Rapport de ZHPDiag v1.3.5.92 par Nicolas Coolman, Update du 17/02/2013 Run by By.keita at 18/02/2013 07:44:43 State : Version à jour. High Elevated Privileges : OK UAC : Activate by user ---\\ Web Browser MSIE: Internet Explorer v9.0.8112.16421 MFIE: Mozilla Firefox 17.0.1 v17.0.1 GCIE: Google Chrome v24.0.1312.57 (Defaut) ---\\ Windows Product Information ~ Langage: Français Windows 7 Ultimate Edition, 32-bit (Build 7600) Windows Server License Manager Script : OK ~ Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : PMJBM Windows License : OK ~ Windows Remaining Initializations Number : 3 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ System Information ~ Processor: x86 Family 6 Model 42 Stepping 7, GenuineIntel ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 3563 MB (63% free) System Restore: Activé (Enable) System drive C: has 149 GB (32%) free of 466 GB ---\\ Logged in mode ~ Computer Name: BYKEITA-PC ~ User Name: By.keita ~ All Users Names: By.keita, Administrateur, ~ Unselected Option: O82 Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\By.keita\AppData\Roaming\ ~ %Desktop% : C:\Users\By.keita\Desktop\ ~ %Favorites% : C:\Users\By.keita\Favorites\ ~ %LocalAppData% : C:\Users\By.keita\AppData\Local\ ~ %StartMenu% : C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 149 Go of 466 Go) D:\ CD-ROM drive (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK ~ Scan Security Center in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.15BC38A7492BEFE831966ADB477CF76F] - (.Microsoft Corporation - Explorateur Windows.) (.13/07/2009 - 20:14:20.) -- C:\Windows\Explorer.exe [2613248] [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.13/07/2009 - 20:14:45.) -- C:\Windows\System32\Wininit.exe [96256] [MD5.1D94FA7C81D2FFE494AF094619BA706F] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.09/05/2012 - 18:30:51.) -- C:\Windows\System32\wininet.dll [1127424] [MD5.8EC6A4AB12B8F3759E21F8E3A388F2CF] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.13/07/2009 - 20:14:45.) -- C:\Windows\System32\Winlogon.exe [285696] [MD5.58C94EAE54BF0C5E2B80B2E5E7744D4C] - (.Microsoft Corporation - Bibliothèque de licences.) (.13/07/2009 - 20:16:15.) -- C:\Windows\System32\sppcomapi.dll [193024] [MD5.DDC040FDB01EF1712A6B13E52AFB104C] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.13/07/2009 - 18:12:38.) -- C:\Windows\system32\Drivers\AFD.sys [338944] [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 20:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584] [MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/07/2009 - 18:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656] [MD5.BA6E70AA0E6091BC39DE29477D866A77] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/07/2009 - 18:11:26.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544] [MD5.8E09E52EE2E3CEB199EF3DD99CF9E3FB] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.13/07/2009 - 18:14:17.) -- C:\Windows\system32\Drivers\DfsC.sys [78336] [MD5.717A2207FD6F13AD3E664C7D5A43C7BF] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.13/07/2009 - 18:50:56.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544] [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.13/07/2009 - 18:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896] [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.13/07/2009 - 18:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888] [MD5.F4A054BE78AF7F410129C4B64B07DC9B] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.13/07/2009 - 18:14:26.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123392] [MD5.DD52A733BF4CA5AF84562A5E2F963B91] - (.Microsoft Corporation - MBT Transport driver.) (.13/07/2009 - 18:12:21.) -- C:\Windows\system32\Drivers\netBT.sys [187904] [MD5.3795DCD21F740EE799FB7223234215AF] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.13/07/2009 - 20:20:44.) -- C:\Windows\system32\Drivers\ntfs.sys [1210432] [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.13/07/2009 - 18:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360] [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/07/2009 - 18:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848] [MD5.C5FF95883FFEF704D50C40D21CFB3AB5] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/07/2009 - 19:02:58.) -- C:\Windows\system32\Drivers\rdpdr.sys [133120] [MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.13/07/2009 - 18:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168] [MD5.CB39E896A2A83702D1737BFD402B3542] - (.Microsoft Corporation - TDI Translation Driver.) (.13/07/2009 - 18:12:11.) -- C:\Windows\system32\Drivers\tdx.sys [74240] [MD5.58DF9D2481A56EDDE167E51B334D44FD] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.13/07/2009 - 20:19:10.) -- C:\Windows\system32\Drivers\volsnap.sys [245328] ~ Scan Generic Processes in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/164 ~ Mes musiques (My Musics) : 107/4478 ~ Mes Videos (My Videos) : 1/4 ~ Mes Favoris (My Favorites) : 1/26 ~ Mes Documents (My Documents) : 6/3810 ~ Mon Bureau (My Desktop) : 7/31 ~ Menu demarrer (Programs) : 1/46 ~ Scan Hidden Files in 00mn 09s ---\\ Processus lancés [MD5.61D4B89D4209666849020B4B69791301] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [6318696] [PID.2972] [MD5.9D197E4D8D7ED5302609808CD21D56C0] - (.Logicool Co. Ltd. - Logicool WingMan Event Monitor.) -- C:\Program Files\Logitech\Gaming Software\LWEMon.exe [153672] [PID.3028] [MD5.B63E5C7807334A3A8F731062F15462CC] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008] [PID.3248] [MD5.C2C1407C129D67B412ED9CC5AF75D786] - (.www.IslamicFinder.org - Automatic Athan (Azan) five times a day f.) -- C:\Program Files\Athan\Athan.exe [1208320] [PID.3936] [MD5.083649EF692A066880C9326020915AFE] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4297136] [PID.3968] [MD5.12916E0642E92561C98B18A2A2D01B14] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848] [PID.4060] [MD5.1E09DFA4048196C9D3CC40C485A39422] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [299008] [PID.2184] [MD5.07B232A71D3BA8034262213AA41C35C8] - (.COMODO - COMODO Internet Security.) -- C:\Program Files\Comodo\COMODO Internet Security\CisTray.exe [1430736] [PID.2264] [MD5.F6987FF6C6D683F79FDCE707B071A997] - (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe [955392] [PID.2536] [MD5.DEED42C533A452FC79E6C5E5132BDAEB] - (.L'Aventure Multimedia - Dictionnaire MediaDICO pour Windows.) -- C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\MediaDico36.exe [280576] [PID.2584] [MD5.5C2A59CA663F3C4AEED98C3BB7E5F050] - (.L'Aventure Multimedia - Reconnaissance Automatique de Caractères.) -- C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\RAC36.exe [217171] [PID.4216] [MD5.C4506C1784F3573116D75EC02A886A8F] - (.COMODO - COMODO Internet Security.) -- C:\Program Files\Comodo\COMODO Internet Security\cis.exe [7626448] [PID.4380] [MD5.CF60E846B768BA0843AC04722785B55A] - (.Nonoh - Client to make VoIP calls..) -- C:\Program Files\Nonoh.net\Nonoh\nonoh.exe [23008656] [PID.4544] [MD5.2F0EAAF91FC7A5C70D1F4BE9B18A1CF5] - (.Microsoft Corporation - Pense-bête.) -- C:\Windows\System32\StikyNot.exe [354304] [PID.4608] [MD5.ECE9413226D1C6778A9EE4DFC199C1D4] - (.Google - Google Drive.) -- C:\Program Files\Google\Drive\googledrivesync.exe [16328976] [PID.4644] [MD5.5B53F8D06792D714486218C563F86656] - (.MSI - Super-Charger.) -- C:\Program Files\MSI\Super-Charger\Super-Charger.exe [506384] [PID.4728] [MD5.8196DFA43EE314CD387C3F139A74A023] - (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.exe [718720] [PID.4760] [MD5.9A8568C7642B79F43DCEB0BDF9F49050] - (.Druide informatique inc. - Gestionnaire Antidote.) -- C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe [542136] [PID.5080] [MD5.D52A3D6664E8BD95F8FFC6A4C0D35669] - (.AMD - HydraDM.) -- C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [393216] [PID.5172] [MD5.0654E4C1F597FC07D6FC7443D4F94840] - (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe [1248208] [PID.5184] [MD5.74CDE657245C114B98816E89B8D4CCD1] - (.ATI Technologies Inc. - Catalyst Control Center: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [299008] [PID.4720] [MD5.09E411E1DC92D813F49DFEEB4039CBCA] - (.Google - Google Talk Plugin.) -- C:\Users\By.keita\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe [79384] [PID.4332] [MD5.EA5B870671079786F335AC7C10846C4F] - (.Adobe Systems Incorporated - AAM Updates Notifier Application.) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe [295584] [PID.7632] [MD5.0F144ECA8CFEC8882A3809D176886255] - (.Microsoft Corporation - Microsoft PowerPoint.) -- C:\Program Files\Microsoft Office\Office14\POWERPNT.exe [2162024] [PID.8008] [MD5.F7DB6336DEFE82D7EAE25A6B656ED64A] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [5685760] [PID.7392] [MD5.DAA199690ED70FFE5765FBC3BCB48E7C] - (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2319504] [PID.1012] [MD5.20883D2D6E1D94321246AFF39AFCE56C] - (.AMD - AMD External Events Service Module.) -- C:\Windows\system32\atiesrxx.exe [219136] [PID.1116] [MD5.8FA553E9AE69808D99C164733A0F9590] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44808] [PID.1484] [MD5.E48C4113F81783222BFAF33C45117146] - (.AMD - AMD External Events Client Module.) -- C:\Windows\system32\atieclxx.exe [482304] [PID.1512] [MD5.7EF47644B74EBE721CC32211D3C35E76] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55144] [PID.2056] [MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.2144] [MD5.205E1B699FD3F2F9B036EEA2EC30C620] - (...) -- C:\Windows\system32\PnkBstrA.exe [76888] [PID.2216] [MD5.3436993699358419DFF0AB9DE669BE92] - (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe [404688] [PID.3664] [MD5.DF86570FFC4F8A7E38595CC072B19A5B] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [326424] [PID.2240] [MD5.1D2596FE2D7CF36C6F5F0D6B71E90E1E] - (.Intel Corporation - User Notification Service.) -- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2656536] [PID.4284] [MD5.358A9CCA612C68EB2F07DDAD4CE1D8D7] - (.Microsoft Corporation - Microsoft Office Software Protection Platfo.) -- C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.exe [4640000] [PID.7516] [MD5.4C287F9069FEDBD791178876EE9DE536] - (.Microsoft Corporation - Service de la plateforme de protection logi.) -- C:\Windows\system32\sppsvc.exe [3179520] [PID.7516] ~ Scan Processes Running in 00mn 01s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Preferences G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.com G0 - GCSP: Preference [User Data\Default] http://www.google.com G1 - GCS: Preference [User Data\Default] None ~ Scan Google Browser in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\By.keita\AppData\Roaming\Mozilla\Firefox\Profiles\7tdx18e3.default\prefs.js C:\Users\By.keita\AppData\Roaming\Mozilla\Firefox\Profiles\7tdx18e3.default\user.js M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml M0 - MFSP: prefs.js [By.keita - 7tdx18e3.default] http://allssearch.com M0 - MFSP: user.js [By.keita - 7tdx18e3.default] http://allssearch.com/ M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\50356e49370ac@50356e49370e6.info] [] DownloadnSave v1.0 (.JustPlugIt.) M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\coralietab@mozdev.org] [] IE Tab + v2.04.20110724 (.quaful@msn.com.) M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\foxsplitter@piro.sakura.ne.jp] [] Fox Splitter v2.04.20110724 (.YUKI "Piro" Hiroshi">.) M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\ietab@ip.cn] [] IE Tab Plus v2.0.0.0 (.quaful@msn.com.) M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\jid1-yZwVFzbsyfMrqQ@jetpack] [] Lavasoft Search Plugin v0.6 (.Lavasoft.) M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\{77b819fa-95ad-4f2c-ac7c-486b356188a9}] [] IE Tab v2.0.20120203 (.Hong Jen Yee (PCMan).) P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_168.dll P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf] - (.Foxit Corporation - Foxit Reader Plug-In For Firefox and Netscape.) -- C:\PROGRAM FILES\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.13.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.13.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.13.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll P2 - FPN: [HKLM] [@microsoft.com/SharePoint,version=14.0] - (.Microsoft Corporation - The plug-in allows you to open and edit files using Microsoft Office a.) -- C:\Program Files\Microsoft Office\Office14\NPSPWRAP.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.5] - (.VideoLAN - VLC media player Web Plugin 2.0.2.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.5.2".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\By.keita\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll P2 - FPN: [HKCU] [@talk.google.com/GoogleTalkPlugin] - (.Google - Version 3.13.2.11592.) -- C:\Users\By.keita\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll P2 - FPN: [HKCU] [@talk.google.com/O3DPlugin] - (.Pas de propriétaire - Google Talk Plugin Video Accelerator version:0.1.44.23.) -- C:\Users\By.keita\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll P2 - FPN: [HKCU] [ubisoft.com/uplaypc] - (.Ubisoft - Uplay PC Plugin.) -- C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ~ Scan Firefox Browser in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://allssearch.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Ubisoft - Uplay PC Plugin.) (No version) -- (.not file.) R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0 ~ Scan IE Browser in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Scan Proxy management in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\Userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Scan Keys in 00mn 00s ---\\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Scan Hosts File in 00mn 00s ~ Nombre de lignes (Lines number): 96 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll ~ Scan BHO in 00mn 00s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: avast! WebRep - [HKLM]{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ~ Scan Toolbar in 00mn 00s ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe O4 - HKLM\..\Run: [Super-Charger] . (.MSI - Super-Charger.) -- C:\Program Files\MSI\Super-Charger\StartSuperCharger.exe O4 - HKLM\..\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe O4 - HKLM\..\Run: [Start WingMan Profiler] . (.Logicool Co. Ltd. - Logicool WingMan Event Monitor.) -- C:\Program Files\Logitech\Gaming Software\LWEMon.exe O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe O4 - HKLM\..\Run: [AdobeCS5ServiceManager] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe O4 - HKLM\..\Run: [AdobeCS6ServiceManager] . (.Adobe Systems Incorporated - Adobe CS6 Service Manager.) -- C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe O4 - HKLM\..\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [Athan] . (.www.IslamicFinder.org - Automatic Athan (Azan) five times a day f.) -- C:\Program Files\Athan\Athan.exe O4 - HKLM\..\Run: [bdinstaller] . (.Bitdefender - Bitdefender Setup Launcher.) -- C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setuplauncher.exe O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Run: [COMODO Internet Security] . (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cistray.exe O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\By.keita\AppData\Local\Google\Update\GoogleUpdate.exe O4 - HKCU\..\Run: [MediaDICO36] . (.L'Aventure Multimedia - Pas de description.) -- C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\LanceMediaDICO36.exe O4 - HKCU\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe O4 - HKCU\..\Run: [Nonoh] . (.Nonoh - Client to make VoIP calls..) -- C:\Program Files\Nonoh.net\Nonoh\nonoh.exe O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] . (.Microsoft Corporation - Pense-bête.) -- C:\Windows\System32\StikyNot.exe O4 - HKCU\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files\Google\Drive\googledrivesync.exe O4 - HKCU\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.exe O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\By.keita\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] . (.Druide informatique inc. - Gestionnaire Antidote.) -- C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe O4 - HKCU\..\Run: [HydraVisionDesktopManager] . (.AMD - HydraDM.) -- C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_B7D67F305A96766D28B517DA4C64B651] . (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe O4 - HKUS\S-1-5-18\..\Run: [Gestionnaire Antidote.exe] . (.Druide informatique inc. - Gestionnaire Antidote.) -- C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\By.keita\AppData\Local\Google\Update\GoogleUpdate.exe O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [MediaDICO36] . (.L'Aventure Multimedia - Pas de description.) -- C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\LanceMediaDICO36.exe O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Nonoh] . (.Nonoh - Client to make VoIP calls..) -- C:\Program Files\Nonoh.net\Nonoh\nonoh.exe O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [RESTART_STICKY_NOTES] . (.Microsoft Corporation - Pense-bête.) -- C:\Windows\System32\StikyNot.exe O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files\Google\Drive\googledrivesync.exe O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.exe O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\By.keita\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Gestionnaire Antidote.exe] . (.Druide informatique inc. - Gestionnaire Antidote.) -- C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [HydraVisionDesktopManager] . (.AMD - HydraDM.) -- C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [GoogleChromeAutoLaunch_B7D67F305A96766D28B517DA4C64B651] . (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ~ Scan Application in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\By.keita\Desktop\Adobe Dreamweaver CS5.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Adobe\Adobe Dreamweaver CS5\Dreamweaver.exe O4 - Global Startup: C:\Users\By.keita\Desktop\Adobe Fireworks CS6.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Fireworks CS6\Fireworks.exe O4 - Global Startup: C:\Users\By.keita\Desktop\Adobe Photoshop CS6.lnk . (.Adobe Systems, Incorporated.) -- C:\Program Files\Adobe\Adobe Photoshop CS6\Photoshop.exe O4 - Global Startup: C:\Users\By.keita\Desktop\bf3 - Raccourci.lnk . (.EA Digital Illusions CE AB.) -- C:\Program Files\Battlefield 3\bf3.exe O4 - Global Startup: C:\Users\By.keita\Desktop\CDisplay.lnk . (.David Ayton.) -- C:\Program Files\CDisplay\CDisplay.exe O4 - Global Startup: C:\Users\By.keita\Desktop\FC3Updater - Raccourci.lnk . (.Ubisoft.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Updater.exe O4 - Global Startup: C:\Users\By.keita\Desktop\Glary Utilities.lnk . (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\Integrator.exe O4 - Global Startup: C:\Users\By.keita\Desktop\LMSOFT Web Creator Pro 5.lnk . (.LMSOFT.) -- C:\Program Files\LMSOFT\Web Creator Pro 5\WebCreatorPro5.exe O4 - Global Startup: C:\Users\By.keita\Desktop\LogoMaker.lnk . (.Studio V5 Corp..) -- C:\Program Files\Studio V5\LogoMaker\LogoMaker.exe O4 - Global Startup: C:\Users\By.keita\Desktop\pes2012 - Raccourci.lnk . (.Konami Digital Entertainment Co., Ltd..) -- C:\Program Files\KONAMI\Pro Evolution Soccer 2012\pes2012.exe O4 - Global Startup: C:\Users\By.keita\Desktop\Rayman Origins.lnk - Clé orpheline O4 - Global Startup: C:\Users\By.keita\Desktop\SUPER STREET FIGHTER IV ARCADE EDITION - Raccourci.lnk - Clé orpheline O4 - Global Startup: C:\Users\By.keita\Desktop\UpLauncher - Raccourci.lnk . (.Eden Games.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe O4 - Global Startup: C:\Users\By.keita\Desktop\XAMPP Control Panel.lnk . (...) -- C:\xampp\xampp-control.exe O4 - Global Startup: C:\Users\By.keita\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BitTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files\BitTorrent\BitTorrent.exe O4 - Global Startup: C:\Users\By.keita\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk . (...) -- C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe O4 - Global Startup: C:\Users\By.keita\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Scan Global Startup in 00mn 00s ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ Scan IE Control Panel in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office14\ONBttnIE.dll O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office14\ONBTTN~1.dll ~ Scan IE Extra Buttons in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corporation - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll O10 - WLSP:\000000000009\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll ~ Scan Winsock in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: NameServer = 8.26.56.26,156.154.70.22 O17 - HKLM\System\CCS\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpDomain = no-domain-set-bellcanada O17 - HKLM\System\CS1\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: NameServer = 8.26.56.26,156.154.70.22 O17 - HKLM\System\CS1\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpDomain = no-domain-set-bellcanada O17 - HKLM\System\CS2\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: NameServer = 8.26.56.26,156.154.70.22 O17 - HKLM\System\CS2\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpDomain = no-domain-set-bellcanada ~ Scan Domain in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll ~ Scan Protocole Additionnel in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ Scan SSODL in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: COMODO Internet Security Helper Service (cmdAgent) . (.COMODO - COMODO Internet Security.) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: Intel(R) Management and Security Applica (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ~ Scan Services in 00mn 09s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Scan Desktop Component in 00mn 00s ---\\ BootExecute (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ Scan Keys in 00mn 00s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000Core.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000UA.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GlaryInitialize.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000Core.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000UA.job [MD5.00000000000000000000000000000000] [APT] [Ad-Aware Antivirus Scheduled Scan] (...) -- C:\Program Files\AD-AWA~1\AdAwareLauncher.exe (.not file.) [MD5.563CDCFEEAEF97163E206AF71A61AA6E] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [MD5.1315C5C5C54CE2AA37A155F97027DB59] [APT] [AdobeAAMUpdater-1.0-Bykeita-PC-By.keita] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [MD5.7F19838AC317C34FCED020BE529AF71E] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [MD5.BE66B026CF488C87B4D0EA9E616FFA4A] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000Core] (.Facebook Inc..) -- C:\Users\By.keita\AppData\Local\Facebook\Update\FacebookUpdate.exe [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000UA] (.Facebook Inc..) -- C:\Users\By.keita\AppData\Local\Facebook\Update\FacebookUpdate.exe [MD5.095516791C381206B134525B68A480D8] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\initialize.exe [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000Core] (.Google Inc..) -- C:\Users\By.keita\AppData\Local\Google\Update\GoogleUpdate.exe [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000UA] (.Google Inc..) -- C:\Users\By.keita\AppData\Local\Google\Update\GoogleUpdate.exe [MD5.00000000000000000000000000000000] [APT] [{07BF5B6A-5D69-432F-AA40-D46B587E7543}] (...) -- D:\Autorun.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{EBA189EA-9942-459D-8156-F0C2B2022CC3}] (...) -- D:\Autorun.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{F94A5A03-6F68-4931-85B5-EEAFCB13CAD4}] (...) -- D:\Autorun.exe (.not file.) [MD5.09D4A3D2DF45F3CD8A1780AC95E49218] [APT] [COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}] (.COMODO.) -- C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [MD5.C4506C1784F3573116D75EC02A886A8F] [APT] [COMODO Welcome {CEB54B45-2B5E-4FF5-9223-6735CD80FE69}] (.COMODO.) -- C:\Program Files\COMODO\COMODO Internet Security\cis.exe ~ Scan Scheduled Task in 00mn 03s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Scan Active Setup in 00mn 00s ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: (cmderd) . (.COMODO - COMODO Internet Security Eradication Driver.) - C:\Windows\System32\DRIVERS\cmderd.sys O41 - Driver: (cmdGuard) . (.COMODO - COMODO Internet Security Sandbox Driver.) - C:\Windows\System32\DRIVERS\cmdguard.sys O41 - Driver: (cmdHlp) . (.COMODO - COMODO Internet Security Helper Driver.) - C:\Windows\System32\DRIVERS\cmdhlp.sys O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys O41 - Driver: (inspect) . (.COMODO - COMODO Internet Security Firewall Driver.) - C:\Windows\System32\DRIVERS\inspect.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys O41 - Driver: (SBRE) . (. - .) - C:\Windows\system32\drivers\SBREdrv.sys (.not file.) O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys ~ Scan Drivers in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM] -- {A25FF1C0-80B6-4B8B-A551-DC525697A408} O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM] -- {8A6EB60F-BC70-101B-CACE-9D7794767A3C} O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM] -- {3825F8BD-F784-6FBB-A5CD-857559148007} O42 - Logiciel: AMD Drag and Drop Transcoding - (.ATI Technologies Inc..) [HKLM] -- {B0228A47-8A56-6AA7-BE83-910BBDD19CB4} O42 - Logiciel: AMD Media Foundation Decoders - (.Advanced Micro Devices, Inc..) [HKLM] -- {F47F1D92-F4DF-4113-80B0-B58F2EB10F28} O42 - Logiciel: ATI AVIVO Codecs - (.ATI Technologies Inc..) [HKLM] -- {912CD7C9-BA8B-615B-4169-7D356461D6BC} O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- {77DCDCE3-2DED-62F3-8154-05E745472D07} O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FE23D063-934D-4829-A0D8-00634CE79B4A} O42 - Logiciel: Adobe Dreamweaver CS5 - (.Adobe Systems Incorporated.) [HKLM] -- {C79312BD-3E76-4474-A10C-1435D1856A4B} O42 - Logiciel: Adobe Fireworks CS6 - (.Adobe Systems Incorporated.) [HKLM] -- {CA7C485C-7A89-11E1-B2C8-CD54B377BC52} O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AF37176A-78CA-545B-34EF-8B6A21514DD1} O42 - Logiciel: Adobe Photoshop CS6 - (.Adobe Systems Incorporated.) [HKLM] -- {74EB3499-8B95-4B5C-96EB-7B342F3FD0C6} O42 - Logiciel: Adobe Reader 9.5.2 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-A95000000001} O42 - Logiciel: Alan Wake - (.Pas de propriétaire.) [HKLM] -- Alan Wake_is1 O42 - Logiciel: Angry Birds Space - (.Rovio.) [HKLM] -- {3F2A323E-60C4-41E8-8CCB-9715D1D750C3} O42 - Logiciel: Antidote RX v7 - (.Druide informatique inc..) [HKLM] -- {A474EA56-5DBD-4181-8230-806A4762EA7F} O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EB879750-CCBD-4013-BFD5-0294D4DA5BD0} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {EFC04D3F-A152-47E7-8517-EE0F6201AFEF} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} O42 - Logiciel: ArcGIS Desktop 10 - (.Environmental Systems Research Institute, Inc..) [HKLM] -- ArcGIS Desktop 10 O42 - Logiciel: ArcGIS Desktop 10 French Supplement - (.Environmental Systems Research Institute, Inc..) [HKLM] -- ArcGIS Desktop 10 French Supplement O42 - Logiciel: ArcGIS Desktop 10 French Supplement - (.Environmental Systems Research Institute, Inc..) [HKLM] -- {1E3BD9C6-538D-411D-8EA7-9E7073A6AB3B} O42 - Logiciel: Astroburn Lite - (.DT Soft Ltd.) [HKLM] -- Astroburn Lite O42 - Logiciel: Athan Basic 4.3 - (.Pas de propriétaire.) [HKLM] -- Athan O42 - Logiciel: Battlefield 3™ - (.Electronic Arts.) [HKLM] -- {76285C16-411A-488A-BCE3-C83CB933D8CF} O42 - Logiciel: BitTorrent - (.BitTorrent Inc..) [HKLM] -- BitTorrent O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: CDisplay 1.8 - (.dvd8n.) [HKLM] -- CDisplay_is1 O42 - Logiciel: COMODO Internet Security - (.COMODO Security Solutions Inc..) [HKLM] -- {BCC0552D-76C0-4130-BFBD-49BE49ACC594} O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM] -- {E2F0AF23-FE2F-4222-9A43-55E63CC41EF1} O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Lite O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU] -- Dropbox O42 - Logiciel: Fable III - (.Microsoft Game Studios.) [HKLM] -- {4D53090A-CE35-42BD-B377-831000018301} O42 - Logiciel: Facebook Video Calling 1.2.0.287 - (.Skype Limited.) [HKLM] -- {B92C5909-1D37-4C51-8397-A28BB28E5DC3} O42 - Logiciel: Far Cry 3 - (.Ubisoft.) [HKLM] -- {E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88} O42 - Logiciel: Foxit Reader - (.Foxit Corporation.) [HKLM] -- Foxit Reader_is1 O42 - Logiciel: Free Video to MP3 Converter version 5.0.15.706 - (.DVDVideoSoft Ltd..) [HKLM] -- Free Video to MP3 Converter_is1 O42 - Logiciel: Free YouTube Download version 3.0.22.221 - (.DVDVideoSoft Ltd..) [HKLM] -- Free YouTube Download_is1 O42 - Logiciel: French App Name - (.Adobe Systems Incorporated.) [HKLM] -- com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O42 - Logiciel: French App Name - (.Adobe Systems Incorporated.) [HKLM] -- {DE3A9DC5-9A5D-6485-9662-347162C7E4CA} O42 - Logiciel: Glary Utilities 2.53.0.1726 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1 O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome O42 - Logiciel: Google Drive - (.Google, Inc..) [HKLM] -- {7A21C722-F259-4976-B7AA-6658E5FDEDAF} O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM] -- {33286280-8617-11E1-8FF6-B8AC6F97B88E} O42 - Logiciel: Google Talk Plugin - (.Google.) [HKLM] -- {D952C4F9-2488-3723-84BE-1BFA907DCAC9} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: Grand Theft Auto IV - (.Rockstar Games Inc..) [HKLM] -- {5454083B-1308-4485-BF17-1110000B8301} O42 - Logiciel: HydraVision - (.ATI Technologies Inc..) [HKLM] -- {1C284C44-B8E0-2ED3-8154-52133AAFF538} O42 - Logiciel: Incomedia WebSite X5 v9 - Free - (.Incomedia s.r.l..) [HKLM] -- {9570A579-88E2-4B73-A28F-3ED8FCB8C0D8}_is1 O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} O42 - Logiciel: Java 7 Update 13 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217013FF} O42 - Logiciel: JavaFX 2.1.1 - (.Oracle Corporation.) [HKLM] -- {1111706F-666A-4037-7777-211328764D10} O42 - Logiciel: LMSOFT Web Creator Pro 5 - (.Pas de propriétaire.) [HKLM] -- Web Creator Pro 5 O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver O42 - Logiciel: Logitech Gaming Software 5.10 - (.Logitech.) [HKLM] -- {60D32CDC-E3BE-4578-BA10-29322307CDDC} O42 - Logiciel: LogoMaker 3.0 - (.Studio V5.) [HKLM] -- LogoMaker_is1 O42 - Logiciel: Micro Application - 36 Dictionnaires et Recueils de Correspondance - (.Pas de propriétaire.) [HKLM] -- {B410328C-0E8C-4DD2-9DB4-DE7766D0DFE0} O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F} O42 - Logiciel: Microsoft Games for Windows Marketplace - (.Microsoft Corporation.) [HKLM] -- {4CB0307C-565E-4441-86BE-0DF2E4FB828C} O42 - Logiciel: Mozilla Firefox 17.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 17.0.1 (x86 fr) O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService O42 - Logiciel: Nonoh - (.Finarea S.A. Switzerland.) [HKLM] -- Nonoh_is1 O42 - Logiciel: Norton Internet Security - (.Symantec Corporation.) [HKLM] -- {7B15D70E-9449-4CFB-B9BC-798465B2BD5C} O42 - Logiciel: Notepad++ - (.Pas de propriétaire.) [HKLM] -- Notepad++ O42 - Logiciel: PDF Settings CS6 - (.Adobe Systems Incorporated.) [HKLM] -- {BFEAAE77-BD7F-4534-B286-9C5CB4697EB1} O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: Pro Evolution Soccer 2012 - (.KONAMI.) [HKLM] -- {E737A098-F161-4B6F-AF22-86AAE34F6FBD} O42 - Logiciel: Rayman Origins - (.Ubisoft.) [HKLM] -- {DE491AB9-1D47-4FED-A8F5-4D4325B2EB4B} O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: SIGIS™ pour Windows© 95/98/NT/2000/XP/Vista/7 version 4.0 Gratu - (.Pas de propriétaire.) [HKLM] -- SIGIS™ pour Windows© 95/98/NT/2000/XP/Vista/7_is1 O42 - Logiciel: Screenseven! GAME CENTER - (.Pas de propriétaire.) [HKLM] -- FranceGPlayer O42 - Logiciel: Skype™ 6.1 - (.Skype Technologies S.A..) [HKLM] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D} O42 - Logiciel: Street Fighter X Tekken - (.CAPCOM U.S.A., INC.) [HKLM] -- {43430FA5-AF68-4A2D-A7D4-891000008200} O42 - Logiciel: Super Street Fighter IV: Arcade Edition - (.CAPCOM U.S.A., INC.) [HKLM] -- GFWL_{43430FA0-49F0-4B13-B4C5-611000008100} O42 - Logiciel: Super Street Fighter IV: Arcade Edition - (.CAPCOM U.S.A., INC.) [HKLM] -- {43430FA0-49F0-4B13-B4C5-611000008100} O42 - Logiciel: Super-Charger - (.MSI.) [HKLM] -- {7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1 O42 - Logiciel: SuperCopier2 - (.Pas de propriétaire.) [HKLM] -- SuperCopier2 O42 - Logiciel: Test Drive Unlimited 2 - (.Atari.) [HKLM] -- Test Drive Unlimited 2_is1 O42 - Logiciel: Uplay - (.Ubisoft.) [HKLM] -- Uplay O42 - Logiciel: VLC media player 2.0.5 - (.VideoLAN.) [HKLM] -- VLC media player O42 - Logiciel: Winki - (.MSI.) [HKLM] -- {81CF5153-38CF-41e2-AC3C-3D477C987D96}_is1 O42 - Logiciel: XAMPP 1.8.0 - (.Pas de propriétaire.) [HKLM] -- xampp O42 - Logiciel: ZTE Driver pour mobile - (.ZTE Corporation.) [HKLM] -- {D2D77DC2-8299-11D1-8949-444553540000}_is1 O42 - Logiciel: avast! Free Antivirus v7.0.1474.0 - (.AVAST Software.) [HKLM] -- avast ---\\ HKCU & HKLM Software Keys [HKCU\Software\AMD] [HKCU\Software\ATI] [HKCU\Software\Adobe] [HKCU\Software\AppDataLow\Software\JavaSoft] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\Avast Software] [HKCU\Software\BitTorrent] [HKCU\Software\Bitdefender] [HKCU\Software\CDisplay] [HKCU\Software\Caphyon] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\ComodoGroup] [HKCU\Software\Conduit] [HKCU\Software\Convar] [HKCU\Software\DSS] [HKCU\Software\DT Soft] [HKCU\Software\DVDVideoSoft] [HKCU\Software\Dashlane] [HKCU\Software\Druide informatique inc.] [HKCU\Software\ESRI] [HKCU\Software\Facebook] [HKCU\Software\Foxit Software] [HKCU\Software\GlarySoft] [HKCU\Software\Google] [HKCU\Software\HookNetwork] [HKCU\Software\IM Providers] [HKCU\Software\Image-Line] [HKCU\Software\JavaSoft] [HKCU\Software\LAventure] [HKCU\Software\LMSOFT] [HKCU\Software\Licenses] [HKCU\Software\LogMeIn] [HKCU\Software\Logitech] [HKCU\Software\LtdStrInfo] [HKCU\Software\Macromedia] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\NCH Software] [HKCU\Software\NCH Swift Sound] [HKCU\Software\Netscape] [HKCU\Software\Nonoh] [HKCU\Software\Norton] [HKCU\Software\ODBC] [HKCU\Software\OXXOgames] [HKCU\Software\PDFCreator] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\Realtek] [HKCU\Software\Rockstar Games] [HKCU\Software\SFX TEAM] [HKCU\Software\SecuROM] [HKCU\Software\SkypeRS] [HKCU\Software\Skype] [HKCU\Software\SoftVoice] [HKCU\Software\Softonic] [HKCU\Software\StudioV5] [HKCU\Software\SubSystems] [HKCU\Software\Summitsoft] [HKCU\Software\Symantec] [HKCU\Software\Trolltech] [HKCU\Software\Ubisoft] [HKCU\Software\Usbfix] [HKCU\Software\Valve] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\Wintertree] [HKCU\Software\ZebHelpProcess Helper] [HKLM\Software\AMD] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\AVAST Software] [HKLM\Software\Adobe] [HKLM\Software\Apple Inc.] [HKLM\Software\Atari] [HKLM\Software\Babylon] [HKLM\Software\Belarc] [HKLM\Software\Bunndle] [HKLM\Software\CAPCOM] [HKLM\Software\Caphyon] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\ComodoGroup] [HKLM\Software\Conduit] [HKLM\Software\DT Soft] [HKLM\Software\DTS] [HKLM\Software\DVDVideoSoft] [HKLM\Software\Dolby] [HKLM\Software\Druide informatique inc.] [HKLM\Software\EA Games] [HKLM\Software\ESRI] [HKLM\Software\Electronic Arts] [HKLM\Software\Even Balance] [HKLM\Software\Foxit Software] [HKLM\Software\GlarySoft] [HKLM\Software\Google] [HKLM\Software\IM Providers] [HKLM\Software\Image-Line] [HKLM\Software\Incomedia] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\KONAMI] [HKLM\Software\Khronos] [HKLM\Software\Knowles] [HKLM\Software\LMSOFT] [HKLM\Software\Logitech] [HKLM\Software\MSI] [HKLM\Software\Macromedia] [HKLM\Software\Macrovision] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\ODBC] [HKLM\Software\Oracle] [HKLM\Software\Outsim] [HKLM\Software\PDFCreator] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Propellerhead Software] [HKLM\Software\Python] [HKLM\Software\RTLSetup] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\Sigisco] [HKLM\Software\Skype] [HKLM\Software\SoftVoice] [HKLM\Software\SonicFocus] [HKLM\Software\Sonic] [HKLM\Software\Symantec] [HKLM\Software\Systweak] [HKLM\Software\UBISOFT] [HKLM\Software\VST] [HKLM\Software\Vantage Software Technologies] [HKLM\Software\VideoLAN] [HKLM\Software\Volatile] [HKLM\Software\WinRAR] [HKLM\Software\Wow6432Node] [HKLM\Software\mozilla.org] [HKLM\Software\oxxogames] ~ Scan Softwares in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 10/02/2013 - 18:50:16 - [0,014] ----D C:\Program Files\A-FF Find and Mount O43 - CFD: 04/11/2012 - 11:28:06 - [618,665] ----D C:\Program Files\Ad-Aware Antivirus O43 - CFD: 19/07/2012 - 22:28:15 - [1489,904] ----D C:\Program Files\Adobe O43 - CFD: 15/07/2012 - 19:43:45 - [2,665] ----D C:\Program Files\Adobe Media Player O43 - CFD: 29/07/2012 - 00:26:40 - [0] ----D C:\Program Files\allsearch O43 - CFD: 06/02/2013 - 00:13:01 - [1,711] ----D C:\Program Files\AMD APP O43 - CFD: 06/02/2013 - 00:13:56 - [0,397] ----D C:\Program Files\AMD AVT O43 - CFD: 29/05/2012 - 16:46:40 - [2,316] ----D C:\Program Files\Apple Software Update O43 - CFD: 10/05/2012 - 00:07:49 - [-1906,237] ----D C:\Program Files\ArcGIS O43 - CFD: 26/10/2012 - 15:33:17 - [12,893] ----D C:\Program Files\Astroburn Lite O43 - CFD: 23/05/2012 - 12:58:56 - [-1841,870] ----D C:\Program Files\Atari O43 - CFD: 20/11/2012 - 11:37:19 - [18,843] ----D C:\Program Files\Athan O43 - CFD: 09/05/2012 - 13:17:46 - [20,405] ----D C:\Program Files\ATI O43 - CFD: 06/02/2013 - 00:10:26 - [65,298] ----D C:\Program Files\ATI Technologies O43 - CFD: 30/10/2012 - 13:09:25 - [490,969] ----D C:\Program Files\AVAST Software O43 - CFD: 12/05/2012 - 13:06:03 - [-255,437] ----D C:\Program Files\Battlefield 3 O43 - CFD: 02/06/2012 - 17:11:42 - [6,085] ----D C:\Program Files\BitTorrent O43 - CFD: 29/05/2012 - 16:46:11 - [0,602] ----D C:\Program Files\Bonjour O43 - CFD: 02/06/2012 - 13:06:39 - [1789,007] ----D C:\Program Files\Capcom O43 - CFD: 30/09/2012 - 02:40:58 - [4,795] ----D C:\Program Files\CCleaner O43 - CFD: 15/02/2013 - 14:09:16 - [1,953] ----D C:\Program Files\CDisplay O43 - CFD: 04/07/2012 - 01:00:34 - [0,055] ----D C:\Program Files\Chrome O43 - CFD: 10/02/2013 - 18:43:03 - [1380,501] ----D C:\Program Files\Common Files O43 - CFD: 10/02/2013 - 18:41:48 - [98,390] ----D C:\Program Files\Comodo O43 - CFD: 10/02/2013 - 18:50:44 - [0] ----D C:\Program Files\Convar O43 - CFD: 09/05/2012 - 22:53:27 - [24,667] ----D C:\Program Files\DAEMON Tools Lite O43 - CFD: 21/11/2012 - 02:39:21 - [149,919] ----D C:\Program Files\Druide O43 - CFD: 14/07/2009 - 04:01:30 - [79,371] ----D C:\Program Files\DVD Maker O43 - CFD: 20/07/2012 - 14:50:27 - [28,868] ----D C:\Program Files\DVDVideoSoft O43 - CFD: 09/05/2012 - 12:49:18 - [0] ----D C:\Program Files\Fichiers communs O43 - CFD: 29/05/2012 - 05:12:29 - [42,872] ----D C:\Program Files\Foxit Software O43 - CFD: 06/07/2012 - 23:07:58 - [0,000] ----D C:\Program Files\Free Offers from Freeze.com O43 - CFD: 05/02/2013 - 22:56:58 - [18,812] ----D C:\Program Files\Glary Utilities O43 - CFD: 16/09/2012 - 02:00:36 - [86,057] ----D C:\Program Files\Google O43 - CFD: 03/07/2012 - 20:35:24 - [0,150] ----D C:\Program Files\GreenTree Applications O43 - CFD: 09/12/2012 - 10:52:16 - [7,970] ----D C:\Program Files\Image-Line O43 - CFD: 31/12/2012 - 00:06:32 - [77,181] --H-D C:\Program Files\InstallShield Installation Information O43 - CFD: 09/05/2012 - 13:03:17 - [8,854] ----D C:\Program Files\Intel O43 - CFD: 09/05/2012 - 18:35:57 - [4,933] ----D C:\Program Files\Internet Explorer O43 - CFD: 03/02/2013 - 10:08:57 - [121,959] ----D C:\Program Files\Java O43 - CFD: 10/02/2013 - 17:39:09 - [-480,688] ----D C:\Program Files\KONAMI O43 - CFD: 02/01/2013 - 18:16:26 - [6,577] ----D C:\Program Files\Lavalys O43 - CFD: 15/06/2012 - 22:28:58 - [260,458] ----D C:\Program Files\LMSOFT O43 - CFD: 15/05/2012 - 10:21:08 - [39,143] ----D C:\Program Files\Logitech O43 - CFD: 09/05/2012 - 17:07:23 - [246,034] ----D C:\Program Files\Micro Application O43 - CFD: 09/05/2012 - 22:56:35 - [38,002] ----D C:\Program Files\Microsoft Analysis Services O43 - CFD: 06/07/2012 - 23:14:34 - [140,965] ----D C:\Program Files\Microsoft Games O43 - CFD: 29/07/2012 - 10:17:59 - [8,929] ----D C:\Program Files\Microsoft Games for Windows - LIVE O43 - CFD: 09/05/2012 - 22:58:10 - [950,623] ----D C:\Program Files\Microsoft Office O43 - CFD: 10/05/2012 - 00:11:34 - [0,054] ----D C:\Program Files\Microsoft SQL Server O43 - CFD: 09/05/2012 - 22:58:09 - [1,722] ----D C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 09/05/2012 - 22:58:09 - [0,757] ----D C:\Program Files\Microsoft Sync Framework O43 - CFD: 09/05/2012 - 22:58:26 - [0,312] ----D C:\Program Files\Microsoft Synchronization Services O43 - CFD: 09/05/2012 - 22:57:26 - [1,314] ----D C:\Program Files\Microsoft Visual Studio 8 O43 - CFD: 27/10/2012 - 10:56:12 - [7,789] ----D C:\Program Files\Microsoft.NET O43 - CFD: 02/01/2013 - 01:29:55 - [42,553] ----D C:\Program Files\Mozilla Firefox O43 - CFD: 05/01/2013 - 10:49:46 - [0,212] ----D C:\Program Files\Mozilla Maintenance Service O43 - CFD: 06/06/2012 - 23:28:50 - [0,025] ----D C:\Program Files\MSBuild O43 - CFD: 09/05/2012 - 13:03:33 - [15,074] ----D C:\Program Files\MSI O43 - CFD: 18/06/2012 - 05:25:26 - [42,699] ----D C:\Program Files\Nonoh.net O43 - CFD: 15/07/2012 - 22:05:05 - [11,808] ----D C:\Program Files\Notepad++ O43 - CFD: 03/07/2012 - 20:35:33 - [33,205] ----D C:\Program Files\Oracle O43 - CFD: 09/12/2012 - 10:51:59 - [3,453] ----D C:\Program Files\Outsim O43 - CFD: 07/11/2012 - 03:31:29 - [32,619] ----D C:\Program Files\PDFCreator O43 - CFD: 09/05/2012 - 13:03:11 - [36,376] ----D C:\Program Files\Realtek O43 - CFD: 13/07/2009 - 23:52:30 - [36,805] ----D C:\Program Files\Reference Assemblies O43 - CFD: 03/06/2012 - 01:58:04 - [614,512] ----D C:\Program Files\Remedy Entertainment O43 - CFD: 05/06/2012 - 08:41:06 - [35,145] ----D C:\Program Files\Rovio O43 - CFD: 01/01/2013 - 15:46:42 - [4,793] ----D C:\Program Files\SIGISCO O43 - CFD: 27/01/2013 - 14:31:15 - [18,091] R---D C:\Program Files\Skype O43 - CFD: 10/02/2013 - 20:03:28 - [323,554] ----D C:\Program Files\Studio V5 O43 - CFD: 10/02/2013 - 20:21:54 - [1067,478] ----D C:\Program Files\Summitsoft O43 - CFD: 09/05/2012 - 17:14:35 - [1,169] ----D C:\Program Files\SuperCopier2 O43 - CFD: 09/05/2012 - 13:02:14 - [0] --H-D C:\Program Files\Temp O43 - CFD: 28/05/2012 - 00:22:30 - [83,428] ----D C:\Program Files\THQ O43 - CFD: 31/12/2012 - 00:17:39 - [426,012] ----D C:\Program Files\Ubisoft O43 - CFD: 13/07/2009 - 23:53:23 - [0] --H-D C:\Program Files\Uninstall Information O43 - CFD: 06/07/2012 - 23:05:48 - [94,578] ----D C:\Program Files\VideoLAN O43 - CFD: 10/02/2013 - 18:48:32 - [0] ----D C:\Program Files\VstPlugins O43 - CFD: 25/12/2012 - 10:00:42 - [57,691] ----D C:\Program Files\WebSite X5 v9 - Free O43 - CFD: 14/07/2009 - 03:39:39 - [2,909] ----D C:\Program Files\Windows Defender O43 - CFD: 14/07/2009 - 04:01:29 - [6,689] ----D C:\Program Files\Windows Journal O43 - CFD: 14/07/2009 - 03:39:39 - [5,895] ----D C:\Program Files\Windows Mail O43 - CFD: 14/07/2009 - 03:39:39 - [6,302] ----D C:\Program Files\Windows Media Player O43 - CFD: 09/05/2012 - 12:49:18 - [11,630] ----D C:\Program Files\Windows NT O43 - CFD: 14/07/2009 - 03:39:39 - [4,213] ----D C:\Program Files\Windows Photo Viewer O43 - CFD: 13/07/2009 - 23:52:32 - [0,181] ----D C:\Program Files\Windows Portable Devices O43 - CFD: 14/07/2009 - 03:39:39 - [6,558] ----D C:\Program Files\Windows Sidebar O43 - CFD: 12/10/2012 - 12:38:50 - [4,875] ----D C:\Program Files\WinRAR O43 - CFD: 28/06/2012 - 18:06:42 - [0] ----D C:\Program Files\YourFileDownloader O43 - CFD: 06/07/2012 - 23:07:41 - [0,032] ----D C:\Program Files\YouTube Downloader Toolbar O43 - CFD: 18/02/2013 - 07:45:02 - [15,130] ----D C:\Program Files\ZHPDiag O43 - CFD: 18/05/2012 - 08:47:40 - [8,086] ----D C:\Program Files\ZTE Handset USB Driver O43 - CFD: 19/07/2012 - 22:27:32 - [720,629] ----D C:\Program Files\Common Files\Adobe O43 - CFD: 19/07/2012 - 13:43:25 - [37,554] ----D C:\Program Files\Common Files\Adobe AIR O43 - CFD: 10/05/2012 - 06:37:38 - [8,219] ----D C:\Program Files\Common Files\AnswerWorks 4.0 O43 - CFD: 31/12/2012 - 11:53:27 - [84,043] ----D C:\Program Files\Common Files\Apple O43 - CFD: 10/05/2012 - 00:50:29 - [99,039] ----D C:\Program Files\Common Files\ArcGIS O43 - CFD: 09/05/2012 - 13:18:23 - [2,972] ----D C:\Program Files\Common Files\ATI Technologies O43 - CFD: 25/10/2012 - 04:49:10 - [5,041] ----D C:\Program Files\Common Files\Bitdefender O43 - CFD: 10/05/2012 - 00:48:22 - [14,559] ----D C:\Program Files\Common Files\Data Dynamics O43 - CFD: 06/06/2012 - 23:28:12 - [0,095] ----D C:\Program Files\Common Files\DESIGNER O43 - CFD: 20/07/2012 - 14:50:29 - [86,203] ----D C:\Program Files\Common Files\DVDVideoSoft O43 - CFD: 12/05/2012 - 13:07:07 - [0,957] --H-D C:\Program Files\Common Files\EAInstaller O43 - CFD: 09/05/2012 - 13:01:25 - [3,452] ----D C:\Program Files\Common Files\InstallShield O43 - CFD: 12/10/2012 - 15:00:25 - [1,184] ----D C:\Program Files\Common Files\Java O43 - CFD: 15/05/2012 - 10:21:19 - [0,995] ----D C:\Program Files\Common Files\Logitech O43 - CFD: 10/05/2012 - 01:04:08 - [0,827] ----D C:\Program Files\Common Files\Macrovision Shared O43 - CFD: 01/11/2012 - 14:33:58 - [241,845] ----D C:\Program Files\Common Files\microsoft shared O43 - CFD: 09/05/2012 - 13:03:20 - [0,155] ----D C:\Program Files\Common Files\postureAgent O43 - CFD: 13/07/2009 - 21:37:05 - [0,003] ----D C:\Program Files\Common Files\Services O43 - CFD: 27/01/2013 - 14:31:15 - [2,056] ----D C:\Program Files\Common Files\Skype O43 - CFD: 13/07/2009 - 21:37:05 - [39,200] ----D C:\Program Files\Common Files\SpeechEngines O43 - CFD: 03/07/2012 - 20:36:04 - [0,036] ----D C:\Program Files\Common Files\Spigot O43 - CFD: 06/06/2012 - 23:24:59 - [10,222] ----D C:\Program Files\Common Files\System O43 - CFD: 10/05/2012 - 00:48:13 - [21,216] ----D C:\Program Files\Common Files\Tom Sawyer Software O43 - CFD: 01/11/2012 - 16:19:52 - [0,000] ----D C:\ProgramData\Ad-Aware Antivirus O43 - CFD: 17/02/2013 - 21:49:10 - [527,468] ----D C:\ProgramData\Adobe O43 - CFD: 06/02/2013 - 00:13:57 - [0,810] ----D C:\ProgramData\AMD O43 - CFD: 29/05/2012 - 16:46:32 - [33,049] ----D C:\ProgramData\Apple O43 - CFD: 29/05/2012 - 16:47:22 - [0,001] ----D C:\ProgramData\Apple Computer O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Application Data O43 - CFD: 26/10/2012 - 15:33:16 - [0,001] ----D C:\ProgramData\Astroburn Lite O43 - CFD: 06/02/2013 - 00:16:14 - [0,000] ----D C:\ProgramData\ATI O43 - CFD: 30/10/2012 - 13:09:25 - [40,706] ----D C:\ProgramData\AVAST Software O43 - CFD: 28/07/2012 - 11:34:59 - [0] ----D C:\ProgramData\Babylon O43 - CFD: 09/05/2012 - 12:49:18 - [0] --H-D C:\ProgramData\Bureau O43 - CFD: 07/10/2012 - 11:22:15 - [0] ----D C:\ProgramData\Caphyon O43 - CFD: 10/02/2013 - 12:14:28 - [42,931] ----D C:\ProgramData\COMODO O43 - CFD: 10/02/2013 - 12:12:21 - [92,763] ----D C:\ProgramData\Comodo Downloader O43 - CFD: 09/05/2012 - 22:52:57 - [0,001] ----D C:\ProgramData\DAEMON Tools Lite O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Desktop O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Documents O43 - CFD: 23/05/2012 - 17:31:44 - [0,106] -SH-D C:\ProgramData\DSS O43 - CFD: 11/05/2012 - 17:19:22 - [0] ----D C:\ProgramData\EA Core O43 - CFD: 11/05/2012 - 17:19:22 - [0,001] ----D C:\ProgramData\Electronic Arts O43 - CFD: 23/10/2012 - 17:19:06 - [0,000] ----D C:\ProgramData\ESRI O43 - CFD: 09/05/2012 - 12:49:18 - [0] --H-D C:\ProgramData\Favoris O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Favorites O43 - CFD: 10/05/2012 - 00:22:06 - [0,001] ----D C:\ProgramData\FLEXnet O43 - CFD: 22/08/2012 - 17:46:11 - [0,971] ----D C:\ProgramData\InstallMate O43 - CFD: 05/02/2013 - 14:56:30 - [154,500] ----D C:\ProgramData\KONAMI O43 - CFD: 01/11/2012 - 14:33:59 - [0,665] ----D C:\ProgramData\Lavasoft O43 - CFD: 10/05/2012 - 00:07:50 - [0,008] ----D C:\ProgramData\Macrovision O43 - CFD: 09/05/2012 - 12:49:18 - [0] --H-D C:\ProgramData\Menu Démarrer O43 - CFD: 17/05/2012 - 23:55:57 - [275,966] -S--D C:\ProgramData\Microsoft O43 - CFD: 06/06/2012 - 23:30:34 - [0,061] ----D C:\ProgramData\Microsoft Help O43 - CFD: 09/05/2012 - 12:49:18 - [0] --H-D C:\ProgramData\Modèles O43 - CFD: 15/07/2012 - 20:41:28 - [0,022] ----D C:\ProgramData\Mozilla O43 - CFD: 08/02/2013 - 21:29:40 - [0] ----D C:\ProgramData\NCH Swift Sound O43 - CFD: 30/10/2012 - 13:05:33 - [0,043] ---AD C:\ProgramData\Norton O43 - CFD: 08/07/2012 - 15:51:34 - [16,809] ---AD C:\ProgramData\NortonInstaller O43 - CFD: 22/08/2012 - 22:43:16 - [0,316] ----D C:\ProgramData\OptimizerPro1 O43 - CFD: 31/12/2012 - 00:24:52 - [0,099] ----D C:\ProgramData\Orbit O43 - CFD: 11/05/2012 - 17:29:24 - [0] ----D C:\ProgramData\Origin O43 - CFD: 22/08/2012 - 17:46:09 - [0] ----D C:\ProgramData\Premium O43 - CFD: 19/07/2012 - 22:28:50 - [0,006] ----D C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 04/07/2012 - 01:01:56 - [0,000] ----D C:\ProgramData\Registry Helper O43 - CFD: 29/07/2012 - 00:45:14 - [0,278] -SH-D C:\ProgramData\SecuROM O43 - CFD: 10/02/2013 - 12:16:59 - [0,000] -S--D C:\ProgramData\Shared Space O43 - CFD: 27/01/2013 - 14:31:21 - [58,304] ----D C:\ProgramData\Skype O43 - CFD: 11/05/2012 - 00:11:32 - [0] ----D C:\ProgramData\Solidshield O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Start Menu O43 - CFD: 10/02/2013 - 20:31:18 - [0] ----D C:\ProgramData\Summitsoft O43 - CFD: 07/10/2012 - 10:20:54 - [0,000] ----D C:\ProgramData\Sun O43 - CFD: 09/05/2012 - 13:09:06 - [0] ----D C:\ProgramData\Symantec O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Templates O43 - CFD: 03/07/2012 - 20:35:35 - [0,074] ----D C:\ProgramData\YTD Video Downloader O43 - CFD: 29/05/2012 - 16:47:49 - [0,004] ----D C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521} O43 - CFD: 07/10/2012 - 17:17:06 - [0,234] ----D C:\Users\By.keita\AppData\Roaming\.spotflux O43 - CFD: 03/11/2012 - 22:41:47 - [0,007] ----D C:\Users\By.keita\AppData\Roaming\Ad-Aware Antivirus O43 - CFD: 19/07/2012 - 22:31:04 - [130,261] ----D C:\Users\By.keita\AppData\Roaming\Adobe O43 - CFD: 31/08/2012 - 15:13:33 - [0,771] ----D C:\Users\By.keita\AppData\Roaming\Apple Computer O43 - CFD: 09/05/2012 - 13:20:41 - [0] ----D C:\Users\By.keita\AppData\Roaming\ATI O43 - CFD: 28/07/2012 - 11:34:59 - [0,005] ----D C:\Users\By.keita\AppData\Roaming\Babylon O43 - CFD: 15/02/2013 - 14:11:56 - [5,857] ----D C:\Users\By.keita\AppData\Roaming\BitTorrent O43 - CFD: 15/06/2012 - 22:44:40 - [0] ----D C:\Users\By.keita\AppData\Roaming\CACHE O43 - CFD: 11/05/2012 - 23:05:09 - [0,000] ----D C:\Users\By.keita\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O43 - CFD: 26/10/2012 - 00:02:23 - [1,502] ----D C:\Users\By.keita\AppData\Roaming\DAEMON Tools Lite O43 - CFD: 22/01/2013 - 17:15:17 - [31,761] ----D C:\Users\By.keita\AppData\Roaming\Dropbox O43 - CFD: 28/06/2012 - 17:58:13 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Druide O43 - CFD: 19/07/2012 - 15:25:26 - [0] ----D C:\Users\By.keita\AppData\Roaming\dvdcss O43 - CFD: 20/07/2012 - 14:50:46 - [2,535] ----D C:\Users\By.keita\AppData\Roaming\DVDVideoSoft O43 - CFD: 20/07/2012 - 12:46:10 - [0,000] ----D C:\Users\By.keita\AppData\Roaming\DVDVideoSoftIEHelpers O43 - CFD: 29/10/2012 - 20:15:09 - [7,442] ----D C:\Users\By.keita\AppData\Roaming\ESRI O43 - CFD: 12/06/2012 - 07:15:50 - [15,871] ----D C:\Users\By.keita\AppData\Roaming\Foxit Software O43 - CFD: 29/05/2012 - 05:11:40 - [0] ----D C:\Users\By.keita\AppData\Roaming\GetRightToGo O43 - CFD: 05/02/2013 - 23:26:40 - [0,067] ----D C:\Users\By.keita\AppData\Roaming\GlarySoft O43 - CFD: 09/05/2012 - 12:55:14 - [0] ----D C:\Users\By.keita\AppData\Roaming\Identities O43 - CFD: 30/10/2012 - 13:02:02 - [0,001] ----D C:\Users\By.keita\AppData\Roaming\LavasoftStatistics O43 - CFD: 23/05/2012 - 17:29:38 - [0,319] ----D C:\Users\By.keita\AppData\Roaming\Lionhead Studios O43 - CFD: 15/06/2012 - 22:39:53 - [0,025] ----D C:\Users\By.keita\AppData\Roaming\LMSOFT O43 - CFD: 10/02/2013 - 20:06:52 - [0,000] ----D C:\Users\By.keita\AppData\Roaming\LogoMaker O43 - CFD: 09/05/2012 - 13:06:43 - [0,044] ----D C:\Users\By.keita\AppData\Roaming\Macromedia O43 - CFD: 14/07/2009 - 04:00:32 - [0] ----D C:\Users\By.keita\AppData\Roaming\Media Center Programs O43 - CFD: 21/01/2013 - 00:34:03 - [29,606] -S--D C:\Users\By.keita\AppData\Roaming\Microsoft O43 - CFD: 05/02/2013 - 20:34:14 - [28,625] ----D C:\Users\By.keita\AppData\Roaming\Mozilla O43 - CFD: 08/02/2013 - 21:35:56 - [0,105] ----D C:\Users\By.keita\AppData\Roaming\NCH Software O43 - CFD: 04/08/2012 - 19:27:05 - [0,021] ----D C:\Users\By.keita\AppData\Roaming\Nonoh O43 - CFD: 15/07/2012 - 22:06:52 - [0,407] ----D C:\Users\By.keita\AppData\Roaming\Notepad++ O43 - CFD: 11/05/2012 - 16:40:39 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Origin O43 - CFD: 07/11/2012 - 03:31:56 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\pdfforge O43 - CFD: 28/09/2012 - 15:26:46 - [0,060] ----D C:\Users\By.keita\AppData\Roaming\QuickScan O43 - CFD: 05/06/2012 - 08:41:58 - [0,004] ----D C:\Users\By.keita\AppData\Roaming\Rovio O43 - CFD: 20/01/2013 - 23:29:32 - [0,083] ----D C:\Users\By.keita\AppData\Roaming\ScreenSeven O43 - CFD: 28/06/2012 - 23:28:08 - [0,010] R-H-D C:\Users\By.keita\AppData\Roaming\SecuROM O43 - CFD: 22/08/2012 - 17:43:14 - [0] ----D C:\Users\By.keita\AppData\Roaming\SendSpace O43 - CFD: 18/02/2013 - 07:40:56 - [9,275] ----D C:\Users\By.keita\AppData\Roaming\Skype O43 - CFD: 07/10/2012 - 11:22:19 - [2,764] ----D C:\Users\By.keita\AppData\Roaming\Spotflux O43 - CFD: 10/02/2013 - 19:01:09 - [0] ----D C:\Users\By.keita\AppData\Roaming\Summitsoft O43 - CFD: 17/02/2013 - 02:11:10 - [0,389] ----D C:\Users\By.keita\AppData\Roaming\vlc O43 - CFD: 15/10/2012 - 18:43:22 - [1,180] ----D C:\Users\By.keita\AppData\Roaming\WinRAR O43 - CFD: 28/06/2012 - 18:01:47 - [0] ----D C:\Users\By.keita\AppData\Roaming\YourFileDownloader O43 - CFD: 15/05/2012 - 18:47:54 - [0] ----D C:\Users\By.keita\AppData\Local\Activision O43 - CFD: 18/02/2013 - 06:31:21 - [2,224] ----D C:\Users\By.keita\AppData\Local\Adobe O43 - CFD: 29/05/2012 - 16:46:45 - [0] ----D C:\Users\By.keita\AppData\Local\Apple O43 - CFD: 29/05/2012 - 16:48:08 - [15,538] ----D C:\Users\By.keita\AppData\Local\Apple Computer O43 - CFD: 09/05/2012 - 12:49:26 - [0] ----D C:\Users\By.keita\AppData\Local\Application Data O43 - CFD: 09/05/2012 - 13:43:31 - [1,507] ----D C:\Users\By.keita\AppData\Local\Apps O43 - CFD: 09/05/2012 - 13:20:41 - [0,088] ----D C:\Users\By.keita\AppData\Local\ATI O43 - CFD: 10/02/2013 - 12:12:37 - [6,925] ----D C:\Users\By.keita\AppData\Local\Comodo O43 - CFD: 10/02/2013 - 19:50:18 - [86,013] ----D C:\Users\By.keita\AppData\Local\CrashDumps O43 - CFD: 14/05/2012 - 20:22:23 - [0] ----D C:\Users\By.keita\AppData\Local\CrashRpt O43 - CFD: 09/05/2012 - 13:43:54 - [0] ----D C:\Users\By.keita\AppData\Local\Deployment O43 - CFD: 28/07/2012 - 23:00:24 - [0] ----D C:\Users\By.keita\AppData\Local\Diagnostics O43 - CFD: 10/02/2013 - 20:19:38 - [1008,405] ----D C:\Users\By.keita\AppData\Local\Downloaded Installations O43 - CFD: 14/02/2013 - 22:02:00 - [0,658] ----D C:\Users\By.keita\AppData\Local\ElevatedDiagnostics O43 - CFD: 10/05/2012 - 07:00:41 - [1,898] ----D C:\Users\By.keita\AppData\Local\ESRI O43 - CFD: 29/10/2012 - 20:45:35 - [7,390] ----D C:\Users\By.keita\AppData\Local\Facebook O43 - CFD: 16/09/2012 - 02:00:37 - [1090,654] ----D C:\Users\By.keita\AppData\Local\Google O43 - CFD: 09/05/2012 - 12:49:26 - [0] ----D C:\Users\By.keita\AppData\Local\Historique O43 - CFD: 09/05/2012 - 18:37:34 - [0,576] ----D C:\Users\By.keita\AppData\Local\Hook Network O43 - CFD: 23/12/2012 - 11:34:41 - [0,746] ----D C:\Users\By.keita\AppData\Local\Incomedia O43 - CFD: 24/09/2012 - 10:31:22 - [0] ----D C:\Users\By.keita\AppData\Local\LogMeIn Rescue Applet O43 - CFD: 31/07/2012 - 06:29:12 - [0] ----D C:\Users\By.keita\AppData\Local\Macromedia O43 - CFD: 16/12/2012 - 19:51:17 - [403,576] ----D C:\Users\By.keita\AppData\Local\Microsoft O43 - CFD: 03/06/2012 - 18:30:12 - [0,519] ----D C:\Users\By.keita\AppData\Local\Microsoft Games O43 - CFD: 03/01/2013 - 08:33:18 - [0,069] ----D C:\Users\By.keita\AppData\Local\Microsoft Help O43 - CFD: 15/07/2012 - 20:41:37 - [104,724] ----D C:\Users\By.keita\AppData\Local\Mozilla O43 - CFD: 07/11/2012 - 03:29:48 - [0] ----D C:\Users\By.keita\AppData\Local\Programs O43 - CFD: 31/12/2012 - 00:25:15 - [2,733] ----D C:\Users\By.keita\AppData\Local\PunkBuster O43 - CFD: 07/07/2012 - 00:24:08 - [5,666] ----D C:\Users\By.keita\AppData\Local\Rockstar Games O43 - CFD: 03/06/2012 - 02:23:28 - [0,248] ----D C:\Users\By.keita\AppData\Local\SKIDROW O43 - CFD: 18/02/2013 - 07:46:40 - [235,947] ----D C:\Users\By.keita\AppData\Local\Temp O43 - CFD: 09/05/2012 - 12:49:26 - [0] ----D C:\Users\By.keita\AppData\Local\Temporary Internet Files O43 - CFD: 31/12/2012 - 11:46:42 - [0,000] ----D C:\Users\By.keita\AppData\Local\Ubisoft Game Launcher O43 - CFD: 10/05/2012 - 16:31:24 - [195,076] ----D C:\Users\By.keita\AppData\Local\VirtualStore O43 - CFD: 13/07/2009 - 23:42:04 - [0,014] R---D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 09/05/2012 - 12:55:22 - [0,000] R---D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 21/11/2012 - 02:39:00 - [0] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antidote O43 - CFD: 15/07/2012 - 21:51:48 - [0,004] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Apache Friends O43 - CFD: 10/05/2012 - 00:07:46 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArcGIS License Manager 10 CRACKED O43 - CFD: 10/02/2013 - 18:49:20 - [0,001] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2 O43 - CFD: 05/01/2013 - 10:52:16 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox O43 - CFD: 15/01/2013 - 10:41:29 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 15/06/2012 - 22:33:18 - [0,010] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LMSOFT O43 - CFD: 13/07/2009 - 23:37:42 - [0,001] R---D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 15/07/2012 - 22:05:02 - [0] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ O43 - CFD: 10/05/2012 - 00:07:46 - [0,002] R---D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 09/05/2012 - 17:14:37 - [0,007] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SuperCopier2 O43 - CFD: 31/12/2012 - 00:17:43 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft O43 - CFD: 12/10/2012 - 01:36:26 - [0,003] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ~ Scan Program Folder in 01mn 38s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.860E946E35844E2BE8F856109AE335C5] - 18/02/2013 - 06:30:58 ---A- . (...) -- C:\Windows\WindowsUpdate.log [806951] O44 - LFC:[MD5.3196CBABEA170BB8C1893D066D38DD4A] - 18/02/2013 - 06:30:50 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.983977EC8C287E3B1EE25028F534DCB9] - 17/02/2013 - 21:48:49 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerApp.exe [691568] O44 - LFC:[MD5.B729FD55C49419A4B18EB160905D9374] - 17/02/2013 - 21:48:49 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [71024] O44 - LFC:[MD5.433D2F7F7ECC82DF26750E7BCE81A6F6] - 17/02/2013 - 21:45:06 ---A- . (...) -- C:\Windows\setupact.log [7338] O44 - LFC:[MD5.80BDC2240B716EDD4A1FEA5EA149A61B] - 17/02/2013 - 00:00:31 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1576940] O44 - LFC:[MD5.17A2BC9B47289FB2DCD0D3BC0BCE945B] - 17/02/2013 - 00:00:31 ---A- . (...) -- C:\Windows\System32\perfc009.dat [110082] O44 - LFC:[MD5.4DAA8CC3B600ECB920F26436920D2289] - 17/02/2013 - 00:00:31 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [135046] O44 - LFC:[MD5.B991CDA78E72E397F412DE8499951342] - 17/02/2013 - 00:00:31 ---A- . (...) -- C:\Windows\System32\perfh009.dat [619894] O44 - LFC:[MD5.CD3C56F961DB2691F306E1C69F944252] - 17/02/2013 - 00:00:31 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [718336] O44 - LFC:[MD5.4FACD0879AAD58E36EA76F48F5B75396] - 14/02/2013 - 22:57:37 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [3960424] O44 - LFC:[MD5.FFA9EDB7DE221EF9FFC553989D607D77] - 14/02/2013 - 22:57:12 ---A- . (...) -- C:\Windows\PFRO.log [682598] O44 - LFC:[MD5.6C4D491C1970112AD0861B9F53DC17E5] - 10/02/2013 - 19:09:59 ---A- . (...) -- C:\.rnd [1024] O44 - LFC:[MD5.629610C7C04165E36704153EBCF4DCBB] - 10/02/2013 - 19:05:28 ---A- . (...) -- C:\Windows\Logo Design Studio Trial Uninstall Log.txt [438501] O44 - LFC:[MD5.FF50EE902847C7CED9FFD157851A8678] - 10/02/2013 - 19:00:21 ---A- . (...) -- C:\Windows\Logo Design Studio Trial Setup Log.txt [959848] O44 - LFC:[MD5.9FED4602659211E63AB6148ADA077159] - 10/02/2013 - 11:06:21 ---A- . (...) -- C:\Windows\System32\Drivers\PnkBstrK.sys [138032] O44 - LFC:[MD5.5564EE004708EBB76086F6D66ACF60FF] - 10/02/2013 - 11:06:07 ---A- . (...) -- C:\Windows\System32\PnkBstrB.exe [281688] O44 - LFC:[MD5.5564EE004708EBB76086F6D66ACF60FF] - 10/02/2013 - 11:06:07 ---A- . (...) -- C:\Windows\System32\PnkBstrB.xtr [281688] O44 - LFC:[MD5.5564EE004708EBB76086F6D66ACF60FF] - 06/02/2013 - 16:55:08 ---A- . (...) -- C:\Windows\System32\PnkBstrB.ex0 [281688] O44 - LFC:[MD5.E828134279A6BB5EF3032F9B88D335F9] - 03/02/2013 - 10:09:01 ---A- . (.Oracle Corporation - Pas de description.) -- C:\Windows\System32\WindowsAccessBridge.dll [94112] O44 - LFC:[MD5.4951D2D49B400A1A722BC48FADEBD6F4] - 03/02/2013 - 10:09:00 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\java.exe [174496] O44 - LFC:[MD5.ABC4230E67C8E68E070A22C1E4A8F673] - 03/02/2013 - 10:09:00 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\javaw.exe [174496] O44 - LFC:[MD5.FBE59F564DFEEBBFCDBBDFAB54C64501] - 03/02/2013 - 10:09:00 ---A- . (.Oracle Corporation - Java(TM) Web Start Launcher.) -- C:\Windows\System32\javaws.exe [262560] O44 - LFC:[MD5.BB8996FE972847B5879FDE24F24F034E] - 03/02/2013 - 10:08:59 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\deployJava1.dll [782240] O44 - LFC:[MD5.2616B4D6D04F18C579B7861F02B0B592] - 03/02/2013 - 10:08:59 ---A- . (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(T.) -- C:\Windows\System32\npDeployJava1.dll [861088] O44 - LFC:[MD5.3A291C3526126E9408C85EA46D5AA525] - 24/01/2013 - 22:43:02 ---A- . (.COMODO - COMODO Internet Security.) -- C:\Windows\System32\cmdcsr.dll [35488] O44 - LFC:[MD5.D72EEFF5DB99017A7F3664B33C657B8A] - 24/01/2013 - 22:43:02 ---A- . (.COMODO - COMODO Internet Security.) -- C:\Windows\System32\guard32.dll [354752] O44 - LFC:[MD5.7D63A7895BABF88AC73019AF07E05940] - 24/01/2013 - 22:42:50 ---A- . (.COMODO - COMODO Internet Security.) -- C:\Windows\System32\cmdkbd32.dll [40656] O44 - LFC:[MD5.BA2E1523289E76F4658957E1513C4256] - 24/01/2013 - 22:42:50 ---A- . (.COMODO - COMODO Internet Security.) -- C:\Windows\System32\cmdvrt32.dll [263888] O44 - LFC:[MD5.9AC5B3550AA14513C5449FDEE13A5DB1] - 22/01/2013 - 18:37:32 ---A- . (...) -- C:\UsbFix.txt [21149] ~ Scan Files in 00mn 05s ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.C9794E579E8BB1FFE5D5366B3DA438B2] - 02/02/2013 - 22:23:04 ---A- - C:\Windows\Prefetch\SETUP.EXE-EE9A08C3.pf O45 - LFCP:[MD5.04C64F16C78F101BD364D6DBE7002B57] - 03/02/2013 - 10:06:04 ---A- - C:\Windows\Prefetch\JUCHECK.EXE-C527D46E.pf O45 - LFCP:[MD5.4CC7160DCEE6FE59176DA4F7C39FD285] - 03/02/2013 - 10:06:32 ---A- - C:\Windows\Prefetch\SIDEBAR.EXE-FA75EA61.pf O45 - LFCP:[MD5.44E4819A8B84F7634C4C6E80C08BCD83] - 03/02/2013 - 10:06:41 ---A- - C:\Windows\Prefetch\JRE-7U13-WINDOWS-I586-IFTW.EX-2B952407.pf O45 - LFCP:[MD5.9C82DD919506948674E060D167E00EB6] - 03/02/2013 - 10:07:29 ---A- - C:\Windows\Prefetch\MSI8B80.TMP-963DACCB.pf O45 - LFCP:[MD5.2C1D1B9FCF50F97EC7AA5D5EFEBBB029] - 03/02/2013 - 10:08:08 ---A- - C:\Windows\Prefetch\MSI2878.TMP-B26AF3F1.pf O45 - LFCP:[MD5.E6E45C81C4335CE36CA269FCB1F70CB2] - 03/02/2013 - 10:08:13 ---A- - C:\Windows\Prefetch\JQS.EXE-E49AF94B.pf O45 - LFCP:[MD5.9630C39483E4CBE8BA703C2D6E479EBA] - 03/02/2013 - 10:09:09 ---A- - C:\Windows\Prefetch\UNPACK200.EXE-EF449681.pf O45 - LFCP:[MD5.2556A1E1E345BD07F084EA97FF9D3061] - 03/02/2013 - 10:09:24 ---A- - C:\Windows\Prefetch\WMIC.EXE-A7D06383.pf O45 - LFCP:[MD5.4335B0C76A00A799668FEEF17A31A5C4] - 03/02/2013 - 10:09:25 ---A- - C:\Windows\Prefetch\JQS.EXE-66586318.pf O45 - LFCP:[MD5.72405443F347175EB9A4B8578D7E705B] - 03/02/2013 - 10:12:03 ---A- - C:\Windows\Prefetch\JAUREG.EXE-171665BB.pf O45 - LFCP:[MD5.808EC58C310470E107C6A58CA971AF67] - 04/02/2013 - 13:42:34 ---A- - C:\Windows\Prefetch\AITAGENT.EXE-DA3E7689.pf O45 - LFCP:[MD5.87407145559967A6AB035906D4E18184] - 04/02/2013 - 13:49:38 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-230FC512.pf O45 - LFCP:[MD5.A87CF039B8B8DE9EFBB61DD4B413FAE1] - 04/02/2013 - 13:50:02 ---A- - C:\Windows\Prefetch\W32TM.EXE-1101AF41.pf O45 - LFCP:[MD5.F89BD8D9824FEF6522BDCEEABA95010A] - 04/02/2013 - 15:13:35 ---A- - C:\Windows\Prefetch\DEFRAG.EXE-588F90AD.pf O45 - LFCP:[MD5.D3AF8C85EB8516E264D89A1FEB9B62AC] - 04/02/2013 - 23:30:03 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-411A328D.pf O45 - LFCP:[MD5.54190996034986BB31EF60A028386419] - 05/02/2013 - 15:04:35 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-ECA84ABB.pf O45 - LFCP:[MD5.3FDBDF13C87AC04973AAAAB69CAD6F01] - 05/02/2013 - 15:33:30 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-1D0CF5AA.pf O45 - LFCP:[MD5.AB13E3403A05418A6CB4B135CC44DEBA] - 05/02/2013 - 20:41:09 ---A- - C:\Windows\Prefetch\INSTALLER.EXE-8AC69E80.pf O45 - LFCP:[MD5.E108E3E069DCCA3973E26C5EBF494CCA] - 05/02/2013 - 21:08:56 ---A- - C:\Windows\Prefetch\Layout.ini O45 - LFCP:[MD5.09A626B27CBA04CD73E38D180072F3B4] - 05/02/2013 - 22:16:40 ---A- - C:\Windows\Prefetch\CONFIG.EXE-88C38325.pf O45 - LFCP:[MD5.159F37FA50B5E13055291D9D095378E8] - 05/02/2013 - 22:21:05 ---A- - C:\Windows\Prefetch\PES2013.EXE-88205247.pf O45 - LFCP:[MD5.5D828FB51BCC882F5DE329A5EDB07771] - 05/02/2013 - 22:21:46 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-5554CA30.pf O45 - LFCP:[MD5.94184BC23FE084931FC3205D4CC057B4] - 05/02/2013 - 22:39:13 ---A- - C:\Windows\Prefetch\ASTROBURNLITE.EXE-9B46A662.pf O45 - LFCP:[MD5.F641EAE4FB1B7CAC99E3840E130566DB] - 05/02/2013 - 22:56:55 ---A- - C:\Windows\Prefetch\GUSETUP_SLIM.TMP-0A0B495A.pf O45 - LFCP:[MD5.A6A12C63E99A33CA8DDBFB4630FD3D1D] - 05/02/2013 - 22:56:57 ---A- - C:\Windows\Prefetch\GUSETUP_SLIM.EXE-C7C4A7A4.pf O45 - LFCP:[MD5.F82C36F5C77AF78D31C7F159E61266B3] - 05/02/2013 - 22:56:57 ---A- - C:\Windows\Prefetch\GUSETUP_SLIM.TMP-AFE3699F.pf O45 - LFCP:[MD5.DD1526D8CC1EBA119D5D537F46C59C84] - 05/02/2013 - 22:57:02 ---A- - C:\Windows\Prefetch\INITIALIZE.EXE-7DCDC37F.pf O45 - LFCP:[MD5.8D53DA8494738800977A92ABDD4083FB] - 05/02/2013 - 22:57:35 ---A- - C:\Windows\Prefetch\DISKANALYSIS.EXE-E154FC70.pf O45 - LFCP:[MD5.3A0373A6FC74097FD7EC04E8E297440F] - 05/02/2013 - 23:01:25 ---A- - C:\Windows\Prefetch\REGREPAIR.EXE-772FD0CA.pf O45 - LFCP:[MD5.3265338941CE26FD383863514E46FA24] - 05/02/2013 - 23:02:51 ---A- - C:\Windows\Prefetch\RCSETUP144.EXE-A1357EC2.pf O45 - LFCP:[MD5.9BBB7E7D3A3543EFF5918FADEC8864CE] - 05/02/2013 - 23:02:55 ---A- - C:\Windows\Prefetch\NS6425.TMP-8F6E9AF8.pf O45 - LFCP:[MD5.AA7AE9C9045506D9287F9A9CD1C94691] - 05/02/2013 - 23:02:55 ---A- - C:\Windows\Prefetch\PING.EXE-7E94E73E.pf O45 - LFCP:[MD5.CCD6BE1D1B1AB1DF21D9C791A474327F] - 05/02/2013 - 23:03:09 ---A- - C:\Windows\Prefetch\RECUVA.EXE-1A090312.pf O45 - LFCP:[MD5.FE542C85F8FD78236BD3286659D40A55] - 05/02/2013 - 23:14:21 ---A- - C:\Windows\Prefetch\DFRGUI.EXE-C853DD35.pf O45 - LFCP:[MD5.26B3D0A58FF5DA3485CE44ACA06802A0] - 05/02/2013 - 23:14:21 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7AC6742A.pf O45 - LFCP:[MD5.2D900C1205857B14652138C316C72415] - 05/02/2013 - 23:20:52 ---A- - C:\Windows\Prefetch\DINOTIFY.EXE-35A869D6.pf O45 - LFCP:[MD5.B811AA1215AA5D768FD5B4D85771495D] - 05/02/2013 - 23:20:52 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-4AE3FD7C.pf O45 - LFCP:[MD5.62EC93BE92BD52E261D0A78C3066DC9D] - 05/02/2013 - 23:26:55 ---A- - C:\Windows\Prefetch\INTEGRATOR.EXE-84638148.pf O45 - LFCP:[MD5.92910110C65C363A6D8FD3D5AC952CDA] - 05/02/2013 - 23:36:03 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-007FEA55.pf O45 - LFCP:[MD5.A67ED11983BB11EB786BB746BEB6F519] - 05/02/2013 - 23:36:04 ---A- - C:\Windows\Prefetch\SEARCHINDEXER.EXE-4A6353B9.pf O45 - LFCP:[MD5.A240C10E621E6CF8DEDF281DA2AC3270] - 05/02/2013 - 23:40:01 ---A- - C:\Windows\Prefetch\TMP9FF6.EXE-B9C21668.pf O45 - LFCP:[MD5.F3C65CE45E920CFD3BFF13C76D57E128] - 05/02/2013 - 23:40:30 ---A- - C:\Windows\Prefetch\SETUP.EXE-EF01F1CE.pf O45 - LFCP:[MD5.BBBDCB470604937C99EF790D88C660A2] - 05/02/2013 - 23:40:33 ---A- - C:\Windows\Prefetch\JAVAW.EXE-2699CD1A.pf O45 - LFCP:[MD5.F178AA5F243563A4DB78BA3248390B6E] - 05/02/2013 - 23:40:40 ---A- - C:\Windows\Prefetch\INSTALLMANAGERAPP.EXE-E1FEB0C9.pf O45 - LFCP:[MD5.C5D6082973E4A2E522F951D4FEDB1788] - 05/02/2013 - 23:42:55 ---A- - C:\Windows\Prefetch\SETACL.EXE-D42A5B0A.pf O45 - LFCP:[MD5.DF1D7771DE42374CE076FC183BF68FA4] - 05/02/2013 - 23:53:06 ---A- - C:\Windows\Prefetch\MPCMDRUN.EXE-F401FBB4.pf O45 - LFCP:[MD5.F3DEE1BD5CFCE74BBF5C9A773C147157] - 06/02/2013 - 00:11:05 ---A- - C:\Windows\Prefetch\INSTALLSHELL.EXE-07372A8A.pf O45 - LFCP:[MD5.D13B130B9C243E3AACFEF5785C33B371] - 06/02/2013 - 00:56:46 ---A- - C:\Windows\Prefetch\WMPNETWK.EXE-D9F2A96F.pf O45 - LFCP:[MD5.92DE1674731D9948CD61FF8D4638BBC8] - 06/02/2013 - 03:26:51 ---A- - C:\Windows\Prefetch\PES2013_100.EXE-EB844432.pf O45 - LFCP:[MD5.C599CE6640D56BDB935678638EB28B7B] - 07/02/2013 - 16:34:12 ---A- - C:\Windows\Prefetch\AAM UPDATES NOTIFIER.EXE-B83D821D.pf O45 - LFCP:[MD5.1CE04D39D77B8C605041C6DF9CD3181F] - 10/02/2013 - 00:37:32 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-F2DCEF0D.pf O45 - LFCP:[MD5.02387FAF059ADE49087098EB20BD6E94] - 10/02/2013 - 11:05:34 ---A- - C:\Windows\Prefetch\FC3UPDATER.EXE-93E5D9DE.pf O45 - LFCP:[MD5.6B54F3C33FF41C1C5AF6FBE4C5E9AF22] - 10/02/2013 - 11:05:44 ---A- - C:\Windows\Prefetch\FARCRY3_D3D11.EXE-A1947F67.pf O45 - LFCP:[MD5.20F3B501D77CB7AD6625B521F43CD84A] - 10/02/2013 - 11:06:27 ---A- - C:\Windows\Prefetch\PNKBSTRB.EXE-09DE69A6.pf O45 - LFCP:[MD5.3DCDFB555BE9FA7754A23A7E57B88B06] - 10/02/2013 - 17:35:35 ---A- - C:\Windows\Prefetch\DTLITE.EXE-1B4D861B.pf O45 - LFCP:[MD5.04A3460A720CCFF909F6BE1FB47BE55C] - 10/02/2013 - 18:09:08 ---A- - C:\Windows\Prefetch\FIX.EXE-C62DD5CA.pf O45 - LFCP:[MD5.AB3AD60BBF6FCE1639724D528861B96A] - 10/02/2013 - 18:14:17 ---A- - C:\Windows\Prefetch\SETTINGS.EXE-B56A84E1.pf O45 - LFCP:[MD5.911478594FC5D791F9EB77DD6D932E7D] - 10/02/2013 - 18:49:20 ---A- - C:\Windows\Prefetch\REGSVR32.EXE-8461DBEE.pf O45 - LFCP:[MD5.FF1FBB20213BFF391C10AF1AF0FAF52B] - 10/02/2013 - 19:10:41 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf O45 - LFCP:[MD5.B20350E1FD1C3A0832A2BCB1C5243B15] - 10/02/2013 - 19:49:55 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-6A473D35.pf O45 - LFCP:[MD5.C9105604B230DAEF07741D76D7737479] - 10/02/2013 - 19:50:07 ---A- - C:\Windows\Prefetch\PESEDIT.EXE-6FE34292.pf O45 - LFCP:[MD5.BD9C3B1827632DF84B7FB57029B41918] - 10/02/2013 - 19:50:19 ---A- - C:\Windows\Prefetch\PES2013.EXE-6CE8CB7A.pf O45 - LFCP:[MD5.F7C3E65F672B6088D85E50BDD061EEC8] - 10/02/2013 - 19:50:19 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-E69F695A.pf O45 - LFCP:[MD5.1EAD8655ABFBE9B75FB98F06B4AF73BB] - 10/02/2013 - 20:17:54 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-D8414F97.pf O45 - LFCP:[MD5.D0C3FE61A60416F5305D57A014C5B8E7] - 10/02/2013 - 20:20:17 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-A2D55CB6.pf O45 - LFCP:[MD5.67CB5052931A5627D939945C5E41B09E] - 10/02/2013 - 20:20:59 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf O45 - LFCP:[MD5.E93693DF6AD2F14A6557BA835DB1325B] - 10/02/2013 - 20:20:59 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf O45 - LFCP:[MD5.51259AD930965B4E98AE6EBA21540469] - 13/02/2013 - 14:15:32 ---A- - C:\Windows\Prefetch\JAVAWS.EXE-8AA244A9.pf O45 - LFCP:[MD5.0D2A447AABF15C56221FAA33B5D6BEFF] - 13/02/2013 - 19:00:49 ---A- - C:\Windows\Prefetch\DRVINST.EXE-4CB4314A.pf O45 - LFCP:[MD5.93767A32B0797561DC145612FC6292F1] - 14/02/2013 - 22:11:06 ---A- - C:\Windows\Prefetch\RTKNGUI.EXE-E7D08DCD.pf O45 - LFCP:[MD5.A55375407FDE594A18904D0D1A80984E] - 14/02/2013 - 22:11:44 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-F0C6D571.pf O45 - LFCP:[MD5.AA0945E41ED1A1BF22BB73CE171388F1] - 14/02/2013 - 22:17:20 ---A- - C:\Windows\Prefetch\CSC.EXE-A3B8D95D.pf O45 - LFCP:[MD5.6482EE066E064B2481CCE010E8319E3B] - 14/02/2013 - 22:17:20 ---A- - C:\Windows\Prefetch\CVTRES.EXE-069169FB.pf O45 - LFCP:[MD5.325D9FB2FEB1237C4D1505790EB2EA10] - 14/02/2013 - 22:17:29 ---A- - C:\Windows\Prefetch\SDIAGNHOST.EXE-8D72177C.pf O45 - LFCP:[MD5.2CC52DBF78DB3FEB6E32FEC98B9C4426] - 14/02/2013 - 22:59:27 ---A- - C:\Windows\Prefetch\ATIESRXX.EXE-B8FDA008.pf O45 - LFCP:[MD5.2F32DA0BA4C8343F7C6BA9E23326236F] - 14/02/2013 - 22:59:27 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf O45 - LFCP:[MD5.B69F5652884411245F80D0D5368F72F9] - 14/02/2013 - 22:59:43 ---A- - C:\Windows\Prefetch\DTSHELLHLP.EXE-6CCB00C1.pf O45 - LFCP:[MD5.3637E5357EF942596633F769D721B270] - 15/02/2013 - 13:52:37 ---A- - C:\Windows\Prefetch\BITTORRENT.EXE-BE42A0B0.pf O45 - LFCP:[MD5.1A226CED06B223725B2329AABE7381DC] - 15/02/2013 - 13:59:20 ---A- - C:\Windows\Prefetch\WUDFHOST.EXE-AFFEF87C.pf O45 - LFCP:[MD5.78AB1C1B66B32DBE44907EA51B5E09EB] - 15/02/2013 - 14:09:11 ---A- - C:\Windows\Prefetch\WINRAR.EXE-94E7D80C.pf O45 - LFCP:[MD5.BB6818B28E83CA3C3FFBB2E8C42F801C] - 17/02/2013 - 01:46:01 ---A- - C:\Windows\Prefetch\JAVA.EXE-633ED9BF.pf O45 - LFCP:[MD5.22E0634199576F787092FAD7AC2737F1] - 17/02/2013 - 02:11:09 ---A- - C:\Windows\Prefetch\DEVICEDISPLAYOBJECTPROVIDER.E-17410B90.pf O45 - LFCP:[MD5.459C47D9DBED9A66229B88461DFE25F3] - 17/02/2013 - 03:24:22 ---A- - C:\Windows\Prefetch\WMPLAYER.EXE-BAD6BD53.pf O45 - LFCP:[MD5.DA38F44F892B5C8994827F33D4A1AAF2] - 17/02/2013 - 03:26:05 ---A- - C:\Windows\Prefetch\SNDVOL.EXE-5D4CC7D6.pf O45 - LFCP:[MD5.1017D4AC8BDB7986905815B328558AFB] - 17/02/2013 - 09:47:59 ---A- - C:\Windows\Prefetch\ATBROKER.EXE-2E15A492.pf O45 - LFCP:[MD5.1FBAFB50C2611A295AC68C37F8F8D9AD] - 17/02/2013 - 12:30:13 ---A- - C:\Windows\Prefetch\WINWORD.EXE-778F7C2B.pf O45 - LFCP:[MD5.F0257959586F5942477B16FEBF97C3F7] - 17/02/2013 - 21:34:49 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-4F28A26F.pf O45 - LFCP:[MD5.1B81B0A5A292F8A5CA3C57FCD8FD308E] - 17/02/2013 - 21:43:43 ---A- - C:\Windows\Prefetch\CLI.EXE-B3817BB7.pf O45 - LFCP:[MD5.1EB71B34127FECFC946CF2D85324F1DE] - 17/02/2013 - 21:44:10 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin O45 - LFCP:[MD5.8D029F0899599120389AD5971DABDC16] - 17/02/2013 - 21:46:04 ---A- - C:\Windows\Prefetch\RAC36.EXE-4DBC0798.pf O45 - LFCP:[MD5.FAFE7A6F7F29990BD362DD2DD12C6EA2] - 17/02/2013 - 21:46:06 ---A- - C:\Windows\Prefetch\OSK.EXE-3E832AF1.pf O45 - LFCP:[MD5.C8ED6BEE135045877959564CFD2CFFC3] - 17/02/2013 - 21:46:10 ---A- - C:\Windows\Prefetch\HYDRADM.EXE-B166F6C1.pf O45 - LFCP:[MD5.6E514C0F16C1428A7271D56ADF3C1357] - 17/02/2013 - 21:46:15 ---A- - C:\Windows\Prefetch\UTILMAN.EXE-5AD4C272.pf O45 - LFCP:[MD5.DCD35D275123D9F61639493C7EC990EB] - 17/02/2013 - 21:46:34 ---A- - C:\Windows\Prefetch\GOOGLEDRIVESYNC.EXE-78FD7429.pf O45 - LFCP:[MD5.F6AC3684A6DF8D73F6D924FFEE7CF74D] - 17/02/2013 - 21:47:28 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf O45 - LFCP:[MD5.E97A6DA20D89D00D07B6A95343192350] - 17/02/2013 - 21:47:41 ---A- - C:\Windows\Prefetch\MMLOADDRV.EXE-6F39FF7D.pf O45 - LFCP:[MD5.885D53A4295CAE44AC333B275CB2CC6E] - 17/02/2013 - 21:47:44 ---A- - C:\Windows\Prefetch\LMS.EXE-75D6F05A.pf O45 - LFCP:[MD5.18F8BD3BC544E6495AA596EF017DDA4A] - 17/02/2013 - 21:47:51 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-05F624AB.pf O45 - LFCP:[MD5.F7195159C971748C64A0ED31212E0395] - 17/02/2013 - 21:48:09 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-1304AE86.pf O45 - LFCP:[MD5.E3F8799A27CCA4CF1DEC51B9BCD9ADF1] - 17/02/2013 - 21:48:20 ---A- - C:\Windows\Prefetch\UNS.EXE-D04A8F4E.pf O45 - LFCP:[MD5.6E2EB27D51FF1B3840103823D4A3AC3C] - 17/02/2013 - 21:49:18 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf O45 - LFCP:[MD5.D172ED4BDB65719FD0E30133C655694D] - 17/02/2013 - 21:54:39 ---A- - C:\Windows\Prefetch\GOOGLETALKPLUGIN.EXE-9981D453.pf O45 - LFCP:[MD5.79FBA0DE1A8276452F489732B0048A89] - 17/02/2013 - 21:55:11 ---A- - C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf O45 - LFCP:[MD5.DD97A1AE227060790C506DD2EB599E72] - 17/02/2013 - 21:56:50 ---A- - C:\Windows\Prefetch\WMIAPSRV.EXE-29F35ED0.pf O45 - LFCP:[MD5.2B4B15608BEEBE1F5BD0D50C0ECB69C2] - 17/02/2013 - 21:58:09 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf O45 - LFCP:[MD5.B6F1EF546813AF66774678AE0F991113] - 18/02/2013 - 06:30:42 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf O45 - LFCP:[MD5.7F31F21E0928DA380D5B59C9A8CAB637] - 18/02/2013 - 06:30:52 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx O45 - LFCP:[MD5.1DAC35975AFDEFA23213CE850BD60647] - 18/02/2013 - 06:30:52 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-DE9673F9.pf O45 - LFCP:[MD5.A2FB86E2C5D42A34D326759C6C794648] - 18/02/2013 - 06:30:52 ---A- - C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf O45 - LFCP:[MD5.57DAE2919FB498B32448FA8E43F12372] - 18/02/2013 - 06:30:57 ---A- - C:\Windows\Prefetch\AVAST.SETUP-B1D66586.pf O45 - LFCP:[MD5.51581E10B9C083E4620B6E9F758B4AE8] - 18/02/2013 - 06:31:01 ---A- - C:\Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf O45 - LFCP:[MD5.3269F9638A4F4317527A967D508D383D] - 18/02/2013 - 06:31:52 ---A- - C:\Windows\Prefetch\AgCx_SC1.db O45 - LFCP:[MD5.5C7028EA1EFB2BFD17249BF44BB97750] - 18/02/2013 - 06:50:00 ---A- - C:\Windows\Prefetch\FACEBOOKUPDATE.EXE-7896FEDC.pf O45 - LFCP:[MD5.69BA49F83E6D8F348E43CDE4AB2424B5] - 18/02/2013 - 06:58:47 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-2499682455-473981773-2509937517-1000.db O45 - LFCP:[MD5.33F79E711E91CDB67FB48AAF4A3C022E] - 18/02/2013 - 06:58:47 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-2499682455-473981773-2509937517-1000.db O45 - LFCP:[MD5.3B4D850D49F34B3E8ECB65CB4D7E7F45] - 18/02/2013 - 07:10:00 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-2BD1AD9A.pf O45 - LFCP:[MD5.3C11698F8EB43404CA8BEDCF044097EC] - 18/02/2013 - 07:10:04 ---A- - C:\Windows\Prefetch\POWERPNT.EXE-158B76A4.pf O45 - LFCP:[MD5.D4987FA685B4C0C6EFA5D034855579C4] - 18/02/2013 - 07:15:56 ---A- - C:\Windows\Prefetch\FOXIT READER.EXE-AD4251B5.pf O45 - LFCP:[MD5.312CF3B311B59EC45B4FBBD14041D6D7] - 18/02/2013 - 07:32:00 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-FE771DDA.pf O45 - LFCP:[MD5.E3B61EAEBA5DBE3FC64BEEA54C3A8493] - 18/02/2013 - 07:32:10 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf O45 - LFCP:[MD5.E5693BE72CE20F940DE8E6CC59C56AEC] - 18/02/2013 - 07:37:00 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-ECAD9571.pf O45 - LFCP:[MD5.1069ED8FEEF88048EFA93F457440E069] - 18/02/2013 - 07:41:28 ---A- - C:\Windows\Prefetch\CHROME.EXE-84B8706F.pf O45 - LFCP:[MD5.5F29E5605CE327D2EA6E01019566FF0F] - 18/02/2013 - 07:41:55 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf O45 - LFCP:[MD5.27E24D2EB5FE74BE4C68ED664EA7E11C] - 18/02/2013 - 07:41:55 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf O45 - LFCP:[MD5.AA770F976DB216139DD85CA76D42E884] - 18/02/2013 - 07:42:00 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf O45 - LFCP:[MD5.4C836C34E1B5616AD5A53B5BDFA4FD66] - 18/02/2013 - 07:42:10 ---A- - C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf O45 - LFCP:[MD5.CC2823E95F8E9F179E5079C2A64C2656] - 18/02/2013 - 07:42:15 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf O45 - LFCP:[MD5.B4AA264F8A7D137B240886420C330C95] - 18/02/2013 - 07:42:24 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf O45 - LFCP:[MD5.1CB814F2ED3C0C55FC6A78BEF7A62F6B] - 18/02/2013 - 07:44:49 ---A- - C:\Windows\Prefetch\CMD.EXE-4A81B364.pf O45 - LFCP:[MD5.A08EDCC33036E25C342C671352BB9BD0] - 18/02/2013 - 07:44:49 ---A- - C:\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf O45 - LFCP:[MD5.28262676B36BE15E86F964D42F1DDDCB] - 18/02/2013 - 07:44:54 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf O45 - LFCP:[MD5.5524B93451EF95C37361A1A96479FA91] - 18/02/2013 - 07:45:05 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf O45 - LFCP:[MD5.9ECDB02EFE5F3B20D67F458C8C030C7D] - 18/02/2013 - 07:45:40 ---A- - C:\Windows\Prefetch\AgRobust.db O45 - LFCP:[MD5.65B35306487323DFDC81D83C382B076F] - 18/02/2013 - 07:45:56 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db O45 - LFCP:[MD5.7EE12A19AB6C11549C252598E2593303] - 18/02/2013 - 07:46:02 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db O45 - LFCP:[MD5.5C974250A9D2A058891ADD0F2B4DA2F2] - 18/02/2013 - 07:46:07 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db ~ Scan Prefetcher in 00mn 02s ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL ~ Scan ShellExecuteHooks in 00mn 00s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - LiveSSP.) -- C:\Windows\System32\livessp.dll ~ Scan Keys in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys ~ Scan CSB in 00mn 00s ---\\ MountPoints2 Shell Key (O51) (None) ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll O52 - TDSD: \Drivers32\"msacm.vorbis"="vorbis.acm" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\Windows\System32\vorbis.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"vorbis.acm"="Ogg Vorbis Audio CODEC" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\Windows\System32\vorbis.acm ~ Scan Keys in 00mn 00s ---\\ ShareTools MSconfig StartupReg (O53) O53 - SMSR:HKLM\...\startupreg\BitTorrent [Key] . (.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files\BitTorrent\BitTorrent.exe O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe ~ Scan SMSR Keys in 00mn 00s ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=3 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=3 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=0 ~ Scan Keys in 00mn 00s ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.21E785EBD7DC90A06391141AAC7892FB] - 13/07/2009 - 20:26:15 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [422976] O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 13/07/2009 - 16:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029] ~ Scan Drivers in 00mn 00s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC:Last File Created 15/02/2013 - 01:35:21 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.youtube.com_0.localstorage [238592] O61 - LFC:Last File Created 15/02/2013 - 01:35:21 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.youtube.com_0.localstorage-journal [16384] O61 - LFC:Last File Created 15/02/2013 - 01:37:16 ---A- C:\Users\By.keita\Downloads\ganttproject-tutoriel.pdf [530430] O61 - LFC:Last File Created 15/02/2013 - 01:53:27 ----- C:\Users\By.keita\AppData\Roaming\BitTorrent\MICROSOFT.OFFICE.Project 2010.torrent [12803] O61 - LFC:Last File Created 15/02/2013 - 01:55:54 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511ddbfa [148] O61 - LFC:Last File Created 15/02/2013 - 02:04:36 ---A- C:\Users\By.keita\Downloads\MICROSOFT.OFFICE.Project 2010\serial demo project.TXT [31] O61 - LFC:Last File Created 15/02/2013 - 02:05:06 ---A- C:\Users\By.keita\Downloads\MICROSOFT.OFFICE.Project 2010\32bit\ProjectProfessional.exe [292255008] O61 - LFC:Last File Created 15/02/2013 - 02:05:06 ---A- C:\Users\By.keita\Downloads\MICROSOFT.OFFICE.Project 2010\64bit\ProjectProfessional.exe [332152960] O61 - LFC:Last File Created 15/02/2013 - 03:34:27 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\dht.dat.old [4040] O61 - LFC:Last File Created 15/02/2013 - 03:34:27 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\rss.dat.old [99] O61 - LFC:Last File Created 15/02/2013 - 03:37:57 ---A- C:\Users\By.keita\Downloads\Le paysage de la géographie.docx [18492] O61 - LFC:Last File Created 15/02/2013 - 08:56:21 ---A- C:\Users\By.keita\Downloads\Texte 5.1.pdf [904887] O61 - LFC:Last File Created 15/02/2013 - 08:56:21 ---A- C:\Users\By.keita\Dropbox\Texte 5.1.pdf [904887] O61 - LFC:Last File Created 15/02/2013 - 08:56:22 ---A- C:\Users\By.keita\Downloads\Texte 5.2.pdf [312345] O61 - LFC:Last File Created 15/02/2013 - 08:56:22 ---A- C:\Users\By.keita\Dropbox\Texte 5.2.pdf [312345] O61 - LFC:Last File Created 15/02/2013 - 13:18:01 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511e7bd9 [160] O61 - LFC:Last File Created 15/02/2013 - 13:18:24 ---A- C:\Users\By.keita\Downloads\EDD6020-H2013-ÉQUIPES DE TRAVAIL.xlsx [14980] O61 - LFC:Last File Created 15/02/2013 - 13:18:34 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\Office\Recent\EDD6020-H2013-ÉQUIPES DE TRAVAIL.LNK [1042] O61 - LFC:Last File Created 15/02/2013 - 13:22:44 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr-mg42.mail.yahoo.com_0.localstorage [3072] O61 - LFC:Last File Created 15/02/2013 - 13:22:44 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr-mg42.mail.yahoo.com_0.localstorage-journal [3608] O61 - LFC:Last File Created 15/02/2013 - 13:24:53 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\static1.dmcdn.net\analytics.sol [540] O61 - LFC:Last File Created 15/02/2013 - 13:32:16 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\www.dailymotion.com\analytics.sol [523] O61 - LFC:Last File Created 15/02/2013 - 13:52:28 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511e83ec [148] O61 - LFC:Last File Created 15/02/2013 - 13:53:29 ----- C:\Users\By.keita\AppData\Roaming\BitTorrent\Closer N°400 - 9 au 15 Fevrier 2013.pdf.torrent [8385] O61 - LFC:Last File Created 15/02/2013 - 13:53:30 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\settings.dat.old [142597] O61 - LFC:Last File Created 15/02/2013 - 13:56:15 ---A- C:\Users\By.keita\Downloads\Chambre 121 Integrale 5 Tomes up by taz6744.zip.rar [102986503] O61 - LFC:Last File Created 15/02/2013 - 14:03:20 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511e8678 [140] O61 - LFC:Last File Created 15/02/2013 - 14:05:33 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511e86fd [160] O61 - LFC:Last File Created 15/02/2013 - 14:07:43 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\dht_feed.dat.old [2] O61 - LFC:Last File Created 15/02/2013 - 14:08:28 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\v1fr.sftcdn.net\shared\flash\rs\storage.swf\flashcookie_sd.sol [492] O61 - LFC:Last File Created 15/02/2013 - 14:08:29 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\resume.dat.old [99] O61 - LFC:Last File Created 15/02/2013 - 14:08:36 ---A- C:\Users\By.keita\Downloads\setup.zip [1158444] O61 - LFC:Last File Created 15/02/2013 - 14:09:01 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511e87cd [140] O61 - LFC:Last File Created 15/02/2013 - 14:10:05 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511e880d [144] O61 - LFC:Last File Created 15/02/2013 - 14:11:56 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\dht.dat [4378] O61 - LFC:Last File Created 15/02/2013 - 14:11:56 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\dht_feed.dat [2] O61 - LFC:Last File Created 15/02/2013 - 14:11:56 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\resume.dat [99] O61 - LFC:Last File Created 15/02/2013 - 14:11:56 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\rss.dat [99] O61 - LFC:Last File Created 15/02/2013 - 14:11:56 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\settings.dat [142569] O61 - LFC:Last File Created 15/02/2013 - 14:12:07 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511e8887 [144] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler.exe [213384] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler64.exe [281480] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\GoogleUpdate.exe [116648] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\GoogleUpdateBroker.exe [59784] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\GoogleUpdateHelper.msi [26112] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\GoogleUpdateOnDemand.exe [59784] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdate.dll [835464] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_am.dll [25480] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ar.dll [27016] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_bg.dll [30600] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_bn.dll [29064] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ca.dll [30088] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_cs.dll [29064] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_da.dll [29576] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_de.dll [31624] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_el.dll [31112] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_en-GB.dll [28552] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_en.dll [28040] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_es-419.dll [29576] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_es.dll [31624] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_et.dll [28552] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_fa.dll [28040] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_fi.dll [29576] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_fil.dll [30600] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_fr.dll [31112] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_gu.dll [29064] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_hi.dll [29576] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_hr.dll [30088] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_hu.dll [30088] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_id.dll [28552] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_is.dll [29064] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_it.dll [31112] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_iw.dll [26504] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ja.dll [24968] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_kn.dll [30088] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ko.dll [23944] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_lt.dll [28552] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_lv.dll [30600] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ml.dll [32136] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_mr.dll [29064] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ms.dll [28552] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll [572808] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\psmachine.dll [160136] O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\psuser.dll [160136] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_nl.dll [30600] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_no.dll [29576] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_pl.dll [30600] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_pt-BR.dll [29576] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_pt-PT.dll [29576] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ro.dll [30088] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ru.dll [29064] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_sk.dll [30088] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_sl.dll [30088] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_sr.dll [29576] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_sv.dll [29576] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_sw.dll [29576] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ta.dll [30600] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_te.dll [29576] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_th.dll [28040] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_tr.dll [29576] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_uk.dll [29064] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ur.dll [29064] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_vi.dll [28552] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_zh-CN.dll [22408] O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_zh-TW.dll [22408] O61 - LFC:Last File Created 16/02/2013 - 18:05:26 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\512010b6 [160] O61 - LFC:Last File Created 16/02/2013 - 18:46:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_00002c [1048576] O61 - LFC:Last File Created 16/02/2013 - 18:46:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_00002d [1028875] O61 - LFC:Last File Created 16/02/2013 - 18:46:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\macromedia.com\support\flashplayer\sys\#rt.com\settings.sol [76] O61 - LFC:Last File Created 16/02/2013 - 18:53:45 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\51201c09 [144] O61 - LFC:Last File Created 16/02/2013 - 19:04:16 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\macromedia.com\support\flashplayer\sys\#cdn.pearltrees.com\settings.sol [88] O61 - LFC:Last File Created 16/02/2013 - 19:04:17 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\cdn.pearltrees.com\myLangue.sol [38] O61 - LFC:Last File Created 16/02/2013 - 19:04:45 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\PHNALPVV\3C82B2A2455B252B8595FD0113249AA19D7E8BDD.heu [151] O61 - LFC:Last File Created 17/02/2013 - 00:03:26 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_00002e [1048576] O61 - LFC:Last File Created 17/02/2013 - 00:03:26 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_00002f [1048576] O61 - LFC:Last File Created 17/02/2013 - 00:03:27 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000030 [433452] O61 - LFC:Last File Created 17/02/2013 - 00:06:28 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.hiphopdx.com_0.localstorage [3072] O61 - LFC:Last File Created 17/02/2013 - 00:06:28 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.hiphopdx.com_0.localstorage-journal [3608] O61 - LFC:Last File Created 17/02/2013 - 00:36:37 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\s.ytimg.com\soundData.sol [80] O61 - LFC:Last File Created 17/02/2013 - 01:28:45 -SH-- C:\Users\By.keita\Downloads\Afrocubism\AlbumArtSmall.jpg [8619] O61 - LFC:Last File Created 17/02/2013 - 01:28:45 -SH-- C:\Users\By.keita\Downloads\Afrocubism\Folder.jpg [35640] O61 - LFC:Last File Created 17/02/2013 - 01:41:51 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\static1.dmcdn.net\com.dm.player.sol [317] O61 - LFC:Last File Created 17/02/2013 - 02:03:14 ---A- C:\Users\By.keita\Documents\KONAMI\Pro Evolution Soccer 2012\ad\dftm.dat [11200] O61 - LFC:Last File Created 17/02/2013 - 02:23:32 ---A- C:\Users\By.keita\Documents\KONAMI\Pro Evolution Soccer 2012\save\FL01.bin [7937168] O61 - LFC:Last File Created 17/02/2013 - 02:39:00 ---A- C:\Users\By.keita\Documents\KONAMI\Pro Evolution Soccer 2012\save\OPTION.bin [263096] O61 - LFC:Last File Created 17/02/2013 - 02:39:08 ---A- C:\Users\By.keita\Documents\KONAMI\Pro Evolution Soccer 2012\ad\cache\cache.dat [960] O61 - LFC:Last File Created 17/02/2013 - 02:39:08 ---A- C:\Users\By.keita\Documents\KONAMI\Pro Evolution Soccer 2012\ad\dfts.dat [536] O61 - LFC:Last File Created 17/02/2013 - 02:39:08 ---A- C:\Users\By.keita\Documents\KONAMI\Pro Evolution Soccer 2012\ad\user.var [760] O61 - LFC:Last File Created 17/02/2013 - 03:28:10 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old [267] O61 - LFC:Last File Created 17/02/2013 - 03:38:37 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\5120970d [172] O61 - LFC:Last File Created 17/02/2013 - 03:46:40 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Index 2012-12 [64905216] O61 - LFC:Last File Created 17/02/2013 - 04:58:07 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\www.dailymotion.com\com.dm.player.sol [349] O61 - LFC:Last File Created 17/02/2013 - 09:51:14 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000487.sst [43391] O61 - LFC:Last File Created 17/02/2013 - 12:02:30 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000489.sst [4303306] O61 - LFC:Last File Created 17/02/2013 - 12:30:03 ---A- C:\Users\By.keita\AppData\Local\Temp\CVR6A8A.tmp.cvr [0] O61 - LFC:Last File Created 17/02/2013 - 12:53:55 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\UProof\CMAdj.12.bin [444] O61 - LFC:Last File Created 17/02/2013 - 13:04:06 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\51211b96 [160] O61 - LFC:Last File Created 17/02/2013 - 13:04:23 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK [768] O61 - LFC:Last File Created 17/02/2013 - 13:10:53 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\Word\Doc1302810180531935326\Doc1.docx.lnk [496] O61 - LFC:Last File Created 17/02/2013 - 13:10:53 R---- C:\Users\By.keita\AppData\Roaming\Microsoft\Word\Doc1302810180531935326\Doc1((Autosaved-302809760920469104)).asd [362496] O61 - LFC:Last File Created 17/02/2013 - 13:14:40 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.pum.umontreal.ca_0.localstorage [3072] O61 - LFC:Last File Created 17/02/2013 - 13:14:40 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.pum.umontreal.ca_0.localstorage-journal [3608] O61 - LFC:Last File Created 17/02/2013 - 13:23:33 ---A- C:\Users\By.keita\AppData\Roaming\Nonoh\History_djefboy.dat [20975] O61 - LFC:Last File Created 17/02/2013 - 13:23:33 ---A- C:\Users\By.keita\AppData\Roaming\Nonoh\VoiceEngine.xml [1043] O61 - LFC:Last File Created 17/02/2013 - 13:31:05 R---- C:\Users\By.keita\AppData\Roaming\Microsoft\Word\Doc1302810180531935326\Doc1((Autosaved-302809790160687216)).asd [364544] O61 - LFC:Last File Created 17/02/2013 - 13:32:08 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\rutube.ru\analytics.sol [454] O61 - LFC:Last File Created 17/02/2013 - 13:48:52 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage [151552] O61 - LFC:Last File Created 17/02/2013 - 13:48:52 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage-journal [16384] O61 - LFC:Last File Created 17/02/2013 - 15:36:40 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\Office\Recent\Doc1.LNK [888] O61 - LFC:Last File Created 17/02/2013 - 15:47:52 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [262115] O61 - LFC:Last File Created 17/02/2013 - 15:47:52 ---A- C:\Users\By.keita\AppData\Local\Temp\CRX_75DAF8CB7768\crl-set [616] O61 - LFC:Last File Created 17/02/2013 - 15:47:52 ---A- C:\Users\By.keita\AppData\Local\Temp\CRX_75DAF8CB7768\manifest.json [34] O61 - LFC:Last File Created 17/02/2013 - 16:33:53 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\files.leton.tv\com.jeroenwijering.sol [71] O61 - LFC:Last File Created 17/02/2013 - 17:00:59 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\s.ytimg.com\videostats.sol [275] O61 - LFC:Last File Created 17/02/2013 - 17:03:09 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mediacdn.disqus.com_0.localstorage [46080] O61 - LFC:Last File Created 17/02/2013 - 17:03:09 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mediacdn.disqus.com_0.localstorage-journal [16384] O61 - LFC:Last File Created 17/02/2013 - 17:03:28 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\macromedia.com\support\flashplayer\sys\settings.sol [1450] O61 - LFC:Last File Created 17/02/2013 - 17:18:42 ---A- C:\Users\By.keita\AppData\Local\Temp\CVRAF5C.tmp.cvr [0] O61 - LFC:Last File Created 17/02/2013 - 17:29:25 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\Le%20paysage%20de%20la%20géographie302810541040835468\Le%20paysage%20de%20la%20géographie.pptx.lnk [810] O61 - LFC:Last File Created 17/02/2013 - 17:29:25 R---- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\Le%20paysage%20de%20la%20géographie302810541040835468\Le%20paysage%20de%20la%20géographie((Autosaved-302810121428791862)).ppt [194620] O61 - LFC:Last File Created 17/02/2013 - 18:13:17 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Bookmarks.bak [12197] O61 - LFC:Last File Created 17/02/2013 - 20:19:10 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.justin.tv_0.localstorage [3072] O61 - LFC:Last File Created 17/02/2013 - 20:19:10 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.justin.tv_0.localstorage-journal [3608] O61 - LFC:Last File Created 17/02/2013 - 20:19:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\www-cdn.jtvnw.net\jtv_settings.sol [1742] O61 - LFC:Last File Created 17/02/2013 - 20:19:18 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.meebo.com_0.localstorage [3072] O61 - LFC:Last File Created 17/02/2013 - 20:19:18 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.meebo.com_0.localstorage-journal [3608] O61 - LFC:Last File Created 17/02/2013 - 20:19:20 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.meebo.com_0.localstorage [921600] O61 - LFC:Last File Created 17/02/2013 - 20:19:20 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.meebo.com_0.localstorage-journal [16384] O61 - LFC:Last File Created 17/02/2013 - 20:49:22 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plusone.google.com_0.localstorage [3072] O61 - LFC:Last File Created 17/02/2013 - 20:49:22 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plusone.google.com_0.localstorage-journal [3608] O61 - LFC:Last File Created 17/02/2013 - 21:09:12 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000491.sst [4403913] O61 - LFC:Last File Created 17/02/2013 - 21:09:14 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old [987] O61 - LFC:Last File Created 17/02/2013 - 21:10:54 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\secure-uk.imrworldwide.com\_ggMCvar_1.sol [182] O61 - LFC:Last File Created 17/02/2013 - 21:17:11 R---- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\Le%20paysage%20de%20la%20géographie302810541040835468\Le%20paysage%20de%20la%20géographie((Autosaved-302810440646934729)).ppt [195702] O61 - LFC:Last File Created 17/02/2013 - 21:22:58 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\51219082 [160] O61 - LFC:Last File Created 17/02/2013 - 21:27:53 R---- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\Le%20paysage%20de%20la%20géographie302810541040835468\Le%20paysage%20de%20la%20géographie((Autosaved-302810452767194363)).ppt [531657] O61 - LFC:Last File Created 17/02/2013 - 21:38:42 R---- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\Le%20paysage%20de%20la%20géographie302810541040835468\Le%20paysage%20de%20la%20géographie((Autosaved-302810470674201374)).ppt [1889532] O61 - LFC:Last File Created 17/02/2013 - 21:39:45 ---A- C:\Users\By.keita\Downloads\Le paysage de la géographie.pptx [1906470] O61 - LFC:Last File Created 17/02/2013 - 21:43:32 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Last Tabs [388842] O61 - LFC:Last File Created 17/02/2013 - 21:43:34 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Last Session [247144] O61 - LFC:Last File Created 17/02/2013 - 21:43:35 --HA- C:\Users\By.keita\AppData\Local\IconCache.db [4411731] O61 - LFC:Last File Created 17/02/2013 - 21:43:37 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\PPT14.pcb [92] O61 - LFC:Last File Created 17/02/2013 - 21:43:40 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Visited Links [524192] O61 - LFC:Last File Created 17/02/2013 - 21:45:11 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\512195b7 [124] O61 - LFC:Last File Created 17/02/2013 - 21:45:53 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\512195e0 [160] O61 - LFC:Last File Created 17/02/2013 - 21:45:54 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\select.pyd [11776] O61 - LFC:Last File Created 17/02/2013 - 21:45:54 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32pipe.pyd [24064] O61 - LFC:Last File Created 17/02/2013 - 21:45:55 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\unicodedata.pyd [585728] O61 - LFC:Last File Created 17/02/2013 - 21:45:55 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32event.pyd [17920] O61 - LFC:Last File Created 17/02/2013 - 21:45:55 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wx._controls_.pyd [1056256] O61 - LFC:Last File Created 17/02/2013 - 21:45:56 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\shell32.dll [8461312] O61 - LFC:Last File Created 17/02/2013 - 21:45:57 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\kernel32.dll [989696] O61 - LFC:Last File Created 17/02/2013 - 21:45:57 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\psapi.dll [23040] O61 - LFC:Last File Created 17/02/2013 - 21:45:58 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32inet.pyd [39424] O61 - LFC:Last File Created 17/02/2013 - 21:45:58 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32wnet.pyd [24576] O61 - LFC:Last File Created 17/02/2013 - 21:45:59 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\_hashlib.pyd [311808] O61 - LFC:Last File Created 17/02/2013 - 21:45:59 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32file.pyd [111104] O61 - LFC:Last File Created 17/02/2013 - 21:45:59 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wx._windows_.pyd [807424] O61 - LFC:Last File Created 17/02/2013 - 21:45:59 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wx._wizard.pyd [121856] O61 - LFC:Last File Created 17/02/2013 - 21:46:00 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\_ssl.pyd [645120] O61 - LFC:Last File Created 17/02/2013 - 21:46:00 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\bz2.pyd [71168] O61 - LFC:Last File Created 17/02/2013 - 21:46:00 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32pdh.pyd [22528] O61 - LFC:Last File Created 17/02/2013 - 21:46:00 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32process.pyd [36352] O61 - LFC:Last File Created 17/02/2013 - 21:46:00 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wx._core_.pyd [1169408] O61 - LFC:Last File Created 17/02/2013 - 21:46:01 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\PyWinTypes26.dll [110592] O61 - LFC:Last File Created 17/02/2013 - 21:46:01 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32security.pyd [110592] O61 - LFC:Last File Created 17/02/2013 - 21:46:01 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32ui.pyd [778240] O61 - LFC:Last File Created 17/02/2013 - 21:46:02 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32evtlog.pyd [19968] O61 - LFC:Last File Created 17/02/2013 - 21:46:02 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wx._misc_.pyd [731136] O61 - LFC:Last File Created 17/02/2013 - 21:46:03 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\_ctypes.pyd [73728] O61 - LFC:Last File Created 17/02/2013 - 21:46:03 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\pythoncom26.dll [354304] O61 - LFC:Last File Created 17/02/2013 - 21:46:03 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32profile.pyd [17920] O61 - LFC:Last File Created 17/02/2013 - 21:46:03 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\windows._cacheinvalidation.pyd [1024616] O61 - LFC:Last File Created 17/02/2013 - 21:46:03 ---A- C:\Users\By.keita\AppData\Local\Temp\~DF5B8E4BD16AA84B04.TMP [98304] O61 - LFC:Last File Created 17/02/2013 - 21:46:04 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\_win32sysloader.pyd [9216] O61 - LFC:Last File Created 17/02/2013 - 21:46:04 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wx._gdi_.pyd [792576] O61 - LFC:Last File Created 17/02/2013 - 21:46:04 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\Sticky Notes\StickyNotes.snt [13824] O61 - LFC:Last File Created 17/02/2013 - 21:46:05 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\pyexpat.pyd [153088] O61 - LFC:Last File Created 17/02/2013 - 21:46:05 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32crypt.pyd [11776] O61 - LFC:Last File Created 17/02/2013 - 21:46:05 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32trace.pyd [16384] O61 - LFC:Last File Created 17/02/2013 - 21:46:06 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\pysqlite2._sqlite.pyd [571392] O61 - LFC:Last File Created 17/02/2013 - 21:46:06 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32api.pyd [96256] O61 - LFC:Last File Created 17/02/2013 - 21:46:06 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32com.shell.shell.pyd [263168] O61 - LFC:Last File Created 17/02/2013 - 21:46:06 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32ts.pyd [23040] O61 - LFC:Last File Created 17/02/2013 - 21:46:06 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wx._html2.pyd [70656] O61 - LFC:Last File Created 17/02/2013 - 21:46:07 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\_elementtree.pyd [86016] O61 - LFC:Last File Created 17/02/2013 - 21:46:07 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\_socket.pyd [40448] O61 - LFC:Last File Created 17/02/2013 - 21:46:07 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\python26.dll [2149888] O61 - LFC:Last File Created 17/02/2013 - 21:46:08 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wxbase293u_vc.dll [1972224] O61 - LFC:Last File Created 17/02/2013 - 21:46:08 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wxmsw293u_adv_vc.dll [1214976] O61 - LFC:Last File Created 17/02/2013 - 21:46:08 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wxmsw293u_core_vc.dll [4555264] O61 - LFC:Last File Created 17/02/2013 - 21:46:09 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wxbase293u_net_vc.dll [152576] O61 - LFC:Last File Created 17/02/2013 - 21:46:09 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wxmsw293u_html_vc.dll [593408] O61 - LFC:Last File Created 17/02/2013 - 21:46:10 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\mfc90.dll [1156600] O61 - LFC:Last File Created 17/02/2013 - 21:46:10 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\mfc90u.dll [1162744] O61 - LFC:Last File Created 17/02/2013 - 21:46:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT [16] O61 - LFC:Last File Created 17/02/2013 - 21:46:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000512 [333] O61 - LFC:Last File Created 17/02/2013 - 21:46:11 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\mfcm90.dll [59904] O61 - LFC:Last File Created 17/02/2013 - 21:46:11 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\mfcm90u.dll [59904] O61 - LFC:Last File Created 17/02/2013 - 21:46:11 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\mime\drive.mime.types [24371] O61 - LFC:Last File Created 17/02/2013 - 21:46:11 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wxmsw293u_webview_vc.dll [81920] O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\exclaim.png [605] O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\file.png [121] O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\folder-mac.icns [117965] O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\folder-winseven.ico [57802] O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\folder-winxp.ico [15406] O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\folder.png [115] O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gdoc.icns [60047] O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gdoc.ico [22027] O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gdraw.icns [61261] O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gdraw.ico [22391] O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gform.icns [55831] O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gform.ico [91330] O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gform.svg [738] O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\glink.icns [107563] O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\glink.ico [37565] O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gscript.icns [44089] O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gscript.ico [89809] O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gscript.svg [626] O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gsheet.icns [52123] O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gsheet.ico [21906] O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gslides.icns [48649] O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gslides.ico [21849] O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gtable.icns [76682] O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gtable.ico [23069] O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gtable.svg [568] O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\image_resources.py [5767] O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\image_resources.pyo [5083] O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\info1-mac.png [16824] O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\info1-windows7.png [9749] O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\info1-windowsxp.png [10976] O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\info2-default.png [2778] O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\info2-mac.png [9762] O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\info2-win7.png [8184] O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\info2-winxp.png [8062] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate1-inverse.png [324] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate1.png [322] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate2-inverse.png [381] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate2.png [382] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate3-inverse.png [341] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate3.png [336] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate4-inverse.png [381] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate4.png [383] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate5-inverse.png [323] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate5.png [322] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate6-inverse.png [390] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate6.png [401] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate7-inverse.png [333] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate7.png [337] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate8-inverse.png [378] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate8.png [382] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-error-inverse.png [252] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-error.png [257] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-inactive-inverse.png [254] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-inactive.png [259] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-normal-inverse.png [262] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-normal.png [269] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-paused-inverse.png [263] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-paused.png [261] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\menu_warning.png [237] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\sharedfolder-mac.icns [117416] O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\sharedfolder-winseven.ico [55019] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\sharedfolder-winxp.ico [15406] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\shareguyicon.png [179] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\sync.icns [117146] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\sync.ico [45533] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\sync.png [1312] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\sync_128.png [7846] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\toprighticon.png [3355] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate1.png [656] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate2.png [689] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate3.png [625] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate4.png [632] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate5.png [643] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate6.png [642] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate7.png [612] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate8.png [619] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-normal.png [612] O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win7-error.png [600] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\html\drive_thankyou.html [1349] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\vi\LC_MESSAGES\syncclient.mo [25048] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\zh-Hans\LC_MESSAGES\syncclient.mo [22171] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\zh-Hant\LC_MESSAGES\syncclient.mo [22447] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\zh\LC_MESSAGES\syncclient.mo [22171] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\zh_CN\LC_MESSAGES\syncclient.mo [22171] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\zh_HK\LC_MESSAGES\syncclient.mo [22460] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\zh_TW\LC_MESSAGES\syncclient.mo [22447] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\__init__.py [0] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\__init__.pyo [198] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\overlays\Blacklisted.ico [40903] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\overlays\Shared.ico [35679] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\overlays\Synced.ico [35679] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\overlays\Syncing.ico [35424] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win7-inactive.png [599] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win7-paused.png [584] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\winxp-error.png [606] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\winxp-inactive.png [598] O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\winxp-paused.png [583] O61 - LFC:Last File Created 17/02/2013 - 21:46:19 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\sr\LC_MESSAGES\syncclient.mo [29886] O61 - LFC:Last File Created 17/02/2013 - 21:46:19 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\sv\LC_MESSAGES\syncclient.mo [22504] O61 - LFC:Last File Created 17/02/2013 - 21:46:19 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ta\LC_MESSAGES\syncclient.mo [40299] O61 - LFC:Last File Created 17/02/2013 - 21:46:19 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\te\LC_MESSAGES\syncclient.mo [38455] O61 - LFC:Last File Created 17/02/2013 - 21:46:19 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\th\LC_MESSAGES\syncclient.mo [35560] O61 - LFC:Last File Created 17/02/2013 - 21:46:19 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\tr\LC_MESSAGES\syncclient.mo [23812] O61 - LFC:Last File Created 17/02/2013 - 21:46:19 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\uk\LC_MESSAGES\syncclient.mo [29766] O61 - LFC:Last File Created 17/02/2013 - 21:46:20 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\pt_BR\LC_MESSAGES\syncclient.mo [23380] O61 - LFC:Last File Created 17/02/2013 - 21:46:20 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\pt_PT\LC_MESSAGES\syncclient.mo [23248] O61 - LFC:Last File Created 17/02/2013 - 21:46:20 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ro\LC_MESSAGES\syncclient.mo [23596] O61 - LFC:Last File Created 17/02/2013 - 21:46:20 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ru\LC_MESSAGES\syncclient.mo [29775] O61 - LFC:Last File Created 17/02/2013 - 21:46:20 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\sk\LC_MESSAGES\syncclient.mo [23732] O61 - LFC:Last File Created 17/02/2013 - 21:46:20 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\sl\LC_MESSAGES\syncclient.mo [23222] O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ja\LC_MESSAGES\syncclient.mo [26410] O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\kn\LC_MESSAGES\syncclient.mo [40477] O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ko\LC_MESSAGES\syncclient.mo [24305] O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\lt\LC_MESSAGES\syncclient.mo [23532] O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\lv\LC_MESSAGES\syncclient.mo [23275] O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ml\LC_MESSAGES\syncclient.mo [40884] O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\mr\LC_MESSAGES\syncclient.mo [35830] O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\nl\LC_MESSAGES\syncclient.mo [23093] O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\no\LC_MESSAGES\syncclient.mo [22354] O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\pl\LC_MESSAGES\syncclient.mo [22900] O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\pt\LC_MESSAGES\syncclient.mo [23380] O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\fi\LC_MESSAGES\syncclient.mo [22461] O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\fil\LC_MESSAGES\syncclient.mo [23647] O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\fr\LC_MESSAGES\syncclient.mo [23869] O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\gu\LC_MESSAGES\syncclient.mo [35737] O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\he\LC_MESSAGES\syncclient.mo [24893] O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\hi\LC_MESSAGES\syncclient.mo [36635] O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\hr\LC_MESSAGES\syncclient.mo [22872] O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\hu\LC_MESSAGES\syncclient.mo [23811] O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\id\LC_MESSAGES\syncclient.mo [22459] O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\it\LC_MESSAGES\syncclient.mo [23353] O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\main.exe.manifest [963] O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ar\LC_MESSAGES\syncclient.mo [27155] O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\bg\LC_MESSAGES\syncclient.mo [30313] O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\bn\LC_MESSAGES\syncclient.mo [36898] O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ca\LC_MESSAGES\syncclient.mo [23491] O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\cs\LC_MESSAGES\syncclient.mo [23385] O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\da\LC_MESSAGES\syncclient.mo [22606] O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\de\LC_MESSAGES\syncclient.mo [24022] O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\el\LC_MESSAGES\syncclient.mo [32343] O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\en\LC_MESSAGES\syncclient.mo [21670] O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\en_GB\LC_MESSAGES\syncclient.mo [21699] O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\en_US\LC_MESSAGES\syncclient.mo [532] O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\es\LC_MESSAGES\syncclient.mo [23657] O61 - LFC:Last File Created 17/02/2013 - 21:46:26 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\support\gen_py\__init__.py [0] O61 - LFC:Last File Created 17/02/2013 - 21:46:28 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG [0] O61 - LFC:Last File Created 17/02/2013 - 21:46:33 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings [8] O61 - LFC:Last File Created 17/02/2013 - 21:46:34 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Bookmarks [12197] O61 - LFC:Last File Created 17/02/2013 - 21:46:34 ---A- C:\Users\By.keita\AppData\Local\Temp\~DF312F3503B33A5036.TMP [32768] O61 - LFC:Last File Created 17/02/2013 - 21:46:35 ---A- C:\Users\By.keita\AppData\Local\ATI\ACE\Manifest.Bin [27266] O61 - LFC:Last File Created 17/02/2013 - 21:46:35 ---A- C:\Users\By.keita\AppData\Local\ATI\ACE\Manifest.xml [19630] O61 - LFC:Last File Created 17/02/2013 - 21:46:45 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache [546678] O61 - LFC:Last File Created 17/02/2013 - 21:46:45 ---A- C:\Users\By.keita\AppData\Local\Google\Drive\cacerts [3245] O61 - LFC:Last File Created 17/02/2013 - 21:46:45 ---A- C:\Users\By.keita\AppData\Local\Google\Drive\lockfile [0] O61 - LFC:Last File Created 17/02/2013 - 21:46:45 ---A- C:\Users\By.keita\AppData\Local\Google\Drive\pid [4] O61 - LFC:Last File Created 17/02/2013 - 21:46:45 ---A- C:\Users\By.keita\AppData\Local\Google\Drive\snapshot.db [45056] O61 - LFC:Last File Created 17/02/2013 - 21:46:52 ---A- C:\Users\By.keita\AppData\Roaming\Skype\shared_dynco\dc.db [1757184] O61 - LFC:Last File Created 17/02/2013 - 21:46:53 ---A- C:\Users\By.keita\AppData\Roaming\Skype\shared_dynco\dc.db-journal [1116800] O61 - LFC:Last File Created 17/02/2013 - 21:46:57 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\51219621 [144] O61 - LFC:Last File Created 17/02/2013 - 21:47:04 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\eas.db [53248] O61 - LFC:Last File Created 17/02/2013 - 21:47:04 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\eas.db-journal [41552] O61 - LFC:Last File Created 17/02/2013 - 21:47:30 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000493.sst [1514458] O61 - LFC:Last File Created 17/02/2013 - 21:47:30 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000492 [294] O61 - LFC:Last File Created 17/02/2013 - 21:47:31 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT [16] O61 - LFC:Last File Created 17/02/2013 - 21:47:32 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG [0] O61 - LFC:Last File Created 17/02/2013 - 21:47:35 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_icmlaeflemplmjndnaapfdbbnpncnbda_0.localstorage [4368384] O61 - LFC:Last File Created 17/02/2013 - 21:47:35 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_icmlaeflemplmjndnaapfdbbnpncnbda_0.localstorage-journal [16384] O61 - LFC:Last File Created 17/02/2013 - 21:47:56 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\5121965b [172] O61 - LFC:Last File Created 17/02/2013 - 21:47:58 ---A- C:\Users\By.keita\Downloads\install_flashplayer11x32au_mssa_aih.exe [1005792] O61 - LFC:Last File Created 17/02/2013 - 21:49:14 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_get3.adobe.com_0.localstorage [3072] O61 - LFC:Last File Created 17/02/2013 - 21:49:14 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_get3.adobe.com_0.localstorage-journal [3608] O61 - LFC:Last File Created 17/02/2013 - 21:51:23 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\keyval.db [49152] O61 - LFC:Last File Created 17/02/2013 - 21:51:24 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\keyval.db-journal [41552] O61 - LFC:Last File Created 17/02/2013 - 21:54:31 ---A- C:\Users\By.keita\AppData\Local\Google\Google Talk Plugin\googletalkplugin_port [20] O61 - LFC:Last File Created 17/02/2013 - 21:54:38 ---A- C:\Users\By.keita\AppData\Local\Google\Google Talk Plugin\googletalkplugin_ws_port [0] O61 - LFC:Last File Created 17/02/2013 - 21:57:03 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\chatsync\af\afeeb4e2d911f335.dat [1849] O61 - LFC:Last File Created 17/02/2013 - 21:58:36 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-01 [46346240] O61 - LFC:Last File Created 17/02/2013 - 21:58:37 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-01-journal [16384] O61 - LFC:Last File Created 17/02/2013 - 22:02:21 ---A- C:\Users\By.keita\Downloads\Jeune Afrique N°2718 Du 10 au 16 Fevrier 2013 PDF.pdf.torrent [13020] O61 - LFC:Last File Created 17/02/2013 - 22:04:54 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Web Data [163840] O61 - LFC:Last File Created 17/02/2013 - 22:04:54 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal [16384] O61 - LFC:Last File Created 17/02/2013 - 22:04:55 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Login Data [18432] O61 - LFC:Last File Created 17/02/2013 - 22:04:55 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal [8736] O61 - LFC:Last File Created 17/02/2013 - 22:45:27 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\5121a3d7 [160] O61 - LFC:Last File Created 18/02/2013 - 06:30:58 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Top Sites [1540096] O61 - LFC:Last File Created 18/02/2013 - 06:30:59 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal [16384] O61 - LFC:Last File Created 18/02/2013 - 06:31:00 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOG.old [151] O61 - LFC:Last File Created 18/02/2013 - 06:31:04 ---A- C:\Users\By.keita\AppData\Local\ATI\ACE\Profiles.xml [45327] O61 - LFC:Last File Created 18/02/2013 - 06:40:59 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\Paths\LOG.old [151] O61 - LFC:Last File Created 18/02/2013 - 07:09:56 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\Office\Recent\Le paysage de la géographie.LNK [1005] O61 - LFC:Last File Created 18/02/2013 - 07:10:16 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plus.google.com_0.localstorage [3072] O61 - LFC:Last File Created 18/02/2013 - 07:10:16 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plus.google.com_0.localstorage-journal [3608] O61 - LFC:Last File Created 18/02/2013 - 07:10:27 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Index 2012-11 [41754624] O61 - LFC:Last File Created 18/02/2013 - 07:10:27 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Index 2012-11-journal [16384] O61 - LFC:Last File Created 18/02/2013 - 07:10:38 ---A- C:\Users\By.keita\Downloads\Le paysage de la géographie (1).pptx [2233695] O61 - LFC:Last File Created 18/02/2013 - 07:10:50 ---A- C:\Users\By.keita\AppData\Local\Temp\CVR639C.tmp.cvr [0] O61 - LFC:Last File Created 18/02/2013 - 07:10:51 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\Office\Recent\Le paysage de la géographie (1).LNK [1025] O61 - LFC:Last File Created 18/02/2013 - 07:10:51 --H-- C:\Users\By.keita\AppData\Roaming\Microsoft\Office\Recent\index.dat [2546] O61 - LFC:Last File Created 18/02/2013 - 07:14:05 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_3cp9lcoq32dpn-c.c.yom.mail.yahoo.com_0.localstorage [12288] O61 - LFC:Last File Created 18/02/2013 - 07:14:05 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_3cp9lcoq32dpn-c.c.yom.mail.yahoo.com_0.localstorage-journal [12896] O61 - LFC:Last File Created 18/02/2013 - 07:15:53 ---A- C:\Users\By.keita\Downloads\Besse-Tiberghien_2003.pdf [1368901] O61 - LFC:Last File Created 18/02/2013 - 07:16:23 ---A- C:\Users\By.keita\Downloads\Texte 6.1.pdf [200163] O61 - LFC:Last File Created 18/02/2013 - 07:16:25 ---A- C:\Users\By.keita\Downloads\Texte 6.2.pdf [192845] O61 - LFC:Last File Created 18/02/2013 - 07:21:33 R---- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\Le%20paysage%20de%20la%20géographie%20(1)302811702105759631\Le%20paysage%20de%20la%20géographie%20(1)((Autosaved-302811282493546015)).ppt [2212203] O61 - LFC:Last File Created 18/02/2013 - 07:21:34 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\Le%20paysage%20de%20la%20géographie%20(1)302811702105759631\Le%20paysage%20de%20la%20géographie%20(1).pptx.lnk [635] O61 - LFC:Last File Created 18/02/2013 - 07:30:41 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\Paths\CURRENT [16] O61 - LFC:Last File Created 18/02/2013 - 07:30:41 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\Paths\MANIFEST-002727 [88] O61 - LFC:Last File Created 18/02/2013 - 07:30:41 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT [16] O61 - LFC:Last File Created 18/02/2013 - 07:30:41 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\MANIFEST-003072 [142] O61 - LFC:Last File Created 18/02/2013 - 07:30:42 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\.usage [24] O61 - LFC:Last File Created 18/02/2013 - 07:30:42 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\00\00000002 [774439] O61 - LFC:Last File Created 18/02/2013 - 07:31:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\QuotaManager [20480] O61 - LFC:Last File Created 18/02/2013 - 07:31:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\QuotaManager-journal [6704] O61 - LFC:Last File Created 18/02/2013 - 07:33:09 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom [7639896] O61 - LFC:Last File Created 18/02/2013 - 07:33:09 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Safe Browsing Download [1199268] O61 - LFC:Last File Created 18/02/2013 - 07:33:10 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set [1482228] O61 - LFC:Last File Created 18/02/2013 - 07:33:10 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Safe Browsing Csd Whitelist [134512] O61 - LFC:Last File Created 18/02/2013 - 07:33:10 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Safe Browsing Download Whitelist [19780] O61 - LFC:Last File Created 18/02/2013 - 07:40:42 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\Paths\LOG [151] O61 - LFC:Last File Created 18/02/2013 - 07:40:42 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOG [151] O61 - LFC:Last File Created 18/02/2013 - 07:40:43 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\msn.db [81920] O61 - LFC:Last File Created 18/02/2013 - 07:40:43 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\msn.db-journal [57968] O61 - LFC:Last File Created 18/02/2013 - 07:40:47 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\dc.db [45056] O61 - LFC:Last File Created 18/02/2013 - 07:40:56 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\bistats.db [69632] O61 - LFC:Last File Created 18/02/2013 - 07:40:56 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\bistats.db-journal [37448] O61 - LFC:Last File Created 18/02/2013 - 07:40:56 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\config.xml [8844] O61 - LFC:Last File Created 18/02/2013 - 07:40:56 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\httpfe\cookies.dat [12] O61 - LFC:Last File Created 18/02/2013 - 07:40:56 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\main.db [2224128] O61 - LFC:Last File Created 18/02/2013 - 07:40:56 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\main.db-journal [501200] O61 - LFC:Last File Created 18/02/2013 - 07:40:56 ---A- C:\Users\By.keita\AppData\Roaming\Skype\shared.xml [68685] O61 - LFC:Last File Created 18/02/2013 - 07:41:18 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor [482304] O61 - LFC:Last File Created 18/02/2013 - 07:41:18 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal [16384] O61 - LFC:Last File Created 18/02/2013 - 07:41:18 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Shortcuts [135168] O61 - LFC:Last File Created 18/02/2013 - 07:41:18 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal [16384] O61 - LFC:Last File Created 18/02/2013 - 07:41:28 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity [829] O61 - LFC:Last File Created 18/02/2013 - 07:41:30 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Archived History [2998272] O61 - LFC:Last File Created 18/02/2013 - 07:41:30 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal [16384] O61 - LFC:Last File Created 18/02/2013 - 07:41:48 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Favicons [7258112] O61 - LFC:Last File Created 18/02/2013 - 07:41:48 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal [16384] O61 - LFC:Last File Created 18/02/2013 - 07:41:48 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History [12091392] O61 - LFC:Last File Created 18/02/2013 - 07:41:48 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-02 [19111936] O61 - LFC:Last File Created 18/02/2013 - 07:41:48 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-02-journal [16384] O61 - LFC:Last File Created 18/02/2013 - 07:41:48 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History-journal [16384] O61 - LFC:Last File Created 18/02/2013 - 07:41:53 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3 [2322432] O61 - LFC:Last File Created 18/02/2013 - 07:41:53 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3-journal [16384] O61 - LFC:Last File Created 18/02/2013 - 07:42:02 ---A- C:\Users\By.keita\Downloads\ZHPDiag2.exe [5400486] O61 - LFC:Last File Created 18/02/2013 - 07:42:21 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies [6144] O61 - LFC:Last File Created 18/02/2013 - 07:42:21 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies-journal [2576] O61 - LFC:Last File Created 18/02/2013 - 07:46:04 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Preferences [97678] O61 - LFC:Last File Created 18/02/2013 - 07:46:40 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Cookies [987136] O61 - LFC:Last File Created 18/02/2013 - 07:46:40 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal [16384] O61 - LFC:Last File Created 18/02/2013 - 07:47:18 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Local State [23745] ~ Scan Files in 03mn 28s ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: UsbFix By El Desaparecido - (.El Desaparecido.) [HKLM] -- Usbfix O63 - Logiciel: ZHPDiag 1.3.5 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ Scan ADS in 00mn 00s ---\\ Liste des services Legacy (O64) O64 - Services: CurCS - 19/12/2012 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag) .(.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswFsBlk.sys (aswFsBlk) .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK O64 - Services: CurCS - 30/10/2012 - C:\Windows\system32\drivers\aswMonFlt.sys (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT O64 - Services: CurCS - 15/10/2012 - C:\Windows\system32\Drivers\aswrdr2.sys (aswRdr) .(.AVAST Software - avast! WFP Redirect Driver.) - LEGACY_ASWRDR O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswSnx.sys (aswSnx) .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswSP.sys (aswSP) .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswTdi.sys (aswTdi) .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI O64 - Services: CurCS - 16/01/2013 - C:\Windows\System32\DRIVERS\cmderd.sys (cmderd) .(.COMODO - COMODO Internet Security Eradication Driver.) - LEGACY_CMDERD O64 - Services: CurCS - 16/01/2013 - C:\Windows\System32\DRIVERS\cmdguard.sys (cmdGuard) .(.COMODO - COMODO Internet Security Sandbox Driver.) - LEGACY_CMDGUARD O64 - Services: CurCS - 16/01/2013 - C:\Windows\System32\DRIVERS\cmdhlp.sys (cmdHlp) .(.COMODO - COMODO Internet Security Helper Driver.) - LEGACY_CMDHLP O64 - Services: CurCS - 16/01/2013 - C:\Windows\System32\DRIVERS\inspect.sys (inspect) .(.COMODO - COMODO Internet Security Firewall Driver.) - LEGACY_INSPECT O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV ~ Scan Services in 00mn 02s ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Adobe Systems, Inc. - Adobe Dreamweaver CS5.) -- C:\Program Files\Adobe\Adobe Dreamweaver CS5\Dreamweaver.exe O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ~ Scan Keys in 00mn 00s ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Scan Keys in 00mn 00s ---\\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - http://search.live.com O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} [DefaultScope] - (Yahoo! Search) - http://fr.search.yahoo.com O69 - SBI: SearchScopes [HKCU] {9D5BD211-422C-4164-9298-BB4186A30F31} - (Bing) - http://www.bing.com ~ Scan Keys in 00mn 00s ---\\ Recherche des services démarrés par Svchost (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [62464] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [168448] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [591360] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [667136] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [473088] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [90624] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [285184] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [49664] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [300544] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [241664] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [543232] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [1929952] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [589312] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [497152] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [21504] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [46592] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [49664] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [61440] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [162816] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [743424] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [71168] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [99328] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [102400] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [37376] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800] O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [149504] ~ Scan Services in 00mn 00s ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.F92067543402AF7026A45B413646ACBF] [SPRF][30/08/2012] (.Foxit Corporation - Foxit Updater.) -- C:\Users\By.keita\AppData\Local\Temp\Foxit Updater.exe [4327024] [MD5.403DA8628C89287DE1EEE4BF5CD2C582] [SPRF][08/02/2013] (...) -- C:\Users\By.keita\AppData\Local\Temp\mp3el.exe [122880] [MD5.B04F0E0352DB5B0FEE4C4A93630838B7] [SPRF][05/02/2013] (.Advanced Micro Devices, Inc. - 13-1_vista_win7_win8_32_dd_ccc_whql.) -- C:\Users\By.keita\AppData\Local\Temp\tmp9FF6.exe [99315736] [MD5.DAC55804225089A15D9F21BBE5031284] [SPRF][08/02/2013] (.NCH Software - WavePad - Logiciel d'édition audio.) -- C:\Users\By.keita\AppData\Local\Temp\uninst.exe [2025476] [MD5.034C3FBDE00A3A0E7AFC2E89ACC11970] [SPRF][05/02/2013] (...) -- C:\Users\By.keita\AppData\Local\Temp\~gu-ver.dat [112] [MD5.46DA30476B579584ED6A6FA8CC0D09B8] [SPRF][18/02/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\By.keita\Desktop\ZHPDiag2.exe [5400486] ~ Scan Files in 00mn 15s ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "{06AFF6D8-6948-493C-A9F3-2E0B6E854214}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files\BitTorrent\BitTorrent.exe O87 - FAEL: "{6E1B0C56-9735-4DF3-B682-9C3E1A94ACA6}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files\BitTorrent\BitTorrent.exe O87 - FAEL: "TCP Query User{48ED0E21-929E-46BE-8B1D-161F189B078C}C:\cracked license manager 10\lmgrd.exe" | In - Private - P6 - TRUE | .(.Acresso Software Inc. - Acresso Software Inc..) -- C:\cracked license manager 10\lmgrd.exe O87 - FAEL: "UDP Query User{B8ADFFDC-5194-43EB-9882-3766FDB66F12}C:\cracked license manager 10\lmgrd.exe" | In - Private - P17 - TRUE | .(.Acresso Software Inc. - Acresso Software Inc..) -- C:\cracked license manager 10\lmgrd.exe O87 - FAEL: "TCP Query User{AE66A696-9912-4370-A2D4-54B33A26C6FD}C:\cracked license manager 10\arcgis.exe" | In - Private - P6 - TRUE | .(...) -- C:\cracked license manager 10\arcgis.exe O87 - FAEL: "UDP Query User{CBBA648D-9A81-4836-8C9E-A3E2831ECE05}C:\cracked license manager 10\arcgis.exe" | In - Private - P17 - TRUE | .(...) -- C:\cracked license manager 10\arcgis.exe O87 - FAEL: "{A8120831-1CAC-460F-B7A7-37CDE513A784}" | In - Private - P6 - TRUE | .(.CAPCOM U.S.A, INC. - SUPER STREET FIGHTER IV ARCADE EDITION.) -- C:\Program Files\Capcom\Super Street Fighter IV\SSFIV.exe O87 - FAEL: "{C76DCD9E-7656-4298-A517-4C7CB57D100A}" | In - Private - P17 - TRUE | .(.CAPCOM U.S.A, INC. - SUPER STREET FIGHTER IV ARCADE EDITION.) -- C:\Program Files\Capcom\Super Street Fighter IV\SSFIV.exe O87 - FAEL: "{7A3F7C51-4EF4-4510-8915-A98C581EA3E0}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe O87 - FAEL: "{276F32ED-5512-434F-BFCA-F0617634769D}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe O87 - FAEL: "{A232CF34-98E3-4D1A-AEB9-B4F93EAC19F8}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{97088761-0CAB-4440-9A29-2914274CE5EE}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{840DE83B-8A0A-41EC-89B8-8CAD5BD56744}" | In - Private - P6 - TRUE | .(.CAPCOM U.S.A, INC. - Street Fighter X Tekken.) -- C:\Program Files\Capcom\Street Fighter X Tekken\SFTK.exe O87 - FAEL: "{ABA4CAA5-2F0D-44EB-89A2-60BD36898D9C}" | In - Private - P17 - TRUE | .(.CAPCOM U.S.A, INC. - Street Fighter X Tekken.) -- C:\Program Files\Capcom\Street Fighter X Tekken\SFTK.exe O87 - FAEL: "{CC646218-24E4-4556-8523-A7957BB0561B}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files\Ubisoft\Rayman Origins\Rayman Origins.exe O87 - FAEL: "{9D2FAF69-B33A-433C-84E6-DCBD5ACC4302}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files\Ubisoft\Rayman Origins\Rayman Origins.exe O87 - FAEL: "{8465CBA3-678C-440C-B34D-C2B1E20E7E54}" | In - Private - P6 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files\Ubisoft\Rayman Origins\gu.exe O87 - FAEL: "{72EBAAB2-5DA2-4534-A66E-30B9CA1C5DE9}" | In - Private - P17 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files\Ubisoft\Rayman Origins\gu.exe O87 - FAEL: "TCP Query User{64D9FD69-209D-4D39-86D3-6FDF2CE77E34}C:\cracked license manager 10\lmgrd.exe" | In - Public - P6 - TRUE | .(.Acresso Software Inc. - Acresso Software Inc..) -- C:\cracked license manager 10\lmgrd.exe O87 - FAEL: "UDP Query User{1BBFB9DD-7388-41D9-963A-114FF247F1FE}C:\cracked license manager 10\lmgrd.exe" | In - Public - P17 - TRUE | .(.Acresso Software Inc. - Acresso Software Inc..) -- C:\cracked license manager 10\lmgrd.exe O87 - FAEL: "TCP Query User{6BA76B2F-D945-4F80-B78C-C18F5DB93135}C:\program files\nonoh.net\nonoh\nonoh.exe" | In - Private - P6 - TRUE | .(.Nonoh - Client to make VoIP calls..) -- C:\program files\nonoh.net\nonoh\nonoh.exe O87 - FAEL: "UDP Query User{05F814CB-7A24-4091-A5C8-15F41226480A}C:\program files\nonoh.net\nonoh\nonoh.exe" | In - Private - P17 - TRUE | .(.Nonoh - Client to make VoIP calls..) -- C:\program files\nonoh.net\nonoh\nonoh.exe O87 - FAEL: "TCP Query User{A99B2424-65AB-472C-A903-6D9EC00FE541}C:\program files\nonoh.net\nonoh\nonoh.exe" | In - Public - P6 - TRUE | .(.Nonoh - Client to make VoIP calls..) -- C:\program files\nonoh.net\nonoh\nonoh.exe O87 - FAEL: "UDP Query User{16D45BAC-A773-4F2D-97AE-AB96D9B372DC}C:\program files\nonoh.net\nonoh\nonoh.exe" | In - Public - P17 - TRUE | .(.Nonoh - Client to make VoIP calls..) -- C:\program files\nonoh.net\nonoh\nonoh.exe O87 - FAEL: "TCP Query User{6543CF60-9005-477A-AE61-F6B7757466EE}C:\cracked license manager 10\arcgis.exe" | In - Public - P6 - TRUE | .(...) -- C:\cracked license manager 10\arcgis.exe O87 - FAEL: "UDP Query User{6AC18BF8-2038-45BC-9E11-1A02AC54CD0C}C:\cracked license manager 10\arcgis.exe" | In - Public - P17 - TRUE | .(...) -- C:\cracked license manager 10\arcgis.exe O87 - FAEL: "TCP Query User{EAAC49A7-E1CF-4C3C-91C3-A3834D14DFC2}C:\program files\atari\tdu2\uplauncher.exe" | In - Private - P6 - FALSE | .(.Eden Games - UpLauncher.) -- C:\program files\atari\tdu2\uplauncher.exe O87 - FAEL: "UDP Query User{929750AD-F2A3-4198-A126-E6FEB6188386}C:\program files\atari\tdu2\uplauncher.exe" | In - Private - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\program files\atari\tdu2\uplauncher.exe O87 - FAEL: "{724711E0-729B-40CE-999C-17C843E44FF0}" | Out - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe O87 - FAEL: "TCP Query User{010B6782-0F8B-4762-BB33-FA10C017C4DA}C:\program files\atari\tdu2\testdrive2.exe" | In - Private - P6 - TRUE | .(.Eden Games - Test Drive Unlimited 2.) -- C:\program files\atari\tdu2\testdrive2.exe O87 - FAEL: "UDP Query User{6D87E4E7-6369-47BE-AE0A-B3254A2CF7BA}C:\program files\atari\tdu2\testdrive2.exe" | In - Private - P17 - TRUE | .(.Eden Games - Test Drive Unlimited 2.) -- C:\program files\atari\tdu2\testdrive2.exe O87 - FAEL: "{17AD70AD-DF2D-48E4-BE24-B26A302225AF}" | In - Private - P6 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\Users\By.keita\AppData\Roaming\Dropbox\bin\Dropbox.exe O87 - FAEL: "{B6233774-94B1-4CC8-BDC1-F1245862C415}" | In - Private - P17 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\Users\By.keita\AppData\Roaming\Dropbox\bin\Dropbox.exe O87 - FAEL: "TCP Query User{099D689A-16F7-4A34-9B24-B109E331F894}C:\users\by.keita\appdata\roaming\dropbox\bin\dropbox.exe" | In - Public - P6 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\users\by.keita\appdata\roaming\dropbox\bin\dropbox.exe O87 - FAEL: "UDP Query User{66A43E3D-A079-493D-8158-5BD623F2CA51}C:\users\by.keita\appdata\roaming\dropbox\bin\dropbox.exe" | In - Public - P17 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\users\by.keita\appdata\roaming\dropbox\bin\dropbox.exe O87 - FAEL: "TCP Query User{DF3B964A-CC02-4314-A176-11DF43A2F176}C:\program files\dell voice\dellvoice.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\dell voice\dellvoice.exe (.not file.) O87 - FAEL: "UDP Query User{CF32F4B3-517C-423A-A3FA-70974492BE4E}C:\program files\dell voice\dellvoice.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\dell voice\dellvoice.exe (.not file.) O87 - FAEL: "TCP Query User{33BF8FBC-7785-4FB8-8703-668923691217}C:\program files\dell voice\dellvoice.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\dell voice\dellvoice.exe (.not file.) O87 - FAEL: "UDP Query User{7E9687CA-4B26-4979-BFAD-8BEF29732BF1}C:\program files\dell voice\dellvoice.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\dell voice\dellvoice.exe (.not file.) O87 - FAEL: "{A8467C22-9D76-4C62-8289-0BAFAD1DC6DD}" | In - None - P17 - TRUE | .(.Skype Limited - Facebook Video Calling.) -- C:\Users\By.keita\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe O87 - FAEL: "TCP Query User{088B848C-7C63-4BE2-9F2D-8EEDD1ED2E7D}C:\program files\atari\tdu2\_uplauncher.exe" |In - Private - P6 - FALSE | .(...) -- C:\program files\atari\tdu2\_uplauncher.exe (.not file.) O87 - FAEL: "UDP Query User{755F195C-89DC-407D-AF12-D230151E0180}C:\program files\atari\tdu2\_uplauncher.exe" |In - Private - P17 - FALSE | .(...) -- C:\program files\atari\tdu2\_uplauncher.exe (.not file.) O87 - FAEL: "{13C6B725-F7A8-40A5-97BC-BF039160E79C}" | In - Private - P6 - TRUE | .(...) -- C:\Windows\System32\PnkBstrA.exe O87 - FAEL: "{FC68D4F2-ADA6-4C44-8F2C-A8A4B9546B99}" | In - Private - P17 - TRUE | .(...) -- C:\Windows\System32\PnkBstrA.exe O87 - FAEL: "{5773F8FB-0F47-4BDA-A281-0B4906A584E3}" | In - Private - P6 - TRUE | .(...) -- C:\Windows\System32\PnkBstrB.exe O87 - FAEL: "{055CEF3E-C2EF-448E-A507-F13775D78298}" | In - Private - P17 - TRUE | .(...) -- C:\Windows\System32\PnkBstrB.exe O87 - FAEL: "{E268A179-41ED-412A-9CD9-BB716875DAC2}" | In - Private - P6 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- C:\Program Files\Ubisoft\FarCry 3\bin\farcry3.exe O87 - FAEL: "{3A0F4C0D-2DFA-406C-B5B5-88FFD521F940}" | In - Private - P17 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- C:\Program Files\Ubisoft\FarCry 3\bin\farcry3.exe O87 - FAEL: "{9F9D6068-8A3E-4E60-A126-7D4C70EC8A40}" | In - Private - P6 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- C:\Program Files\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe O87 - FAEL: "{EDB94CAB-D6B7-4F3C-8BCB-DBCC8E1E8E15}" | In - Private - P17 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- C:\Program Files\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe O87 - FAEL: "{97A6F0C6-8F94-40DE-ABA5-64C77B62CF56}" | In - Private - P6 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Updater.exe O87 - FAEL: "{D09C9209-B6FF-4D5B-A3E5-6FF89AC68529}" | In - Private - P17 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Updater.exe O87 - FAEL: "{DC9DFB7C-AEE5-4510-A665-C7D571D73B71}" | In - Private - P6 - TRUE | .(.Ubisoft - FC3Editor.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Editor.exe O87 - FAEL: "{5518B617-29EE-4670-BA21-FDAD6D6F14FE}" | In - Private - P17 - TRUE | .(.Ubisoft - FC3Editor.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Editor.exe O87 - FAEL: "{0030B8C1-8749-4229-8031-073462FEB319}" | In - Private - P6 - TRUE | .(.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2012.) -- C:\Program Files\KONAMI\Pro Evolution Soccer 2012\pes2012.exe O87 - FAEL: "{4B36C3E0-E65B-4026-9C28-94490FAFB01E}" | In - Private - P17 - TRUE | .(.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2012.) -- C:\Program Files\KONAMI\Pro Evolution Soccer 2012\pes2012.exe O87 - FAEL: "TCP Query User{61EB0206-A421-4EEE-B7A5-251E22C75773}C:\program files\konami\pro evolution soccer 2013\pes2013.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\konami\pro evolution soccer 2013\pes2013.exe (.not file.) O87 - FAEL: "UDP Query User{D973DEE7-8DE9-4664-A6E3-C5B9FD674A00}C:\program files\konami\pro evolution soccer 2013\pes2013.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\konami\pro evolution soccer 2013\pes2013.exe (.not file.) O87 - FAEL: "TCP Query User{8AC1C25C-CF9F-4229-A77B-DC6B276E7D78}E:\crack\pes2013.exe" |In - Private - P6 - TRUE | .(...) -- E:\crack\pes2013.exe (.not file.) O87 - FAEL: "UDP Query User{24F00664-75F4-4B7A-B915-5CD79FD98C07}E:\crack\pes2013.exe" |In - Private - P17 - TRUE | .(...) -- E:\crack\pes2013.exe (.not file.) O87 - FAEL: "{8705B984-E653-4B45-8295-AA2E7EAA6664}" | In - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe O87 - FAEL: "{E23DB75F-400E-444C-BBC0-E0022B58C031}" | In - None - P17 - TRUE | .(.Eden Games - Test Drive Unlimited 2.) -- C:\Program Files\Atari\TDU2\TestDrive2.exe O87 - FAEL: "{822CAF55-54CD-412D-875B-0C7F56BD6A2B}" | In - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe O87 - FAEL: "{DC5BB53E-0051-48DE-84E9-2A509331C6FF}" | Out - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe O87 - FAEL: "{A0630CC6-580B-43A1-9AC5-E5C836549117}" | Out - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe O87 - FAEL: "{51585C97-1DD9-4DBF-AA6C-E9AEC14CAC44}" | Out - None - P17 - TRUE | .(.Eden Games - Test Drive Unlimited 2.) -- C:\Program Files\Atari\TDU2\TestDrive2.exe O87 - FAEL: "{A41F7D46-7ADF-496E-878A-539DD693CFAB}" | Out - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe O87 - FAEL: "{0E36B27A-A896-4AD6-BD39-3EE06DEF77FD}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\Common Files\Comodo\GeekBuddyRSP.exe (.not file.) O87 - FAEL: "{4D344528-7BC9-4F3E-8786-073050C7ED21}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\Common Files\Comodo\GeekBuddyRSP.exe (.not file.) ~ Scan Firewall in 00mn 01s ---\\ Scan Additionnel (O88) Database Version : v2.10777 - (17/02/2013) Clés trouvées (Keys found) : 6 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 9 Fichiers trouvés (Files found) : 0 [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz [HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}] =>Adware.AskSBAR [HKCU\Software\Softonic] =>Toolbar.Conduit [HKLM\Software\Classes\Prod.cap] =>Adware.Bandoo [HKLM\Software\Classes\esriEditorExt.FeatureFromAreaContainsPointErrorCommand] =>Adware.SPointer [HKLM\Software\Classes\esriEditorExt.FeatureFromAreaContainsPointErrorCommand.1] =>Adware.SPointer C:\Program Files\yourfiledownloader =>PUP.YourFileDownloader C:\Program Files\YouTube Downloader Toolbar =>PUP.Dealio C:\Program Files\Free Offers from Freeze.com =>Adware.Freeze C:\Program Files\Common Files\Spigot =>PUP.Dealio C:\ProgramData\Babylon =>Toolbar.Babylon C:\ProgramData\InstallMate =>Toolbar.Agent C:\Users\By.keita\AppData\Roaming\yourfiledownloader =>PUP.YourFileDownloader C:\Users\By.keita\AppData\Roaming\Babylon =>Toolbar.Babylon C:\Users\By.keita\AppData\LocalLow\Search Settings =>PUP.Dealio ~ Scan Additionnel in 00mn 46s ---\\ Recherche détournement de DNS routeur (O89) (None) ---\\ Product Upgrade Codes (O90) O90 - PUC: "057978BEDBCC3104FB5D20494DADB50D" . (.Apple Application Support.) -- C:\Windows\Installer\{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}\WinInstall.ico O90 - PUC: "0826823371681E11F86F8BCAF6798BE8" . (.Google Earth Plug-in.) -- C:\Windows\Installer\{33286280-8617-11E1-8FF6-B8AC6F97B88E}\ARPPRODUCTICON.exe O90 - PUC: "0C1FF52A6B08B8B45A15CD2565794A80" . (.AMD APP SDK Runtime.) -- C:\Windows\Installer\{A25FF1C0-80B6-4B8B-A551-DC525697A408}\ARPPRODUCTICON.exe O90 - PUC: "0ED9D238CFA898648991D4BBEDDBE3F4" . (.Microsoft Games for Windows - LIVE Redistributable.) -- C:\Windows\Installer\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}\GameForWindowsLiveRedist.exe O90 - PUC: "121E2D80A6F7BE3479DF26B944094330" . (.Microsoft_VC90_CRT_x86.) -- C:\Windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe O90 - PUC: "20B91A1DE71869244AB57058F37DD475" . (.Microsoft_VC80_MFC_x86.) -- C:\Windows\Installer\{D1A19B02-817E-4296-A45B-07853FD74D57}\ARPPRODUCTICON.exe O90 - PUC: "227C12A7952F67947BAA66855EDFDEFA" . (.Google Drive.) -- C:\Windows\Installer\{7A21C722-F259-4976-B7AA-6658E5FDEDAF}\DriveIcon O90 - PUC: "25BBB29DFF28DE24A8C3E460F249A47B" . (.Microsoft_VC80_MFCLOC_x86.) -- C:\Windows\Installer\{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}\ARPPRODUCTICON.exe O90 - PUC: "29D1F74FFD4F3114080B5BF8E21BF082" . (.AMD Media Foundation Decoders.) -- C:\Windows\Installer\{F47F1D92-F4DF-4113-80B0-B58F2EB10F28}\ARPPRODUCTICON.exe O90 - PUC: "2B754B4DF062165CAC7807B33D7B42AC" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{D4B457B2-260F-C561-CA87-703BD3B724CA}\ARPPRODUCTICON.exe O90 - PUC: "32FA0F2EF2EF2224A934556EC34CE11F" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}\ARPPRODUCTICON.exe O90 - PUC: "42962336FAC3858CA3F858898C07917D" . (.Catalyst Control Center.) -- C:\Windows\Installer\{63326924-3CAF-C858-3A8F-8598C87019D7}\ARPPRODUCTICON.exe O90 - PUC: "44C482C10E8B3DE218452531A3FA5F83" . (.HydraVision.) -- C:\Windows\Installer\{1C284C44-B8E0-2ED3-8154-52133AAFF538}\ARPPRODUCTICON.exe O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico O90 - PUC: "4FF2CB855A86A8D40B0B332CDCACF2D2" . (.Logo Design Studio Pro.) -- C:\Windows\Installer\{58BC2FF4-68A5-4D8A-B0B0-33C2CDCA2F2D}\ARPPRODUCTICON.exe O90 - PUC: "67B3FB7D9FEE8684B9B224BA6FB072A9" . (.Microsoft_VC80_CRT_x86.) -- C:\Windows\Installer\{D7BF3B76-EEF9-4868-9B2B-42ABF60B279A}\ARPPRODUCTICON.exe O90 - PUC: "68AB67CA7DA73301B7449A0500000010" . (.Adobe Reader 9.5.2.) -- C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A95000000001}\SC_Reader.ico O90 - PUC: "6D4B04801DD7781458326ECF0070FE7B" . (.Windows Live ID Sign-in Assistant.) -- C:\Windows\Installer\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}\prodicon.ico O90 - PUC: "74A8220B65A87AA6EB3819B0DB1DC94B" . (.AMD Drag and Drop Transcoding.) -- C:\Windows\Installer\{B0228A47-8A56-6AA7-BE83-910BBDD19CB4}\ARPPRODUCTICON.exe O90 - PUC: "890A737E161FF6B4FA2268AA3EF4F6DB" . (.Pro Evolution Soccer 2012.) -- C:\Windows\Installer\{E737A098-F161-4B6F-AF22-86AAE34F6FBD}\ARPPRODUCTICON.exe O90 - PUC: "91785D291CBB3CC40AB8659C8E48CCC2" . (.Microsoft_VC80_CRT_x86.) -- C:\Windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe O90 - PUC: "9C7DC219B8ABB5161496D75346166DCB" . (.ATI AVIVO Codecs.) -- C:\Windows\Installer\{912CD7C9-BA8B-615B-4169-7D356461D6BC}\ARPPRODUCTICON.exe O90 - PUC: "B2F5519759897D9468219D52080EEDB5" . (.Bonjour.) -- C:\Windows\Installer\{79155F2B-9895-49D7-8612-D92580E0DE5B}\Bonjour.ico O90 - PUC: "B4A2F9673A486849DA2DE9A54B4B1E3E" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{769F2A4B-84A3-9486-ADD2-9E5AB4B4E1E3}\ARPPRODUCTICON.exe O90 - PUC: "B5DEF536D6C2EB94786EA7F6DC22CBA5" . (.Microsoft_VC90_MFC_x86.) -- C:\Windows\Installer\{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}\ARPPRODUCTICON.exe O90 - PUC: "C7030BC4E565144468EBD02F4EBF28C8" . (.Microsoft Games for Windows Marketplace.) -- C:\Windows\Installer\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}\GameForWindowsLiveDash.exe O90 - PUC: "CDC23D06EB3E8754AB0192233270DCCD" . (.Logitech Gaming Software 5.10.) -- C:\Windows\Installer\{60D32CDC-E3BE-4578-BA10-29322307CDDC}\ARPPRODUCTICON.exe O90 - PUC: "DB8F5283487FBBF65ADC585795410870" . (.AMD Catalyst Install Manager.) -- C:\Windows\Installer\{3825F8BD-F784-6FBB-A5CD-857559148007}\ARPPRODUCTICON.exe O90 - PUC: "E323A2F34C068E14C8BC79511D7D053C" . (.Angry Birds Space.) -- C:\Windows\Installer\{3F2A323E-60C4-41E8-8CCB-9715D1D750C3}\AngryBirdsSpace.exe O90 - PUC: "E7FF67E4ABEA78C47B88DC745E24B5D9" . (.Skype™ 6.1.) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe O90 - PUC: "E805DFCE2A862B1964DDD1307D389DB4" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{ECFD508E-68A2-91B2-46DD-1D03D783D94B}\ARPPRODUCTICON.exe O90 - PUC: "E873E3303DA65DA4DBBEBC6DB91340C6" . (.Microsoft_VC90_ATL_x86.) -- C:\Windows\Installer\{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}\ARPPRODUCTICON.exe O90 - PUC: "EA5B44F46A28A8A43A3E2ED48479823E" . (.Microsoft SQL Server 2008 Native Client.) -- C:\Windows\Installer\{4F44B5AE-82A6-4A8A-A3E3-E24D489728E3}\ARPIco O90 - PUC: "ECA69F379429D40D5E96D116D19028BB" . (.ccc-utility.) -- C:\Windows\Installer\{73F96ACE-9249-D04D-E569-1D611D0982BB}\ARPPRODUCTICON.exe O90 - PUC: "F06BE6A807CBB101ACECD9774967A7C3" . (.AMD Accelerated Video Transcoding.) -- C:\Windows\Installer\{8A6EB60F-BC70-101B-CACE-9D7794767A3C}\ARPPRODUCTICON.exe O90 - PUC: "F3D40CFE251A7E745871EEF02610FAFE" . (.Apple Mobile Device Support.) -- C:\Windows\Installer\{EFC04D3F-A152-47E7-8517-EE0F6201AFEF}\Installer.ico O90 - PUC: "F6071111A6667304777712318267D401" . (.JavaFX 2.1.1.) -- C:\Windows\Installer\{1111706F-666A-4037-7777-211328764D10}\javaIcon.ico ~ Scan Files in 00mn 00s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 17/02/2013 251248 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 19/12/2012 219136 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe SR - | Auto 26/02/2012 55144 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 30/10/2012 44808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SR - | Disabled 0 | (avast! Firewall) . (...) - C:\Program Files\AVAST Software\Avast\afwServ.exe SR - | Auto 30/08/2011 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Auto 24/01/2013 2319504 | (cmdAgent) . (.COMODO.) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe SS - | Demand 24/01/2013 127184 | (cmdvirth) . (.COMODO.) - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe SS - | Demand 7168 | (EverestDriver) . (...) - C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt SS - | Demand 10/05/2012 867080 | (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe SS - | Auto 21/05/2012 116648 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 21/05/2012 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SR - | Auto 06/07/2011 326424 | (LMS) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe SS - | Demand 02/01/2013 115168 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe SR - | Auto 76888 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe SS - | Auto 08/01/2013 161536 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe SS - | Demand 19/02/2010 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe SR - | Auto 06/07/2011 2656536 | (UNS) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe SR - | Auto 13/07/2009 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 13/07/2009 20992 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Scan Services in 00mn 02s ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net ~ Scan MBR in 00mn 02s ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by By.keita at 18/02/2013 07:51:56 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ Scan MBR in 00mn 04s ---\\ Liste des émulateurs de CD/DVD (Hook du MBR) O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Lite ~ Scan Emulateurs in 00mn 04s End of the scan (2094 lines in 07mn 12s)(0)