C:\Users\Manu\AppData\Roaming\Uniblue\SpeedUpMyPC\last_scan_results.dat   [4619]
O61 - LFC:Last File Created 31/01/2013 - 18:06:38 ---A- C:\Users\Manu\AppData\Local\Temp\tempIcons\ab3201c6103205c14f6e56b11b2fcd46.ico   [1150]
O61 - LFC:Last File Created 31/01/2013 - 18:40:35 ---A- C:\Users\Manu\AppData\Local\Temp\uninstall175012919.exe   [4868168]
O61 - LFC:Last File Created 31/01/2013 - 18:44:59 ---A- C:\Users\Manu\AppData\Local\Temp\uninstall175037677.exe   [936960]
O61 - LFC:Last File Created 31/01/2013 - 18:50:31 ---A- C:\Users\Manu\AppData\Local\Temp\htmlayout.dll   [936960]
O61 - LFC:Last File Created 31/01/2013 - 19:43:10 ---A- C:\Users\Manu\AppData\Roaming\Microsoft\Office\PowerP12.pip   [1468]
O61 - LFC:Last File Created 31/01/2013 - 23:30:35 ---A- C:\Users\Manu\AppData\Roaming\Adobe\Acrobat\10.0\JSCache\GlobSettings   [24]
~ Scan Files in 01mn 35s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: SEAF By C_XX - (.C_XX.) [HKLM] -- SEAF
O63 - Logiciel: UsbFix By El Desaparecido - (.El Desaparecido.) [HKLM] -- Usbfix
O63 - Logiciel: ZHPDiag 1.34 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
O63 - Logiciel: OTM - (.OldTimer.)
~ Scan ADS in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 28/07/2012 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag)  .(.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
O64 - Services: CurCS - 03/07/2009 - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys (ASMMAP64)  .(.ASUS - Memory mapping Driver.) - LEGACY_ASMMAP64
O64 - Services: CurCS - 16/01/2013 - C:\Windows\System32\drivers\gfibto.sys (gfibto)  .(.GFI Software - GFI Boot Time Operations Driver.) - LEGACY_GFIBTO
O64 - Services: CurCS - 08/06/2010 - C:\Windows\System32\DRIVERS\iaStor.sys (iaStor)  .(.Intel Corporation - Intel Rapid Storage Technology driver - x64.) - LEGACY_IASTOR
O64 - Services: CurCS - 23/07/2011 - C:\Windows\system32\PCTINDIS5X64.sys (PCTINDIS5X64)  .(.Smith Micro Inc. - Smith Micro NDIS 5.0 Protocol Driver.) - LEGACY_PCTINDIS5X64
O64 - Services: CurCS - ??\??\???? - C:\Windows\System32\Drivers\secdrv.sys (secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
~ Scan Services in 00mn 01s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <ComFile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.exe> <exefile>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - http://search.live.com
~ Scan Keys in 00mn 00s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll   [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll   [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll   [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll   [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll   [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll   [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll   [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll   [2428952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll   [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [70656]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll   [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll   [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll   [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll   [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [100864]
~ Scan Services in 00mn 00s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.22279B5370200532070EC7F7A621B961] [SPRF][05/03/2011] (...) -- C:\Users\Manu\AppData\Local\fusioncache.dat   [92]
[MD5.A55B82103A202C20717F45C201EC4553] [SPRF][31/01/2013] (.Terra Informatica Software, Inc., British C - HTMLayout - embeddable HTML rendering and layout component.) -- C:\Users\Manu\AppData\Local\Temp\htmlayout.dll   [936960]
[MD5.1AFE300DB273B9D169AE95838A8C9FD5] [SPRF][31/01/2013] (.http://www.goforfiles.com/ - GoforFiles.) -- C:\Users\Manu\AppData\Local\Temp\uninstall175012919.exe   [4868168]
[MD5.A55B82103A202C20717F45C201EC4553] [SPRF][31/01/2013] (.Terra Informatica Software, Inc., British C - HTMLayout - embeddable HTML rendering and layout component.) -- C:\Users\Manu\AppData\Local\Temp\uninstall175037677.exe   [936960]
[MD5.8F45630065CDF96D3080B8552B2ABD4F] [SPRF][22/12/2011] (...) -- C:\Users\Manu\AppData\Roaming\data.bin   [16450]
[MD5.626B9E949BD14D554B7730B48A53A428] [SPRF][20/09/2012] (...) -- C:\Users\Manu\AppData\Roaming\lakerda1967.sys   [133]
[MD5.BA4E82626C7836C2A0B1B575E6A94810] [SPRF][07/12/2012] (.DsNET Corp - Pas de description.) -- C:\Users\Manu\Desktop\aTube_Catcher_Setup.exe   [11681632]
[MD5.0FB6D382FA5FBF72D05FC2A4503B7DF2] [SPRF][16/01/2013] (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Users\Manu\Desktop\mbam-setup-1.70.0.1100.exe   [10156344]
[MD5.F12E55B53835A7D98295419F0A1377A1] [SPRF][06/10/2011] (.Microsoft Corporation - Microsoft Fix it.) -- C:\Users\Manu\Desktop\MicrosoftFixit.wu.Run.exe   [347920]
[MD5.ABE171BFF8277921FD92BF5DEC76F363] [SPRF][17/01/2013] (.OldTimer Tools - Pas de description.) -- C:\Users\Manu\Desktop\OTM.exe   [522240]
[MD5.95A960B7C3C05CB9BBF0EDD80086F770] [SPRF][17/01/2013] (.C_XX - SEAF.) -- C:\Users\Manu\Desktop\seaf.exe   [498868]
[MD5.F6659D1B9DA5076E8CCE46E27E83541B] [SPRF][01/02/2013] (.PortableApps.com - SIW Portable.) -- C:\Users\Manu\Desktop\SIWPortable_2011.10.29.paf.exe   [2548777]
[MD5.329A2DEE532A1B4A21ED76F63D1EEF80] [SPRF][20/01/2013] (.El Desaparecido - UsbFix NSIS Installer.) -- C:\Users\Manu\Desktop\UsbFix.exe   [965841]
[MD5.A64D9D41212C73BAC017FE0D1D066D8F] [SPRF][01/02/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Manu\Desktop\ZHPDiag2.exe   [3872949]
~ Scan Files in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "{EFA98652-B437-42AA-B7D3-EFFD71ED4ECD}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{68F6992D-6E9D-4F14-88EC-3E0B8BEC7EFF}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{F7DCF881-DB9D-4779-8D1C-CCCBAC7C73FF}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{02A4D600-582A-4C14-ADFE-C125CF0CB18F}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{CF832454-F5DC-43BC-8118-FA2D8C092078}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\CyberLink\PowerDirector\PDR.exe (.not file.)
O87 - FAEL: "{C6F4542C-2505-49FD-B6C9-0AAFDAD7B307}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\Cyberlink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe (.not file.)
O87 - FAEL: "{52CB673D-8DD7-47CD-A50A-8567279FEFE1}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\Cyberlink\PowerDVD9\PowerDVD9.exe (.not file.)
O87 - FAEL: "TCP Query User{1245051F-AAD5-4F4A-A724-DC8C7F59A01F}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Private - P6 - TRUE | .(.Google.) -- C:\program files (x86)\google\google earth\client\googleearth.exe
O87 - FAEL: "UDP Query User{9A2CBB0A-4A6E-437D-84B2-515DF6123C54}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Private - P17 - TRUE | .(.Google.) -- C:\program files (x86)\google\google earth\client\googleearth.exe
O87 - FAEL: "TCP Query User{E254B245-3D5F-4F8C-9308-BA2D7E6D7B43}C:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe (.not file.)
O87 - FAEL: "UDP Query User{A9E47BE9-77A9-4664-B2DB-482ED284A5A8}C:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe (.not file.
O87 - FAEL: "{6EC9B3C7-0E24-4E0A-A200-E4C997F56B72}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{FD319954-B506-4AFB-AED6-FD106BF1D8AF}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{784A928B-F520-4BFC-BDCE-BDA58BD59AEC}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{3CE8D179-A2E7-4FBC-891A-7142FF9E0C7C}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "TCP Query User{7E452030-D547-429C-B076-A18A281E5A40}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Public - P6 - TRUE | .(.Google.) -- C:\program files (x86)\google\google earth\client\googleearth.exe
O87 - FAEL: "UDP Query User{1835BFEC-E593-42B4-9B71-9016DF6DD081}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Public - P17 - TRUE | .(.Google.) -- C:\program files (x86)\google\google earth\client\googleearth.exe
O87 - FAEL: "TCP Query User{29EC5FA1-590B-436B-83CA-3E1978E4C87B}C:\myvideosoft\myvideosoft.exe" |In - Private - P6 - TRUE | .(...) -- C:\myvideosoft\myvideosoft.exe (.not file.)
O87 - FAEL: "UDP Query User{20C503AC-2CF7-4A81-8118-9BF715B6A2CF}C:\myvideosoft\myvideosoft.exe" |In - Private - P17 - TRUE | .(...) -- C:\myvideosoft\myvideosoft.exe (.not file.)
O87 - FAEL: "{32CD45A3-BD17-4D24-9D19-254A1B775532}" |In - Public - P17 - TRUE | .(...) -- C:\myvideosoft\myvideosoft.exe (.not file.)
O87 - FAEL: "{6344FF9C-06AD-460C-8F39-272BB3682859}" |In - Public - P6 - TRUE | .(...) -- C:\myvideosoft\myvideosoft.exe (.not file.)
O87 - FAEL: "TCP Query User{9DCB01B6-728D-4529-BD1C-1AE5120C514C}C:\program files (x86)\emule\emule.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\emule\emule.exe (.not file.)
O87 - FAEL: "UDP Query User{2FB1A0A5-5824-43A7-A4B9-32FE9DA81DFB}C:\program files (x86)\emule\emule.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\emule\emule.exe (.not file.)
O87 - FAEL: "{02B7A5A6-8D73-499F-86AD-04B69FEDEB19}" |In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\emule\emule.exe (.not file.)
O87 - FAEL: "{417E0F4C-DA2A-4F6F-BFD8-B293A903DE00}" |In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\emule\emule.exe (.not file.)
O87 - FAEL: "TCP Query User{C068EBE2-DBCD-4F54-8603-8F04DE1EA15D}C:\program files (x86)\java\jre6\bin\javaw.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\java\jre6\bin\javaw.exe (.not file.)
O87 - FAEL: "UDP Query User{8BDBEB74-24F9-468D-A4C5-0B2390F87903}C:\program files (x86)\java\jre6\bin\javaw.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\java\jre6\bin\javaw.exe (.not file.)
O87 - FAEL: "TCP Query User{F1C42F8A-6B23-4E0B-B40C-403372F4A352}C:\program files\java\jre7\bin\javaw.exe" | In - Private - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\javaw.exe
O87 - FAEL: "UDP Query User{5EEC7640-C05F-468E-BF42-6A47C5F5078D}C:\program files\java\jre7\bin\javaw.exe" | In - Private - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\javaw.exe
O87 - FAEL: "{13C3CFC5-4F50-4322-8572-D78F6D2663A9}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\goforfilesdl.exe (.not file.)
O87 - FAEL: "{1C299616-3FC9-4E92-A50B-8DC052AD8617}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\goforfilesdl.exe (.not file.)
O87 - FAEL: "{FE635CF9-586A-4899-8104-7CAAB85816C4}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\GoforFiles.exe (.not file.)
O87 - FAEL: "{DF0BCEE5-5782-4A5B-8EF3-4E023A6194AF}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\GoforFiles.exe (.not file.)
~ Scan Firewall in 00mn 01s



---\\ Scan Additionnel (O88)
Database Version : v2.10390 - (29/01/2013)
Clés trouvées (Keys found) : 8
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 0
Fichiers trouvés  (Files found) : 0

[HKLM\Software\CrazyLoader]   =>Adware.SPointer
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Facemoods]   =>Adware.Facemoods
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SweetIM]   =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32]   =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS]   =>Adware.Bandoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}]   =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}]   =>Toolbar.Agent
~ Scan Additionnel in 00mn 14s



---\\ Recherche détournement de DNS routeur (O89) (None)

---\\ Product Upgrade Codes (O90)
O90 - PUC: "0AD2CD36C6A283C429947B3559546875" . (.Windows Live Mail.) -- C:\Windows\Installer\{63DC2DA0-2A6C-4C38-9249-B75395458657}\wlmail.exe
O90 - PUC: "0B85455F9ACD9C83C6D828F92264A355" . (.AMD Drag and Drop Transcoding.) -- C:\Windows\Installer\{F55458B0-DCA9-38C9-6C8D-829F22463A55}\ARPPRODUCTICON.exe
O90 - PUC: "0C7EC0FA4E3A37D489B82B1978CEE6A9" . (.QuickTime.) -- C:\Windows\Installer\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}\Installer.ico
O90 - PUC: "1271C3A5DE8F0E11A8BF8BCAF6798BE8" . (.Google Earth.) -- C:\Windows\Installer\{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}\ARPPRODUCTICON.exe
O90 - PUC: "16525446F96163A42AFF5B1E81CE565F" . (.ASUS SmartLogon.) -- C:\Windows\Installer\{64452561-169F-4A36-A2FF-B5E118EC65F5}\_4ae13d6c.exe
O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon
O90 - PUC: "21F1DBD139DE0C947ACC65BCED841885" . (.ASUS LifeFrame3.) -- C:\Windows\Installer\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "243493A986A4ABE4586A555B954F7E00" . (.Microsoft .NET Framework 1.1 French Language Pack.) -- C:\Windows\Installer\{9A394342-4A68-4EBA-85A6-55B559F4E700}\ndpsetup.ico
O90 - PUC: "2B0163E6D0340BE4183EB2758E9BEDD8" . (.Bonjour.) -- C:\Windows\Installer\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}\Bonjour.ico
O90 - PUC: "2E1C05ECFA01F0045AA3A4E3A04D682B" . (.Windows Live Contrôle parental.) -- C:\Windows\Installer\{CE50C1E2-10AF-400F-A53A-4A3E0AD486B2}\fssicon.ico
O90 - PUC: "30CD7EEB013E4DA84FD55B5A61F396F7" . (.ATI AVIVO64 Codecs.) -- C:\Windows\Installer\{BEE7DC03-E310-8AD4-F45D-B5A5163F697F}\ARPPRODUCTICON.exe
O90 - PUC: "32FA0F2EF2EF2224A934556EC34CE11F" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}\ARPPRODUCTICON.exe
O90 - PUC: "3F7A4F31CBAE1624FAB6317177F77055" . (.Fast Boot.) -- C:\Windows\Installer\{13F4A7F3-EABC-4261-AF6B-1317777F0755}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "422335550DAC5B9326791E2B1D8D1F67" . (.Catalyst Control Center.) -- C:\Windows\Installer\{55533224-CAD0-39B5-6297-E1B2D1D8F176}\ARPPRODUCTICON.exe
O90 - PUC: "42C6FBF1DF1C10144AB2C065F4E9E897" . (.PowerStarter.) -- C:\Windows\Installer\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\ARPPRODUCTICON.exe
O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico
O90 - PUC: "46FE56B5AFD1A414C849B77B6251E812" . (.ControlDeck.) -- C:\Windows\Installer\{5B65EF64-1DFA-414A-8C94-7BB726158E21}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "48EE17BC6AD8A304FAF5A07AD9A47AB3" . (.SyncQuick NAS Manager.) -- C:\Windows\Installer\{CB71EE84-8DA6-403A-AF5F-0AA79D4AA73B}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "4DECA5C83D43BB329FE0F209243012CB" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{8C5ACED4-34D3-23BB-F90E-2F90420321BC}\ARPPRODUCTICON.exe
O90 - PUC: "4F42BC0DF480ED046B9B0A63626E280F" . (.iCloud.) -- C:\Windows\Installer\{D0CB24F4-084F-40DE-B6B9-A03626E682F0}\ARP.ico
O90 - PUC: "66E9C8B676BA46B4FB9B678EEE32A490" . (.Internet Mobile 3G+ Bouygues Telecom .) -- C:\Windows\Installer\{6B8C9E66-AB67-4B64-BFB9-76E8EE234A09}\ARPPRODUCTICON.exe
O90 - PUC: "68AB67CA7DA76301B744AA0100000010" . (.Adobe Reader X (10.1.5) - Français.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O90 - PUC: "7CC6113DCD423AC4C91E32EF8D639E2F" . (.Assistant de connexion Windows Live.) -- C:\Windows\Installer\{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}\prodicon.ico
O90 - PUC: "81FE267FE903F3A49A8E14C92A4ECF1F" . (.SRS Premium Sound Control Panel.) -- C:\Windows\Installer\{F762EF18-309E-4A3F-A9E8-419CA2E4FCF1}\ARPPRODUCTICON.exe
O90 - PUC: "849FDF02DE8C34545A937F4FEA5FFA2A" . (.Wireless Console 3.) -- C:\Windows\Installer\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "92535283D79D1094EA35C59C37D6A3E2" . (.ASUS AI Recovery.) -- C:\Windows\Installer\{38253529-D97D-4901-AE53-5CC9736D3A2E}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "93300D18D8691D514399481356E898F6" . (.AMD Catalyst Install Manager.) -- C:\Windows\Installer\{81D00339-968D-15D1-3499-8431658E896F}\ARPPRODUCTICON.exe
O90 - PUC: "93EC1322369BD9B428A34F21CE6A731B" . (.Windows Live Writer.) -- C:\Windows\Installer\{2231CE39-B963-4B9D-823A-F412ECA637B1}\ApplicationIcon.ico
O90 - PUC: "943DAD3AE84E54EAF362B7084AFFDC62" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{A3DAD349-E48E-AE45-3F26-7B80A4FFCD26}\ARPPRODUCTICON.exe
O90 - PUC: "9CB9852F5E9106644A40F7E73C4EC1BB" . (.Neodivx.) -- C:\Windows\Installer\{F2589BC9-19E5-4660-A404-7F7EC3E41CBB}\ARPPRODUCTICON.exe
O90 - PUC: "A737BCDD8CEE518324AD9610A1553E5E" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{DDCB737A-EEC8-3815-42DA-69011A55E3E5}\ARPPRODUCTICON.exe
O90 - PUC: "AE48807DEC2E935419BD7466CCE1F5F5" . (.Apple Mobile Device Support.) -- C:\Windows\Installer\{D70884EA-E2CE-4539-91DB-4766CC1E5F5F}\Installer.ico
O90 - PUC: "B27818B2450AAD84EBB3AFC561C403A3" . (.ASUS FancyStart.) -- C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "B6F5FB4F596F2674EA2B0D594A3CD498" . (.Alcor Micro USB Card Reader.) -- C:\Windows\Installer\{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}\ARPPRODUCTICON.exe
O90 - PUC: "BCA36534B17385C498971B293B0924C4" . (.Galerie de photos Windows Live.) -- C:\Windows\Installer\{43563ACB-371B-4C58-8979-B192B390424C}\WLXPhotoGalleryIcon.exe
O90 - PUC: "BD528ECCA74340041A68F5A4F6DD5874" . (.Apple Application Support.) -- C:\Windows\Installer\{CCE825DB-347A-4004-A186-5F4A6FDD8547}\WinInstall.ico
O90 - PUC: "BE9D894AB729B954586DDDE68F2C5C46" . (.erLT.) -- C:\Windows\Installer\{A498D9EB-927B-459B-85D6-DD6EF8C2C564}\ARPPRODUCTICON.exe
O90 - PUC: "C3130D7651F4D734A9D21C6504882AA6" . (.Windows Live Sync.) -- C:\Windows\Installer\{67D0313C-4F15-437D-9A2D-C1564088A26A}\FolderShare48x48.ico
O90 - PUC: "D276F30548C6A844F8F8B43CA58C4314" . (.AMD APP SDK Runtime.) -- C:\Windows\Installer\{503F672D-6C84-448A-8F8F-4BC35AC83441}\ARPPRODUCTICON.exe
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "DA67D5E0BF3A5D84480098301B30713D" . (.iTunes.) -- C:\Windows\Installer\{0E5D76AD-A3FB-48D5-8400-8903B10317D3}\Installer.ico
O90 - PUC: "DDB6C50237B7ED245850A990F3532A83" . (.Outil de téléchargement Windows Live.) -- C:\Windows\Installer\{205C6BDD-7B73-42DE-8505-9A093F35A238}\RichUpload.ico
O90 - PUC: "E19212F84440D1B49B9F34077AE343D6" . (.WinFlash.) -- C:\Windows\Installer\{8F21291E-0444-4B1D-B9F9-4370A73E346D}\MyIcon
O90 - PUC: "E240C950A697CCA48AA1CE2C10B07BC8" . (.Windows Live Messenger.) -- C:\Windows\Installer\{059C042E-796A-4ACC-A81A-ECC2010BB78C}\MsblIco.Exe
O90 - PUC: "E339C5BAD7C503D43B41C9384AB949EB" . (.ATK Package.) -- C:\Windows\Installer\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}\_294823.exe
O90 - PUC: "EB8D5F6E00B09DD6819F4D407589CFEB" . (.AMD Media Foundation Decoders.) -- C:\Windows\Installer\{E6F5D8BE-0B00-6DD9-18F9-D4045798FCBE}\ARPPRODUCTICON.exe
O90 - PUC: "F433E2C65F73213C35AB41289F6ADFD4" . (.ccc-utility64.) -- C:\Windows\Installer\{6C2E334F-37F5-C312-53BA-1482F9A6FD4D}\ARPPRODUCTICON.exe
O90 - PUC: "FB9326B958E40954D827153ED01B9AAA" . (.ASUS Power4Gear Hybrid.) -- C:\Windows\Installer\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}\_6FEFF9B68218417F98F549.exe
~ Scan Files in 00mn 00s



---\\ MyComputer Name Space (O92)
O92 - MNS: Flux de photos - {F0D63F85-37EC-4097-B30D-61B4A8917118}
~ Scan MNS in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 18/12/2012 65192 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 22/06/2010 379520 |  (AFBAgent) . (.ASUSTeK Computer Inc..) - C:\Windows\system32\FBAgent.exe
SR - | Auto 28/07/2012 239616 |  (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 11/08/2012 55184 |  (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 16/06/2009 84536 |  (ASLDRService) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
SR - | Auto 15/12/2009 96896 |  (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
SR - | Auto 30/08/2011 462184 |  (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SS - | Demand 23/07/2011 114688 |  (BouyguesRcAppSvc) . (.SmithMicro Inc..) - C:\Program Files (x86)\Bouygues Telecom\Internet 3G+\RcAppSvc.exe
SS - | Demand 23/07/2011 118784 |  (CABouygues) . (.SmithMicro Inc..) - C:\Program Files (x86)\Bouygues Telecom\Internet 3G+\conappssvc.exe
SS - | Demand  173376 |  (EapSgnSvc) . (...) - C:\Program Files (x86)\Bouygues Telecom\Internet 3G+\EapSgnSvc64.exe
SS - | Demand 04/03/2011 654848 |  (FLEXnet Licensing Service) . (.Macrovision Europe Ltd..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - | Auto 13/12/2010 135664 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 13/12/2010 135664 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 13/12/2010 182768 |  (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - | Auto 17/08/2012 7168 |  (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SS - | Demand 12/12/2012 641504 |  (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SS - | Demand 27/09/2011 359192 |  (LBTServ) . (.Logitech, Inc..) - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
SR - | Auto 01/10/2009 262144 |  (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SS - | Demand 19/01/2013 115608 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Demand 23/07/2011 163840 |  (ProfileImpSvc) . (.SmithMicro Inc..) - C:\Program Files (x86)\Bouygues Telecom\Internet 3G+\ProfileImpSvc.exe
SR - | Auto 01/10/2009 2314240 |  (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SS - | Disabled  0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Scan Services in 00mn 01s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
~ Scan MBR in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Manu at 01/02/2013 13:18:58

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ Scan MBR in 00mn 04s



---\\ Liste des émulateurs de CD/DVD (Hook du MBR)
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
~ Scan Emulateurs in 00mn 04s



End of the scan (1818 lines in 06mn 09s)(0)