Rapport de ZHPDiag v2013.6.1.2 par Nicolas Coolman, Update du 01/06/2013
Run by Anthony at 01/06/2013 18:04:40
WebSite: http://nicolascoolman.webs.com
State : 
WhiteList : Disable
High Elevated Privileges : OK
UAC : Activate by user


---\\ Web Browser
MSIE: Internet Explorer v10.0.9200.16580
MFIE: Mozilla Firefox 21.0 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows 8 Home Premium Edition, 64-bit  (Build 9200)
Windows Server License Manager Script : OK
~ ion : Windows(R) Operating System, OEM_DM channel
Windows ID Activation : OK
~ Windows Partial Key : QJXVT
Windows License : OK
~ Windows Remaining Initializations Number : 998
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Protection
Avira Free Antivirus v13.0.0.3640
Malwarebytes Anti-Malware version 1.75.0.1300
Windows Defender W8

---\\ System Optimizer
CCleaner v4.01   =>Piriform Ltd

---\\ Peer To Peer (P2P)

---\\ Software Update
Adobe Flash Player 11 Plugin
Adobe Reader XI
Java 7 Update 21

---\\ System Information
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3981 MB (32% free)
System Restore: Activé (Enable)
System drive C: has 209 GB (78%) free of 264 GB

---\\ Logged in mode
~ Computer Name: PC-ANTHO
~ User Name: Anthony
~ All Users Names: UpdatusUser, Anthony, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Anthony\AppData\Roaming\
~ %Desktop% : C:\Users\Anthony\Desktop\
~ %Favorites% : C:\Users\Anthony\Favorites\
~ %LocalAppData% : C:\Users\Anthony\AppData\Local\
~ %StartMenu% : C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 209 Go of 264 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 383 Go of 398 Go)
F:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Security Center: 29 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.E13A31D5254C25406A7946BDD9B06364] - (.Microsoft Corporation - Explorateur Windows.) (.11/10/2012 - 08:35:16.) -- C:\Windows\Explorer.exe [2380944]
[MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Application de démarrage de Windows.) (.26/07/2012 - 04:08:50.) -- C:\Windows\System32\Wininit.exe [132608]
[MD5.9B9107F1486476D86B6910EDF07F4358] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.10/04/2013 - 00:17:44.) -- C:\Windows\System32\wininet.dll [2242048]
[MD5.BCF2036A0DD579E47C008C133550283E] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.11/10/2012 - 06:46:58.) -- C:\Windows\System32\Winlogon.exe [517120]
[MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Bibliothèque de licences.) (.26/07/2012 - 04:07:20.) -- C:\Windows\System32\sppcomapi.dll [273408]
[MD5.36D6A3201721558A8AFBCC09C2DA4C2C] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.06/11/2012 - 04:53:44.) -- C:\Windows\system32\Drivers\AFD.sys [560640]
[MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 06:00:48.) -- C:\Windows\system32\Drivers\atapi.sys [25840]
[MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.26/07/2012 - 03:30:10.) -- C:\Windows\system32\Drivers\Cdfs.sys [108544]
[MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.26/07/2012 - 03:26:36.) -- C:\Windows\system32\Drivers\Cdrom.sys [174080]
[MD5.09D9EB9E7898F8E6561473A20CC808B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.26/07/2012 - 03:26:53.) -- C:\Windows\system32\Drivers\DfsC.sys [118784]
[MD5.7D87B5B6C7188D553E11B59DC7F0B111] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/09/2012 - 07:08:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [71168]
[MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Pilote de port i8042.) (.26/07/2012 - 03:28:51.) -- C:\Windows\system32\Drivers\i8042prt.sys [112640]
[MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2012 - 03:23:01.) -- C:\Windows\system32\Drivers\IpNat.sys [145920]
[MD5.93179D48066918323628CB016D8C94DC] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.05/02/2013 - 23:29:09.) -- C:\Windows\system32\Drivers\MRxSmb.sys [370688]
[MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.26/07/2012 - 03:24:28.) -- C:\Windows\system32\Drivers\netBT.sys [331776]
[MD5.76929F4A69E425911A63B407E26C2589] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.02/02/2013 - 11:54:54.) -- C:\Windows\system32\Drivers\ntfs.sys [1933544]
[MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Pilote de port parallèle.) (.26/07/2012 - 03:29:53.) -- C:\Windows\system32\Drivers\Parport.sys [105984]
[MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.26/07/2012 - 03:23:17.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [124928]
[MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.26/07/2012 - 03:25:18.) -- C:\Windows\system32\Drivers\rdpdr.sys [179712]
[MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 06:26:47.) -- C:\Windows\system32\Drivers\tdx.sys [117248]
[MD5.2FB3CDFD5EAF4CD9D4AFAF96877D13AE] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.26/07/2012 - 05:57:09.) -- C:\Windows\system32\Drivers\volsnap.sys [332016]
~ Generic Processes:  Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/32
~ Mes Videos (My Videos) : 2/3
~ Mes Favoris (My Favorites) : 1/7
~ Mes Documents (My Documents) : 5/695
~ Mon Bureau (My Desktop) : 1/835
~ Menu demarrer (Programs) : 1/49
~ Hidden Files:  Scanned in 00mn 00s



---\\ Processus lancés
[MD5.7C58A2513C3DA421A461D75C66C56D21] - (.ASUSTek Computer Inc. - ASUS USB Charger Plus.) -- C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe   [1123536] [PID.1616]
[MD5.2C35624F79B9ADBFE47090879F0D8673] - (.ASUSTek Computer Inc. - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe   [322208] [PID.4200]
[MD5.A2791CF11D1ED52DBCD75D2FFD4D50E7] - (.ASUSTek Computer Inc. - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe   [178848] [PID.4244]
[MD5.B7BCA8A30CE13A283CDBDECEF5616C39] - (.ASUS - ACMON.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe   [107192] [PID.4312]
[MD5.C75EB452388AED09F1E016BAE08309F2] - (.Samsung Electronics - AllShare Play Launcher.) -- C:\Program Files\Samsung\AllShare Play\utils\AllShare Play Launcher.exe   [407384] [PID.4328]
[MD5.FD579C25D253A47DF82A76B7EE96ADB5] - (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe   [345312] [PID.2896]
[MD5.97202E9C0D86387888435470CCAF45BE] - (.ASUSTeK - ACEngSvr Module.) -- C:\Windows\SysWOW64\ACEngSvr.exe   [192000] [PID.3060]
[MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [253816] [PID.3056]
[MD5.25A51D18D48F1E144ABEC667E98C6261] - (.ASUSTeK Computer Inc. - ASUS Live Update.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe   [1558176] [PID.4852]
[MD5.51E86C2B0530E37597B21C0564B3FA76] - (.Western Digital - WD Drive Auto Unlock.) -- C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe   [1688008] [PID.1972]
[MD5.29769215DEB6E8418EF3656B0423776E] - (.ASUSTeK Computer Inc. - ASUS Quick Gesture Exe.) -- C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe   [20352] [PID.1664]
[MD5.95110A1C5A1D228AC1DDF6AB67D00BEB] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe   [920472] [PID.7476]
[MD5.6FC79A950476A5F539EEB65F9097C0A8] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe   [17304] [PID.2704]
[MD5.23AA0FDCBDD87D0B78092798C68312D8] - (.Adobe Systems, Inc. - Adobe Flash Player 11.7 r700.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe   [1855880] [PID.3792]
[MD5.9987636E1191907AB52F3A49FFB83393] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [7431168] [PID.7984]
~ Processes Running:  Scanned in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll
P2 - FPN: [HKLM] [@divx.com/DivX VOD Helper,version=1.0.0] - (.DivX, LLC. - DivX VOD Helper Plug-in.) -- C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
P2 - FPN: [HKCU] [samsung.com/AllSharePlayPCPlugin] - (.Samsung - AllShare.) -- C:\Program Files\Samsung\AllShare Play\utils\npAllSharePlayPCPlugin.dll
~ Firefox Browser: 4 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16384 (win8_rtm.120725-1247)) -- C:\Windows\SysWOW64\ieframe.dll
R3 - URLSearchHook: (no name) [64Bits] - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} . (.Microsoft Corporation - Navigateur Internet.) (No version) -- (.not file.)
~ IE Browser: 11 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
~ BHO: 2 Scanned in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe 
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe 
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe 
O4 - HKLM\..\Run: [DptfPolicyLpmServiceHelper] . (...) -- C:\Windows\system32\DptfPolicyLpmServiceHelper.exe 
O4 - HKLM\..\Run: [ACMON] . (.ASUS - ACMON.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe 
O4 - HKLM\..\Run: [AllShare Play] . (.Samsung Electronics - AllShare Play Launcher.) -- C:\Program Files\Samsung\AllShare Play\utils\AllShare Play Launcher.exe 
O4 - HKLM\..\Run: [Logitech Download Assistant] . (.Logitech, Inc. - Logitech Download Assistant.) -- C:\Windows\System32\LogiLDA.dll 
O4 - HKCU\..\Run: [EADM_xdb] . (.Pas de propriétaire - update_client.) -- C:\Users\Anthony\AppData\Roaming\Microsoft\Protect\G-2-8-24-7374968294-8736182682-3962581263-7007\client_xdb.exe 
O4 - HKCU\..\Run: [Spotify] . (.Spotify Ltd - Spotify.) -- C:\Users\Anthony\AppData\Roaming\Spotify\Spotify.exe 
O4 - HKCU\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Anthony\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe 
O4 - HKLM\..\Wow6432Node\Run: [DivXUpdate] . (.Pas de propriétaire - DivX Update.) -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe 
O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe 
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Wow6432Node\Run: [WD Drive Unlocker] . (.Western Digital - WD Drive Auto Unlock.) -- C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe 
O4 - HKLM\..\Wow6432Node\Run: [WD Quick View] . (.Western Digital Technologies, Inc. - WD Quick View.) -- C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe 
O4 - HKUS\S-1-5-21-3124752941-3885292783-1113856017-1002\..\Run: [EADM_xdb] . (.Pas de propriétaire - update_client.) -- C:\Users\Anthony\AppData\Roaming\Microsoft\Protect\G-2-8-24-7374968294-8736182682-3962581263-7007\client_xdb.exe 
O4 - HKUS\S-1-5-21-3124752941-3885292783-1113856017-1002\..\Run: [Spotify] . (.Spotify Ltd - Spotify.) -- C:\Users\Anthony\AppData\Roaming\Spotify\Spotify.exe 
O4 - HKUS\S-1-5-21-3124752941-3885292783-1113856017-1002\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Anthony\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe 
~ Application:  Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop: SopCast.lnk . (.www.sopcast.com - SopCast Main Application.)  -- C:\Program Files (x86)\SopCast\SopCast.exe 
O4 - GS\Desktop: SpeedFan.lnk . (.Almico Software (www.almico.com) - Pas de description.)  -- C:\Program Files (x86)\SpeedFan\speedfan.exe 
O4 - GS\Desktop: CodeBlocks.lnk . (...)  -- C:\Program Files (x86)\CodeBlocks\codeblocks.exe
O4 - GS\Desktop: FileZilla Client.lnk . (.FileZilla Project - FileZilla FTP Client.)  -- C:\Program Files (x86)\FileZilla FTP Client\filezilla.exe 
O4 - GS\Desktop: GIMP 2.lnk . (.Spencer Kimball, Peter Mattis and the GIMP - GNU Image Manipulation Program.)  -- C:\Program Files\GIMP 2\bin\gimp-2.8.exe 
O4 - GS\Desktop: Spotify.lnk . (.Spotify Ltd - Spotify.)  -- C:\Users\Anthony\AppData\Roaming\Spotify\spotify.exe 
O4 - GS\Desktop: µTorrent.lnk . (.BitTorrent, Inc. - µTorrent.)  -- C:\Program Files (x86)\uTorrent\uTorrent.exe   =>P2P.µTorrent
~ Global Startup:  Scanned in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
~ Winsock: 7 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{5056A905-3B92-470D-9833-2793AABDC732}: DhcpNameServer = 10.3.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{F93AC1CC-DF7D-49B7-B6FF-024247451A21}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{5056A905-3B92-470D-9833-2793AABDC732}: DhcpNameServer = 10.3.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{F93AC1CC-DF7D-49B7-B6FF-024247451A21}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain:  Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon:  Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.NVIDIA Corporation - NVIDIA shim initialization dll, Version 306.) - C:\Windows\system32\nvinitx.dll
~ AppInit DLL:  Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AllShare Framework DMS (AllShare Framework DMS) . (.Samsung - AllShareFrameworkManagerDMS Monitoring DMS.) - C:\Program Files\Samsung\AllShare Framework DMS\1.3.06\AllShareFrameworkManagerDMS.exe
O23 - Service: AllShare Play Service (AllShare Play Service) . (.Copyright 2013 SAMSUNG - AllShare Play Service.) - C:\Program Files\Samsung\AllShare Play\AllShare Play Service.exe
O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Avira Scheduler.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Avira On-Access Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ASLDR Service (ASLDRService) . (.ASUSTek Computer Inc. - ASLDR Service.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) . (.ASUS - ASUS InstantOn Program.) - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) . (.ASUS - GFNEXSrv.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: oem15.inf (DptfParticipantProcessorService) . (...) - C:\Windows\System32\DptfParticipantProcessorService.exe
O23 - Service: ExpressCache (ExpressCache) . (.Diskeeper Corporation - ExpressCache Service.) - C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe
O23 - Service: Intel(R) Capability Licensing Service In (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service (Intel(R) ME Service) . (.Intel Corporation - Intel(R) ME Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Rapid Start Technology Service (irstrtsv) . (.Intel Corporation - Intel(R) Rapid Start Technology Service.) - C:\Windows\SysWOW64\irstrtsv.exe
O23 - Service: Intel(R) Dynamic Application Loader Host (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 306.9.) - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Intel(R) Management and Security Applica (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: WD Backup (WDBackup) . (.Western Digital Technologies, Inc. - WD Backup Engine.) - C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
O23 - Service: WD Drive Manager (WDDriveService) . (.Western Digital Technologies, Inc. - WD Drive Service.) - C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
~ Services: 20 Scanned in 00mn 03s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\Adobe Flash Player Updater.job   [1002]
[MD5.F040037B149FD0F5A5044AE563390FA7] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe   [256904]
[MD5.79174FD5F4DE078642BE1CACB124BFCA] [APT] [ASUS InstantOn Config] (.ASUS.) -- C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe   [1126784]
[MD5.25A51D18D48F1E144ABEC667E98C6261] [APT] [ASUS Live Update] (.ASUSTeK Computer Inc..) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe   [1558176]
[MD5.0BC5A4142F38A6BB35DECD01A2BC2ED7] [APT] [ASUS P4G] (.ASUS.) -- C:\Program Files\ASUS\P4G\BatteryLife.exe   [1018240]
[MD5.3547F00F9FF626DE831FC1F99BE1E4CE] [APT] [ASUS Touchpad Launcher (x64)] (.AsusTek.) -- C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe   [17792]
[MD5.7C58A2513C3DA421A461D75C66C56D21] [APT] [ASUS USB Charger Plus] (.ASUSTek Computer Inc..) -- C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe   [1123536]
[MD5.7529BF17445E16315A95B450CE985C11] [APT] [AsusVibeSchedule] (...) -- C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe   [1957040]
[MD5.42BC01952E1ED3152DDE0C0C9C2012D4] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe   [3545880]   =>Piriform Ltd
[MD5.00000000000000000000000000000000] [APT] [DealPly] (...) -- C:\Users\Anthony\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.exe (.not file.)   [0]   =>PUP.DealPly
[MD5.00000000000000000000000000000000] [APT] [{73D52D4A-2340-41A8-A80F-F23ED62D2E1B}] (...) -- D:\Downloads\DrDivX_2_0_0_OSS.exe (.not file.)   [0]
[MD5.A392C67AE47E968CD52019E85DBA1F61] [APT] [____Volume_0d2044b0_6515_486c_a124_45347beb556b______Volume_2d98ffd5_a6b4_11e2_bf25_50465de27868__] (.Western Digital Technologies, Inc..) -- C:\Program Files (x86)\Western Digital\WD SmartWare\BackupTask.exe   [425840]
~ Scheduled Task: 13 Scanned in 00mn 03s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll
~ Active Setup: 8 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver:  (ATKWMIACPIIO) . (.ASUS - ATK WMIACPI Utility.) - C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys
O41 - Driver:  (avipbb) . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - C:\Windows\system32\DRIVERS\avipbb.sys
O41 - Driver:  (avkmgr) . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - C:\Windows\system32\DRIVERS\avkmgr.sys
O41 - Driver: (BasicDisplay) . (.Microsoft Corporation - Microsoft Basic Display Driver.) - C:\Windows\system32\drivers\BasicDisplay.sys
O41 - Driver: (BasicRender) . (.Microsoft Corporation - Microsoft Basic Render Driver.) - C:\Windows\system32\drivers\BasicRender.sys
O41 - Driver: cdrom.inf (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dam.sys (dam) . (.Microsoft Corporation - DAM Kernel Driver.) - C:\Windows\System32\drivers\dam.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (Dfsc) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (excfs) . (.Diskeeper Corporation - ExpressCache Filesystem Filter Driver.) - C:\Windows\System32\DRIVERS\excfs.sys
O41 - Driver: mssmbios.inf (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: netnb.inf (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: npsvctrig.inf (npsvctrig) . (.Microsoft Corporation - Named pipe service triggers.) - C:\Windows\system32\drivers\npsvctrig.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: C:\Windows\System32\drivers\vwififlt.sys (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
~ Drivers: 42 Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: 8GadgetPack - (.Helmut Buhler.) [HKLM][64Bits] -- {B78203BF-CF9C-4163-B6C3-B70A27A646EE}
O42 - Logiciel: AC-3 ACM Decompressor - (...) [HKLM][64Bits] -- AC3ACM
O42 - Logiciel: ASUS InstantOn - (.ASUS.) [HKLM][64Bits] -- {749F674B-2674-47E8-879C-5626A06B2A91}
O42 - Logiciel: ASUS LifeFrame3 - (.ASUS.) [HKLM][64Bits] -- {1DBD1F12-ED93-49C0-A7CC-56CBDE488158}
O42 - Logiciel: ASUS Live Update - (.ASUS.) [HKLM][64Bits] -- {FA540E67-095C-4A1B-97BA-4D547DEC9AF4}
O42 - Logiciel: ASUS Power4Gear Hybrid - (.ASUS.) [HKLM][64Bits] -- {9B6239BF-4E85-4590-8D72-51E30DB1A9AA}
O42 - Logiciel: ASUS Smart Gesture - (.ASUS.) [HKLM][64Bits] -- {4D3286A6-F6AB-498A-82A4-E4F040529F3D}
O42 - Logiciel: ASUS Splendid Video Enhancement Technology - (.ASUS.) [HKLM][64Bits] -- {0969AF05-4FF6-4C00-9406-43599238DE0D}
O42 - Logiciel: ASUS Tutor - (.ASUS.) [HKLM][64Bits] -- {58172D66-2F69-4215-9AEC-ED8196023736}
O42 - Logiciel: ASUS USB Charger Plus - (.ASUS.) [HKLM][64Bits] -- {A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}
O42 - Logiciel: ASUS Virtual Camera - (.ASUS.) [HKLM][64Bits] -- {EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}
O42 - Logiciel: ASUS WebStorage Sync Agent - (.ASUS Cloud Corporation.) [HKLM][64Bits] -- ASUS WebStorage
O42 - Logiciel: ATK Package - (.ASUS.) [HKLM][64Bits] -- {AB5C933E-5C7D-4D30-B314-9C83A49B94BE}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A0087DDE-69D0-11E2-AD57-43CA6188709B}
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader XI (11.0.03) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: AllShare Framework DMS - (.Samsung.) [HKLM][64Bits] -- {1ABC9BD2-7E06-4D70-929B-AC1B6461A8B2}
O42 - Logiciel: AllShare Play 1.5.0.1302211905 - (.Copyright 2013 SAMSUNG.) [HKLM][64Bits] -- 8474-7877-9059-0204
O42 - Logiciel: AsusVibe2.0 - (.ASUSTEK.) [HKLM][64Bits] -- Asus Vibe2.0
O42 - Logiciel: AviSynth 2.5 - (...) [HKLM][64Bits] -- AviSynth
O42 - Logiciel: Avira Free Antivirus v13.0.0.3640 - (.Avira.) [HKLM][64Bits] -- Avira AntiVir Desktop
O42 - Logiciel: Bluefish 2.2.4 - (.The Bluefish Developers.) [HKLM][64Bits] -- Bluefish
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner   =>Piriform Ltd
O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM][64Bits] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
O42 - Logiciel: Canon MG5200 series MP Drivers - (...) [HKLM][64Bits] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5200_series
O42 - Logiciel: CodeBlocks - (.The Code::Blocks Team.) [HKCU][64Bits] -- CodeBlocks
O42 - Logiciel: Coffee - (.Steven Cole.) [HKLM][64Bits] -- {EBBDADF9-7711-4EAD-9581-18AFD7724E6B}
O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM][64Bits] -- DivX Setup
O42 - Logiciel: ExpressCache - (.Diskeeper Corporation.) [HKLM][64Bits] -- {2EBEFDA8-F905-4C39-AC1C-D5ABE7B3E0AE}
O42 - Logiciel: FileZilla Client 3.7.0.1 - (.FileZilla Project.) [HKCU][64Bits] -- FileZilla Client
O42 - Logiciel: GIMP 2.8.2 - (.The GIMP Team.) [HKLM][64Bits] -- GIMP-2_is1
O42 - Logiciel: GeoGebra 4.2 - (.International GeoGebra Institute.) [HKLM][64Bits] -- GeoGebra 4.2
O42 - Logiciel: Intel(R) Dynamic Platform and Thermal Framework - (.Intel Corporation.) [HKLM][64Bits] -- FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Intel(R) Rapid Start Technology - (.Intel Corporation.) [HKLM][64Bits] -- 3D073343-CEEB-4ce7-85AC-A69A7631B5D6
O42 - Logiciel: Intel(R) SDK for OpenCL - CPU Only Runtime Package - (.Intel Corporation.) [HKLM][64Bits] -- {FCB3772C-B7D0-4933-B1A9-3707EBACC573}
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}
O42 - Logiciel: Java 7 Update 21 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217021FF}
O42 - Logiciel: LG United Mobile Driver - (.LG Electronics.) [HKLM][64Bits] -- {2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}
O42 - Logiciel: LinuxLive USB Creator - (.Thibaut Lauziere.) [HKLM][64Bits] -- LinuxLive USB Creator
O42 - Logiciel: MKVToolNix 5.9.0 - (.Moritz Bunkus.) [HKLM][64Bits] -- MKVToolNix
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2758694) - (.Microsoft Corporation.) [HKLM][64Bits] -- {1D95BA90-F4F8-47EC-A882-441C99D30C1E}
O42 - Logiciel: MSXML 4.0 SP3 Parser - (.Microsoft Corporation.) [HKLM][64Bits] -- {196467F1-C11F-4F76-858B-5812ADC83B94}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: MediaInfo 0.7.61 - (.MediaArea.net.) [HKLM][64Bits] -- MediaInfo
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Mozilla Firefox 21.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 21.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}
O42 - Logiciel: NVIDIA PhysX System Software 9.12.0613 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
O42 - Logiciel: NVIDIA Pilote graphique 306.97 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: NVIDIA Update 1.10.8 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update
O42 - Logiciel: Package de pilotes Windows - ASUS (ATP) Mouse  (10/29/2012 1.0.0.148) - (.ASUS.) [HKLM][64Bits] -- C01F56FBD9B141017E63E2A1A141E59934D4DC67
O42 - Logiciel: Qualcomm Atheros Client Installation Program - (.Qualcomm Atheros.) [HKLM][64Bits] -- {28006915-2739-4EBE-B5E8-49B25D32EB33}
O42 - Logiciel: Rainmeter - (...) [HKLM][64Bits] -- Rainmeter
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Realtek PCIE Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {C1594429-8296-4652-BF54-9DBE4932A44C}
O42 - Logiciel: Revo Uninstaller Pro 2.5.9 - (.VS Revo Group, Ltd..) [HKLM][64Bits] -- {67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1
O42 - Logiciel: SceneSwitch - (.ASUS.) [HKLM][64Bits] -- {5172E572-C175-4F80-A6D5-5CB45826AD61}
O42 - Logiciel: Shared C Run-time for x64 - (.McAfee.) [HKLM][64Bits] -- {EF79C448-6946-4D71-8134-03407888C054}
O42 - Logiciel: SopCast 3.8.2 - (.www.sopcast.com.) [HKLM][64Bits] -- SopCast
O42 - Logiciel: SpeedFan (remove only) - (...) [HKLM][64Bits] -- SpeedFan
O42 - Logiciel: Spotify - (.Spotify AB.) [HKCU][64Bits] -- Spotify
O42 - Logiciel: StartIsBack - (.startisback.com.) [HKCU][64Bits] -- StartIsBack
O42 - Logiciel: TmNationsForever - (.Nadeo.) [HKLM][64Bits] -- TmNationsForever_is1
O42 - Logiciel: UltraUXThemePatcher - (.Manuel Hoefs (Zottel).) [HKLM][64Bits] -- UltraUXThemePatcher
O42 - Logiciel: UnLock Root 3.0 - (.Unlcokroot.) [HKLM][64Bits] -- UnLock Root
O42 - Logiciel: Unlocker 1.9.1-x64 - (.Cedrick Collomb.) [HKLM][64Bits] -- Unlocker
O42 - Logiciel: VC80CRTRedist - 8.0.50727.6195 - (.DivX, Inc.) [HKLM][64Bits] -- {933B4015-4618-4716-A828-5289FC03165F}
O42 - Logiciel: Veetle TV - (.Veetle, Inc.) [HKLM][64Bits] -- Veetle TV
O42 - Logiciel: WD Drive Utilities - (.Western Digital.) [HKLM][64Bits] -- {439A51F7-84B1-4603-BEC8-647EB2AC307F}
O42 - Logiciel: WD Quick View - (.Western Digital Technologies, Inc..) [HKLM][64Bits] -- {124310E8-7C49-4C33-B4F2-3CF43F3830B7}
O42 - Logiciel: WD SES Driver Setup - (.Western Digital.) [HKLM][64Bits] -- {924A274D-38B6-4930-8859-F3F51CFA8DDD}
O42 - Logiciel: WD Security - (.Western Digital.) [HKLM][64Bits] -- {8172B41A-9BB5-4A64-BF28-1FB5FE43C3FF}
O42 - Logiciel: WD SmartWare - (.Western Digital Technologies, Inc..) [HKLM][64Bits] -- {DD178D9D-89DD-4F15-9E56-57C85D1EDF36}
O42 - Logiciel: WD SmartWare Installer - (.Western Digital Technologies, Inc..) [HKLM][64Bits] -- {bfb9000e-e7d4-490f-a873-ec2c9cab3b3d}
O42 - Logiciel: WinFlash - (.ASUS.) [HKLM][64Bits] -- {8F21291E-0444-4B1D-B9F9-4370A73E346D}
O42 - Logiciel: WinRAR 4.20 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: µTorrent - (...) [HKCU][64Bits] -- uTorrent   =>P2P.µTorrent
~ Logic: 148 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\8GadgetPack]
[HKCU\Software\ASUS]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow\Software\Unity]
[HKCU\Software\AppDataLow]
[HKCU\Software\Avira]
[HKCU\Software\BabSolution]   =>Hijacker.BabSolution
[HKCU\Software\BitTorrent]   =>P2P.BitTorrent
[HKCU\Software\Canneverbe Limited]
[HKCU\Software\Canon]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\DivXNetworks]
[HKCU\Software\DivX]
[HKCU\Software\ECAREME]
[HKCU\Software\EaseUS]
[HKCU\Software\EpmNewsInfo]
[HKCU\Software\Google]
[HKCU\Software\IGA]
[HKCU\Software\Icaros]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\KC Softwares]
[HKCU\Software\Lake]
[HKCU\Software\LinuxLive]
[HKCU\Software\LogiShrd]
[HKCU\Software\LowRegistry]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MediaArea.net]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\PowerPack]
[HKCU\Software\Realtek]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\Soft Lemon]
[HKCU\Software\SpeedFan]
[HKCU\Software\Stardock]
[HKCU\Software\TeleCharger]
[HKCU\Software\Unity]
[HKCU\Software\VS Revo Group]
[HKCU\Software\Veetle]
[HKCU\Software\Western Digital]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\ej-technologies]
[HKCU\Software\mkvmergeGUI]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\ASUS]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Agere]
[HKLM\Software\Canon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DTS]
[HKLM\Software\Diskeeper Corporation]
[HKLM\Software\DivX]
[HKLM\Software\Dolby]
[HKLM\Software\ECAREME]
[HKLM\Software\FileZilla 3]
[HKLM\Software\Intel]
[HKLM\Software\Khronos]
[HKLM\Software\Knowles]
[HKLM\Software\LSI]
[HKLM\Software\Logishrd]
[HKLM\Software\Macromedia]
[HKLM\Software\McAfee.com]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Samsung]
[HKLM\Software\SonicFocus]
[HKLM\Software\Waves Audio]
[HKLM\Software\WinRAR]
[HKLM\Software\Wow6432Node\AGEIA Technologies]
[HKLM\Software\Wow6432Node\ASIO]
[HKLM\Software\Wow6432Node\ASUS]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\AsLdr]
[HKLM\Software\Wow6432Node\Atheros]
[HKLM\Software\Wow6432Node\Avira]
[HKLM\Software\Wow6432Node\Bunndle]
[HKLM\Software\Wow6432Node\Canneverbe Limited]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\CyberLink]
[HKLM\Software\Wow6432Node\DivXNetworks]
[HKLM\Software\Wow6432Node\EASEUS]
[HKLM\Software\Wow6432Node\ECAREME]
[HKLM\Software\Wow6432Node\FileZilla 3]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\KC Softwares]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\LG Electronics]
[HKLM\Software\Wow6432Node\Lake]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MimarSinan]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\NVIDIA Corporation]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Qualcomm Atheros]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Samsung]
[HKLM\Software\Wow6432Node\Stardock]
[HKLM\Software\Wow6432Node\SuppHelpDir]
[HKLM\Software\Wow6432Node\Trad-FR]
[HKLM\Software\Wow6432Node\Veetle]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\WDPA]
[HKLM\Software\Wow6432Node\Western Digital]
[HKLM\Software\Wow6432Node\Windows]
[HKLM\Software\Wow6432Node\X-AVCSD]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
[HKLM\Software\ej-technologies]
~ Key Software: 219 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 15/05/2013 - 11:20:24 - [120,568] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 03/01/2013 - 10:47:07 - [187,053] ----D C:\Program Files (x86)\ASUS
O43 - CFD: 30/01/2013 - 15:34:05 - [200,286] ----D C:\Program Files (x86)\Avira
O43 - CFD: 19/01/2013 - 16:20:24 - [4,635] ----D C:\Program Files (x86)\AviSynth 2.5
O43 - CFD: 03/05/2013 - 11:20:26 - [47,625] ----D C:\Program Files (x86)\Bluefish
O43 - CFD: 23/01/2013 - 15:54:43 - [16,192] ----D C:\Program Files (x86)\CDBurnerXP
O43 - CFD: 11/02/2013 - 18:42:04 - [207,511] ----D C:\Program Files (x86)\CodeBlocks
O43 - CFD: 14/02/2013 - 22:27:49 - [0,070] ----D C:\Program Files (x86)\CodeBlocks-EP
O43 - CFD: 27/05/2013 - 09:19:37 - [370,087] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 19/01/2013 - 16:25:06 - [8,507] ----D C:\Program Files (x86)\DivX
O43 - CFD: 25/01/2013 - 12:30:05 - [79,333] ----D C:\Program Files (x86)\EaseUS
O43 - CFD: 14/05/2013 - 12:12:33 - [17,288] ----D C:\Program Files (x86)\FileZilla FTP Client
O43 - CFD: 27/04/2013 - 10:05:24 - [97,057] ----D C:\Program Files (x86)\GeoGebra 4.2
O43 - CFD: 23/05/2013 - 11:45:05 - [71,681] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 28/09/2012 - 14:44:47 - [150,442] ----D C:\Program Files (x86)\Intel
O43 - CFD: 24/04/2013 - 00:12:08 - [4,622] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 17/04/2013 - 17:56:38 - [123,999] ----D C:\Program Files (x86)\Java
O43 - CFD: 23/05/2013 - 11:45:06 - [5,857] ----D C:\Program Files (x86)\LG Electronics
O43 - CFD: 27/01/2013 - 12:35:27 - [8,772] ----D C:\Program Files (x86)\LinuxLive USB Creator
O43 - CFD: 01/06/2013 - 13:18:24 - [13,376] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 16/01/2013 - 22:49:23 - [304,382] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 14/03/2013 - 23:34:13 - [40,835] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 11/01/2013 - 15:31:22 - [0,014] ----D C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 13/01/2013 - 11:35:29 - [3,554] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 11/01/2013 - 15:31:14 - [7,797] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 19/01/2013 - 16:06:50 - [49,128] ----D C:\Program Files (x86)\MKVToolNix
O43 - CFD: 30/05/2013 - 17:11:14 - [45,970] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 30/05/2013 - 17:11:16 - [0,214] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 02/08/2012 - 15:34:48 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 16/03/2013 - 18:30:03 - [0,147] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 03/05/2013 - 11:26:14 - [0,297] ----D C:\Program Files (x86)\Notepad++
O43 - CFD: 28/09/2012 - 14:36:34 - [114,389] ----D C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 28/09/2012 - 14:42:13 - [0,036] ----D C:\Program Files (x86)\Qualcomm Atheros
O43 - CFD: 28/09/2012 - 14:41:45 - [20,576] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 02/08/2012 - 15:34:49 - [36,536] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 23/04/2013 - 21:06:31 - [12,771] ----D C:\Program Files (x86)\SopCast
O43 - CFD: 16/01/2013 - 20:02:58 - [5,621] ----D C:\Program Files (x86)\SpeedFan
O43 - CFD: 12/01/2013 - 17:35:01 - [0,002] ----D C:\Program Files (x86)\Stardock
O43 - CFD: 28/09/2012 - 14:39:14 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 16/04/2013 - 16:15:56 - [727,580] ----D C:\Program Files (x86)\TmNationsForever
O43 - CFD: 12/01/2013 - 17:11:00 - [0,094] ----D C:\Program Files (x86)\UltraUXThemePatcher
O43 - CFD: 22/05/2013 - 09:12:41 - [37,175] ----D C:\Program Files (x86)\Unlockroot
O43 - CFD: 19/01/2013 - 01:12:04 - [0,262] ----D C:\Program Files (x86)\uTorrent   =>P2P.µTorrent
O43 - CFD: 01/05/2013 - 20:12:42 - [9,935] ----D C:\Program Files (x86)\Veetle
O43 - CFD: 08/05/2013 - 09:51:42 - [0] ----D C:\Program Files (x86)\VS Revo Group
O43 - CFD: 27/05/2013 - 09:19:37 - [43,621] ----D C:\Program Files (x86)\Western Digital
O43 - CFD: 14/04/2013 - 10:38:00 - [0,951] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 05/01/2013 - 10:45:16 - [5,466] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 11/01/2013 - 01:22:57 - [3,494] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 26/07/2012 - 10:13:01 - [0,209] ----D C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 26/07/2012 - 10:12:59 - [7,243] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 05/01/2013 - 10:45:15 - [5,226] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 26/07/2012 - 10:13:01 - [0,209] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 22/02/2013 - 00:41:17 - [21,119] -SH-D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 01/06/2013 - 18:04:45 - [16,819] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 15/05/2013 - 11:20:29 - [6,289] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 10/05/2013 - 09:33:10 - [45,606] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 11/01/2013 - 15:31:22 - [0,089] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 19/01/2013 - 12:18:48 - [22,904] ----D C:\Program Files (x86)\Common Files\DivX Shared
O43 - CFD: 28/09/2012 - 14:38:50 - [2,009] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 28/09/2012 - 14:33:23 - [13,438] ----D C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 17/04/2013 - 17:56:55 - [1,189] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 30/01/2013 - 15:33:17 - [236,094] ----D C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 28/09/2012 - 14:38:23 - [0,185] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 10/12/2012 - 22:44:15 - [0,187] ----D C:\Program Files (x86)\Common Files\SceneSwitch
O43 - CFD: 26/07/2012 - 10:13:01 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 05/01/2013 - 10:45:15 - [41,845] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 27/05/2013 - 09:19:44 - [0,249] ----D C:\Program Files (x86)\Common Files\Western Digital
O43 - CFD: 15/05/2013 - 11:21:11 - [167,726] ----D C:\ProgramData\Adobe
O43 - CFD: 26/07/2012 - 09:22:08 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 03/01/2013 - 10:44:19 - [0,004] ----D C:\ProgramData\ASUS
O43 - CFD: 17/08/2012 - 02:53:09 - [0,002] ----D C:\ProgramData\ASUS WebStorage
O43 - CFD: 17/08/2012 - 02:52:28 - [0,012] ----D C:\ProgramData\ASUSLogos
O43 - CFD: 30/01/2013 - 15:34:05 - [226,426] ----D C:\ProgramData\Avira
O43 - CFD: 27/12/2012 - 20:32:10 - [0,000] ----D C:\ProgramData\bdch
O43 - CFD: 27/12/2012 - 18:40:12 - [0] ----D C:\ProgramData\BDLogging
O43 - CFD: 19/01/2013 - 20:03:12 - [0] ----D C:\ProgramData\Canneverbe Limited
O43 - CFD: 17/01/2013 - 23:54:37 - [21,117] --H-D C:\ProgramData\CanonBJ
O43 - CFD: 10/12/2012 - 20:49:47 - [4,688] ----D C:\ProgramData\ChangeFolderView
O43 - CFD: 03/01/2013 - 11:01:40 - [0,017] ----D C:\ProgramData\CyberLink
O43 - CFD: 26/07/2012 - 09:22:08 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 28/09/2012 - 14:48:36 - [73,839] ----D C:\ProgramData\Diskeeper Corporation
O43 - CFD: 19/01/2013 - 13:37:11 - [3,945] ----D C:\ProgramData\DivX
O43 - CFD: 26/07/2012 - 09:22:08 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 10/12/2012 - 20:46:47 - [0,585] ----D C:\ProgramData\FolderView
O43 - CFD: 28/09/2012 - 14:38:43 - [0,271] ----D C:\ProgramData\Intel
O43 - CFD: 16/03/2013 - 18:30:37 - [4,946] ----D C:\ProgramData\LGMOBILEAX
O43 - CFD: 01/06/2013 - 13:17:13 - [16,187] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 27/12/2012 - 18:18:43 - [0] ----D C:\ProgramData\McAfee
O43 - CFD: 01/06/2013 - 13:06:30 - [199,528] -S--D C:\ProgramData\Microsoft
O43 - CFD: 15/05/2013 - 21:23:13 - [0,056] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 26/12/2012 - 15:11:23 - [0,034] ----D C:\ProgramData\Mozilla
O43 - CFD: 25/12/2012 - 21:58:35 - [5,046] ----D C:\ProgramData\NVIDIA
O43 - CFD: 28/09/2012 - 14:35:55 - [2,401] ----D C:\ProgramData\NVIDIA Corporation
O43 - CFD: 28/09/2012 - 14:44:20 - [0,002] ----D C:\ProgramData\P4G
O43 - CFD: 27/05/2013 - 09:19:22 - [27,180] ----D C:\ProgramData\Package Cache
O43 - CFD: 26/12/2012 - 15:23:35 - [0,041] ----D C:\ProgramData\PRICache
O43 - CFD: 28/09/2012 - 14:42:08 - [0,022] ----D C:\ProgramData\Qualcomm Atheros
O43 - CFD: 26/07/2012 - 11:45:49 - [0,001] ----D C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 03/01/2013 - 11:51:29 - [0,000] ----D C:\ProgramData\Stardock
O43 - CFD: 26/07/2012 - 09:22:08 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 08/02/2013 - 20:10:25 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 10/12/2012 - 22:39:55 - [0,177] ----D C:\ProgramData\Temp
O43 - CFD: 26/07/2012 - 09:22:08 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 21/04/2013 - 09:41:13 - [126,886] ----D C:\ProgramData\TmForever
O43 - CFD: 10/12/2012 - 20:45:34 - [0,000] ----D C:\ProgramData\USBChargerPlus
O43 - CFD: 27/05/2013 - 09:19:36 - [0,236] ----D C:\ProgramData\Western Digital
O43 - CFD: 13/05/2013 - 14:45:16 - [60,502] ----D C:\Users\Anthony\AppData\Roaming\.minecraft
O43 - CFD: 10/05/2013 - 09:36:54 - [5,383] ----D C:\Users\Anthony\AppData\Roaming\Adobe
O43 - CFD: 10/12/2012 - 21:16:32 - [0,000] ----D C:\Users\Anthony\AppData\Roaming\ASUS
O43 - CFD: 10/12/2012 - 20:48:12 - [0] ----D C:\Users\Anthony\AppData\Roaming\ASUS WebStorage
O43 - CFD: 26/01/2013 - 12:26:21 - [0,023] ----D C:\Users\Anthony\AppData\Roaming\avidemux
O43 - CFD: 30/01/2013 - 15:36:31 - [0] ----D C:\Users\Anthony\AppData\Roaming\Avira
O43 - CFD: 19/01/2013 - 20:03:12 - [0,001] ----D C:\Users\Anthony\AppData\Roaming\Canneverbe Limited
O43 - CFD: 22/05/2013 - 15:52:09 - [0,071] ----D C:\Users\Anthony\AppData\Roaming\CodeBlocks
O43 - CFD: 10/05/2013 - 10:00:05 - [0] ----D C:\Users\Anthony\AppData\Roaming\com.cam4dancer.app
O43 - CFD: 10/12/2012 - 22:54:36 - [0,003] ----D C:\Users\Anthony\AppData\Roaming\CyberLink
O43 - CFD: 19/01/2013 - 16:12:52 - [0] ----D C:\Users\Anthony\AppData\Roaming\DivX
O43 - CFD: 19/01/2013 - 16:25:24 - [0] ----D C:\Users\Anthony\AppData\Roaming\Dr. DivX 2.0 OSS
O43 - CFD: 30/05/2013 - 16:30:34 - [0,018] ----D C:\Users\Anthony\AppData\Roaming\FileZilla
O43 - CFD: 10/12/2012 - 21:13:32 - [0,055] ----D C:\Users\Anthony\AppData\Roaming\Macromedia
O43 - CFD: 01/06/2013 - 13:17:23 - [0,164] ----D C:\Users\Anthony\AppData\Roaming\Malwarebytes
O43 - CFD: 19/01/2013 - 23:10:57 - [1,258] -S--D C:\Users\Anthony\AppData\Roaming\Microsoft
O43 - CFD: 19/01/2013 - 16:01:13 - [0] ----D C:\Users\Anthony\AppData\Roaming\mkvtoolnix
O43 - CFD: 30/05/2013 - 17:11:40 - [32,070] ----D C:\Users\Anthony\AppData\Roaming\Mozilla
O43 - CFD: 03/05/2013 - 11:26:14 - [0,188] ----D C:\Users\Anthony\AppData\Roaming\Notepad++
O43 - CFD: 19/01/2013 - 16:32:23 - [0,097] ----D C:\Users\Anthony\AppData\Roaming\NVIDIA
O43 - CFD: 27/12/2012 - 18:33:51 - [0] ----D C:\Users\Anthony\AppData\Roaming\QuickScan
O43 - CFD: 12/01/2013 - 21:40:45 - [0,016] ----D C:\Users\Anthony\AppData\Roaming\Rainmeter
O43 - CFD: 27/04/2013 - 10:18:41 - [62,805] ----D C:\Users\Anthony\AppData\Roaming\Spotify
O43 - CFD: 03/05/2013 - 11:02:13 - [15,273] ----D C:\Users\Anthony\AppData\Roaming\Sublime Text 2
O43 - CFD: 19/04/2013 - 21:24:50 - [0,000] ----D C:\Users\Anthony\AppData\Roaming\Unity
O43 - CFD: 08/02/2013 - 15:07:06 - [0,018] ----D C:\Users\Anthony\AppData\Roaming\uTorrent   =>P2P.µTorrent
O43 - CFD: 19/01/2013 - 09:31:25 - [0,077] ----D C:\Users\Anthony\AppData\Roaming\vlc
O43 - CFD: 26/12/2012 - 15:09:37 - [0,000] ----D C:\Users\Anthony\AppData\Roaming\WinRAR
O43 - CFD: 10/05/2013 - 09:33:03 - [15,076] ----D C:\Users\Anthony\AppData\Local\Adobe
O43 - CFD: 10/12/2012 - 20:44:32 - [0] ----D C:\Users\Anthony\AppData\Local\Application Data
O43 - CFD: 03/01/2013 - 10:44:17 - [1,311] ----D C:\Users\Anthony\AppData\Local\ASUS
O43 - CFD: 27/12/2012 - 20:32:16 - [0,000] ----D C:\Users\Anthony\AppData\Local\bdch
O43 - CFD: 19/01/2013 - 00:58:14 - [2,619] ----D C:\Users\Anthony\AppData\Local\CRE
O43 - CFD: 10/12/2012 - 22:54:45 - [0,002] ----D C:\Users\Anthony\AppData\Local\Cyberlink
O43 - CFD: 20/05/2013 - 19:28:00 - [0] ----D C:\Users\Anthony\AppData\Local\Diagnostics
O43 - CFD: 12/03/2013 - 23:42:34 - [0] ----D C:\Users\Anthony\AppData\Local\ElevatedDiagnostics
O43 - CFD: 03/05/2013 - 11:21:31 - [0] ----D C:\Users\Anthony\AppData\Local\enchant
O43 - CFD: 13/01/2013 - 12:00:28 - [1,424] ----D C:\Users\Anthony\AppData\Local\fontconfig
O43 - CFD: 13/01/2013 - 12:00:26 - [0,001] ----D C:\Users\Anthony\AppData\Local\gegl-0.2
O43 - CFD: 21/05/2013 - 11:19:17 - [0] ----D C:\Users\Anthony\AppData\Local\Google
O43 - CFD: 10/12/2012 - 20:44:32 - [0] ----D C:\Users\Anthony\AppData\Local\Historique
O43 - CFD: 26/12/2012 - 15:49:21 - [0] ----D C:\Users\Anthony\AppData\Local\Macromedia
O43 - CFD: 22/02/2013 - 00:49:03 - [256,637] ----D C:\Users\Anthony\AppData\Local\Microsoft
O43 - CFD: 11/01/2013 - 15:26:12 - [0] ----D C:\Users\Anthony\AppData\Local\Microsoft Help
O43 - CFD: 26/12/2012 - 15:11:29 - [30,181] ----D C:\Users\Anthony\AppData\Local\Mozilla
O43 - CFD: 25/05/2013 - 19:28:37 - [127,445] ----D C:\Users\Anthony\AppData\Local\Packages
O43 - CFD: 10/12/2012 - 22:49:13 - [0,039] ----D C:\Users\Anthony\AppData\Local\Power2Go
O43 - CFD: 26/12/2012 - 15:10:10 - [0] ----D C:\Users\Anthony\AppData\Local\Programs
O43 - CFD: 22/02/2013 - 00:42:03 - [0,000] ----D C:\Users\Anthony\AppData\Local\Sidebar7
O43 - CFD: 27/04/2013 - 09:13:41 - [349,779] ----D C:\Users\Anthony\AppData\Local\Spotify
O43 - CFD: 04/01/2013 - 12:43:13 - [3,508] ----D C:\Users\Anthony\AppData\Local\StartIsBack
O43 - CFD: 01/06/2013 - 18:03:27 - [1,251] ----D C:\Users\Anthony\AppData\Local\Temp
O43 - CFD: 10/12/2012 - 20:44:32 - [0] ----D C:\Users\Anthony\AppData\Local\Temporary Internet Files
O43 - CFD: 03/05/2013 - 11:35:43 - [0] ----D C:\Users\Anthony\AppData\Local\Unity
O43 - CFD: 11/02/2013 - 18:46:21 - [0,016] ----D C:\Users\Anthony\AppData\Local\VirtualStore
O43 - CFD: 08/05/2013 - 09:58:30 - [88,150] ----D C:\Users\Anthony\AppData\Local\VS Revo Group
O43 - CFD: 13/01/2013 - 12:18:58 - [0,017] ----D C:\Users\Anthony\AppData\Local\webkit
O43 - CFD: 16/04/2013 - 21:14:36 - [0,001] ----D C:\Users\Anthony\AppData\Local\Western Digital
O43 - CFD: 16/04/2013 - 21:00:07 - [0,001] ----D C:\Users\Anthony\AppData\Local\Western_Digital
O43 - CFD: 16/04/2013 - 21:14:35 - [0,001] ----D C:\Users\Anthony\AppData\Local\Western_Digital_Technolog
O43 - CFD: 26/07/2012 - 10:13:00 - [0,004] R---D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 26/07/2012 - 10:13:00 - [0,001] R---D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 27/12/2012 - 18:27:20 - [0,000] R---D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 19/01/2013 - 16:20:24 - [0] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
O43 - CFD: 11/02/2013 - 22:03:58 - [0,004] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++
O43 - CFD: 02/01/2013 - 18:23:53 - [0,002] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks
O43 - CFD: 19/01/2013 - 16:25:06 - [0] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DivX
O43 - CFD: 14/05/2013 - 12:12:31 - [0,002] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
O43 - CFD: 29/12/2012 - 14:23:30 - [0] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 27/01/2013 - 12:34:40 - [0,002] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LinuxLive USB Creator
O43 - CFD: 26/07/2012 - 10:13:00 - [0,000] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 23/04/2013 - 21:06:27 - [0] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SopCast
O43 - CFD: 13/01/2013 - 20:32:36 - [0] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
O43 - CFD: 13/01/2013 - 23:26:50 - [0,003] R---D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 26/07/2012 - 10:13:00 - [0,005] R---D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 12/01/2013 - 17:11:00 - [0,002] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltraUXThemePatcher
O43 - CFD: 22/05/2013 - 09:12:22 - [0,001] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlock Root
O43 - CFD: 12/05/2013 - 12:25:03 - [0,003] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
O43 - CFD: 21/05/2013 - 11:33:14 - [0,001] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UnlockRoot Pro
O43 - CFD: 26/12/2012 - 15:08:41 - [0,003] ----D C:\Users\Anthony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ Program Folder: 187 Scanned in 00mn 09s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.013423A522858799161BAD325B727720] - 01/06/2013 - 17:01:07 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [178354]
O44 - LFC:[MD5.18573070534AD781701ED4F7485A78FF] - 01/06/2013 - 17:00:56 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.0BB97D43299910CBFBA59C461B99B910] - 01/06/2013 - 12:17:12 RSHAD . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys   [25928]
O44 - LFC:[MD5.3E4A812D2E9B4F93D0F97E9D64612925] - 01/06/2013 - 09:57:44 ---A- . (...) -- C:\Windows\SysNative\user.txt   [1646]
O44 - LFC:[MD5.3E4A812D2E9B4F93D0F97E9D64612925] - 01/06/2013 - 09:57:44 RSHAD . (...) -- C:\Windows\System32\user.txt   [1646]
O44 - LFC:[MD5.54FD66D8A005F25F814FFA7F475FDDE8] - 01/06/2013 - 09:42:11 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat   [135558]
O44 - LFC:[MD5.F80AF1F3BE2D35630896617D5E85FE7A] - 01/06/2013 - 09:42:11 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat   [158594]
O44 - LFC:[MD5.2861173B07DA86D6A4CC2458CB4584D5] - 01/06/2013 - 09:42:11 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat   [717670]
O44 - LFC:[MD5.D95929F14FFF7B8F9E567B58FC21702C] - 01/06/2013 - 09:42:11 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat   [808404]
O44 - LFC:[MD5.54FD66D8A005F25F814FFA7F475FDDE8] - 01/06/2013 - 09:42:11 RSHAD . (...) -- C:\Windows\System32\perfc009.dat   [135558]
O44 - LFC:[MD5.F80AF1F3BE2D35630896617D5E85FE7A] - 01/06/2013 - 09:42:11 RSHAD . (...) -- C:\Windows\System32\perfc00C.dat   [158594]
O44 - LFC:[MD5.2861173B07DA86D6A4CC2458CB4584D5] - 01/06/2013 - 09:42:11 RSHAD . (...) -- C:\Windows\System32\perfh009.dat   [717670]
O44 - LFC:[MD5.D95929F14FFF7B8F9E567B58FC21702C] - 01/06/2013 - 09:42:11 RSHAD . (...) -- C:\Windows\System32\perfh00C.dat   [808404]
O44 - LFC:[MD5.30F45DD553AC8CE980406E4E034AAAF5] - 30/05/2013 - 15:51:00 ---A- . (...) -- C:\Windows\PFRO.log   [818]
O44 - LFC:[MD5.F1C59DAF0B958C6DBED434DEF9374926] - 28/05/2013 - 20:30:56 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI   [1793362]
O44 - LFC:[MD5.F1C59DAF0B958C6DBED434DEF9374926] - 28/05/2013 - 20:30:56 RSHAD . (...) -- C:\Windows\System32\PerfStringBackup.INI   [1793362]
O44 - LFC:[MD5.C59204BFAEAAFC855E13C85DE93CAB36] - 24/05/2013 - 08:14:09 ---A- . (...) -- C:\AdwCleaner[S2].txt   [3545]
O44 - LFC:[MD5.018BFB215335FD68879EA48D133C16A0] - 24/05/2013 - 08:13:27 ---A- . (...) -- C:\AdwCleaner[R2].txt   [3463]
O44 - LFC:[MD5.6C00FBD924EBC5C3A59662165BC2CEA5] - 23/05/2013 - 10:45:06 ---A- . (.Microsoft Corporation - WDF Coinstaller.) -- C:\Windows\SysNative\wdfcoinstaller01005.dll   [1919968]
O44 - LFC:[MD5.AC00B4A1FAF27CC2FF99D0961FC9B77C] - 23/05/2013 - 10:45:06 RSHAD . (.Google Inc - ADB Interface.) -- C:\Windows\System32\Drivers\lgandnetadb.sys   [31744]
O44 - LFC:[MD5.6C00FBD924EBC5C3A59662165BC2CEA5] - 23/05/2013 - 10:45:06 RSHAD . (.Microsoft Corporation - WDF Coinstaller.) -- C:\Windows\System32\wdfcoinstaller01005.dll   [1919968]
O44 - LFC:[MD5.00625E9F9D4ACA8145FF2BBC738CDDC3] - 21/05/2013 - 13:15:39 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT   [353008]
O44 - LFC:[MD5.00625E9F9D4ACA8145FF2BBC738CDDC3] - 21/05/2013 - 13:15:39 RSHAD . (...) -- C:\Windows\System32\FNTCACHE.DAT   [353008]
O44 - LFC:[MD5.44FFF8BA70A459BDEEDDC881D36498E2] - 21/05/2013 - 07:55:16 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\SysNative\MRT.exe   [75016696]
O44 - LFC:[MD5.44FFF8BA70A459BDEEDDC881D36498E2] - 21/05/2013 - 07:55:16 RSHAD . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe   [75016696]
O44 - LFC:[MD5.43F4569BFF89D84E7E43DC41AA7B8554] - 20/05/2013 - 22:08:09 ---A- . (.Microsoft Corporation - Windows.UI.Xaml dll.) -- C:\Windows\SysNative\Windows.UI.Xaml.dll   [13648384]
O44 - LFC:[MD5.43F4569BFF89D84E7E43DC41AA7B8554] - 20/05/2013 - 22:08:09 ---A- . (.Microsoft Corporation - Windows.UI.Xaml dll.) -- C:\Windows\System32\Windows.UI.Xaml.dll   [13648384]
O44 - LFC:[MD5.64C3C2FCFECC783279FBC51769673144] - 20/05/2013 - 22:08:06 ---A- . (.Microsoft Corporation - Microsoft Tripoli Query.) -- C:\Windows\SysNative\tquery.dll   [3552768]
O44 - LFC:[MD5.64C3C2FCFECC783279FBC51769673144] - 20/05/2013 - 22:08:06 ---A- . (.Microsoft Corporation - Microsoft Tripoli Query.) -- C:\Windows\System32\tquery.dll   [3552768]
O44 - LFC:[MD5.57EF2DC36D34092F79CD9F7F016359F3] - 20/05/2013 - 22:08:05 ---A- . (.Microsoft Corporation - Windows Media Player.) -- C:\Windows\SysNative\wmp.dll   [14267904]
O44 - LFC:[MD5.57EF2DC36D34092F79CD9F7F016359F3] - 20/05/2013 - 22:08:05 ---A- . (.Microsoft Corporation - Windows Media Player.) -- C:\Windows\System32\wmp.dll   [14267904]
O44 - LFC:[MD5.13FC1A4A3463E9DE1EF1881E8525EB56] - 20/05/2013 - 22:08:02 ---A- . (.Microsoft Corporation - Recherche intégrée Microsoft.) -- C:\Windows\SysNative\mssrch.dll   [2107904]
O44 - LFC:[MD5.13FC1A4A3463E9DE1EF1881E8525EB56] - 20/05/2013 - 22:08:02 ---A- . (.Microsoft Corporation - Recherche intégrée Microsoft.) -- C:\Windows\System32\mssrch.dll   [2107904]
O44 - LFC:[MD5.A05BA2FE3B3FFE1920F383E3E321D9A2] - 20/05/2013 - 22:07:59 ---A- . (.Microsoft Corporation - DLL Couche NT.) -- C:\Windows\SysNative\ntdll.dll   [1829408]
O44 - LFC:[MD5.A05BA2FE3B3FFE1920F383E3E321D9A2] - 20/05/2013 - 22:07:59 ---A- . (.Microsoft Corporation - DLL Couche NT.) -- C:\Windows\System32\ntdll.dll   [1829408]
O44 - LFC:[MD5.092115A536C478921DA3D24E29C06E3E] - 20/05/2013 - 22:07:58 ---A- . (.Microsoft Corporation - Media Foundation Audio Decoders.) -- C:\Windows\SysNative\MSAudDecMFT.dll   [1444864]
O44 - LFC:[MD5.092115A536C478921DA3D24E29C06E3E] - 20/05/2013 - 22:07:58 ---A- . (.Microsoft Corporation - Media Foundation Audio Decoders.) -- C:\Windows\System32\MSAudDecMFT.dll   [1444864]
O44 - LFC:[MD5.80E66F3F18603523585AF96B43D7945A] - 20/05/2013 - 22:07:56 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\SysNative\win32k.sys   [4038144]
O44 - LFC:[MD5.39F8E0D68E941FB947F4116A29C5D53E] - 20/05/2013 - 22:07:56 ---A- . (.Microsoft Corporation - TWINUI.) -- C:\Windows\SysNative\twinui.dll   [10116096]
O44 - LFC:[MD5.39F8E0D68E941FB947F4116A29C5D53E] - 20/05/2013 - 22:07:56 ---A- . (.Microsoft Corporation - TWINUI.) -- C:\Windows\System32\twinui.dll   [10116096]
O44 - LFC:[MD5.80E66F3F18603523585AF96B43D7945A] - 20/05/2013 - 22:07:56 RSHAD . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\System32\win32k.sys   [4038144]
O44 - LFC:[MD5.A7FA87716A1F39BECB5CDED4F03C73F7] - 20/05/2013 - 22:07:55 ---A- . (.Microsoft Corporation - Realtek Network Kernel Debug Extensibility.) -- C:\Windows\SysNative\kd_02_10ec.dll   [306952]
O44 - LFC:[MD5.ED40ED9A65F3E79A8C43DD50C5FDADBF] - 20/05/2013 - 22:07:55 ---A- . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\SysNative\schedsvc.dll   [1285632]
O44 - LFC:[MD5.A7FA87716A1F39BECB5CDED4F03C73F7] - 20/05/2013 - 22:07:55 RSHAD . (.Microsoft Corporation - Realtek Network Kernel Debug Extensibility.) -- C:\Windows\System32\kd_02_10ec.dll   [306952]
O44 - LFC:[MD5.ED40ED9A65F3E79A8C43DD50C5FDADBF] - 20/05/2013 - 22:07:55 RSHAD . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1285632]
O44 - LFC:[MD5.C82794F9B5AF314F7CACA6AF758C44A0] - 20/05/2013 - 22:07:54 ---A- . (.Microsoft Corporation - Fournisseur de sécurité TLS/SSL.) -- C:\Windows\SysNative\schannel.dll   [422400]
O44 - LFC:[MD5.C82794F9B5AF314F7CACA6AF758C44A0] - 20/05/2013 - 22:07:54 ---A- . (.Microsoft Corporation - Fournisseur de sécurité TLS/SSL.) -- C:\Windows\System32\schannel.dll   [422400]
O44 - LFC:[MD5.9FDAA6957F04A6D1917463B7CBBEF88A] - 20/05/2013 - 22:07:54 ---A- . (.Microsoft Corporation - Indexeur Microsoft Windows Search.) -- C:\Windows\SysNative\SearchIndexer.exe   [816128]
O44 - LFC:[MD5.9FDAA6957F04A6D1917463B7CBBEF88A] - 20/05/2013 - 22:07:54 ---A- . (.Microsoft Corporation - Indexeur Microsoft Windows Search.) -- C:\Windows\System32\SearchIndexer.exe   [816128]
O44 - LFC:[MD5.77DAB73F2AF988D07D72FD2DA0DC91FC] - 20/05/2013 - 22:07:54 ---A- . (.Microsoft Corporation - Microsoft Enhanced Cryptographic Provider.) -- C:\Windows\SysNative\rsaenh.dll   [298456]
O44 - LFC:[MD5.77DAB73F2AF988D07D72FD2DA0DC91FC] - 20/05/2013 - 22:07:54 ---A- . (.Microsoft Corporation - Microsoft Enhanced Cryptographic Provider.) -- C:\Windows\System32\rsaenh.dll   [298456]
O44 - LFC:[MD5.810F30FF8490ED5ED510621DF10DE320] - 20/05/2013 - 22:07:54 ---A- . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\SysNative\audiosrv.dll   [785408]
O44 - LFC:[MD5.61FE70659CD43E07F94DA4DC31DEC493] - 20/05/2013 - 22:07:54 RSHAD . (.Microsoft Corporation - Protected Environment Authentication and Au.) -- C:\Windows\System32\Drivers\PEAuth.sys   [805376]
O44 - LFC:[MD5.810F30FF8490ED5ED510621DF10DE320] - 20/05/2013 - 22:07:54 RSHAD . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll   [785408]
O44 - LFC:[MD5.6B8EDB9EC94DC2D1370C57564E853051] - 20/05/2013 - 22:07:53 ---A- . (.Microsoft Corporation - Audio Engine.) -- C:\Windows\SysNative\AudioEng.dll   [489576]
O44 - LFC:[MD5.6B8EDB9EC94DC2D1370C57564E853051] - 20/05/2013 - 22:07:53 ---A- . (.Microsoft Corporation - Audio Engine.) -- C:\Windows\System32\AudioEng.dll   [489576]
O44 - LFC:[MD5.A6D52417607B399790678AFB2B44CDF3] - 20/05/2013 - 22:07:53 ---A- . (.Microsoft Corporation - Composant de redirection du Gestionnaire de.) -- C:\Windows\SysNative\dwmredir.dll   [172544]
O44 - LFC:[MD5.58C0CA86362B32ABC87E39A99013C75A] - 20/05/2013 - 22:07:53 ---A- . (.Microsoft Corporation - Hôte de la fenêtre de la console.) -- C:\Windows\SysNative\conhost.exe   [367616]
O44 - LFC:[MD5.38069D6F774EB0B83A9301E5698B52CA] - 20/05/2013 - 22:07:53 ---A- . (.Microsoft Corporation - Microsoft Search Protocol Handler.) -- C:\Windows\SysNative\mssph.dll   [435200]
O44 - LFC:[MD5.38069D6F774EB0B83A9301E5698B52CA] - 20/05/2013 - 22:07:53 ---A- . (.Microsoft Corporation - Microsoft Search Protocol Handler.) -- C:\Windows\System32\mssph.dll   [435200]
O44 - LFC:[MD5.480FB2259449C49C630D4AC3EC1EB426] - 20/05/2013 - 22:07:53 ---A- . (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) -- C:\Windows\SysNative\SearchProtocolHost.exe   [373760]
O44 - LFC:[MD5.480FB2259449C49C630D4AC3EC1EB426] - 20/05/2013 - 22:07:53 ---A- . (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) -- C:\Windows\System32\SearchProtocolHost.exe   [373760]
O44 - LFC:[MD5.489B2DC75115A61769B9304FAEBC7D66] - 20/05/2013 - 22:07:53 ---A- . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\SysNative\kerberos.dll   [817152]
O44 - LFC:[MD5.489B2DC75115A61769B9304FAEBC7D66] - 20/05/2013 - 22:07:53 ---A- . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll   [817152]
O44 - LFC:[MD5.78DF3884149D09A3E703DDCA91BFFD84] - 20/05/2013 - 22:07:53 ---A- . (.Microsoft Corporation - Session audio.) -- C:\Windows\SysNative\AudioSes.dll   [446792]
O44 - LFC:[MD5.78DF3884149D09A3E703DDCA91BFFD84] - 20/05/2013 - 22:07:53 ---A- . (.Microsoft Corporation - Session audio.) -- C:\Windows\System32\AudioSes.dll   [446792]
O44 - LFC:[MD5.A6D52417607B399790678AFB2B44CDF3] - 20/05/2013 - 22:07:53 RSHAD . (.Microsoft Corporation - Composant de redirection du Gestionnaire de.) -- C:\Windows\System32\dwmredir.dll   [172544]
O44 - LFC:[MD5.58C0CA86362B32ABC87E39A99013C75A] - 20/05/2013 - 22:07:53 RSHAD . (.Microsoft Corporation - Hôte de la fenêtre de la console.) -- C:\Windows\System32\conhost.exe   [367616]
O44 - LFC:[MD5.205162CCEBA17B54C6A7788C31726E95] - 20/05/2013 - 22:07:52 ---A- . (.Microsoft Corporation - Créateur de support de récupération.) -- C:\Windows\SysNative\RecoveryDrive.exe   [804352]
O44 - LFC:[MD5.7018F9EEEC3B5427046E6D761715BC54] - 20/05/2013 - 22:07:52 ---A- . (.Microsoft Corporation - DLL Windows.Networking.) -- C:\Windows\SysNative\Windows.Networking.dll   [595456]
O44 - LFC:[MD5.7018F9EEEC3B5427046E6D761715BC54] - 20/05/2013 - 22:07:52 ---A- . (.Microsoft Corporation - DLL Windows.Networking.) -- C:\Windows\System32\Windows.Networking.dll   [595456]
O44 - LFC:[MD5.8FB468CFB4A4B0E13A19A672D9429B1F] - 20/05/2013 - 22:07:52 ---A- . (.Microsoft Corporation - Interface utilisateur d’authentification Wi.) -- C:\Windows\SysNative\authui.dll   [2303488]
O44 - LFC:[MD5.8FB468CFB4A4B0E13A19A672D9429B1F] - 20/05/2013 - 22:07:52 ---A- . (.Microsoft Corporation - Interface utilisateur d’authentification Wi.) -- C:\Windows\System32\authui.dll   [2303488]
O44 - LFC:[MD5.09B2F3A41C6A8BFA22640826F70E9810] - 20/05/2013 - 22:07:52 ---A- . (.Microsoft Corporation - Isolation graphique de périphérique audio W.) -- C:\Windows\SysNative\audiodg.exe   [253544]
O44 - LFC:[MD5.205162CCEBA17B54C6A7788C31726E95] - 20/05/2013 - 22:07:52 RSHAD . (.Microsoft Corporation - Créateur de support de récupération.) -- C:\Windows\System32\RecoveryDrive.exe   [804352]
O44 - LFC:[MD5.09B2F3A41C6A8BFA22640826F70E9810] - 20/05/2013 - 22:07:52 RSHAD . (.Microsoft Corporation - Isolation graphique de périphérique audio W.) -- C:\Windows\System32\audiodg.exe   [253544]
O44 - LFC:[MD5.AB279D4734BC508911C004F8D1011973] - 20/05/2013 - 22:07:51 ---A- . (.Microsoft Corporation - Cœur de la plateforme de notifications de t.) -- C:\Windows\SysNative\wpncore.dll   [456704]
O44 - LFC:[MD5.E1B0C213296FF324992BEF0E285BB623] - 20/05/2013 - 22:07:51 ---A- . (.Microsoft Corporation - OS Loader.) -- C:\Windows\SysNative\winload.efi   [1403784]
O44 - LFC:[MD5.4E1F42D7616BB19253B99E85EDDA6E8C] - 20/05/2013 - 22:07:51 ---A- . (.Microsoft Corporation - OS Loader.) -- C:\Windows\SysNative\winload.exe   [1267424]
O44 - LFC:[MD5.3B002BD044161080F3A5235E79AE171E] - 20/05/2013 - 22:07:51 ---A- . (.Microsoft Corporation - Windows.Networking.BackgroundTransfer DLL.) -- C:\Windows\SysNative\Windows.Networking.BackgroundTransfer.dll   [391168]
O44 - LFC:[MD5.3B002BD044161080F3A5235E79AE171E] - 20/05/2013 - 22:07:51 ---A- . (.Microsoft Corporation - Windows.Networking.BackgroundTransfer DLL.) -- C:\Windows\System32\Windows.Networking.BackgroundTransfer.dll   [391168]
O44 - LFC:[MD5.46159633AA549E4D2CF6455B056CAB96] - 20/05/2013 - 22:07:51 ---A- . (.Microsoft Corporation - XPS to GDI Converter.) -- C:\Windows\SysNative\XpsGdiConverter.dll   [523264]
O44 - LFC:[MD5.46159633AA549E4D2CF6455B056CAB96] - 20/05/2013 - 22:07:51 ---A- . (.Microsoft Corporation - XPS to GDI Converter.) -- C:\Windows\System32\XpsGdiConverter.dll   [523264]
O44 - LFC:[MD5.AB279D4734BC508911C004F8D1011973] - 20/05/2013 - 22:07:51 RSHAD . (.Microsoft Corporation - Cœur de la plateforme de notifications de t.) -- C:\Windows\System32\wpncore.dll   [456704]
O44 - LFC:[MD5.E1B0C213296FF324992BEF0E285BB623] - 20/05/2013 - 22:07:51 RSHAD . (.Microsoft Corporation - OS Loader.) -- C:\Windows\System32\winload.efi   [1403784]
O44 - LFC:[MD5.4E1F42D7616BB19253B99E85EDDA6E8C] - 20/05/2013 - 22:07:51 RSHAD . (.Microsoft Corporation - OS Loader.) -- C:\Windows\System32\winload.exe   [1267424]
O44 - LFC:[MD5.22B9D38C6A69591811C10D4D1BF96AFE] - 20/05/2013 - 22:07:50 ---A- . (.Microsoft Corporation - Application de démarrage Reprise à partir d.) -- C:\Windows\SysNative\winresume.efi   [1217328]
O44 - LFC:[MD5.B7F4C0DEC76583C128D40579C36D6AA8] - 20/05/2013 - 22:07:50 ---A- . (.Microsoft Corporation - Application de démarrage Reprise à partir d.) -- C:\Windows\SysNative\winresume.exe   [1093880]
O44 - LFC:[MD5.365C6C6BC10201CC1080EB97A559BFC1] - 20/05/2013 - 22:07:50 ---A- . (.Microsoft Corporation - Code Integrity Module.) -- C:\Windows\SysNative\ci.dll   [503080]
O44 - LFC:[MD5.F0CFE7AA1100CDEF41ABA210C5610E85] - 20/05/2013 - 22:07:50 ---A- . (.Microsoft Corporation - Disk Management Snap-in Support Library.) -- C:\Windows\SysNative\dmvdsitf.dll   [196096]
O44 - LFC:[MD5.F0CFE7AA1100CDEF41ABA210C5610E85] - 20/05/2013 - 22:07:50 ---A- . (.Microsoft Corporation - Disk Management Snap-in Support Library.) -- C:\Windows\System32\dmvdsitf.dll   [196096]
O44 - LFC:[MD5.F2027911CBDC096576F0F1F81C790C1B] - 20/05/2013 - 22:07:50 ---A- . (.Microsoft Corporation - Media Foundation Media Engine DLL.) -- C:\Windows\SysNative\MFMediaEngine.dll   [468992]
O44 - LFC:[MD5.F2027911CBDC096576F0F1F81C790C1B] - 20/05/2013 - 22:07:50 ---A- . (.Microsoft Corporation - Media Foundation Media Engine DLL.) -- C:\Windows\System32\MFMediaEngine.dll   [468992]
O44 - LFC:[MD5.0B43D0E9E00CB4F98FC62AB2FA5D96F3] - 20/05/2013 - 22:07:50 ---A- . (.Microsoft Corporation - Moteur d’historique des fichiers.) -- C:\Windows\SysNative\fhengine.dll   [231936]
O44 - LFC:[MD5.22B9D38C6A69591811C10D4D1BF96AFE] - 20/05/2013 - 22:07:50 RSHAD . (.Microsoft Corporation - Application de démarrage Reprise à partir d.) -- C:\Windows\System32\winresume.efi   [1217328]
O44 - LFC:[MD5.B7F4C0DEC76583C128D40579C36D6AA8] - 20/05/2013 - 22:07:50 RSHAD . (.Microsoft Corporation - Application de démarrage Reprise à partir d.) -- C:\Windows\System32\winresume.exe   [1093880]
O44 - LFC:[MD5.365C6C6BC10201CC1080EB97A559BFC1] - 20/05/2013 - 22:07:50 RSHAD . (.Microsoft Corporation - Code Integrity Module.) -- C:\Windows\System32\ci.dll   [503080]
O44 - LFC:[MD5.0B43D0E9E00CB4F98FC62AB2FA5D96F3] - 20/05/2013 - 22:07:50 RSHAD . (.Microsoft Corporation - Moteur d’historique des fichiers.) -- C:\Windows\System32\fhengine.dll   [231936]
O44 - LFC:[MD5.56218A571ECF8D55E0CDFF8DF2546CF1] - 20/05/2013 - 22:07:50 RSHAD . (.Microsoft Corporation - Pilote de serveur SMB 2.0.) -- C:\Windows\System32\Drivers\srv2.sys   [623104]
O44 - LFC:[MD5.BCD7A47EF587DC00DD61D12D9C2D1E44] - 20/05/2013 - 22:07:49 ---A- . (.Microsoft Corporation - Générateur de points de terminaison du serv.) -- C:\Windows\SysNative\AudioEndpointBuilder.dll   [169472]
O44 - LFC:[MD5.4C1C6E9BB02654EB38CD6DF4ACE6664B] - 20/05/2013 - 22:07:49 ---A- . (.Microsoft Corporation - Media Foundation ReadWrite DLL.) -- C:\Windows\SysNative\mfreadwrite.dll   [281088]
O44 - LFC:[MD5.4C1C6E9BB02654EB38CD6DF4ACE6664B] - 20/05/2013 - 22:07:49 ---A- . (.Microsoft Corporation - Media Foundation ReadWrite DLL.) -- C:\Windows\System32\mfreadwrite.dll   [281088]
O44 - LFC:[MD5.5EAC1240B4699EC313C69FCADC5F457A] - 20/05/2013 - 22:07:49 ---A- . (.Microsoft Corporation - Microsoft Robocopy.) -- C:\Windows\SysNative\Robocopy.exe   [126464]
O44 - LFC:[MD5.5EAC1240B4699EC313C69FCADC5F457A] - 20/05/2013 - 22:07:49 ---A- . (.Microsoft Corporation - Microsoft Robocopy.) -- C:\Windows\System32\Robocopy.exe   [126464]
O44 - LFC:[MD5.BCD7A47EF587DC00DD61D12D9C2D1E44] - 20/05/2013 - 22:07:49 RSHAD . (.Microsoft Corporation - Générateur de points de terminaison du serv.) -- C:\Windows\System32\AudioEndpointBuilder.dll   [169472]
O44 - LFC:[MD5.D3461BAFD6314E47C3C984DFEFAA6EEA] - 20/05/2013 - 22:07:48 ---A- . (.Microsoft Corporation - DLL du Panneau de configuration.) -- C:\Windows\SysNative\intl.cpl   [419840]
O44 - LFC:[MD5.D3461BAFD6314E47C3C984DFEFAA6EEA] - 20/05/2013 - 22:07:48 ---A- . (.Microsoft Corporation - DLL du Panneau de configuration.) -- C:\Windows\System32\intl.cpl   [419840]
O44 - LFC:[MD5.3EA778FE9D9B56E67C0783A63C4B142E] - 20/05/2013 - 22:07:48 ---A- . (.Microsoft Corporation - Microsoft Windows Search Filter Host.) -- C:\Windows\SysNative\SearchFilterHost.exe   [197120]
O44 - LFC:[MD5.3EA778FE9D9B56E67C0783A63C4B142E] - 20/05/2013 - 22:07:48 ---A- . (.Microsoft Corporation - Microsoft Windows Search Filter Host.) -- C:\Windows\System32\SearchFilterHost.exe   [197120]
O44 - LFC:[MD5.E8801AF63EE3DEACA29F1F5526C35F53] - 20/05/2013 - 22:07:48 ---A- . (.Microsoft Corporation - Network Kernel Debugger.) -- C:\Windows\SysNative\kdnet.dll   [86280]
O44 - LFC:[MD5.61A9A710077526C9A7F068741540D96E] - 20/05/2013 - 22:07:48 ---A- . (.Microsoft Corporation - Virtual Machine Network Kernel Debugger.) -- C:\Windows\SysNative\kdvm.dll   [77960]
O44 - LFC:[MD5.5D072A59331A34C9BE621C7A55578562] - 20/05/2013 - 22:07:48 ---A- . (.Microsoft Corporation - iuilp.) -- C:\Windows\SysNative\iuilp.dll   [210432]
O44 - LFC:[MD5.E8801AF63EE3DEACA29F1F5526C35F53] - 20/05/2013 - 22:07:48 RSHAD . (.Microsoft Corporation - Network Kernel Debugger.) -- C:\Windows\System32\kdnet.dll   [86280]
O44 - LFC:[MD5.085F150D002B7F0153D3C06DDF33A143] - 20/05/2013 - 22:07:48 RSHAD . (.Microsoft Corporation - Pilote de miniport Bluetooth pour les périp.) -- C:\Windows\System32\Drivers\hidbth.sys   [95744]
O44 - LFC:[MD5.14FC338B80CFF7E04215133B568D15C4] - 20/05/2013 - 22:07:48 RSHAD . (.Microsoft Corporation - Server Network driver.) -- C:\Windows\System32\Drivers\srvnet.sys   [247808]
O44 - LFC:[MD5.872E937681910E2456A054331C7D5A18] - 20/05/2013 - 22:07:48 RSHAD . (.Microsoft Corporation - Storage Spaces Driver.) -- C:\Windows\System32\Drivers\spaceport.sys   [284424]
O44 - LFC:[MD5.61A9A710077526C9A7F068741540D96E] - 20/05/2013 - 22:07:48 RSHAD . (.Microsoft Corporation - Virtual Machine Network Kernel Debugger.) -- C:\Windows\System32\kdvm.dll   [77960]
O44 - LFC:[MD5.5D072A59331A34C9BE621C7A55578562] - 20/05/2013 - 22:07:48 RSHAD . (.Microsoft Corporation - iuilp.) -- C:\Windows\System32\iuilp.dll   [210432]
O44 - LFC:[MD5.D2EFA32998014927140E40054645CA4E] - 20/05/2013 - 22:07:47 ---A- . (.Microsoft Corporation - Application Activation de Windows du Pannea.) -- C:\Windows\SysNative\GenuineCenter.dll   [414720]
O44 - LFC:[MD5.31CAB21D19D8794854E037DEAABB499C] - 20/05/2013 - 22:07:47 ---A- . (.Microsoft Corporation - Plateforme de recherche Microsoft Vista.) -- C:\Windows\SysNative\mssvp.dll   [745984]
O44 - LFC:[MD5.31CAB21D19D8794854E037DEAABB499C] - 20/05/2013 - 22:07:47 ---A- . (.Microsoft Corporation - Plateforme de recherche Microsoft Vista.) -- C:\Windows\System32\mssvp.dll   [745984]
O44 - LFC:[MD5.012CFE7F0F95266F554EE3B91EE2128A] - 20/05/2013 - 22:07:47 ---A- . (.Microsoft Corporation - Service Centre de sécurité de Windows.) -- C:\Windows\SysNative\wscsvc.dll   [99840]
O44 - LFC:[MD5.D2EFA32998014927140E40054645CA4E] - 20/05/2013 - 22:07:47 RSHAD . (.Microsoft Corporation - Application Activation de Windows du Pannea.) -- C:\Windows\System32\GenuineCenter.dll   [414720]
O44 - LFC:[MD5.FD97DEF4D031A4D73A149C4A97375042] - 20/05/2013 - 22:07:47 RSHAD . (.Microsoft Corporation - Hid Class Library.) -- C:\Windows\System32\Drivers\hidclass.sys   [83968]
O44 - LFC:[MD5.61F6972FF9AC9A8D0B4D62076DC30051] - 20/05/2013 - 22:07:47 RSHAD . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\Windows\System32\Drivers\wanarp.sys   [83456]
O44 - LFC:[MD5.3730942D7DB2F8BB5F84542B7FF6F650] - 20/05/2013 - 22:07:47 RSHAD . (.Microsoft Corporation - NDIS Proxy.) -- C:\Windows\System32\Drivers\ndproxy.sys   [60416]
O44 - LFC:[MD5.012CFE7F0F95266F554EE3B91EE2128A] - 20/05/2013 - 22:07:47 RSHAD . (.Microsoft Corporation - Service Centre de sécurité de Windows.) -- C:\Windows\System32\wscsvc.dll   [99840]
O44 - LFC:[MD5.9E11EE0F2E117B2D5A835B2B91752827] - 20/05/2013 - 22:07:47 RSHAD . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\Windows\System32\Drivers\hidusb.sys   [27648]
O44 - LFC:[MD5.8383D48F0A55703A613C339EF586C6AA] - 20/05/2013 - 22:07:46 ---A- . (.Microsoft Corporation - FM IFS Utility DLL.) -- C:\Windows\SysNative\fmifs.dll   [50176]
O44 - LFC:[MD5.8383D48F0A55703A613C339EF586C6AA] - 20/05/2013 - 22:07:46 ---A- . (.Microsoft Corporation - FM IFS Utility DLL.) -- C:\Windows\System32\fmifs.dll   [50176]
O44 - LFC:[MD5.E55A2C4497247F8CA09F1B2AAFAEDD3C] - 20/05/2013 - 22:07:46 ---A- . (.Microsoft Corporation - Microsoft Search Hooks.) -- C:\Windows\SysNative\msshooks.dll   [13824]
O44 - LFC:[MD5.E55A2C4497247F8CA09F1B2AAFAEDD3C] - 20/05/2013 - 22:07:46 ---A- . (.Microsoft Corporation - Microsoft Search Hooks.) -- C:\Windows\System32\msshooks.dll   [13824]
O44 - LFC:[MD5.3C77496ED7DB0D802427689F7E613777] - 20/05/2013 - 22:07:46 ---A- . (.Microsoft Corporation - Microsoft Search Proxy.) -- C:\Windows\SysNative\mssprxy.dll   [96256]
O44 - LFC:[MD5.3C77496ED7DB0D802427689F7E613777] - 20/05/2013 - 22:07:46 ---A- . (.Microsoft Corporation - Microsoft Search Proxy.) -- C:\Windows\System32\mssprxy.dll   [96256]
O44 - LFC:[MD5.0E2D8CE7A7A459256CBD5698F90D100A] - 20/05/2013 - 22:07:46 ---A- . (.Microsoft Corporation - PKM Perfmon Counter DLL.) -- C:\Windows\SysNative\msscntrs.dll   [65024]
O44 - LFC:[MD5.0E2D8CE7A7A459256CBD5698F90D100A] - 20/05/2013 - 22:07:46 ---A- . (.Microsoft Corporation - PKM Perfmon Counter DLL.) -- C:\Windows\System32\msscntrs.dll   [65024]
O44 - LFC:[MD5.D0B384E810077BF3FE5A11718B512275] - 20/05/2013 - 22:07:45 ---A- . (...) -- C:\Windows\SysNative\ApnDatabase.xml   [387688]
O44 - LFC:[MD5.FDA6525D9018812E4237ED5EEB29F5DA] - 20/05/2013 - 22:07:45 ---A- . (.Microsoft Corporation - Fichier DLL de ressources des fuseaux horai.) -- C:\Windows\SysNative\tzres.dll   [2048]
O44 - LFC:[MD5.FDA6525D9018812E4237ED5EEB29F5DA] - 20/05/2013 - 22:07:45 ---A- . (.Microsoft Corporation - Fichier DLL de ressources des fuseaux horai.) -- C:\Windows\System32\tzres.dll   [2048]
O44 - LFC:[MD5.D0B384E810077BF3FE5A11718B512275] - 20/05/2013 - 22:07:45 RSHAD . (...) -- C:\Windows\System32\ApnDatabase.xml   [387688]
O44 - LFC:[MD5.56DA495DE9758984ADF855D4EA30D4A9] - 20/05/2013 - 22:00:23 ---A- . (.Microsoft Corporation - Moteur de stockage extensible pour Microsof.) -- C:\Windows\SysNative\esent.dll   [2851840]
O44 - LFC:[MD5.56DA495DE9758984ADF855D4EA30D4A9] - 20/05/2013 - 22:00:23 ---A- . (.Microsoft Corporation - Moteur de stockage extensible pour Microsof.) -- C:\Windows\System32\esent.dll   [2851840]
~ Files: 142 Scanned in 00mn 48s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Fournisseur de sécurité TLS/SSL.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Live Security Package.) -- C:\Windows\System32\livessp.dll
~ LSA: 9 Scanned in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\BasicDisplay.sys . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\BasicRender.sys . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dxgkrnl.sys . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\FsDepends.sys . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\FsDepends.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\BasicDisplay.sys . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\BasicRender.sys . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dxgkrnl.sys . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\FsDepends.sys . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\FsDepends.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (...) -- C:\Windows\System32\Drivers\rdpencdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ CSB: 17 Scanned in 00mn 00s



---\\ MountPoints2 Shell Key (O51)
O51 - MPSK:{0f63272f-5714-11e2-be85-50465de27868}\AutoRun\command. (...) -- F:\LaunchU3.exe (.not file.)
O51 - MPSK:{a223afde-a6c9-11e2-bf26-806e6f6e6963}\AutoRun\command. (...) -- G:\WD Drive Unlock.exe (.not file.)
O51 - MPSK:{dd7f7032-c5da-11e2-bf60-50465de27868}\AutoRun\command. (...) -- G:\WD Drive Unlock.exe (.not file.)
~ Keys:  Scanned in 00mn 00s



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ TDSD: 2 Scanned in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableCursorSuppression"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 17 Scanned in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
~ MWPE Keys: 3 Scanned in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.4F18D4C7EA14F11A7211F60D553C03DB] - 26/07/2012 - 06:00:49 ---A- . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\Drivers\3ware.sys   [106736]
O58 - SDL:[MD5.D55EBCD80CA519020338F75E420FDF3F] - 16/08/2012 - 00:01:20 ----- . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN device driver.) -- C:\Windows\System32\athw8x.sys   [3624960]
O58 - SDL:[MD5.093CEE3B45F0954DCE6CB891F6A920F7] - 21/12/2012 - 13:54:00 ---A- . (...) -- C:\Windows\SysWOW64\epmntdrv.sys   [14920]
~ Drivers:  Scanned in 00mn 00s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS:  Scanned in 00mn 00s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
~ FASS Keys: 19 Scanned in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys:  Scanned in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {EE50B3E6-20DA-4F16-BC88-6E02430599CE} [DefaultScope] - (Google) - http://www.google.com
~ Keys:  Scanned in 00mn 00s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll   [190976]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [149504]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [149504]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [309248]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll   [1366016]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [1071104]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll   [99840]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à distance.) -- C:\Windows\System32\rasmans.dll   [358400]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [107520]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll   [62976]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [438784]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [305664]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll   [3240448]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll   [826368]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [565760]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [894464]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [70144]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [151552]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [105472]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1285632]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [219648]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll   [80896]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [134144]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [209920]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll   [291328]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll   [84992]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll   [97792]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [190976]
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll   [1964544]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [47104]
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll   [207872]
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Microsoft.) -- C:\Windows\System32\ncasvc.dll   [161792]
O83 - Search Svchost Services: SystemEventsBroker (SystemEventsBroker) . (.Microsoft Corporation - Service Broker pour les événements système.) -- C:\Windows\System32\SystemEventsBrokerServer.dll   [180224]
~ Services: 34 Scanned in 00mn 00s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.0EC286BCC00B38F35AF374B68C051D29] [SPRF][27/12/2012] (...) -- C:\ProgramData\1356625913.bdinstall.bin   [732601]
[MD5.4A93070098539B54FDA391D4D551C880] [SPRF][22/07/2009] (...) -- C:\ProgramData\SetStretch.exe   [24576]
[MD5.336C11ABAE37591B3351DBAE5257C30A] [SPRF][04/01/2013] (.Stardock Corperation - Start8 Setup.) -- C:\Users\Anthony\AppData\Local\Tempsetup8.exe   [2573231]
[MD5.92C56A21BF6285EB7A95A4370A06CA46] [SPRF][26/12/2012] (.Pas de propriétaire - ftp_users.) -- C:\Users\Anthony\AppData\Local\Tempuser_xdb.exe   [27136]
[MD5.E5B43485D986CFECA401F10E9268C85A] [SPRF][30/05/2013] (...) -- C:\Users\Anthony\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll   [515584]
[MD5.F24EF7E19EB2F65B4DAB61CF50821028] [SPRF][01/06/2013] (...) -- C:\Users\Anthony\AppData\Roaming\sp_data.sys   [507]
[MD5.0FB6D382FA5FBF72D05FC2A4503B7DF2] [SPRF][03/02/2013] (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Users\Anthony\Desktop\mbam-setup-1.70.0.1100.exe   [10156344]
[MD5.605A171C61A0607BDCF6BE80ED07CF95] [SPRF][13/04/2013] (.AnjoCaido - Free launcher for Minecraft Alpha.) -- C:\Users\Anthony\Desktop\Minecraft.exe   [695296]
[MD5.8BE8A70114A168DB89CA40923C55BA5B] [SPRF][01/06/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Anthony\Desktop\ZHPDiag2.exe   [5667061]
[MD5.9149E19DB451DF6C7735942DC71451C8] [SPRF][21/12/2009] (.Pas de propriétaire - asusTek_sys_ctrl Module.) -- C:\Windows\Downloaded Program Files\asusTek_sys_ctrl.dll   [139776]
~ Files:  Scanned in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "vm-monitoring-rpc" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "vm-monitoring-dcom" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMP-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "SNMPTRAP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "SNMPTRAP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "Wininit-Shutdown-In-Rule-TCP-RPC" | In - None - P6 - FALSE | .(.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\system32\wininit.exe
O87 - FAEL: "Wininit-Shutdown-In-Rule-TCP-RPC-EPMapper" | In - None - P6 - FALSE | .(.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\system32\wininit.exe
O87 - FAEL: "PNRPMNRS-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Netlogon-TCP-RPC-In" | In - None - P6 - FALSE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\System32\lsass.exe
O87 - FAEL: "WMI-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "MsiScsi-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "ProximityUxHost-Sharing-In-TCP-NoScope" | In - None - P6 - TRUE | .(.Microsoft Corporation - Hôte UX de proximité.) -- C:\Windows\system32\proximityuxhost.exe
O87 - FAEL: "ProximityUxHost-Sharing-Out-TCP-NoScope" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Hôte UX de proximité.) -- C:\Windows\system32\proximityuxhost.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnPHost-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNTS-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnPHost-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-DAS-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Device Association Framework Provider Host.) -- C:\Windows\system32\dashost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNTS-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNT-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnPHost-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-DAS-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Device Association Framework Provider Host.) -- C:\Windows\system32\dashost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNTS-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In" | In - Private - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out" | Out - Private - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In" | In - Private - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out" | Out - Private - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-RAServer-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-RAServer-Out-TCP-NoScope-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-DCOM-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-QWave-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-In-UDP-NoScope" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-UDP-LocalSubnetScope" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-UDP-PlayToScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-Out-UDP-NoScope" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-Out-UDP-LocalSubnetScope" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-Out-UDP-PlayToScope" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-RTSP-NoScope" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-RTSP-LocalSubnetScope" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-RTSP-PlayToScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-SSDP-Discovery-PlayToScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-QWave-In-UDP-PlayToScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-QWave-Out-UDP-PlayToScope" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-QWave-In-TCP-PlayToScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-QWave-Out-TCP-PlayToScope" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "TPMVSCMGR-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "TPMVSCMGR-Server-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - TPM Virtual Smart Card Manager DCOM Server.) -- C:\Windows\system32\RmtTpmVscMgrSvr.exe
O87 - FAEL: "TPMVSCMGR-Server-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - TPM Virtual Smart Card Manager DCOM Server.) -- C:\Windows\system32\RmtTpmVscMgrSvr.exe
O87 - FAEL: "TPMVSCMGR-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "TPMVSCMGR-Server-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - TPM Virtual Smart Card Manager DCOM Server.) -- C:\Windows\system32\RmtTpmVscMgrSvr.exe
O87 - FAEL: "TPMVSCMGR-Server-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - TPM Virtual Smart Card Manager DCOM Server.) -- C:\Windows\system32\RmtTpmVscMgrSvr.exe
O87 - FAEL: "Collab-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-IPHTTPS-Out" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DNS-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe
O87 - FAEL: "RVM-VDS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-TERMSRV-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-MCX2SVC-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-PlayTo-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-PlayTo-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-FDPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{D88AC765-FAE3-4FC5-9D17-96026031FFA1}" | In - Public - P6 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O87 - FAEL: "{70C06C67-70B2-4C43-821A-34BE15CE00FC}" | In - Public - P17 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O87 - FAEL: "{D8FAB0FB-80DB-4DEB-AF13-A59A505E0788}" | In - None - P17 - TRUE | .(.Copyright 2013 SAMSUNG - AllShare Play.) -- C:\Program Files\Samsung\AllShare Play\AllShare Play.exe
O87 - FAEL: "{FBE1A146-6258-42AB-AEEF-2C9B7383EE86}" | Out - None - P17 - TRUE | .(.Copyright 2013 SAMSUNG - AllShare Play.) -- C:\Program Files\Samsung\AllShare Play\AllShare Play.exe
O87 - FAEL: "{B2C86DDA-DA43-4E4F-B9F3-E8C515DBA9B7}" | In - Private - P6 - TRUE | .(.Samsung - AllShareFrameworkDMS.) -- C:\Program Files\Samsung\AllShare Framework DMS\1.3.06\AllShareFrameworkDMS.exe
O87 - FAEL: "{B2AA63FF-E5A2-41E6-8AF7-2E93248921A9}" | In - Private - P17 - TRUE | .(.Samsung - AllShareFrameworkDMS.) -- C:\Program Files\Samsung\AllShare Framework DMS\1.3.06\AllShareFrameworkDMS.exe
O87 - FAEL: "{2C537BA3-FB34-44BF-AF6A-3F06147E2CCB}" | In - Private - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe   =>P2P.µTorrent
O87 - FAEL: "{07B67856-4211-4F1D-B6CA-BC00F1BF9B4A}" | In - Private - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe   =>P2P.µTorrent
O87 - FAEL: "{EA717573-FF13-4C7E-89A4-A9B0D4F38D5E}" | In - None - P17 - TRUE | .(.Copyright 2013 SAMSUNG - AllShare Play.) -- C:\Program Files\Samsung\AllShare Play\AllShare Play.exe
O87 - FAEL: "{0D253B09-8504-4286-8C1D-55069F97EEA0}" | Out - None - P17 - TRUE | .(.Copyright 2013 SAMSUNG - AllShare Play.) -- C:\Program Files\Samsung\AllShare Play\AllShare Play.exe
O87 - FAEL: "{DB411DB4-4BE1-4898-BC82-7722E0B4FE6A}" | Out - None - P17 - TRUE | .(.Copyright 2013 SAMSUNG - AllShare Play.) -- C:\Program Files\Samsung\AllShare Play\AllShare Play.exe
O87 - FAEL: "{3EA0D8BD-812E-4CF8-9D37-653864EB018A}" | In - None - P17 - TRUE | .(.Copyright 2013 SAMSUNG - AllShare Play.) -- C:\Program Files\Samsung\AllShare Play\AllShare Play.exe
O87 - FAEL: "TCP Query User{79383394-C543-44CF-9023-C775A8252C98}C:\users\anthony\appdata\roaming\spotify\spotify.exe" | In - Private - P6 - TRUE | .(.Spotify Ltd - Spotify.) -- C:\users\anthony\appdata\roaming\spotify\spotify.exe
O87 - FAEL: "UDP Query User{2E2A66A4-17D0-4BCB-B0C7-D6A263C0E1EE}C:\users\anthony\appdata\roaming\spotify\spotify.exe" | In - Private - P17 - TRUE | .(.Spotify Ltd - Spotify.) -- C:\users\anthony\appdata\roaming\spotify\spotify.exe
O87 - FAEL: "{C1A0B219-69DE-4D32-B983-01FBDC6A7031}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{0BDDAFDA-0F72-4207-B2B5-3C793AA8E287}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{7F0F2B2E-9468-443D-9E3B-CF73ACBF89C0}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "TCP Query User{5ED66ADA-C7A0-4A7B-B60E-C11785CD95AD}C:\program files (x86)\tmnationsforever\tmforever.exe" | In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\tmnationsforever\tmforever.exe
O87 - FAEL: "UDP Query User{E25CA5FD-AB68-4063-836F-CB72A82E7212}C:\program files (x86)\tmnationsforever\tmforever.exe" | In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\tmnationsforever\tmforever.exe
O87 - FAEL: "TCP Query User{DBD323EC-0D98-4C9E-95AB-C51405930C0B}C:\program files (x86)\tmnationsforever\tmforever.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\tmnationsforever\tmforever.exe
O87 - FAEL: "UDP Query User{F54C12D9-673B-4A96-8BBC-00F2AD9F334F}C:\program files (x86)\tmnationsforever\tmforever.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\tmnationsforever\tmforever.exe
O87 - FAEL: "TCP Query User{C1380925-FDAC-4A92-98B8-F929A2D3F752}C:\windows\syswow64\javaw.exe" | In - Private - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\windows\syswow64\javaw.exe
O87 - FAEL: "UDP Query User{8E439431-18E9-4E10-8ABB-D76F36915445}C:\windows\syswow64\javaw.exe" | In - Private - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\windows\syswow64\javaw.exe
O87 - FAEL: "TCP Query User{59214531-BF66-4623-ACEC-092BE642858F}C:\program files (x86)\mozilla firefox\plugin-container.exe" | In - Private - P6 - TRUE | .(.Mozilla Corporation.) -- C:\program files (x86)\mozilla firefox\plugin-container.exe
O87 - FAEL: "UDP Query User{2253EBF5-8745-4A28-A0A0-F5B3E3235923}C:\program files (x86)\mozilla firefox\plugin-container.exe" | In - Private - P17 - TRUE | .(.Mozilla Corporation.) -- C:\program files (x86)\mozilla firefox\plugin-container.exe
O87 - FAEL: "TCP Query User{CB3EB253-AFD2-4247-916C-5C4FD6453EB3}C:\program files (x86)\sopcast\sopcast.exe" | In - Private - P6 - TRUE | .(.www.sopcast.com - SopCast Main Application.) -- C:\program files (x86)\sopcast\sopcast.exe
O87 - FAEL: "UDP Query User{4C41A2C6-2FED-4430-A4F3-C00CF6A506BF}C:\program files (x86)\sopcast\sopcast.exe" | In - Private - P17 - TRUE | .(.www.sopcast.com - SopCast Main Application.) -- C:\program files (x86)\sopcast\sopcast.exe
O87 - FAEL: "{14462B6B-C55D-41B3-8793-79D6E71B62F6}" | In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\Veetle\Player\VeetleNet.exe
O87 - FAEL: "TCP Query User{D83DFF41-AD9A-42A0-9AD8-2BB5E3A0AD20}C:\windows\syswow64\javaw.exe" | In - Public - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\windows\syswow64\javaw.exe
O87 - FAEL: "UDP Query User{C426A93A-D9A9-4595-B7DE-4B7E74BF13BB}C:\windows\syswow64\javaw.exe" | In - Public - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\windows\syswow64\javaw.exe
~ Firewall: 218 Scanned in 00mn 00s



---\\ Scan Additionnel (O88)
Database Version : v2.12368 - (01/06/2013)
Clés trouvées (Keys found) : 1
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 0
Fichiers trouvés  (Files found) : 0

[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib]   =>Toolbar.Conduit
~ Additionnel Scan: 195029 Items scanned in 00mn 13s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "21F1DBD139DE0C947ACC65BCED841885" . (.ASUS LifeFrame3.) -- C:\Windows\Installer\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}\_853F67D554F05449430E7E.exe
O90 - PUC: "275E2715571C08F46A5DC54B8562DA16" . (.SceneSwitch.) -- C:\Windows\Installer\{5172E572-C175-4F80-A6D5-5CB45826AD61}\_853F67D554F05449430E7E.exe
O90 - PUC: "2DB9CBA160E707D429B9CAB146168A2B" . (.AllShare Framework DMS.) -- C:\Windows\Installer\{1ABC9BD2-7E06-4D70-929B-AC1B6461A8B2}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "50FA96906FF400C4496034952983EDD0" . (.ASUS Splendid Video Enhancement Technology.) -- C:\Windows\Installer\{0969AF05-4FF6-4C00-9406-43599238DE0D}\_853F67D554F05449430E7E.exe
O90 - PUC: "5E3E958AF26CAFB4FAD1B2590E1366FA" . (.ASUS USB Charger Plus.) -- C:\Windows\Installer\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}\_853F67D554F05449430E7E.exe
O90 - PUC: "66D2718596F25124A9CEDE1869207363" . (.ASUS Tutor.) -- C:\windows\Installer\{58172D66-2F69-4215-9AEC-ED8196023736}\_853F67D554F05449430E7E.exe
O90 - PUC: "68AB67CA7DA76301B744BA0000000010" . (.Adobe Reader XI (11.0.03) - Français.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico
O90 - PUC: "6A6823D4BA6FA894284A4E0F0425F9D3" . (.ASUS Smart Gesture.) -- C:\Windows\Installer\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}\_853F67D554F05449430E7E.exe
O90 - PUC: "76E045AFC590B1A479ABD445D7CEA94F" . (.ASUS Live Update.) -- C:\Windows\Installer\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}\MyIcon
O90 - PUC: "7F15A9341B483064EB8C46E72BCA03F7" . (.WD Drive Utilities.) -- C:\Windows\Installer\{439A51F7-84B1-4603-BEC8-647EB2AC307F}\icon.ico
O90 - PUC: "8ADFEBE2509F93C4CAC15DBA7E3B0EEA" . (.ExpressCache.) -- C:\Windows\Installer\{2EBEFDA8-F905-4C39-AC1C-D5ABE7B3E0AE}\ARPPRODUCTICON.exe
O90 - PUC: "8E01342194C733C44B2FC34FF383037B" . (.WD Quick View.) -- C:\Windows\Installer\{124310E8-7C49-4C33-B4F2-3CF43F3830B7}\icon.ico
O90 - PUC: "A14B27185BB946A4FB82F15BEF343CFF" . (.WD Security.) -- C:\Windows\Installer\{8172B41A-9BB5-4A64-BF28-1FB5FE43C3FF}\icon.ico
O90 - PUC: "B476F94747628E7478C965620AB6A219" . (.ASUS InstantOn.) -- C:\Windows\Installer\{749F674B-2674-47E8-879C-5626A06B2A91}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "D9D871DDDD9851F4E965758CD5E1FD63" . (.WD SmartWare.) -- C:\Windows\Installer\{DD178D9D-89DD-4F15-9E56-57C85D1EDF36}\icon.ico
O90 - PUC: "E19212F84440D1B49B9F34077AE343D6" . (.WinFlash.) -- C:\Windows\Installer\{8F21291E-0444-4B1D-B9F9-4370A73E346D}\MyIcon
O90 - PUC: "E339C5BAD7C503D43B41C9384AB949EB" . (.ATK Package.) -- C:\Windows\Installer\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}\_4ae13d6c.exe
O90 - PUC: "F12DB8CE0AC0FBB4799DA4253B00141A" . (.ASUS Virtual Camera.) -- C:\Windows\Installer\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "FB30287BC9FC36146B3C7BA0726A64EE" . (.8GadgetPack.) -- C:\Windows\Installer\{B78203BF-CF9C-4163-B6C3-B70A27A646EE}\ProductIcon
O90 - PUC: "FB9326B958E40954D827153ED01B9AAA" . (.ASUS Power4Gear Hybrid.) -- C:\Windows\Installer\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}\_853F67D554F05449430E7E.exe
~ Update Products: 53 Scanned in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 11/05/2013 65640 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 14/05/2013 256904 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 23/10/2012 408184 |  (AllShare Framework DMS) . (.Samsung.) - C:\Program Files\Samsung\AllShare Framework DMS\1.3.06\AllShareFrameworkManagerDMS.exe
SR - | Auto 21/02/2013 662600 |  (AllShare Play Service) . (.Copyright 2013 SAMSUNG.) - C:\Program Files\Samsung\AllShare Play\AllShare Play Service.exe
SR - | Auto 27/03/2013 86752 |  (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
SR - | Auto 27/03/2013 110816 |  (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 23/07/2012 105120 |  (ASLDRService) . (.ASUSTek Computer Inc..) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
SR - | Auto 13/04/2012 277120 |  (ASUS InstantOn) . (.ASUS.) - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
SR - | Auto 21/11/2011 96896 |  (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
SS - | Demand 16/08/2012 276288 |  (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
SR - | Auto  29056 |  (DptfParticipantProcessorService) . (...) - C:\Windows\System32\DptfParticipantProcessorService.exe
SR - | Auto  30592 |  (DptfPolicyConfigTDPService) . (...) - C:\Windows\System32\DptfPolicyConfigTDPService.exe
SR - | Auto 30/03/2012 79664 |  (ExpressCache) . (.Diskeeper Corporation.) - C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe
SR - | Auto 20/04/2012 635104 |  (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
SR - | Auto 27/06/2012 129856 |  (Intel(R) ME Service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
SR - | Auto 30/07/2012 193576 |  (irstrtsv) . (.Intel Corporation.) - C:\Windows\SysWOW64\irstrtsv.exe
SR - | Auto 25/06/2012 166720 |  (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SR - | Auto 17/07/2012 277824 |  (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SS - | Demand 11/05/2013 117144 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 02/10/2012 891240 |  (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SR - | Auto 27/08/2012 1258856 |  (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
SR - | Auto 17/07/2012 365376 |  (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 22/04/2013 1042808 |  (WDBackup) . (.Western Digital Technologies, Inc..) - C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
SR - | Auto 22/04/2013 270192 |  (WDDriveService) . (.Western Digital Technologies, Inc..) - C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
SS - | Demand  0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Demand 20/09/2012 29696 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services:  Scanned in 00mn 01s



End of the scan (1442 lines in 01mn 30s)(0)