Rapport de ZHPDiag v2013.6.13.18 par Nicolas Coolman, Update du 13/06/2013
Run by AZO at 14/06/2013 21:34:17
WebSite: http://nicolascoolman.webs.com
State : Version à jour.
WhiteList : Disable
High Elevated Privileges : OK
UAC : Activate by user


---\\ Web Browser
MSIE: Internet Explorer v10.0.9200.16614
GCIE: Google Chrome v27.0.1453.110 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 7QJB7
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Protection
avast! Free Antivirus v8.0.1489.0
Malwarebytes Anti-Malware version 1.75.0.1300
Spybot - Search & Destroy v1.6.2
Windows Defender W7

---\\ System Optimizer
CCleaner v4.01   =>Piriform Ltd

---\\ Peer To Peer (P2P)
Pando Media Booster v2.3.6.0

---\\ Software Update
Adobe Flash Player 11 ActiveX
Adobe Reader XI
Java 7 Update 21

---\\ System Information
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4024 MB (49% free)
System Restore: Activé (Enable)
System drive C: has 165 GB (36%) free of 454 GB

---\\ Logged in mode
~ Computer Name: AZOPC
~ User Name: AZO
~ All Users Names: Mika, HomeGroupUser$, AZO, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\AZO\AppData\Roaming\
~ %Desktop% : C:\Users\AZO\Desktop\
~ %Favorites% : C:\Users\AZO\Favorites\
~ %LocalAppData% : C:\Users\AZO\AppData\Local\
~ %StartMenu% : C:\Users\AZO\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 165 Go of 454 Go)
D:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Security Center: 37 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.12716D987D475B051F35895659159705] - (.Microsoft Corporation - Internet Extensions for Win32.) (.17/05/2013 - 01:59:03.) -- C:\Windows\System32\wininet.dll [2241024]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes:  Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 3/24873
~ Mes musiques (My Musics) : 9/5015
~ Mes Videos (My Videos) : 3/523
~ Mes Favoris (My Favorites) : 1/123
~ Mes Documents (My Documents) : 2/3158
~ Mon Bureau (My Desktop) : 2/695
~ Menu demarrer (Programs) : 1/30
~ Hidden Files:  Scanned in 00mn 26s



---\\ Processus lancés
[MD5.2F2DF068BED6E62E4C007DF7446B4F19] - (.Pas de propriétaire - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe   [200704] [PID.2112]
[MD5.EAEB34D06AC35097031B0F11595012D7] - (.Egis Technology Inc. - MyWinLocker.) -- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe   [349480] [PID.2208]
[MD5.3E48A4D66B5D092FEA1B21328AF08CD3] - (.Pas de propriétaire - Printer Device Monitor.) -- C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe   [770728] [PID.2352]
[MD5.EEC2835879188CE91EFC345DBAEFE6AF] - (...) -- C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe   [148280] [PID.2508]
[MD5.093B09407737D7D006C0C6F9DA1ED46A] - (.Pas de propriétaire - Device Monitor.) -- C:\Program Files (x86)\Lexmark 2500 Series\lxddmon.exe   [291496] [PID.2576]
[MD5.7EAB207FB02A850DE14A7563858B23F7] - (.Pas de propriétaire - Device Monitor Application.) -- C:\Program Files (x86)\Lexmark 2500 Series\lxddamon.exe   [25256] [PID.2644]
[MD5.C0DD4B309A792DE812EFF0405B652887] - (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe   [1194504] [PID.4700]
[MD5.EF533F9D1E4F51C783D4349A7C3F518F] - (.Egis Technology Inc. - EgisUpdate Release Application.) -- C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe   [199464] [PID.5060]
[MD5.4EDB929F6875F60B95FD475016FF2228] - (.NewTech Infosystems, Inc. - Acer Backup Manager.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe   [261888] [PID.4184]
[MD5.3F11B20D12D89365D7721BDC860CE5F0] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe   [4858968] [PID.1068]
[MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [253816] [PID.3744]
[MD5.A9F9D081518AC03A51C1195986076F42] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe   [152392] [PID.4588]
[MD5.639B783F5BC546D8D9662881730AFF9B] - (.Adobe Systems Incorporated - AAM Updates Notifier Application.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe   [310224] [PID.3916]
[MD5.2F3390C8E3620B3991D7D82014E26AA7] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe   [825808] [PID.2548]
[MD5.B8DD83B85636F7D6EC0F09B090E49130] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [7494656] [PID.2752]
[MD5.28D6701C710AD7BA3CB95E75F8F1A9AA] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe   [46808] [PID.1292]
[MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [65640] [PID.1608]
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe   [57008] [PID.1632]
[MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe   [1150496] [PID.1044]
[MD5.0F5FAAC852DB4C340B7A2F187E3358B8] - (.Egis Technology Inc. - MyWinLocker Service.) -- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe   [311592] [PID.676]
[MD5.70E3EB0CEF795D348F05E5A9B115F491] - (.NewTech Infosystems, Inc. - Backup Manager Module.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe   [62720] [PID.1712]
[MD5.3F6268A2EC33CD38CF75C880AF8DED42] - (.NewTech Infosystems, Inc. - NTI Backup Now 5 SchedulerSvc NT Service.) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe   [144640] [PID.2500]
[MD5.388AE59FE75F1B959DFA0900923C61BB] - (.Skype Technologies S.A. - Skype C2C Service.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe   [3064000] [PID.2720]
[MD5.70DDE3A86DBEB1D6C3C30AD687B1877A] - (.Acer - Acer Update Service.) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe   [240160] [PID.2476]
[MD5.794D4B48DFB6E999537C7C3947863463] - (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe   [1153368] [PID.3888]
~ Processes Running:  Scanned in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.com
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Store v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Documents Google v.0.5 (Activé)
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Drive v.6.3 (Activé)
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.20 (Activé)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé)
~ Google Browser: 11 Scanned in 00mn 13s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\AZO\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
P2 - FPN: [HKCU] [@stonetrip.com/ShiVaWebPlayer,version=1.8.1.0] - (.Stonetrip - ShiVa3D Plugin 1,8,1,1 for 3D real-time applications made with ShiVa E.) -- C:\Users\AZO\AppData\Roaming\..\LocalLow\StoneTrip\WebPlayer1.8.1\npShiVa3D_1.8.1.dll
P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
~ Firefox Browser: 4 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Browser.) (10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ IE Browser: 16 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 39



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: (no name) [64Bits] - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
O2 - BHO: Spybot-S&D IE Protection [64Bits] - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
~ BHO: 7 Scanned in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
~ Toolbar:  Scanned in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Windows Mobile Device Center] . (.Microsoft Corporation - Gestionnaire pour appareils Windows Mobile.) -- C:\Windows\WindowsMobile\wmdc.exe 
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) 
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe 
O4 - HKLM\..\Run: [PLFSetI] . (.Pas de propriétaire - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe 
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe 
O4 - HKLM\..\Run: [mwlDaemon] . (.Egis Technology Inc. - MyWinLocker.) -- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe 
O4 - HKLM\..\Run: [lxeamon.exe] . (.Pas de propriétaire - Printer Device Monitor.) -- C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe 
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe 
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe 
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe 
O4 - HKLM\..\Run: [EzPrint] . (...) -- C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe 
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe 
O4 - HKLM\..\Run: [Acer ePower Management] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe 
O4 - HKLM\..\Run: [lxddmon.exe] . (.Pas de propriétaire - Device Monitor.) -- C:\Program Files (x86)\Lexmark 2500 Series\lxddmon.exe 
O4 - HKLM\..\Run: [lxddamon] . (.Pas de propriétaire - Device Monitor Application.) -- C:\Program Files (x86)\Lexmark 2500 Series\lxddamon.exe 
O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer Networking Limited - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe 
O4 - HKCU\..\Run: [Pando Media Booster] . (.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe 
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\AZO\AppData\Local\Facebook\Update\FacebookUpdate.exe 
O4 - HKLM\..\Wow6432Node\Run: [NPSStartup] Clé orpheline 
O4 - HKLM\..\Wow6432Node\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe 
O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe 
O4 - HKLM\..\Wow6432Node\Run: [FaxCenterServer] . (.Pas de propriétaire - Fax Man Server.) -- C:\Program Files (x86)\Lexmark Fax Solutions\fm3032.exe 
O4 - HKLM\..\Wow6432Node\Run: [EgisTecLiveUpdate] . (.Egis Technology Inc. - EgisUpdate Release Application.) -- C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe 
O4 - HKLM\..\Wow6432Node\Run: [BackupManagerTray] . (.NewTech Infosystems, Inc. - Acer Backup Manager.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe 
O4 - HKLM\..\Wow6432Node\Run: [B2C_AGENT] C:\ProgramData\LGMOBILEAX\B2C_Client\B2CNotiAgent.exe (.not file.) 
O4 - HKLM\..\Wow6432Node\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe 
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe 
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe 
O4 - HKLM\..\Wow6432Node\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (.not file.) 
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-21-3704010084-1879142336-3890524549-1000\..\Run: [SpybotSD TeaTimer] . (.Safer Networking Limited - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe 
O4 - HKUS\S-1-5-21-3704010084-1879142336-3890524549-1000\..\Run: [Pando Media Booster] . (.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe 
O4 - HKUS\S-1-5-21-3704010084-1879142336-3890524549-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\AZO\AppData\Local\Facebook\Update\FacebookUpdate.exe 
~ Application:  Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - GS\TaskBar: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.)  -- C:\Windows\explorer.exe 
O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.)  -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe 
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.)  -- C:\Windows\system32\eudcedit.exe 
O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft  Windows Fax and Scan.)  -- C:\Windows\system32\WFS.exe 
O4 - GS\SendTo: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Pas de description.)  -- C:\Windows\System32\fsquirt.exe 
O4 - GS\Desktop: Free Video Converter.lnk . (.Koyote Soft - FreeVideoConverter.)  -- C:\Program Files (x86)\Free Video Converter\FreeVideoConverter.exe 
O4 - GS\TaskBar: Adobe Photoshop CS5.lnk . (.Adobe Systems, Incorporated - Adobe Photoshop CS5.)  -- C:\Program Files (x86)\Adobe\Adobe Photoshop CS5\Photoshop.exe 
O4 - GS\TaskBar: Picasa 3.lnk . (.Google Inc. - Picasa.)  -- C:\Program Files (x86)\Google\Picasa3\Picasa3.exe 
O4 - GS\TaskBar: Windows Live Mail.lnk . (.Microsoft Corporation - Windows Live Mail.)  -- C:\Program Files (x86)\Windows Live\Mail\wlmail.exe 
O4 - GS\Programs: Free Video Converter.lnk . (.Koyote Soft - FreeVideoConverter.)  -- C:\Program Files (x86)\Free Video Converter\FreeVideoConverter.exe 
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch: Vos Démarches Administratives.lnk - Clé orpheline
O4 - GS\QuickLaunch: Wondershare Video Converter Ultimate.lnk . (...)  -- C:\Program Files (x86)\Wondershare\Video Converter Ultimate\VideoConverterUltimate.exe (.not file.)
O4 - GS\SendTo: MediaInfo.lnk - Clé orpheline
O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.)  -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
O4 - GS\Desktop: Comptes et Budget V6.0.lnk . (.www.alauxsoft.com   (France) - Pas de description.)  -- C:\Program Files (x86)\Comptes et Budget V6.0\Comptes.exe 
~ Global Startup:  Scanned in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Skype Click to Call [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico
~ IE Extra Buttons:  Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000010\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
~ Winsock: 10 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{74908E9C-8D70-4AE4-8493-388175F0EFF4}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{90D0E45E-6974-48A2-997A-1E84DB1D561C}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{74908E9C-8D70-4AE4-8493-388175F0EFF4}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{90D0E45E-6974-48A2-997A-1E84DB1D561C}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{74908E9C-8D70-4AE4-8493-388175F0EFF4}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{90D0E45E-6974-48A2-997A-1E84DB1D561C}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
~ Domain:  Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- 
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon:  Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Acer ePower Service (ePowerSvc) . (.Acer Incorporated - ePowerSvc.) - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: GRegService (Greg_Service) . (.Acer Incorporated - Global Registration Service.) - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: lxddCATSCustConnectService (lxddCATSCustConnectService) . (.Lexmark International, Inc. - Lexmark Connect Service Executable.) - C:\Windows\system32\spool\DRIVERS\x64\3\lxddserv.exe
O23 - Service: lxdd_device (lxdd_device) . (.Pas de propriétaire - Printer Communication System.) - C:\Windows\system32\lxddcoms.exe
O23 - Service: lxeaCATSCustConnectService (lxeaCATSCustConnectService) . (.Lexmark International, Inc. - Lexmark Connect Service Executable.) - C:\Windows\system32\spool\DRIVERS\x64\3\lxeaserv.exe
O23 - Service: lxea_device (lxea_device) . (.Pas de propriétaire - Printer Communication System.) - C:\Windows\system32\lxeacoms.exe
O23 - Service: MyWinLocker Service (MWLService) . (.Egis Technology Inc. - MyWinLocker Service.) - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
O23 - Service: NTI IScheduleSvc (NTI IScheduleSvc) . (.NewTech Infosystems, Inc. - Backup Manager Module.) - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) . (.NewTech Infosystems, Inc. - NTI Backup Now 5 SchedulerSvc NT Service.) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Skype C2C Service (Skype C2C Service) . (.Skype Technologies S.A. - Skype C2C Service.) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Updater Service (Updater Service) . (.Acer - Acer Update Service.) - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
~ Services: 19 Scanned in 00mn 09s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\Adobe Flash Player Updater.job   [1002]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3704010084-1879142336-3890524549-1000Core.job   [898]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3704010084-1879142336-3890524549-1000UA.job   [920]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job   [1058]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job   [1062]
[MD5.9915504F602D277EE47FD843A677FD15] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe   [256904]
[MD5.5447AF432CDA61159ADDE218C468FFD9] [APT] [AdobeAAMUpdater-1.0-PEDRO-AZO] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe   [500208]
[MD5.5CE2C1433B9B634591F0A1C4C1203A0B] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe   [251784]
[MD5.42BC01952E1ED3152DDE0C0C9C2012D4] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files (x86)\CCleaner\CCleaner.exe   [3545880]   =>Piriform Ltd
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-3704010084-1879142336-3890524549-1000Core] (.Facebook Inc..) -- C:\Users\AZO\AppData\Local\Facebook\Update\FacebookUpdate.exe   [138096]
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-3704010084-1879142336-3890524549-1000UA] (.Facebook Inc..) -- C:\Users\AZO\AppData\Local\Facebook\Update\FacebookUpdate.exe   [138096]
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [136176]
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [136176]
[MD5.0769C0926F7C75F48C33BBE51015AAAC] [APT] [{2E840161-E90D-460B-B400-174B595FB732}] (.MCCI Corporation.) -- C:\Windows\SysWOW64\Samsung_USB_Drivers\5\SSSDUninstall.exe   [70904]
[MD5.70A1F7FD11D4C06BD26DFD348387A1E4] [APT] [{7D59B016-A403-4718-BB61-486EDC38B13D}] (.MCCI Corporation.) -- C:\Windows\SysWOW64\Samsung_USB_Drivers\1\SS_Uninstall.exe   [72968]
[MD5.1321DC81E317EE48C4D004775FB29AC9] [APT] [{87D9A456-D098-457E-9A14-7BF8B8B9F86C}] (.Nicolas Coolman.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe   [1916928]
[MD5.00000000000000000000000000000000] [APT] [{9717E170-BE23-41FF-BAB0-75EAE86BF07F}] (...) -- C:\Program Files (x86)\InstallShield Installation Information\{15D967B5-A4BE-42AE-9E84-64CD062B25AA}\setup.exe (.not file.)   [0]
[MD5.CE8070E5CFCD77D3E5A9984720BC6479] [APT] [{BE75ECAE-2300-43CD-9A50-E61AD1C5D12C}] (...) -- C:\Program Files (x86)\Cluedo\Uninstal.exe   [75058]
[MD5.416B6CFFAEB3A9D94B8296CB7522E578] [APT] [{CFC46748-7833-47AF-B1DF-3812996CC8DA}] (.MCCI Corporation.) -- C:\Windows\SysWOW64\Samsung_USB_Drivers\7\SSECUninstall.exe   [103936]
[MD5.00000000000000000000000000000000] [APT] [{E0574DEE-70C4-4BDB-986C-569F57BD8E35}] (...) -- D:\setup.exe (.not file.)   [0]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe   [561984]
[MD5.7F59E4F51DA9C9C6B29B881D8DD92400] [APT] [Burn Notification] (.Acer.) -- C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe   [675840]
~ Scheduled Task: 25 Scanned in 00mn 04s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 10 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver:  (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver:  (mwlPSDFilter) . (.Egis Technology Inc. - PSD Filter Driver.) - C:\Windows\System32\DRIVERS\mwlPSDFilter.sys
O41 - Driver:  (mwlPSDNServ) . (.Egis Technology Inc. - MyWinLocker PSD Named Pipe Driver.) - C:\Windows\System32\DRIVERS\mwlPSDNServ.sys
O41 - Driver:  (mwlPSDVDisk) . (.Egis Technology Inc. - MyWinLocker PSD Virtual Disk Driver.) - C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver:  (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 72 Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 4.65 (x64 edition) - (.Igor Pavlov.) [HKLM][64Bits] -- {23170F69-40C1-2702-0465-000001000000}
O42 - Logiciel: 7-Zip 4.65 - (...) [HKLM][64Bits] -- 7-Zip
O42 - Logiciel: ABBYY FineReader 6.0 Sprint - (.ABBYY Software House.) [HKLM][64Bits] -- {ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
O42 - Logiciel: ABC (remove only) - (...) [HKLM][64Bits] -- ABC
O42 - Logiciel: Acer Backup Manager - (.NewTech Infosystems.) [HKLM][64Bits] -- InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}
O42 - Logiciel: Acer Crystal Eye Webcam - (.Suyin Optronics Corp.) [HKLM][64Bits] -- {7760D94E-B1B5-40A0-9AA0-ABF942108755}
O42 - Logiciel: Acer GridVista - (.Acer Inc..) [HKLM][64Bits] -- GridVista
O42 - Logiciel: Acer Registration - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Registration
O42 - Logiciel: Acer ScreenSaver - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Screensaver
O42 - Logiciel: Acer Updater - (.Acer Incorporated.) [HKLM][64Bits] -- {EE171732-BEB4-4576-887D-CB62727F01CA}
O42 - Logiciel: Acer ePower Management - (.Acer Incorporated.) [HKLM][64Bits] -- {3DB0448D-AD82-4923-B305-D001E521A964}
O42 - Logiciel: Acer eRecovery Management - (.Acer Incorporated.) [HKLM][64Bits] -- {7F811A54-5A09-4579-90E1-C93498E230D9}
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723}
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Photoshop CS5 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {15FEDA5F-141C-4127-8D7E-B962D1742728}
O42 - Logiciel: Adobe Reader XI (11.0.03) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player
O42 - Logiciel: AlauxSoft Comptes et Budget V6.0 - (.AlauxSoft.) [HKLM][64Bits] -- AlauxSoft Comptes et Budget V6.0_is1
O42 - Logiciel: Amazon MP3 Downloader 1.0.9 - (...) [HKLM][64Bits] -- Amazon MP3 Downloader
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {5D09C772-ECB3-442B-9CC6-B4341C78FDC2}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {2F72F540-1F60-4266-9506-952B21D6640D}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Audacity 1.2.6 - (...) [HKLM][64Bits] -- Audacity_is1
O42 - Logiciel: AviSynth 2.5 - (...) [HKLM][64Bits] -- AviSynth
O42 - Logiciel: Backup Manager Basic - (.NewTech Infosystems.) [HKLM][64Bits] -- {72B776E5-4530-4C4B-9453-751DF87D9D93}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: Broadcom Gigabit NetLink Controller - (.Broadcom Corporation.) [HKLM][64Bits] -- {96F70DF8-160F-4F9C-9B9E-2A9B439B4EB9}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner   =>Piriform Ltd
O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM][64Bits] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
O42 - Logiciel: Comptes et Budget (Mono-compte) V6.0 - (.Michel ALAUX..) [HKLM][64Bits] -- Comptes_et_Budget (Mono-compte) V6.0_is1
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: DVD Shrink 3.2 - (.DVD Shrink.) [HKLM][64Bits] -- DVD Shrink_is1
O42 - Logiciel: Efficient WMA MP3 Converter v0.99.7 - (...) [HKLM][64Bits] -- Efficient WMA MP3 Converter_is1
O42 - Logiciel: Facebook Video Calling 1.2.0.287 - (.Skype Limited.) [HKLM][64Bits] -- {B92C5909-1D37-4C51-8397-A28BB28E5DC3}
O42 - Logiciel: Fnacmusic - Gestionnaire de téléchargement - (.Fnacmusic.) [HKLM][64Bits] -- {7B792358-402A-467D-AB4C-6BA311588ADD}
O42 - Logiciel: Free 3GP Video Converter version 3.2 - (.DVDVideoSoft Limited..) [HKLM][64Bits] -- Free 3GP Video Converter_is1
O42 - Logiciel: Free Video Converter V 3.1 - (.Koyote Soft.) [HKLM][64Bits] -- Free Video Converter_is1
O42 - Logiciel: Free Video to MP3 Converter version 3.2 - (.DVDVideoSoft Limited..) [HKLM][64Bits] -- Free Video to MP3 Converter_is1
O42 - Logiciel: Gestionnaire pour appareils Windows Mobile - (.Microsoft Corporation.) [HKLM][64Bits] -- {626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {468D22C0-8080-11E2-B86E-B8AC6F98CCE3}
O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP - (.Conexant Systems.) [HKLM][64Bits] -- CNXT_MODEM_HDA_HSF
O42 - Logiciel: Identity Card - (.Acer Incorporated.) [HKLM][64Bits] -- Identity Card
O42 - Logiciel: InfraRecorder - (...) [HKLM][64Bits] -- InfraRecorder
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM][64Bits] -- HDMI
O42 - Logiciel: Intel® Matrix Storage Manager - (.Intel Corporation.) [HKLM][64Bits] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Java 7 Update 21 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217017FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: K-Lite Codec Pack 5.1.0 (Full) - (...) [HKLM][64Bits] -- KLiteCodecPack_is1
O42 - Logiciel: Lame ACM MP3 Codec - (...) [HKLM][64Bits] -- LameACM
O42 - Logiciel: Launch Manager - (.Acer Inc..) [HKLM][64Bits] -- LManager
O42 - Logiciel: Lexmark 1200 Series - (.Lexmark International, Inc..) [HKLM][64Bits] -- Lexmark 1200 Series
O42 - Logiciel: Lexmark 2500 Series - (.Lexmark International, Inc..) [HKLM][64Bits] -- Lexmark 2500 Series
O42 - Logiciel: Lexmark S300-S400 Series - (.Lexmark International, Inc..) [HKLM][64Bits] -- Lexmark S300-S400 Series
O42 - Logiciel: Logiciel d'archivage WinRAR - (...) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {0214A441-A4AB-43A8-8DEF-2F73C5364673}
O42 - Logiciel: Microsoft XNA Framework Redistributable 3.1 - (.Microsoft Corporation.) [HKLM][64Bits] -- {19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}
O42 - Logiciel: MyWinLocker - (.Egis Technology Inc..) [HKLM][64Bits] -- {68301905-2DEA-41CE-A4D4-E8B443B099BA}
O42 - Logiciel: NTI Backup Now 5 - (.NewTech Infosystems.) [HKLM][64Bits] -- InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}
O42 - Logiciel: NTI Media Maker 8 - (.NewTech Infosystems.) [HKLM][64Bits] -- InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}
O42 - Logiciel: PDF Settings CS5 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A78FE97A-C0C8-49CE-89D0-EDD524A17392}
O42 - Logiciel: Pacman 2002 1.1.0 - (...) [HKLM][64Bits] -- Pacman 2002 1.1.0
O42 - Logiciel: Pando Media Booster - (.Pando Networks Inc..) [HKLM][64Bits] -- {980A182F-E0A2-4A40-94C1-AE0C1235902E}
O42 - Logiciel: PhotoFiltre - (...) [HKCU][64Bits] -- PhotoFiltre
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM][64Bits] -- Picasa 3
O42 - Logiciel: Plug-in du navigateur BlackBerry App World - (.Research In Motion Limited.) [HKLM][64Bits] -- {8DE03F6E-FCD2-4497-A8FF-F6C4430618B6}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}
O42 - Logiciel: RAD Video Tools - (...) [HKLM][64Bits] -- RADVideo
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
O42 - Logiciel: SAMSUNG Mobile Modem Driver Set - (...) [HKLM][64Bits] -- SAMSUNG Mobile Modem
O42 - Logiciel: SAMSUNG Mobile USB Modem 1.0 Software - (...) [HKLM][64Bits] -- SAMSUNG Mobile USB Modem 1.0
O42 - Logiciel: SAMSUNG Mobile USB Modem Software - (...) [HKLM][64Bits] -- SAMSUNG Mobile USB Modem
O42 - Logiciel: Samsung Mobile Modem Device Software - (...) [HKLM][64Bits] -- Samsung Mobile Modem Device
O42 - Logiciel: Samsung Mobile phone USB driver Drive Software - (...) [HKLM][64Bits] -- Samsung Mobile phone USB driver Drive
O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM][64Bits] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}
O42 - Logiciel: Skype™ 6.3 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
O42 - Logiciel: Solutions de télécopie Lexmark - (...) [HKLM][64Bits] -- Lexmark Fax Solutions
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM][64Bits] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: Tetris - (.Crystal Office Systems.) [HKLM][64Bits] -- {95E0E6DC-C308-4C96-BEDB-68C75A32FAF8}_is1
O42 - Logiciel: Uninstall 1.0.0.1 - (...) [HKLM][64Bits] -- Uninstall_is1
O42 - Logiciel: VDownloader 2.10.509.2 - (.Vitzo Limited.) [HKLM][64Bits] -- {A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1
O42 - Logiciel: VLC media player 1.1.9 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: VirtualDubMOD 1.5.10.3 Fr - (.Trad-Fr.) [HKLM][64Bits] -- {B158F76F-76AB-4115-A4F0-4C6EF6956093}_is1
O42 - Logiciel: Welcome Center - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Welcome Center
O42 - Logiciel: Wondershare Video Converter Ultimate(Build 6.0.4.0) - (.Wondershare Software.) [HKLM][64Bits] -- Wondershare Video Converter Ultimate_is1
O42 - Logiciel: avast! Free Antivirus v8.0.1489.0 - (.AVAST Software.) [HKLM][64Bits] -- avast
O42 - Logiciel: avi2divx - (.Readmesoft.) [HKLM][64Bits] -- avi2divx_is1
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {76FF0F03-B707-4332-B5D1-A56C8303514E}
~ Logic: 182 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\7-Zip]
[HKCU\Software\ABBYY]
[HKCU\Software\AC3Filter]
[HKCU\Software\ALWIL Software]
[HKCU\Software\AVAST Software]
[HKCU\Software\Acer]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Aurigma]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow\Software\Macromedia]
[HKCU\Software\AppDataLow\Software\Monitored]
[HKCU\Software\AppDataLow\Software\Stonetrip]
[HKCU\Software\AppDataLow\Software\settings]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Audacity]
[HKCU\Software\Aurigma]
[HKCU\Software\Bugsplat]
[HKCU\Software\Canneverbe Limited]
[HKCU\Software\Caphyon]
[HKCU\Software\ChaosSoft]
[HKCU\Software\Chikipik Soft]
[HKCU\Software\ClassesB]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Crystal Office]
[HKCU\Software\CyberLink]
[HKCU\Software\Cygnus Solutions]
[HKCU\Software\DT Soft]
[HKCU\Software\DVD Decrypter]
[HKCU\Software\DVD Shrink]
[HKCU\Software\DVDVideoSoft]
[HKCU\Software\DevNet]
[HKCU\Software\DivXNetworks]
[HKCU\Software\EMME]
[HKCU\Software\Elaborate Bytes]
[HKCU\Software\Extended Systems]
[HKCU\Software\Facebook]
[HKCU\Software\Freeware]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Garmin]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\HookNetwork]
[HKCU\Software\IE]
[HKCU\Software\IM Providers]
[HKCU\Software\IncrediMail]
[HKCU\Software\InfraRecorder]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\LexmarkInkjet]
[HKCU\Software\LexmarkPhoto]
[HKCU\Software\Ligos]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\LowRegistry]
[HKCU\Software\Macromedia]
[HKCU\Software\Magix AG]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MediaInfo]
[HKCU\Software\Mobileleader]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\OEM]
[HKCU\Software\Oberon Media]
[HKCU\Software\PTP]
[HKCU\Software\Pando Networks]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\RAD Game Tools]
[HKCU\Software\Realtek]
[HKCU\Software\Research In Motion]
[HKCU\Software\Ripp-it]
[HKCU\Software\RtkPCEE3sMsg]
[HKCU\Software\SCATLAWS]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\Samsung]
[HKCU\Software\SkypeRS]
[HKCU\Software\Skype]
[HKCU\Software\Smart Projects]
[HKCU\Software\Sonix]
[HKCU\Software\Synaptics]
[HKCU\Software\Sysinternals]
[HKCU\Software\TikGames]
[HKCU\Software\Torch]
[HKCU\Software\TuneUp]
[HKCU\Software\Ubisoft]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VB6Dock]
[HKCU\Software\VirtualDub.org]
[HKCU\Software\WMA-MP3-Converter.org]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wistron]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\gamescafe.com]
[HKCU\Software\mozilla]
[HKLM\Software\7-Zip]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Acer]
[HKLM\Software\Adobe]
[HKLM\Software\Agere]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\BrowserChoice]
[HKLM\Software\CXT]
[HKLM\Software\Canneverbe Limited]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Conexant Systems]
[HKLM\Software\CyberLink]
[HKLM\Software\EgisTec]
[HKLM\Software\FaxManPorts]
[HKLM\Software\GEAR Software]
[HKLM\Software\Google]
[HKLM\Software\IM Providers]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\LSI]
[HKLM\Software\LexmarkInkjet]
[HKLM\Software\Lexmark]
[HKLM\Software\MCCI]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\ODBC]
[HKLM\Software\OEM]
[HKLM\Software\OemSetup]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Sonic]
[HKLM\Software\Synaptics]
[HKLM\Software\TuneUp]
[HKLM\Software\Waves Audio]
[HKLM\Software\Wow6432Node\ABBYY]
[HKLM\Software\Wow6432Node\ALWIL Software]
[HKLM\Software\Wow6432Node\AVAST Software]
[HKLM\Software\Wow6432Node\Acer Incorporated]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Amazon]
[HKLM\Software\Wow6432Node\America Online]
[HKLM\Software\Wow6432Node\AppDataLow]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\CDDB]
[HKLM\Software\Wow6432Node\Canneverbe Limited]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Codec Tweak Tool]
[HKLM\Software\Wow6432Node\CyberLink]
[HKLM\Software\Wow6432Node\Cygnus Solutions]
[HKLM\Software\Wow6432Node\DT Soft]
[HKLM\Software\Wow6432Node\DVDVideoSoft]
[HKLM\Software\Wow6432Node\DevNet]
[HKLM\Software\Wow6432Node\Digital River]
[HKLM\Software\Wow6432Node\DivXNetworks]
[HKLM\Software\Wow6432Node\EgisTec Egis Software Update]
[HKLM\Software\Wow6432Node\GNU]
[HKLM\Software\Wow6432Node\Garmin]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\HaaliMkx]
[HKLM\Software\Wow6432Node\IM Providers]
[HKLM\Software\Wow6432Node\InstallShield]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\KLCodecPack]
[HKLM\Software\Wow6432Node\KoyoteSRTB]
[HKLM\Software\Wow6432Node\LexmarkInkjet]
[HKLM\Software\Wow6432Node\Lexmark]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Magix]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MarkAny]
[HKLM\Software\Wow6432Node\McAfeeInstaller]
[HKLM\Software\Wow6432Node\Messenger Plus!]
[HKLM\Software\Wow6432Node\Mircrosoft]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\NewTech Infosystems]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\OEM]
[HKLM\Software\Wow6432Node\Oberon Media]
[HKLM\Software\Wow6432Node\Pando Networks]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\RAD Game Tools]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Research In Motion]
[HKLM\Software\Wow6432Node\Safer Networking Limited]
[HKLM\Software\Wow6432Node\Samsung]
[HKLM\Software\Wow6432Node\SiteAdvisor]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\Suyin Optronics Corp]
[HKLM\Software\Wow6432Node\Torch]
[HKLM\Software\Wow6432Node\Trad-FR]
[HKLM\Software\Wow6432Node\TuneUp]
[HKLM\Software\Wow6432Node\VDownloader]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\WinRAR]
[HKLM\Software\Wow6432Node\Windows]
[HKLM\Software\Wow6432Node\Wistron]
[HKLM\Software\Wow6432Node\WondershareSysMenuDATA]
[HKLM\Software\Wow6432Node\Wondershare]
[HKLM\Software\Wow6432Node\lameme]
[HKLM\Software\Wow6432Node\nSplitter]
[HKLM\Software\Wow6432Node]
[HKLM\Software\nSplitter]
~ Key Software: 303 Scanned in 00mn 01s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 01/11/2009 - 20:04:55 - [2,951] ----D C:\Program Files (x86)\7-Zip
O43 - CFD: 19/03/2010 - 19:17:20 - [115,559] ----D C:\Program Files (x86)\Abbyy FineReader 6.0 Sprint
O43 - CFD: 14/01/2010 - 23:27:23 - [15,253] ----D C:\Program Files (x86)\ABC
O43 - CFD: 30/08/2009 - 08:26:46 - [30,374] ----D C:\Program Files (x86)\Acer
O43 - CFD: 22/08/2009 - 07:40:05 - [4,377] ----D C:\Program Files (x86)\Acer Inc
O43 - CFD: 13/11/2012 - 22:47:23 - [788,543] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 02/04/2012 - 22:07:47 - [2,539] ----D C:\Program Files (x86)\Amazon
O43 - CFD: 29/01/2013 - 18:38:47 - [2,316] ----D C:\Program Files (x86)\Apple Software Update
O43 - CFD: 29/11/2009 - 11:34:20 - [8,289] ----D C:\Program Files (x86)\Audacity
O43 - CFD: 22/09/2010 - 09:05:12 - [6,087] ----D C:\Program Files (x86)\avi2divx
O43 - CFD: 22/09/2010 - 08:57:41 - [3,245] ----D C:\Program Files (x86)\AviSynth 2.5
O43 - CFD: 29/01/2013 - 18:38:11 - [0,602] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 20/05/2013 - 16:24:19 - [11,329] ----D C:\Program Files (x86)\CCleaner   =>Piriform Ltd
O43 - CFD: 11/11/2012 - 20:45:08 - [17,750] ----D C:\Program Files (x86)\CDBurnerXP
O43 - CFD: 20/05/2013 - 16:37:01 - [0,072] ----D C:\Program Files (x86)\Cluedo
O43 - CFD: 20/05/2013 - 19:16:57 - [822,108] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 02/11/2009 - 12:49:45 - [5,310] ----D C:\Program Files (x86)\Comptes et Budget Free V6.0
O43 - CFD: 11/12/2012 - 13:43:02 - [6,105] ----D C:\Program Files (x86)\Comptes et Budget V6.0
O43 - CFD: 23/01/2010 - 10:14:25 - [0] ----D C:\Program Files (x86)\directx
O43 - CFD: 22/03/2013 - 10:38:24 - [0,849] ----D C:\Program Files (x86)\DVD Shrink
O43 - CFD: 21/03/2010 - 11:46:27 - [6,650] ----D C:\Program Files (x86)\DVDVideoSoft
O43 - CFD: 14/05/2011 - 19:35:25 - [23,511] ----D C:\Program Files (x86)\Efficient WMA MP3 Converter
O43 - CFD: 22/08/2009 - 10:56:32 - [44,512] ----D C:\Program Files (x86)\EgisTec
O43 - CFD: 22/08/2009 - 10:56:41 - [1,605] ----D C:\Program Files (x86)\EgisTec Egis Software Update
O43 - CFD: 10/01/2010 - 14:26:38 - [0] ----D C:\Program Files (x86)\Elaborate Bytes
O43 - CFD: 09/09/2012 - 20:30:41 - [0] ----D C:\Program Files (x86)\eRightSoft
O43 - CFD: 16/11/2009 - 12:09:09 - [0,161] ----D C:\Program Files (x86)\Fnacmusic
O43 - CFD: 12/06/2013 - 13:23:12 - [12,820] ----D C:\Program Files (x86)\Free Video Converter
O43 - CFD: 31/01/2012 - 21:52:53 - [0] ----D C:\Program Files (x86)\Garmin
O43 - CFD: 20/05/2013 - 18:21:46 - [642,872] ----D C:\Program Files (x86)\Google
O43 - CFD: 21/09/2010 - 08:12:15 - [7,090] ----D C:\Program Files (x86)\InfraRecorder
O43 - CFD: 20/05/2013 - 16:48:38 - [72,865] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 22/08/2009 - 07:15:50 - [10,568] ----D C:\Program Files (x86)\Intel
O43 - CFD: 12/06/2013 - 22:25:27 - [6,793] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 10/06/2013 - 21:12:37 - [155,998] ----D C:\Program Files (x86)\iTunes
O43 - CFD: 20/05/2013 - 19:14:51 - [123,236] ----D C:\Program Files (x86)\Java
O43 - CFD: 01/11/2009 - 20:04:41 - [35,248] ----D C:\Program Files (x86)\K-Lite Codec Pack
O43 - CFD: 30/08/2009 - 08:26:32 - [4,509] ----D C:\Program Files (x86)\Launch Manager
O43 - CFD: 19/12/2010 - 18:02:38 - [4,750] ----D C:\Program Files (x86)\Lexmark 1200 Series
O43 - CFD: 09/02/2013 - 13:26:19 - [73,506] ----D C:\Program Files (x86)\Lexmark 2500 Series
O43 - CFD: 19/03/2010 - 19:19:12 - [41,037] ----D C:\Program Files (x86)\Lexmark Fax Solutions
O43 - CFD: 15/11/2011 - 11:02:43 - [37,603] ----D C:\Program Files (x86)\Lexmark S300-S400 Series
O43 - CFD: 09/02/2013 - 13:25:58 - [2,225] ----D C:\Program Files (x86)\Lexmark Toolbar
O43 - CFD: 31/01/2012 - 21:56:44 - [0] ----D C:\Program Files (x86)\LG Electronics
O43 - CFD: 20/05/2013 - 16:27:06 - [13,354] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 19/06/2012 - 19:49:42 - [631,574] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 22/08/2009 - 10:40:13 - [7,431] ----D C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
O43 - CFD: 15/03/2013 - 06:35:02 - [40,835] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 30/08/2009 - 08:42:58 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 01/11/2009 - 20:10:29 - [0,014] ----D C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 30/08/2009 - 08:36:08 - [1,577] ----D C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 11/10/2012 - 05:26:40 - [139,669] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 22/04/2012 - 10:34:00 - [5,329] ----D C:\Program Files (x86)\Microsoft XNA
O43 - CFD: 27/06/2010 - 09:21:52 - [7,789] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 29/11/2009 - 12:06:14 - [7,110] ----D C:\Program Files (x86)\Movie Maker
O43 - CFD: 10/03/2010 - 04:00:45 - [8,906] ----D C:\Program Files (x86)\Movie Maker 2.6
O43 - CFD: 19/09/2012 - 19:49:56 - [0,000] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 07/06/2011 - 17:20:36 - [1,100] ----D C:\Program Files (x86)\MP3Gain
O43 - CFD: 01/11/2009 - 20:10:36 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 02/11/2009 - 14:08:07 - [0] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 22/08/2009 - 10:56:05 - [1172,437] ----D C:\Program Files (x86)\NewTech Infosystems
O43 - CFD: 30/01/2010 - 16:34:02 - [3,402] ----D C:\Program Files (x86)\Pacman 2002
O43 - CFD: 30/10/2011 - 01:19:11 - [7,120] ----D C:\Program Files (x86)\Pando Networks
O43 - CFD: 18/11/2010 - 23:48:46 - [3,518] ----D C:\Program Files (x86)\PhotoFiltre
O43 - CFD: 26/02/2013 - 22:24:33 - [72,326] ----D C:\Program Files (x86)\QuickTime
O43 - CFD: 27/02/2011 - 16:55:59 - [1,805] ----D C:\Program Files (x86)\RADVideo
O43 - CFD: 30/08/2009 - 08:25:23 - [11,235] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 07:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 27/12/2011 - 23:02:48 - [0,648] ----D C:\Program Files (x86)\Research In Motion Limited
O43 - CFD: 22/09/2010 - 08:58:59 - [0,074] ----D C:\Program Files (x86)\Ripp-it_AM
O43 - CFD: 28/02/2010 - 10:53:04 - [0] ----D C:\Program Files (x86)\Samsung
O43 - CFD: 13/05/2013 - 10:59:02 - [47,249] R---D C:\Program Files (x86)\Skype
O43 - CFD: 08/07/2011 - 18:44:53 - [52,356] ----D C:\Program Files (x86)\Spybot - Search & Destroy
O43 - CFD: 30/08/2009 - 08:25:45 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 09/02/2010 - 22:12:23 - [1,452] ----D C:\Program Files (x86)\Tetris
O43 - CFD: 23/01/2010 - 10:19:08 - [0] ----D C:\Program Files (x86)\Ubi Soft
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 05/10/2011 - 09:18:53 - [11,661] ----D C:\Program Files (x86)\VDownloader
O43 - CFD: 01/11/2009 - 20:01:27 - [79,251] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 19/05/2011 - 09:46:12 - [6,041] ----D C:\Program Files (x86)\VirtualDubMOD
O43 - CFD: 30/08/2009 - 18:16:37 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 19/06/2012 - 19:22:47 - [113,872] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 19/06/2012 - 19:53:19 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 19/06/2012 - 19:53:19 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 19/06/2012 - 19:53:19 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 19/06/2012 - 19:53:19 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 19/06/2012 - 19:53:19 - [6,039] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 11/01/2010 - 11:34:41 - [3,703] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 14/06/2013 - 21:35:10 - [16,880] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 13/11/2012 - 22:47:24 - [312,733] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 11/08/2011 - 14:56:43 - [30,670] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 10/06/2013 - 21:11:40 - [100,009] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 01/11/2009 - 20:10:29 - [0,089] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 21/03/2010 - 11:46:32 - [22,139] ----D C:\Program Files (x86)\Common Files\DVDVideoSoft
O43 - CFD: 22/08/2009 - 10:56:42 - [0,097] ----D C:\Program Files (x86)\Common Files\EgisTec
O43 - CFD: 23/01/2010 - 09:59:32 - [4,731] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 20/05/2013 - 19:16:57 - [1,189] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 22/04/2012 - 10:34:00 - [264,172] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 22/08/2009 - 10:43:42 - [0,338] ----D C:\Program Files (x86)\Common Files\Oberon Media
O43 - CFD: 30/01/2013 - 15:31:11 - [2,398] ----D C:\Program Files (x86)\Common Files\Research In Motion
O43 - CFD: 22/08/2009 - 12:25:40 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 13/05/2013 - 10:59:02 - [1,904] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 12/07/2012 - 08:48:01 - [42,254] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 30/08/2009 - 08:39:00 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 30/01/2013 - 15:31:19 - [0] ----D C:\Program Files (x86)\Common Files\XCPCSync.OEM
O43 - CFD: 10/06/2013 - 21:37:08 - [2,775] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 22/08/2009 - 07:41:17 - [2,716] ----D C:\ProgramData\Acer
O43 - CFD: 10/02/2013 - 16:57:01 - [495,194] ----D C:\ProgramData\Adobe
O43 - CFD: 07/02/2011 - 13:53:42 - [251,282] ----D C:\ProgramData\Alwil Software
O43 - CFD: 29/01/2013 - 18:38:34 - [99,527] ----D C:\ProgramData\Apple
O43 - CFD: 29/01/2013 - 18:40:25 - [83,899] ----D C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - 07:08:56 - [0] ----D C:\ProgramData\Application Data
O43 - CFD: 22/05/2010 - 20:46:21 - [0,037] ----D C:\ProgramData\AWEM
O43 - CFD: 22/08/2009 - 10:56:16 - [0,084] ----D C:\ProgramData\BackupManager
O43 - CFD: 01/11/2009 - 19:44:10 - [0] ----D C:\ProgramData\Bureau
O43 - CFD: 14/05/2011 - 19:53:10 - [0] ----D C:\ProgramData\Canneverbe Limited
O43 - CFD: 02/10/2012 - 18:06:22 - [0,017] ----D C:\ProgramData\ClubSanDisk
O43 - CFD: 09/09/2012 - 11:23:44 - [0,000] --H-D C:\ProgramData\Common Files
O43 - CFD: 30/08/2009 - 08:29:37 - [0,091] ----D C:\ProgramData\CyberLink
O43 - CFD: 08/06/2012 - 20:32:26 - [0,001] ----D C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 14/07/2009 - 07:08:56 - [0] ----D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 07:08:56 - [0] ----D C:\ProgramData\Documents
O43 - CFD: 22/03/2013 - 10:38:25 - [0,000] ----D C:\ProgramData\DVD Shrink
O43 - CFD: 30/08/2009 - 08:26:41 - [0] ----D C:\ProgramData\EgisTec
O43 - CFD: 22/08/2009 - 12:30:37 - [0,000] ----D C:\ProgramData\eSobi
O43 - CFD: 15/11/2011 - 11:23:37 - [0,000] ----D C:\ProgramData\Ezprint
O43 - CFD: 01/11/2009 - 19:44:10 - [0] ----D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 07:08:56 - [0] ----D C:\ProgramData\Favorites
O43 - CFD: 19/03/2010 - 19:19:01 - [0,026] ----D C:\ProgramData\FaxCtr
O43 - CFD: 05/09/2010 - 22:25:28 - [0] ----D C:\ProgramData\Garmin
O43 - CFD: 18/09/2012 - 08:21:10 - [0,055] ----D C:\ProgramData\iihkvqvasqdtrxo
O43 - CFD: 10/07/2012 - 08:28:15 - [0,438] ----D C:\ProgramData\Lexmark S300-S400 Series
O43 - CFD: 31/05/2013 - 13:39:41 - [0,126] ----D C:\ProgramData\Lx_cats
O43 - CFD: 17/10/2012 - 12:51:19 - [16,004] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 01/11/2009 - 19:55:44 - [0,005] ----D C:\ProgramData\McAfee
O43 - CFD: 01/11/2009 - 19:44:10 - [0] ----D C:\ProgramData\Menu Démarrer
O43 - CFD: 08/07/2011 - 19:16:33 - [393,675] ----D C:\ProgramData\Microsoft
O43 - CFD: 12/06/2013 - 22:24:12 - [0,118] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 01/11/2009 - 19:44:10 - [0] ----D C:\ProgramData\Modèles
O43 - CFD: 30/08/2009 - 08:33:19 - [0,001] ----D C:\ProgramData\OEM
O43 - CFD: 30/10/2011 - 01:19:17 - [0,000] ----D C:\ProgramData\PMB Files   =>P2P.Pando
O43 - CFD: 12/08/2011 - 11:01:16 - [0,002] ----D C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 22/08/2009 - 12:30:46 - [0,000] ----D C:\ProgramData\SiteAdvisor
O43 - CFD: 13/05/2013 - 10:59:09 - [52,356] ----D C:\ProgramData\Skype
O43 - CFD: 05/08/2011 - 12:35:21 - [51,675] ----D C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 14/07/2009 - 07:08:56 - [0] ----D C:\ProgramData\Start Menu
O43 - CFD: 02/05/2011 - 11:25:34 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 12/12/2011 - 21:10:22 - [0,086] ---AD C:\ProgramData\Temp
O43 - CFD: 14/07/2009 - 07:08:56 - [0] ----D C:\ProgramData\Templates
O43 - CFD: 09/09/2012 - 11:24:21 - [0,361] ----D C:\ProgramData\TuneUp Software
O43 - CFD: 25/04/2013 - 15:06:49 - [0,007] ----D C:\ProgramData\Wondershare Video Converter Ultimate
O43 - CFD: 25/04/2013 - 15:08:00 - [0] ----D C:\ProgramData\xml_param
O43 - CFD: 09/09/2012 - 11:23:49 - [22,941] -SH-D C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
O43 - CFD: 14/01/2010 - 23:30:37 - [5,278] ----D C:\Users\AZO\AppData\Roaming\.ABC
O43 - CFD: 10/11/2012 - 16:40:41 - [41,887] ----D C:\Users\AZO\AppData\Roaming\Adobe
O43 - CFD: 16/12/2011 - 17:35:17 - [0,000] ----D C:\Users\AZO\AppData\Roaming\Adobe Mini Bridge CS5
O43 - CFD: 11/12/2012 - 13:43:02 - [0,884] ----D C:\Users\AZO\AppData\Roaming\AlauxSoft
O43 - CFD: 02/04/2012 - 22:10:28 - [0,009] ----D C:\Users\AZO\AppData\Roaming\Amazon
O43 - CFD: 29/01/2013 - 19:04:49 - [1283,156] ----D C:\Users\AZO\AppData\Roaming\Apple Computer
O43 - CFD: 14/05/2011 - 19:53:10 - [0,002] ----D C:\Users\AZO\AppData\Roaming\Canneverbe Limited
O43 - CFD: 22/06/2012 - 16:59:59 - [0] ----D C:\Users\AZO\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 25/05/2011 - 10:38:12 - [0,001] ----D C:\Users\AZO\AppData\Roaming\dvdcss
O43 - CFD: 20/03/2010 - 23:09:07 - [0,016] ----D C:\Users\AZO\AppData\Roaming\FaxCtr
O43 - CFD: 27/01/2010 - 10:35:58 - [0,000] ----D C:\Users\AZO\AppData\Roaming\FreeAudioPack
O43 - CFD: 26/07/2010 - 11:14:56 - [0,001] ----D C:\Users\AZO\AppData\Roaming\FreeVideoConverter
O43 - CFD: 11/11/2012 - 17:05:32 - [0,017] ----D C:\Users\AZO\AppData\Roaming\GamesCafe
O43 - CFD: 08/09/2010 - 21:56:28 - [1,165] ----D C:\Users\AZO\AppData\Roaming\GARMIN
O43 - CFD: 19/05/2011 - 09:40:55 - [0,001] ----D C:\Users\AZO\AppData\Roaming\GetRightToGo
O43 - CFD: 01/11/2009 - 19:52:31 - [0] ----D C:\Users\AZO\AppData\Roaming\Google
O43 - CFD: 12/01/2011 - 20:40:16 - [0,004] ----D C:\Users\AZO\AppData\Roaming\Icones
O43 - CFD: 01/11/2009 - 19:44:52 - [0] ----D C:\Users\AZO\AppData\Roaming\Identities
O43 - CFD: 21/09/2010 - 08:21:26 - [0,011] ----D C:\Users\AZO\AppData\Roaming\InfraRecorder
O43 - CFD: 19/03/2010 - 19:21:16 - [0,134] ----D C:\Users\AZO\AppData\Roaming\Lexmark Imaging Studio
O43 - CFD: 09/02/2013 - 13:27:28 - [0,124] ----D C:\Users\AZO\AppData\Roaming\Lexmark Productivity Studio
O43 - CFD: 01/11/2009 - 19:45:25 - [3,019] ----D C:\Users\AZO\AppData\Roaming\Macromedia
O43 - CFD: 17/10/2012 - 12:53:12 - [1,981] ----D C:\Users\AZO\AppData\Roaming\Malwarebytes
O43 - CFD: 22/08/2009 - 08:06:24 - [0] ----D C:\Users\AZO\AppData\Roaming\Media Center Programs
O43 - CFD: 29/06/2011 - 09:35:41 - [0] ----D C:\Users\AZO\AppData\Roaming\Media Player Classic
O43 - CFD: 13/06/2013 - 11:01:49 - [3,261] -S--D C:\Users\AZO\AppData\Roaming\Microsoft
O43 - CFD: 30/10/2011 - 01:33:18 - [0] ----D C:\Users\AZO\AppData\Roaming\Need for Speed World
O43 - CFD: 19/11/2010 - 00:21:17 - [0,000] ----D C:\Users\AZO\AppData\Roaming\PhotoFiltre
O43 - CFD: 15/04/2012 - 19:00:10 - [0,010] ----D C:\Users\AZO\AppData\Roaming\Rovio
O43 - CFD: 01/11/2009 - 12:03:27 - [1,170] ----D C:\Users\AZO\AppData\Roaming\Samsung
O43 - CFD: 10/06/2013 - 21:04:16 - [4,451] ----D C:\Users\AZO\AppData\Roaming\Skype
O43 - CFD: 16/12/2011 - 17:35:17 - [0] ----D C:\Users\AZO\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
O43 - CFD: 10/01/2013 - 23:11:26 - [9,517] ----D C:\Users\AZO\AppData\Roaming\StoneTrip
O43 - CFD: 09/09/2012 - 11:24:00 - [0,018] ----D C:\Users\AZO\AppData\Roaming\TuneUp Software
O43 - CFD: 05/10/2011 - 09:19:02 - [0] ----D C:\Users\AZO\AppData\Roaming\VDownloader
O43 - CFD: 16/02/2013 - 11:50:09 - [2,007] ----D C:\Users\AZO\AppData\Roaming\vlc
O43 - CFD: 16/07/2011 - 10:22:17 - [0,000] ----D C:\Users\AZO\AppData\Roaming\Windows Live Writer
O43 - CFD: 11/01/2010 - 11:35:03 - [0,000] ----D C:\Users\AZO\AppData\Roaming\WinRAR
O43 - CFD: 25/04/2013 - 15:06:50 - [0] ----D C:\Users\AZO\AppData\Roaming\Wondershare Video Converter Ultimate
O43 - CFD: 25/04/2013 - 15:06:49 - [0] ----D C:\Users\AZO\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
O43 - CFD: 16/04/2012 - 13:05:04 - [16,502] ----D C:\Users\AZO\AppData\Local\Adobe
O43 - CFD: 10/03/2010 - 23:47:57 - [0] ----D C:\Users\AZO\AppData\Local\Apple
O43 - CFD: 29/01/2013 - 18:41:06 - [19,687] ----D C:\Users\AZO\AppData\Local\Apple Computer
O43 - CFD: 01/11/2009 - 19:44:23 - [0] ----D C:\Users\AZO\AppData\Local\Application Data
O43 - CFD: 12/06/2013 - 13:12:28 - [2,645] ----D C:\Users\AZO\AppData\Local\CRE
O43 - CFD: 15/05/2013 - 11:32:09 - [2,260] ----D C:\Users\AZO\AppData\Local\Diagnostics
O43 - CFD: 01/11/2009 - 12:02:15 - [95,028] ----D C:\Users\AZO\AppData\Local\Downloaded Installations
O43 - CFD: 01/11/2009 - 19:45:28 - [0,000] ----D C:\Users\AZO\AppData\Local\EgisTec
O43 - CFD: 30/10/2011 - 01:22:00 - [0,001] ----D C:\Users\AZO\AppData\Local\Electronic_Arts_Inc
O43 - CFD: 11/03/2013 - 17:37:42 - [0] ----D C:\Users\AZO\AppData\Local\ElevatedDiagnostics
O43 - CFD: 29/01/2013 - 21:40:47 - [7,394] ----D C:\Users\AZO\AppData\Local\Facebook
O43 - CFD: 19/09/2012 - 19:53:34 - [1363,186] ----D C:\Users\AZO\AppData\Local\Google
O43 - CFD: 01/11/2009 - 19:44:23 - [0] ----D C:\Users\AZO\AppData\Local\Historique
O43 - CFD: 09/02/2013 - 19:41:48 - [960,439] ----D C:\Users\AZO\AppData\Local\Microsoft
O43 - CFD: 19/11/2009 - 13:31:46 - [1,143] ----D C:\Users\AZO\AppData\Local\Microsoft Games
O43 - CFD: 18/07/2011 - 20:46:39 - [0,101] ----D C:\Users\AZO\AppData\Local\Microsoft Help
O43 - CFD: 01/11/2009 - 11:14:14 - [118,251] ----D C:\Users\AZO\AppData\Local\Oberon Games
O43 - CFD: 30/10/2011 - 01:19:07 - [4,299] ----D C:\Users\AZO\AppData\Local\Pando_Temp
O43 - CFD: 14/06/2013 - 10:04:03 - [0,138] ----D C:\Users\AZO\AppData\Local\PMB Files   =>P2P.Pando
O43 - CFD: 15/01/2013 - 20:53:25 - [0] ----D C:\Users\AZO\AppData\Local\Programs
O43 - CFD: 30/01/2013 - 15:31:20 - [0] ----D C:\Users\AZO\AppData\Local\Research In Motion
O43 - CFD: 20/01/2013 - 14:26:25 - [0] ----D C:\Users\AZO\AppData\Local\SCE
O43 - CFD: 14/06/2013 - 21:28:57 - [0,727] ----D C:\Users\AZO\AppData\Local\Temp
O43 - CFD: 01/11/2009 - 19:44:23 - [0] ----D C:\Users\AZO\AppData\Local\Temporary Internet Files
O43 - CFD: 12/06/2013 - 14:25:05 - [9,543] ----D C:\Users\AZO\AppData\Local\Torch
O43 - CFD: 05/10/2011 - 09:33:34 - [0,001] ----D C:\Users\AZO\AppData\Local\VDownloader
O43 - CFD: 11/11/2012 - 16:50:55 - [17,647] ----D C:\Users\AZO\AppData\Local\VirtualStore
O43 - CFD: 24/04/2013 - 19:16:46 - [0,074] ----D C:\Users\AZO\AppData\Local\Windows Live
O43 - CFD: 08/07/2011 - 20:44:11 - [0,618] ----D C:\Users\AZO\AppData\Local\Windows Live Writer
O43 - CFD: 24/04/2011 - 19:15:24 - [0] ----D C:\Users\AZO\AppData\Local\WMTools Downloaded Files
O43 - CFD: 22/08/2009 - 12:30:51 - [0,014] R---D C:\Users\AZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 16/05/2013 - 08:36:26 - [0,000] R---D C:\Users\AZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 22/09/2010 - 08:57:40 - [0] ----D C:\Users\AZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
O43 - CFD: 27/02/2011 - 16:55:59 - [0,004] ----D C:\Users\AZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bink and Smacker
O43 - CFD: 23/01/2010 - 10:17:11 - [0,000] ----D C:\Users\AZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 22/08/2009 - 12:30:51 - [0,001] R---D C:\Users\AZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 07/06/2011 - 17:17:37 - [0] ----D C:\Users\AZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3Gain
O43 - CFD: 30/01/2010 - 16:34:02 - [0] ----D C:\Users\AZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pacman 2002
O43 - CFD: 18/11/2010 - 23:48:46 - [0] ----D C:\Users\AZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre
O43 - CFD: 16/05/2013 - 08:36:26 - [0,000] R---D C:\Users\AZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 11/01/2010 - 11:34:42 - [0,003] ----D C:\Users\AZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ 1626 Dossiers CLSID vides (CLSID Empty Folders)
~ Program Folder: 1862 Scanned in 00mn 10s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.A6B2CAA98A4A0158DA1D8E7D98F32413] - 14/06/2013 - 19:45:36 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [1833427]
O44 - LFC:[MD5.FBC91E80E3ACCB276A651C0024B98044] - 14/06/2013 - 10:12:34 ---A- . (...) -- C:\AdwCleaner[R2].txt   [1263]
O44 - LFC:[MD5.9982DE5B241F4776F71698EB4D4FC7E9] - 14/06/2013 - 08:32:30 ---A- . (...) -- C:\Windows\setupact.log   [168]
O44 - LFC:[MD5.6798F0FED4BE3160355A32E7F3967D32] - 14/06/2013 - 08:32:29 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 14/06/2013 - 08:20:10 ---A- . (...) -- C:\Windows\setuperr.log   [0]
O44 - LFC:[MD5.394A9DA8A5ED842FC74AC7328B880727] - 12/06/2013 - 21:20:50 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\SysNative\MRT.exe   [75825640]
O44 - LFC:[MD5.394A9DA8A5ED842FC74AC7328B880727] - 12/06/2013 - 21:20:50 RSHAD . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe   [75825640]
O44 - LFC:[MD5.F827BD7A09F9FCDF76AB2C3E27650E71] - 12/06/2013 - 21:19:53 ---A- . (.Microsoft Corporation - Microsoft® MSHTML Typelib.) -- C:\Windows\SysNative\mshtml.tlb   [2706432]
O44 - LFC:[MD5.F827BD7A09F9FCDF76AB2C3E27650E71] - 12/06/2013 - 21:19:53 ---A- . (.Microsoft Corporation - Microsoft® MSHTML Typelib.) -- C:\Windows\System32\mshtml.tlb   [2706432]
O44 - LFC:[MD5.711AF614B8CE85F137E3E4B895559ED0] - 12/06/2013 - 21:19:52 ---A- . (.Microsoft Corporation - Internet Explorer UI Engine.) -- C:\Windows\SysNative\ieui.dll   [526336]
O44 - LFC:[MD5.711AF614B8CE85F137E3E4B895559ED0] - 12/06/2013 - 21:19:52 ---A- . (.Microsoft Corporation - Internet Explorer UI Engine.) -- C:\Windows\System32\ieui.dll   [526336]
O44 - LFC:[MD5.146A64604D96E82B03CD57B214E66632] - 12/06/2013 - 21:19:50 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\Windows\SysNative\iesetup.dll   [67072]
O44 - LFC:[MD5.146A64604D96E82B03CD57B214E66632] - 12/06/2013 - 21:19:50 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\Windows\System32\iesetup.dll   [67072]
O44 - LFC:[MD5.8C42F591EA3D14004C0684ADD177941B] - 12/06/2013 - 21:19:49 ---A- . (.Microsoft Corporation - Extended RunOnce processing with UI.) -- C:\Windows\SysNative\iernonce.dll   [39936]
O44 - LFC:[MD5.8C42F591EA3D14004C0684ADD177941B] - 12/06/2013 - 21:19:49 ---A- . (.Microsoft Corporation - Extended RunOnce processing with UI.) -- C:\Windows\System32\iernonce.dll   [39936]
O44 - LFC:[MD5.D575B8A1E28747D8562A7EB0D95AAD74] - 12/06/2013 - 21:19:49 ---A- . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\SysNative\ie4uinit.exe   [51712]
O44 - LFC:[MD5.5C9D6C25054683CEEC28935C1DDB03DF] - 12/06/2013 - 21:19:49 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\SysNative\iesysprep.dll   [136704]
O44 - LFC:[MD5.5C9D6C25054683CEEC28935C1DDB03DF] - 12/06/2013 - 21:19:49 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\System32\iesysprep.dll   [136704]
O44 - LFC:[MD5.6D1CD9151AC8E10B6B7DBEAAD89A2E56] - 12/06/2013 - 21:19:49 ---A- . (.Microsoft Corporation - Registers custom PKEYs for IE.) -- C:\Windows\SysNative\RegisterIEPKEYs.exe   [89600]
O44 - LFC:[MD5.6D1CD9151AC8E10B6B7DBEAAD89A2E56] - 12/06/2013 - 21:19:49 ---A- . (.Microsoft Corporation - Registers custom PKEYs for IE.) -- C:\Windows\System32\RegisterIEPKEYs.exe   [89600]
O44 - LFC:[MD5.D575B8A1E28747D8562A7EB0D95AAD74] - 12/06/2013 - 21:19:49 RSHAD . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe   [51712]
O44 - LFC:[MD5.9ACD5BC528F8FFA885EFF895A95B35C4] - 12/06/2013 - 21:19:48 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\SysNative\iertutil.dll   [2648064]
O44 - LFC:[MD5.9ACD5BC528F8FFA885EFF895A95B35C4] - 12/06/2013 - 21:19:48 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\System32\iertutil.dll   [2648064]
O44 - LFC:[MD5.4A420CB5E499E484B1E5E1CE010E6896] - 12/06/2013 - 21:19:46 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\SysNative\msfeeds.dll   [603136]
O44 - LFC:[MD5.4A420CB5E499E484B1E5E1CE010E6896] - 12/06/2013 - 21:19:46 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll   [603136]
O44 - LFC:[MD5.C928E6CC4DF7ED4620BAB3CE96262632] - 12/06/2013 - 21:19:46 ---A- . (.Microsoft Corporation - Microsoft ® JScript.) -- C:\Windows\SysNative\jscript.dll   [855552]
O44 - LFC:[MD5.C928E6CC4DF7ED4620BAB3CE96262632] - 12/06/2013 - 21:19:46 ---A- . (.Microsoft Corporation - Microsoft ® JScript.) -- C:\Windows\System32\jscript.dll   [855552]
O44 - LFC:[MD5.396D851E3B6ECB9990718C25567ABBB9] - 12/06/2013 - 21:19:45 ---A- . (.Microsoft Corporation - Microsoft ® JScript.) -- C:\Windows\SysNative\jscript9.dll   [3958784]
O44 - LFC:[MD5.396D851E3B6ECB9990718C25567ABBB9] - 12/06/2013 - 21:19:45 ---A- . (.Microsoft Corporation - Microsoft ® JScript.) -- C:\Windows\System32\jscript9.dll   [3958784]
O44 - LFC:[MD5.BF11B116409376F070A00D7978C03643] - 12/06/2013 - 21:19:43 ---A- . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysNative\urlmon.dll   [1365504]
O44 - LFC:[MD5.BF11B116409376F070A00D7978C03643] - 12/06/2013 - 21:19:43 ---A- . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll   [1365504]
O44 - LFC:[MD5.5AD28C210D17029694554420022E1074] - 12/06/2013 - 21:19:41 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\SysNative\jsproxy.dll   [53248]
O44 - LFC:[MD5.5AD28C210D17029694554420022E1074] - 12/06/2013 - 21:19:41 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\System32\jsproxy.dll   [53248]
O44 - LFC:[MD5.12716D987D475B051F35895659159705] - 12/06/2013 - 21:19:40 ---A- . (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\Windows\SysNative\wininet.dll   [2241024]
O44 - LFC:[MD5.12716D987D475B051F35895659159705] - 12/06/2013 - 21:19:40 ---A- . (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\Windows\System32\wininet.dll   [2241024]
O44 - LFC:[MD5.38026FA060E7802D1ACBA462E4CEAA54] - 12/06/2013 - 21:19:38 ---A- . (.Microsoft Corporation - Internet Browser.) -- C:\Windows\SysNative\ieframe.dll   [15404544]
O44 - LFC:[MD5.38026FA060E7802D1ACBA462E4CEAA54] - 12/06/2013 - 21:19:38 ---A- . (.Microsoft Corporation - Internet Browser.) -- C:\Windows\System32\ieframe.dll   [15404544]
O44 - LFC:[MD5.945C49FA10B96570DFE37CFB145A1D10] - 12/06/2013 - 21:19:35 ---A- . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\SysNative\mshtml.dll   [19233792]
O44 - LFC:[MD5.945C49FA10B96570DFE37CFB145A1D10] - 12/06/2013 - 21:19:35 ---A- . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll   [19233792]
O44 - LFC:[MD5.EBB6FDC1B7BE2664B9145FAC146FE046] - 12/06/2013 - 21:06:56 ---A- . (...) -- C:\AdwCleaner[S3].txt   [5995]
O44 - LFC:[MD5.7E6790F0EE8B9EB21FDE0949EEE4EA6F] - 12/06/2013 - 21:06:08 ---A- . (...) -- C:\AdwCleaner[R1].txt   [6579]
O44 - LFC:[MD5.E9B3F502741169645EA47F83C5558E89] - 12/06/2013 - 13:24:46 ---A- . (...) -- C:\Windows\wininit.ini   [174]
O44 - LFC:[MD5.9849EA3843A2ADBDD1497E97A85D8CAE] - 12/06/2013 - 13:01:44 RSHAD . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\Windows\System32\Drivers\tcpip.sys   [1910632]
O44 - LFC:[MD5.67CF11E00D026A5C0C88EA5F84D501E5] - 12/06/2013 - 13:01:43 ---A- . (.Microsoft Corporation - Fournisseur d’impression de rendu côté clie.) -- C:\Windows\SysNative\win32spl.dll   [751104]
O44 - LFC:[MD5.67CF11E00D026A5C0C88EA5F84D501E5] - 12/06/2013 - 13:01:43 ---A- . (.Microsoft Corporation - Fournisseur d’impression de rendu côté clie.) -- C:\Windows\System32\win32spl.dll   [751104]
O44 - LFC:[MD5.C06FAAF13E37CE482F612AFF2D2331F3] - 12/06/2013 - 13:01:39 ---A- . (.Microsoft Corporation - Dialogues communs de certificats Microsoft.) -- C:\Windows\SysNative\cryptdlg.dll   [30720]
O44 - LFC:[MD5.C06FAAF13E37CE482F612AFF2D2331F3] - 12/06/2013 - 13:01:39 ---A- . (.Microsoft Corporation - Dialogues communs de certificats Microsoft.) -- C:\Windows\System32\cryptdlg.dll   [30720]
O44 - LFC:[MD5.3D7BB6DD7A87B3E36E44CA94444247A8] - 12/06/2013 - 13:01:29 ---A- . (.Microsoft Corporation - Microsoft Windows Codecs Library.) -- C:\Windows\SysNative\WindowsCodecs.dll   [1424384]
O44 - LFC:[MD5.3D7BB6DD7A87B3E36E44CA94444247A8] - 12/06/2013 - 13:01:29 ---A- . (.Microsoft Corporation - Microsoft Windows Codecs Library.) -- C:\Windows\System32\WindowsCodecs.dll   [1424384]
O44 - LFC:[MD5.4586B77B18FA9A8518AF76CA8FD247D9] - 12/06/2013 - 13:01:25 ---A- . (.Microsoft Corporation - CertUtil.exe.) -- C:\Windows\SysNative\certutil.exe   [1192448]
O44 - LFC:[MD5.4586B77B18FA9A8518AF76CA8FD247D9] - 12/06/2013 - 13:01:25 ---A- . (.Microsoft Corporation - CertUtil.exe.) -- C:\Windows\System32\certutil.exe   [1192448]
O44 - LFC:[MD5.A96D5ECA5742603E0E345C4F6B801F5E] - 12/06/2013 - 13:01:25 ---A- . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\SysNative\crypt32.dll   [1464320]
O44 - LFC:[MD5.A96D5ECA5742603E0E345C4F6B801F5E] - 12/06/2013 - 13:01:25 ---A- . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll   [1464320]
O44 - LFC:[MD5.2C4C22EA1735F21F355EB1A39832F7DF] - 12/06/2013 - 13:01:24 ---A- . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\SysNative\cryptnet.dll   [139776]
O44 - LFC:[MD5.2C4C22EA1735F21F355EB1A39832F7DF] - 12/06/2013 - 13:01:24 ---A- . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll   [139776]
O44 - LFC:[MD5.D8129C49798CBBFB2E4351D4B7B8EF9C] - 12/06/2013 - 13:01:24 ---A- . (.Microsoft Corporation - Services de chiffrement.) -- C:\Windows\SysNative\cryptsvc.dll   [184320]
O44 - LFC:[MD5.D8129C49798CBBFB2E4351D4B7B8EF9C] - 12/06/2013 - 13:01:24 ---A- . (.Microsoft Corporation - Services de chiffrement.) -- C:\Windows\System32\cryptsvc.dll   [184320]
O44 - LFC:[MD5.189B0BAE1B0EDD51CEF1CD3F4CDEE02E] - 12/06/2013 - 13:01:22 ---A- . (.Microsoft Corporation - Active Directory Certificate Services Encod.) -- C:\Windows\SysNative\certenc.dll   [52224]
O44 - LFC:[MD5.189B0BAE1B0EDD51CEF1CD3F4CDEE02E] - 12/06/2013 - 13:01:22 ---A- . (.Microsoft Corporation - Active Directory Certificate Services Encod.) -- C:\Windows\System32\certenc.dll   [52224]
O44 - LFC:[MD5.4C92EB7535CAA1681A77D928FBF9771F] - 12/06/2013 - 13:01:16 ---A- . (.Microsoft Corporation - Direct3D 11 Runtime.) -- C:\Windows\SysNative\d3d11.dll   [1887232]
O44 - LFC:[MD5.4C92EB7535CAA1681A77D928FBF9771F] - 12/06/2013 - 13:01:16 ---A- . (.Microsoft Corporation - Direct3D 11 Runtime.) -- C:\Windows\System32\d3d11.dll   [1887232]
~ Files: 61 Scanned in 00mn 13s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.60B94DF66AB72433309D9E9A0965DA01] - 07/06/2013 - 16:28:10 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-1F918F66.pf
O45 - LFCP:[MD5.249354BC91C58FACB54F89B5AB93FC56] - 10/06/2013 - 20:20:00 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.3DE2450E80F1B3CEC27DFD010362B275] - 10/06/2013 - 21:15:27 ---A- - C:\Windows\Prefetch\AgCx_S2_S-1-5-21-3704010084-1879142336-3890524549-1008.snp.db
O45 - LFCP:[MD5.8FD910FFDA93680903A0DA71FC45379D] - 12/06/2013 - 13:20:21 ---A- - C:\Windows\Prefetch\AgCx_S7_S-1-5-21-3704010084-1879142336-3890524549-1008.snp.db
O45 - LFCP:[MD5.8E5B2CDAED7E6BC293330567A914D841] - 12/06/2013 - 13:26:43 ---A- - C:\Windows\Prefetch\AgCx_S3_S-1-5-21-3704010084-1879142336-3890524549-1000.snp.db
O45 - LFCP:[MD5.1D330DA9736B4111591EAC6724E75DBA] - 12/06/2013 - 18:08:58 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-3704010084-1879142336-3890524549-1008.db
O45 - LFCP:[MD5.F29DDE94C30F449FAE1A5862FE4EB93C] - 12/06/2013 - 18:08:58 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-3704010084-1879142336-3890524549-1008.db
O45 - LFCP:[MD5.3ED6C2FC2855311D3394DE9636C9752A] - 12/06/2013 - 21:24:15 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:[MD5.40241989008C15BB48DC7380E8926E10] - 12/06/2013 - 21:29:36 ---A- - C:\Windows\Prefetch\AgCx_SC4.db
O45 - LFCP:[MD5.F29AB19B2B0329A70C3B19CFCBAD4E86] - 13/06/2013 - 09:44:30 ---A- - C:\Windows\Prefetch\LXEAMON.EXE-DE69BF8F.pf
O45 - LFCP:[MD5.20612ABA0ACF9CDCE8A5553B9773ECB6] - 13/06/2013 - 09:59:49 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-A033F7A0.pf
O45 - LFCP:[MD5.4FE8DECD59F0FA574F6E4AC1FEBA1D48] - 13/06/2013 - 11:34:57 ---A- - C:\Windows\Prefetch\FM3032.EXE-8554B90C.pf
O45 - LFCP:[MD5.596D5E18CC883205E164196717B84C95] - 13/06/2013 - 11:35:03 ---A- - C:\Windows\Prefetch\LXDDAMON.EXE-39806287.pf
O45 - LFCP:[MD5.5034E79FDAAB9F301CE880F843CE9EC0] - 13/06/2013 - 11:35:03 ---A- - C:\Windows\Prefetch\LXDDMON.EXE-766627DA.pf
O45 - LFCP:[MD5.BF0879DF68FA562558390B19ABEEF244] - 13/06/2013 - 18:24:29 ---A- - C:\Windows\Prefetch\DWM.EXE-314E93C5.pf
O45 - LFCP:[MD5.525882E9C7D382C8E86A95F263D085D9] - 13/06/2013 - 18:24:29 ---A- - C:\Windows\Prefetch\USERINIT.EXE-5114915C.pf
O45 - LFCP:[MD5.2A7254560AFA104A362744D789B34E1F] - 13/06/2013 - 18:24:33 ---A- - C:\Windows\Prefetch\IGFXSRVC.EXE-C5618119.pf
O45 - LFCP:[MD5.22E7F2D7ED4F3D13C1342672FF4C1487] - 13/06/2013 - 18:24:33 ---A- - C:\Windows\Prefetch\PLFSETI.EXE-D9D6FD5A.pf
O45 - LFCP:[MD5.D6D3E159115A7AE2ECD7E44EC6A1741C] - 13/06/2013 - 18:24:34 ---A- - C:\Windows\Prefetch\EZPRINT.EXE-626607D7.pf
O45 - LFCP:[MD5.BD96BCE11AA10EC1A239FD3BB73B1CBC] - 13/06/2013 - 18:24:34 ---A- - C:\Windows\Prefetch\MWLDAEMON.EXE-C69CAB9F.pf
O45 - LFCP:[MD5.B15AF397F8716A1AED0739CE8E2AC6A6] - 13/06/2013 - 18:27:39 ---A- - C:\Windows\Prefetch\AgCx_S4_S-1-5-21-3704010084-1879142336-3890524549-1008.snp.db
O45 - LFCP:[MD5.CF0A5CC0B8ADCE59FB6760E9D86FA3B4] - 13/06/2013 - 18:28:51 ---A- - C:\Windows\Prefetch\AgCx_S1_S-1-5-21-3704010084-1879142336-3890524549-1000.snp.db
O45 - LFCP:[MD5.9F16AECB78B45A808F56486C44F0366E] - 13/06/2013 - 18:30:17 ---A- - C:\Windows\Prefetch\AgCx_SC3_0F505D2B6D5B41F9.db
O45 - LFCP:[MD5.3CEE947D2E7A1A5F81422F25CD904A26] - 13/06/2013 - 18:45:23 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-3C4E5BEC.pf
O45 - LFCP:[MD5.A80B2FE6017F96EED8E4D930C1D74297] - 13/06/2013 - 18:56:10 ---A- - C:\Windows\Prefetch\ITUNES.EXE-3ADE145E.pf
O45 - LFCP:[MD5.8CFEF2D1C988327352902366C3866A97] - 13/06/2013 - 18:56:14 ---A- - C:\Windows\Prefetch\APPLEMOBILEDEVICEHELPER.EXE-D36FFDFF.pf
O45 - LFCP:[MD5.626EAEB18690CDEA5076A00125A49E13] - 13/06/2013 - 18:56:15 ---A- - C:\Windows\Prefetch\DISTNOTED.EXE-BA71F399.pf
O45 - LFCP:[MD5.6EDA8F62EFBE42F7B33B391965A888F4] - 13/06/2013 - 18:57:05 ---A- - C:\Windows\Prefetch\DEVICEDISPLAYOBJECTPROVIDER.E-D37241ED.pf
O45 - LFCP:[MD5.95D344DEB65C8CEAB5B5376D4D24E0EB] - 13/06/2013 - 18:57:08 ---A- - C:\Windows\Prefetch\ATH.EXE-EA0D6A86.pf
O45 - LFCP:[MD5.0E75356747ECEF9241974029714366E2] - 13/06/2013 - 18:57:09 ---A- - C:\Windows\Prefetch\WUDFHOST.EXE-DEBBE5F1.pf
O45 - LFCP:[MD5.F745DD27B539D75A5D94E1732C45C294] - 13/06/2013 - 18:57:10 ---A- - C:\Windows\Prefetch\SYNCSERVER.EXE-CC074549.pf
O45 - LFCP:[MD5.6475B2166967C3F5468E7DBDD20564CA] - 13/06/2013 - 18:57:13 ---A- - C:\Windows\Prefetch\APPLEMOBILEBACKUP.EXE-5A3FF7FD.pf
O45 - LFCP:[MD5.9DEF4B5A5FC1983A0140BFE316DCEB4A] - 13/06/2013 - 18:57:15 ---A- - C:\Windows\Prefetch\MDCRASHREPORTTOOL.EXE-5B711F61.pf
O45 - LFCP:[MD5.4412B50AF50F70ABE3E0181D393A24AF] - 13/06/2013 - 19:09:13 ---A- - C:\Windows\Prefetch\SMSS.EXE-B5B810DB.pf
O45 - LFCP:[MD5.373098005BE41ABD69694E1B13566BA9] - 13/06/2013 - 19:09:19 ---A- - C:\Windows\Prefetch\CSRSS.EXE-F3C368CB.pf
O45 - LFCP:[MD5.7EBB5544A304D24255750B772AF2219F] - 13/06/2013 - 19:09:19 ---A- - C:\Windows\Prefetch\WINLOGON.EXE-DEDDC9B6.pf
O45 - LFCP:[MD5.782793A2AE2170BDC182B4838457FA39] - 13/06/2013 - 19:09:20 ---A- - C:\Windows\Prefetch\ATBROKER.EXE-5CD29207.pf
O45 - LFCP:[MD5.94F606D49635D968AC153E6A6727830E] - 13/06/2013 - 19:10:38 ---A- - C:\Windows\Prefetch\AgCx_SC3_0002DD1944FE1319.db
O45 - LFCP:[MD5.FCED7051906973AB08D3433C18146B5E] - 13/06/2013 - 20:16:56 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-F639BD7E.pf
O45 - LFCP:[MD5.4DF5CF0E96A5C6625DAA69A46D2F8189] - 13/06/2013 - 20:17:00 ---A- - C:\Windows\Prefetch\AgCx_SC1.db
O45 - LFCP:[MD5.60F15C3C7D357C9CF9510FB79F97F54A] - 13/06/2013 - 20:17:00 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:[MD5.D27830294E89662422A29A2743E40741] - 14/06/2013 - 08:34:04 ---A- - C:\Windows\Prefetch\EPOWEREVENT.EXE-08C01CA4.pf
O45 - LFCP:[MD5.DDC6668A255551AEF1677E40A22D8399] - 14/06/2013 - 08:34:04 ---A- - C:\Windows\Prefetch\SDWINSEC.EXE-25EEB17A.pf
O45 - LFCP:[MD5.B3D4EE008AEEDCCE4B868BDC4FB38C8D] - 14/06/2013 - 08:34:04 ---A- - C:\Windows\Prefetch\SEARCHINDEXER.EXE-1CF42BC6.pf
O45 - LFCP:[MD5.E209B48BBE5E7F7B0BAED0D8D0B794D6] - 14/06/2013 - 08:34:04 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-27D91624.pf
O45 - LFCP:[MD5.1053025C6BEDDA48CD483D1AA27A2968] - 14/06/2013 - 08:34:04 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-EDA5A3D2.pf
O45 - LFCP:[MD5.F68BAB231B312E3B026553652EB7F26A] - 14/06/2013 - 08:34:04 ---A- - C:\Windows\Prefetch\SWITCHBOARD.EXE-7729ADB5.pf
O45 - LFCP:[MD5.25FFD4469843EE35B47D26170B623E08] - 14/06/2013 - 08:34:06 ---A- - C:\Windows\Prefetch\WMPNETWK.EXE-F6E20E14.pf
O45 - LFCP:[MD5.63B29A4DFF198F24E0DF853910AE78D3] - 14/06/2013 - 08:34:15 ---A- - C:\Windows\Prefetch\EGISUPDATE.EXE-DC408107.pf
O45 - LFCP:[MD5.5F1713DDD353046DA19F417BFB33DBCA] - 14/06/2013 - 08:34:16 ---A- - C:\Windows\Prefetch\APSDAEMON.EXE-688589D3.pf
O45 - LFCP:[MD5.A1DB005E98BB66368E391BDB6F8CE3CF] - 14/06/2013 - 08:34:18 ---A- - C:\Windows\Prefetch\BACKUPMANAGERTRAY.EXE-9BBDC82D.pf
O45 - LFCP:[MD5.A343506E771CEB2EA835F95257F006AB] - 14/06/2013 - 08:34:19 ---A- - C:\Windows\Prefetch\ADOBEARM.EXE-F9223367.pf
O45 - LFCP:[MD5.5F1C8097F51141F1BE985C5CB6CAB9CD] - 14/06/2013 - 08:34:22 ---A- - C:\Windows\Prefetch\READER_SL.EXE-FA6634D0.pf
O45 - LFCP:[MD5.B83B041756A334E585AC3B567D846241] - 14/06/2013 - 08:34:23 ---A- - C:\Windows\Prefetch\QTTASK.EXE-64CB3CDA.pf
O45 - LFCP:[MD5.F1BEB83DA3400CC6ED6C2B29A142B60F] - 14/06/2013 - 08:34:25 ---A- - C:\Windows\Prefetch\JUSCHED.EXE-D6111BFB.pf
O45 - LFCP:[MD5.CAAC5AEAE85AD7658C8CEB876BDA5CE8] - 14/06/2013 - 08:34:31 ---A- - C:\Windows\Prefetch\IPODSERVICE.EXE-716E0AD1.pf
O45 - LFCP:[MD5.7B3FEBBC53327020410D4EEFB1501F7D] - 14/06/2013 - 08:35:44 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-8CE1A322.pf
O45 - LFCP:[MD5.D6A9FB0824B7E37CC4A6ED57798FA71C] - 14/06/2013 - 08:35:46 ---A- - C:\Windows\Prefetch\WSQMCONS.EXE-4048402C.pf
O45 - LFCP:[MD5.A1061B37F00BD1779D26B5947ACDBCC9] - 14/06/2013 - 08:35:47 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-16B291C4.pf
O45 - LFCP:[MD5.C9B8E01A8B1497CB891318FB0B4228A4] - 14/06/2013 - 08:35:51 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-8FFB1633.pf
O45 - LFCP:[MD5.564A06E13742609530C6593DADB5EF9E] - 14/06/2013 - 08:35:56 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-B597A9D1.pf
O45 - LFCP:[MD5.FCF6960BCF5F8C767FAA5F6FF9F42525] - 14/06/2013 - 08:35:58 ---A- - C:\Windows\Prefetch\REGSVR32.EXE-03D3FB87.pf
O45 - LFCP:[MD5.349DAF2B243C7DCC9BE494C7AB370850] - 14/06/2013 - 08:35:58 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-CA89C065.pf
O45 - LFCP:[MD5.1FA0EE19F4DAA287B6E01F7F6BE05E55] - 14/06/2013 - 08:36:00 ---A- - C:\Windows\Prefetch\MBAM.EXE-493D9B94.pf
O45 - LFCP:[MD5.AFF0037B0694D009B8959F8204EFE1B5] - 14/06/2013 - 08:36:03 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-CDBFC0F7.pf
O45 - LFCP:[MD5.0CFBEF71AA5B9E631EC9F0012812BAD2] - 14/06/2013 - 08:36:18 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-2E02FDCA.pf
O45 - LFCP:[MD5.DD2D5892CD0BE872F0D9DA16CBF83DB0] - 14/06/2013 - 08:36:44 ---A- - C:\Windows\Prefetch\WMPNSCFG.EXE-18FC9E64.pf
O45 - LFCP:[MD5.F5845E9BC5E7345B1414F05156A4CB24] - 14/06/2013 - 08:37:13 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-BB21CD77.pf
O45 - LFCP:[MD5.91415B735FD6686EBDD2D872F334719E] - 14/06/2013 - 08:37:19 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-E8B8DD29.pf
O45 - LFCP:[MD5.8511BFDA298F563DD79DC449551C62AB] - 14/06/2013 - 08:37:30 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-766EFF52.pf
O45 - LFCP:[MD5.B200B338C685C45227E232CC6F2AEFA4] - 14/06/2013 - 08:38:36 ---A- - C:\Windows\Prefetch\MPAS-D_BD_1.151.1977.0.EXE-E8EF6C9D.pf
O45 - LFCP:[MD5.4255644D20878FA6E3E385B86CDA9AD9] - 14/06/2013 - 08:38:36 ---A- - C:\Windows\Prefetch\MPMINISIGSTUB.EXE-24CB7EAA.pf
O45 - LFCP:[MD5.C6211D509E5ED1447CEA0AD0C8F4DDA9] - 14/06/2013 - 08:38:36 ---A- - C:\Windows\Prefetch\MPSIGSTUB.EXE-5D0450B3.pf
O45 - LFCP:[MD5.1E29D5C63CA8189DCCDEC27E0AD26C70] - 14/06/2013 - 08:38:37 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-5D573F0E.pf
O45 - LFCP:[MD5.FBC0AD84B40321721215F97C4C06F7E4] - 14/06/2013 - 08:45:41 ---A- - C:\Windows\Prefetch\WERMGR.EXE-F439C551.pf
O45 - LFCP:[MD5.6A5E018196B201A9C0F3368092987B21] - 14/06/2013 - 08:45:51 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-31898C74.pf
O45 - LFCP:[MD5.DE80628594908D8052F1DEFC5FAA77F3] - 14/06/2013 - 08:47:46 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-D49D3641.pf
O45 - LFCP:[MD5.02370AD313B557386F20D7E7E69901CC] - 14/06/2013 - 09:09:11 ---A- - C:\Windows\Prefetch\AVASTUI.EXE-80877700.pf
O45 - LFCP:[MD5.EBE3FA6F5292B66FAC733E1661BED621] - 14/06/2013 - 10:12:00 ---A- - C:\Windows\Prefetch\ADWCLEANER.EXE-0070DC3C.pf
O45 - LFCP:[MD5.C31E2E40B97147139E594DF25E250E88] - 14/06/2013 - 10:33:08 ---A- - C:\Windows\Prefetch\PMMDATAMGR.EXE-BD59C7AD.pf
O45 - LFCP:[MD5.5E3BF6A072206323B0E793B67E1738E4] - 14/06/2013 - 11:24:41 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-D096D5BE.pf
O45 - LFCP:[MD5.FFBA97B4A0007E46A10E715E23DCD047] - 14/06/2013 - 11:25:27 ---A- - C:\Windows\Prefetch\PREVHOST.EXE-7DD93B84.pf
O45 - LFCP:[MD5.30307FB36603FF0E3AB36F9BAE01244C] - 14/06/2013 - 11:25:29 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-63B92852.pf
O45 - LFCP:[MD5.13F13C7FF2C9FC8FA307577533D7BC29] - 14/06/2013 - 11:45:17 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.F93DBD20B66E98163CB782EE4DDC2AFC] - 14/06/2013 - 11:45:20 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.D02224784F18A911EECF838BD06F9C5F] - 14/06/2013 - 11:45:28 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.27D41CD06E83BA6D4B3AA739B511BA6A] - 14/06/2013 - 11:45:31 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.D1ECA0CF2B1ECDB7EC68F783E54F426F] - 14/06/2013 - 11:49:04 ---A- - C:\Windows\Prefetch\WLMAIL.EXE-EC6E2196.pf
O45 - LFCP:[MD5.67E33C2B7339EC10EBE7C3CF5B6FEED8] - 14/06/2013 - 11:49:34 ---A- - C:\Windows\Prefetch\WLCOMM.EXE-81BAE51F.pf
O45 - LFCP:[MD5.9B6F107EC594B0FCD163AB6660021EF9] - 14/06/2013 - 12:02:38 ---A- - C:\Windows\Prefetch\RAREXTLOADER.EXE-BC94E7C6.pf
O45 - LFCP:[MD5.8871FD4AE7C586823776B780D6D604F7] - 14/06/2013 - 12:35:48 ---A- - C:\Windows\Prefetch\AVASTEMUPDATE.EXE-BFB3347B.pf
O45 - LFCP:[MD5.8AE5F46E018A169D54E90694D9E4152A] - 14/06/2013 - 12:56:36 ---A- - C:\Windows\Prefetch\DEFRAG.EXE-3D9E8D72.pf
O45 - LFCP:[MD5.BA7FD9DA3F2AB393A08D5E0379CA3998] - 14/06/2013 - 12:56:38 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-67EC2DA7.pf
O45 - LFCP:[MD5.D627D217F2E07888A1EAA9BB5E33AB94] - 14/06/2013 - 12:59:32 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-6FD72002.pf
O45 - LFCP:[MD5.1D79E61C49D9FF23306A0CF1842D504F] - 14/06/2013 - 13:06:27 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-51CCB287.pf
O45 - LFCP:[MD5.26E8AD180F266EDBB0CC8230DC200A8F] - 14/06/2013 - 13:06:33 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-6A249820.pf
O45 - LFCP:[MD5.0BFAED0E31FE74ADCF2496319E9F1B51] - 14/06/2013 - 13:06:33 ---A- - C:\Windows\Prefetch\VSSVC.EXE-6C8F0C66.pf
O45 - LFCP:[MD5.AC31D0A08E6C3EDDE4C889DB04D3022E] - 14/06/2013 - 13:41:54 ---A- - C:\Windows\Prefetch\Layout.ini
O45 - LFCP:[MD5.2131AA6D7C0893E7E2B901C41206D51E] - 14/06/2013 - 16:36:42 ---A- - C:\Windows\Prefetch\AVAST.SETUP-0294E3FE.pf
O45 - LFCP:[MD5.9C64261A30ED95074B1397095E96ED09] - 14/06/2013 - 16:36:43 ---A- - C:\Windows\Prefetch\AVBUGREPORT.EXE-5143447C.pf
O45 - LFCP:[MD5.C35D76CC8293A0075E5BEAD5BD813887] - 14/06/2013 - 17:34:03 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-0D53616E.pf
O45 - LFCP:[MD5.0778E1521A345C8CE6AD7AE8A8C5DB5D] - 14/06/2013 - 19:45:01 ---A- - C:\Windows\Prefetch\FACEBOOKUPDATE.EXE-4857F550.pf
O45 - LFCP:[MD5.C9B8FE6295D087922A69E9C7050E9C62] - 14/06/2013 - 20:21:14 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-08297516.pf
O45 - LFCP:[MD5.4C691B1191C40601F0FBAD48A6FF0E0D] - 14/06/2013 - 20:21:37 ---A- - C:\Windows\Prefetch\AUDIODG.EXE-AB22E9A6.pf
O45 - LFCP:[MD5.45DE6F00AF32D22B389E4794347025BC] - 14/06/2013 - 20:21:38 ---A- - C:\Windows\Prefetch\ZHPDIAG2.EXE-A98F0EFB.pf
O45 - LFCP:[MD5.56E68B71D138903EC704045724208E8B] - 14/06/2013 - 20:21:38 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-ACB4B4A8.pf
O45 - LFCP:[MD5.E8BD30202F55C3E6914C2B861C3D6D5A] - 14/06/2013 - 20:22:11 ---A- - C:\Windows\Prefetch\ZHPHEP.EXE-C2B15C05.pf
O45 - LFCP:[MD5.B91F47BB76480DD07943E35CC4917B23] - 14/06/2013 - 20:22:21 ---A- - C:\Windows\Prefetch\ZHPFIX.EXE-F129D6B7.pf
O45 - LFCP:[MD5.633C794C99DC125FBDE8333F79EAE22D] - 14/06/2013 - 20:24:11 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-4B6CB38A.pf
O45 - LFCP:[MD5.BC272EB9D102E3BABC653D9F9F0B04AA] - 14/06/2013 - 20:24:57 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-3704010084-1879142336-3890524549-1000.db
O45 - LFCP:[MD5.8E583A37D85E8D64D44F14C3B8D1D595] - 14/06/2013 - 20:24:57 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-3704010084-1879142336-3890524549-1000.db
O45 - LFCP:[MD5.5AD9CA0614AC5083F3D727FCCC8D5162] - 14/06/2013 - 20:26:43 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-C5670914.pf
O45 - LFCP:[MD5.8C6FFDFF04A44BF62378BFF344619ACF] - 14/06/2013 - 20:26:44 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-44162447.pf
O45 - LFCP:[MD5.233AE90B2CEC7F54BBDB9C072DCA2EE3] - 14/06/2013 - 20:26:44 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-69C456C3.pf
O45 - LFCP:[MD5.3C68B3160E90817C3A2E024BED3D6991] - 14/06/2013 - 20:28:58 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-A0F5E092.pf
O45 - LFCP:[MD5.9B67EE42B52A8CE5F3706AF6F28B7923] - 14/06/2013 - 20:31:00 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-0E1E7B82.pf
O45 - LFCP:[MD5.F6A92BC1B97D8F4301C53440DD0CA10C] - 14/06/2013 - 20:31:10 ---A- - C:\Windows\Prefetch\TASKENG.EXE-35FA9C06.pf
O45 - LFCP:[MD5.327FCA01498AC0344D158AD0EE4C9190] - 14/06/2013 - 20:31:42 ---A- - C:\Windows\Prefetch\MPCMDRUN.EXE-2C9109F9.pf
O45 - LFCP:[MD5.3747CAA667329DCE4E2031CB7E2CCE87] - 14/06/2013 - 20:33:00 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-0129C0B2.pf
O45 - LFCP:[MD5.9CE240E5D82D94CFC66EC5658705611B] - 14/06/2013 - 20:33:50 ---A- - C:\Windows\Prefetch\CONSENT.EXE-40419367.pf
O45 - LFCP:[MD5.41155E39667C222E6C2E065CA90100F8] - 14/06/2013 - 20:33:50 ---A- - C:\Windows\Prefetch\ZHPHEP.EXE-257D8644.pf
O45 - LFCP:[MD5.DFF1BF24544B626C96050CDC25EE0F2A] - 14/06/2013 - 20:33:55 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-6389524F.pf
O45 - LFCP:[MD5.71AAAF667D509384A6A7B3295CB64BC3] - 14/06/2013 - 20:33:58 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-960426D8.pf
O45 - LFCP:[MD5.84542EE4B46F1C624E464CBB4F158FAA] - 14/06/2013 - 20:34:00 ---A- - C:\Windows\Prefetch\ZHPDIAG.EXE-6A1D0894.pf
O45 - LFCP:[MD5.EF83767BD71556E6F8BA261061AED64F] - 14/06/2013 - 20:34:27 ---A- - C:\Windows\Prefetch\CHROME.EXE-5349D2D7.pf
O45 - LFCP:[MD5.56DF54A00056C7EF06F5AAC5BF31F56B] - 14/06/2013 - 20:34:27 ---A- - C:\Windows\Prefetch\CONHOST.EXE-0C6456FB.pf
O45 - LFCP:[MD5.362CE1BBB4E576811C904292E1204CAF] - 14/06/2013 - 20:34:27 ---A- - C:\Windows\Prefetch\CSCRIPT.EXE-FCD9ABA9.pf
O45 - LFCP:[MD5.67BA49004C25ABF14155D4954062384F] - 14/06/2013 - 20:34:27 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-39F97B2D.pf
O45 - LFCP:[MD5.1D987B86D6F9DDA90F4A665159DA1B63] - 14/06/2013 - 20:34:28 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-96070FE0.pf
O45 - LFCP:[MD5.D3D6AFB87F2A7626E6E81DF0F0C35091] - 14/06/2013 - 20:34:44 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-6E1A6101.pf
O45 - LFCP:[MD5.14FF9F3548A58E4E845E540BE169390D] - 14/06/2013 - 20:34:56 ---A- - C:\Windows\Prefetch\PV.EXE-0748338F.pf
O45 - LFCP:[MD5.F3C4D80D65AAED6B85A2B57CC2B799AA] - 14/06/2013 - 20:35:15 ---A- - C:\Windows\Prefetch\CMD.EXE-6D6290C5.pf
O45 - LFCP:[MD5.4FD2AF0595B003354A20ADABE6A27543] - 14/06/2013 - 20:35:15 ---A- - C:\Windows\Prefetch\SUBINACL.EXE-3DCC0576.pf
O45 - LFCP:[MD5.009AB77ECB5E4F84F1B820E4B47BD436] - 14/06/2013 - 20:35:27 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-DC1676CD.pf
O45 - LFCP:[MD5.740561C8FAE5F81C9E5B62717654A605] - 26/05/2013 - 20:49:33 ---A- - C:\Windows\Prefetch\AgCx_SC2.db
~ Prefetcher: 135 Scanned in 00mn 01s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll
~ LSA: 9 Scanned in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ CSB: 13 Scanned in 00mn 00s



---\\ MountPoints2 Shell Key (O51)
O51 - MPSK:{00bddde5-2beb-11df-9e88-001f16c081b5}\AutoRun\command. (...) -- E:\autorunner.exe (.not file.)
O51 - MPSK:{eacd5ac8-c6b5-11de-a23d-001f16c081b5}\AutoRun\command - Clé orpheline
O51 - MPSK:{fa1c7f02-84b6-11e1-b53f-001f16c081b5}\AutoRun\command. (...) -- F:\KODAK_Camera_Setup_App.exe (.not file.)
~ Keys:  Scanned in 00mn 00s



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ TDSD: 2 Scanned in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\Adobe ARM  [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O53 - SMSR:HKLM\...\startupreg\AdobeCS5ServiceManager  [Key] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
O53 - SMSR:HKLM\...\startupreg\d31ybB8YFv9cUxg  [Key] . (...) -- C:\Users\AZO\AppData\Roaming\itunes_service01.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite  [Key] . (...) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Hiyo  [Key] . (...) -- C:\Program Files (x86)\HiYo\bin\HiYo.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\QuickTime Task  [Key] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O53 - SMSR:HKLM\...\startupreg\Skype  [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
~ SMSR Keys: 7 Scanned in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Scanned in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
~ MWPE Keys: 3 Scanned in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys   [491088]
O58 - SDL:[MD5.D5BCB77BE83CF99F508943945D46343D] - 26/03/2009 - 20:16:08 ---A- . (.Dritek System Inc. - Dritek 64-bit PS/2 Keyboard Filter Driver.) -- C:\Windows\SysWOW64\drivers\DKbFltr.sys   [25608]
~ Drivers:  Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 11/06/2013 - 08:26:07 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3DEQK6PZ\macromedia.com\support\flashplayer\sys\#www.tripadvisor.fr\settings.sol   [88]
O61 - LFC: 11/06/2013 - 08:54:26 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3DEQK6PZ\macromedia.com\support\flashplayer\sys\#cdncache3-a.akamaihd.net\settings.sol   [94]
O61 - LFC: 11/06/2013 - 09:04:32 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3DEQK6PZ\macromedia.com\support\flashplayer\sys\#carnac.monuments-nationaux.fr\settings.sol   [99]
O61 - LFC: 11/06/2013 - 09:50:36 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extension State\000517.sst   [367]
O61 - LFC: 11/06/2013 - 17:13:55 ---A- C:\Users\AZO\AppData\Roaming\Apple Computer\Preferences\com.apple.iTunes.plist   [679]
O61 - LFC: 11/06/2013 - 17:41:31 ---A- C:\Users\AZO\Music\iTunes\iTunes Library Extras.itdb   [16384]
O61 - LFC: 11/06/2013 - 17:41:37 ---A- C:\Users\AZO\AppData\Local\Apple Computer\iTunes\iPodDevices.xml   [1500]
O61 - LFC: 11/06/2013 - 17:41:39 ---A- C:\Users\AZO\AppData\Local\Apple Computer\iTunes\iTunesPrefs.xml   [1440375]
O61 - LFC: 11/06/2013 - 17:41:39 ---A- C:\Users\AZO\AppData\Roaming\Apple Computer\iTunes\iTunesPrefs.xml   [195480]
O61 - LFC: 11/06/2013 - 17:41:39 ---A- C:\Users\AZO\Music\iTunes\iTunes Library.itl   [112568]
O61 - LFC: 11/06/2013 - 17:41:39 ---A- C:\Users\AZO\Music\iTunes\iTunes Music Library.xml   [635097]
O61 - LFC: 11/06/2013 - 17:41:39 --HA- C:\Users\AZO\Music\iTunes\sentinel   [8]
O61 - LFC: 12/06/2013 - 12:11:54 ---A- C:\Users\AZO\AppData\Local\Temp\CT2737658\ddt.csf   [351]
O61 - LFC: 12/06/2013 - 12:22:51 ---A- C:\Users\AZO\AppData\Local\Temp\apnuserid.dat   [16]
O61 - LFC: 12/06/2013 - 12:22:51 ---A- C:\Users\AZO\AppData\Local\Temp\appid.dat   [1]
O61 - LFC: 12/06/2013 - 12:22:51 ---A- C:\Users\AZO\AppData\Local\Temp\trackid.dat   [6]
O61 - LFC: 12/06/2013 - 12:22:52 ---A- C:\Users\AZO\AppData\Local\Temp\apnPixel.txt   [0]
O61 - LFC: 12/06/2013 - 12:22:52 ---A- C:\Users\AZO\AppData\Local\Temp\sysid.dat   [3]
O61 - LFC: 12/06/2013 - 12:24:11 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Archived History   [57344]
O61 - LFC: 12/06/2013 - 12:24:11 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Archived History-journal   [512]
O61 - LFC: 12/06/2013 - 12:24:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Bookmarks   [33728]
O61 - LFC: 12/06/2013 - 12:24:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Bookmarks.bak   [33728]
O61 - LFC: 12/06/2013 - 12:24:13 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Cache\index   [524656]
O61 - LFC: 12/06/2013 - 12:24:14 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Network Action Predictor   [13312]
O61 - LFC: 12/06/2013 - 12:24:14 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Network Action Predictor-journal   [3608]
O61 - LFC: 12/06/2013 - 12:24:14 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Shortcuts   [12288]
O61 - LFC: 12/06/2013 - 12:24:14 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Shortcuts-journal   [512]
O61 - LFC: 12/06/2013 - 12:24:14 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Top Sites   [20480]
O61 - LFC: 12/06/2013 - 12:24:14 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\User StyleSheets\Custom.css   [0]
O61 - LFC: 12/06/2013 - 12:24:15 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ohimbkoaphfnmekmfppijeblmkncneed\1.0.0.3257_0\background.js   [720]
O61 - LFC: 12/06/2013 - 12:24:15 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ohimbkoaphfnmekmfppijeblmkncneed\1.0.0.3257_0\icon_128.png   [5330]
O61 - LFC: 12/06/2013 - 12:24:15 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ohimbkoaphfnmekmfppijeblmkncneed\1.0.0.3257_0\manifest.json   [614]
O61 - LFC: 12/06/2013 - 12:24:15 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ohimbkoaphfnmekmfppijeblmkncneed\1.0.0.3257_0\torch_music_icon19x19.png   [681]
O61 - LFC: 12/06/2013 - 12:24:15 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Top Sites-journal   [12824]
O61 - LFC: 12/06/2013 - 12:24:18 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\eu\messages.json   [243]
O61 - LFC: 12/06/2013 - 12:24:18 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Torrent\settings.json   [1148]
O61 - LFC: 12/06/2013 - 12:24:19 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\OurLocalPage.html   [94]
O61 - LFC: 12/06/2013 - 12:24:19 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Origin Bound Certs   [7168]
O61 - LFC: 12/06/2013 - 12:24:19 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Origin Bound Certs-journal   [3608]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\config\skin\css\new-tab.css   [7070]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\config\skin\images\IDR_WEBSTORE_ICON.png   [7070]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\config\skin\images\fav_amazon.png   [653]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\config\skin\images\fav_ebay.png   [1192]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\config\skin\images\fav_facebook.png   [1398]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\config\skin\images\fav_fantastigames.png   [1539]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\config\skin\images\fav_ftalk.png   [1208]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\config\skin\images\fav_youtube.png   [1656]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\config\skin\new-tab.html   [3203]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\lib\analytics.js   [378]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\lib\constant.js   [192]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\lib\default-config.js   [1413]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\lib\jquery.js   [93868]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\lib\localStorage.js   [520]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\lib\new-tab.js   [12664]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\lib\preferences.js   [766]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\DECODED_IMAGES   [65654]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\DECODED_MESSAGE_CATALOGS   [24]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\no\messages.json   [218]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_4635\CRX_INSTALL\main.html   [92]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_4635\CRX_INSTALL\main.js   [79]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_4635\DECODED_IMAGES   [66674]
O61 - LFC: 12/06/2013 - 12:24:20 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_4635\DECODED_MESSAGE_CATALOGS   [24]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\config\skin\images\imesh_logo_128.png   [21680]   =>PUP.iMesh
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_29699\CRX_INSTALL\manifest.json   [886]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\128.png   [7654]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\ar\messages.json   [422]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\bg\messages.json   [559]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\ca\messages.json   [265]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\cs\messages.json   [283]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\da\messages.json   [251]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\de\messages.json   [256]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\el\messages.json   [565]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\en_GB\messages.json   [249]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\en_US\messages.json   [249]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\es\messages.json   [259]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\es_419\messages.json   [259]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\et\messages.json   [259]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\fi\messages.json   [277]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\fil\messages.json   [260]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\fr\messages.json   [260]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\he\messages.json   [438]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\hi\messages.json   [492]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\hr\messages.json   [263]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\hu\messages.json   [276]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\id\messages.json   [261]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\it\messages.json   [258]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\ja\messages.json   [395]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\ko\messages.json   [365]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\lt\messages.json   [309]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\lv\messages.json   [262]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\ms\messages.json   [254]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\nl\messages.json   [250]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\pl\messages.json   [261]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\pt_BR\messages.json   [250]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\pt_PT\messages.json   [272]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\ro\messages.json   [309]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\ru\messages.json   [614]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\sk\messages.json   [293]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\sl\messages.json   [268]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\sr\messages.json   [467]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\sv\messages.json   [261]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\th\messages.json   [521]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\tr\messages.json   [302]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\uk\messages.json   [657]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\vi\messages.json   [321]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\zh_CN\messages.json   [360]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\_locales\zh_TW\messages.json   [348]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\CRX_INSTALL\manifest.json   [981]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\DECODED_IMAGES   [65594]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_3805\DECODED_MESSAGE_CATALOGS   [12003]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_4635\CRX_INSTALL\icon_128.png   [3009]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_4635\CRX_INSTALL\icon_16.png   [143]
O61 - LFC: 12/06/2013 - 12:24:22 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_6596_4635\CRX_INSTALL\manifest.json   [649]
O61 - LFC: 12/06/2013 - 13:20:51 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\OurLocalPage.html   [94]
O61 - LFC: 12/06/2013 - 13:20:51 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\lib\analytics.js   [378]
O61 - LFC: 12/06/2013 - 13:20:51 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\lib\constant.js   [192]
O61 - LFC: 12/06/2013 - 13:20:51 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\lib\default-config.js   [1413]
O61 - LFC: 12/06/2013 - 13:20:51 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\lib\jquery.js   [93868]
O61 - LFC: 12/06/2013 - 13:20:51 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\lib\localStorage.js   [520]
O61 - LFC: 12/06/2013 - 13:20:51 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\lib\new-tab.js   [12664]
O61 - LFC: 12/06/2013 - 13:20:51 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\lib\preferences.js   [766]
O61 - LFC: 12/06/2013 - 13:20:51 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\lecpjhggilhbceadobnggaagnpfpafhg\25.0.0.3359_0\TorchHelper.dll   [267104]
O61 - LFC: 12/06/2013 - 13:20:51 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\lecpjhggilhbceadobnggaagnpfpafhg\25.0.0.3359_0\background.html   [150]
O61 - LFC: 12/06/2013 - 13:20:51 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\lecpjhggilhbceadobnggaagnpfpafhg\25.0.0.3359_0\bg.js   [7159]
O61 - LFC: 12/06/2013 - 13:20:51 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\lecpjhggilhbceadobnggaagnpfpafhg\25.0.0.3359_0\cont.js   [7317]
O61 - LFC: 12/06/2013 - 13:20:52 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\config\skin\css\new-tab.css   [7070]
O61 - LFC: 12/06/2013 - 13:20:52 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\config\skin\images\IDR_WEBSTORE_ICON.png   [7070]
O61 - LFC: 12/06/2013 - 13:20:52 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\config\skin\images\fav_amazon.png   [653]
O61 - LFC: 12/06/2013 - 13:20:52 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\config\skin\images\fav_ebay.png   [1192]
O61 - LFC: 12/06/2013 - 13:20:52 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\config\skin\images\fav_facebook.png   [1398]
O61 - LFC: 12/06/2013 - 13:20:52 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\config\skin\images\fav_fantastigames.png   [1539]
O61 - LFC: 12/06/2013 - 13:20:52 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\config\skin\images\fav_ftalk.png   [1208]
O61 - LFC: 12/06/2013 - 13:20:52 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\config\skin\images\fav_youtube.png   [1656]
O61 - LFC: 12/06/2013 - 13:20:52 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\config\skin\new-tab.html   [3203]
O61 - LFC: 12/06/2013 - 13:20:52 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\manifest.json   [886]
O61 - LFC: 12/06/2013 - 13:20:52 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\lecpjhggilhbceadobnggaagnpfpafhg\25.0.0.3359_0\icon.png   [8080]
O61 - LFC: 12/06/2013 - 13:20:52 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\lecpjhggilhbceadobnggaagnpfpafhg\25.0.0.3359_0\manifest.json   [1052]
O61 - LFC: 12/06/2013 - 13:20:53 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\ddjobbmbkpnhmiloopddfpnedcmhcdpg\5.0.0.7308_0\config\skin\images\imesh_logo_128.png   [21680]   =>PUP.iMesh
O61 - LFC: 12/06/2013 - 13:20:53 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Visited Links   [131072]
O61 - LFC: 12/06/2013 - 13:20:55 ---A- C:\Users\AZO\AppData\Local\Temp\scoped_dir_3040_29002\CRX_INSTALL\tb\al\wa\NOTIFICATION\images\upArrow.png   [0]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\background.html   [507]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\add_search_engine_border.png   [1289]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\add_search_engine_border@2x.png   [4150]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\empty_item.png   [998]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\empty_item@2x.png   [15128]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\header_close_button.png   [1032]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\header_close_button@2x.png   [1375]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\icon_search.png   [1307]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\icon_search@2x.png   [2140]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\torch_32x32.png   [1965]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\js\background.js   [5603]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\js\content.js   [9958]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\js\dropAreas.js   [23398]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\js\dropHints.js   [6708]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\js\extensions.js   [1671]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\js\lib\angular-ui.min.js   [15773]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\js\lib\angular.min.js   [78948]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\js\lib\jquery-1.8.3.min.js   [93637]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\js\lib\jquery-ui-1.9.2.custom.min.js   [237802]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\js\options.js   [7086]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\js\repositories.js   [9338]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\js\tabs.js   [3964]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\plugin\TorchPlugin.dll   [170848]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\src\options.html   [3910]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Login Data   [12288]
O61 - LFC: 12/06/2013 - 13:22:47 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Login Data-journal   [512]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\btn_settings.png   [2243]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\btn_settings@2x.png   [5832]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\close_button.png   [48611]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\close_button@2x.png   [1784]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\close_button_hover.png   [49173]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\close_button_hover@2x.png   [2007]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\dropToSearchHint.png   [8048]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\dropToSearchHint@2x.png   [35795]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\dropToSearchHintBubble.png   [4219]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\dropToSearchHintBubble@2x.png   [21393]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\dropToShareHint.png   [7996]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\dropToShareHint@2x.png   [34720]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\dropToShareHintBubble.png   [4270]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\dropToShareHintBubble@2x.png   [24372]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\pinterestError\closeBtn.png   [1055]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\pinterestError\messageBox.png   [4657]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\pinterestError\okBtn-rollover.png   [1410]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\pinterestError\okBtn.png   [1431]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\facebook-search-content.png   [2012]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\facebook-search-content@2x.png   [5989]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\facebook-share-content.png   [1880]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\facebook-share-content@2x.png   [5680]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\google-images-content.png   [6235]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\google-images-content@2x.png   [26270]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\google-plus-center-content.png   [1826]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\google-plus-center-content@2x.png   [5309]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\google-translate-content.png   [8960]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\google-translate-content@2x.png   [34941]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\linkedin-content.png   [2049]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\linkedin-content@2x.png   [6420]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\pinterest-content.png   [3361]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\pinterest-content@2x.png   [8269]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\stumbleupon-content.png   [1691]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\stumbleupon-content@2x.png   [4521]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\twitter-content.png   [2042]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\twitter-content@2x.png   [5959]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\video-search-content.png   [5014]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\video-search-content@2x.png   [13550]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\web-search-content.png   [10034]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\web-search-content@2x.png   [40854]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\wikipedia-content.png   [12278]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\content\providers\wikipedia-content@2x.png   [41969]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\checkbox\checked.png   [1084]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\checkbox\checked@2x.png   [2091]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\checkbox\checked_hover.png   [1076]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\checkbox\checked_hover@2x.png   [1784]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\checkbox\unchecked.png   [953]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\checkbox\unchecked@2x.png   [1273]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\checkbox\unchecked_hover.png   [950]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\checkbox\unchecked_hover@2x.png   [1354]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\icon_share.png   [1255]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\icon_share@2x.png   [2015]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\facebook-search-options.png   [2314]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\facebook-search-options@2x.png   [12514]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\facebook-share-options.png   [7289]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\facebook-share-options@2x.png   [30198]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\google-images-options.png   [4836]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\google-images-options@2x.png   [21715]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\google-plus-options.png   [2305]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\google-plus-options@2x.png   [9714]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\google-translate-options.png   [5638]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\google-translate-options@2x.png   [19979]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\linkedin-options.png   [2299]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\linkedin-options@2x.png   [10667]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\new-provider-options.png   [1015]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\new-provider-options@2x.png   [1015]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\pinterest-options.png   [4723]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\pinterest-options@2x.png   [18931]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\stumbleupon-options.png   [3517]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\stumbleupon-options@2x.png   [13063]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\twitter-options.png   [5150]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\twitter-options@2x.png   [21668]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\video-search-options.png   [4665]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\video-search-options@2x.png   [15179]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\web-search-options.png   [6157]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\web-search-options@2x.png   [27430]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\wikipedia-options.png   [5973]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\providers\wikipedia-options@2x.png   [22659]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\search_engine_close_button.png   [1064]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\search_engine_close_button@2x.png   [3405]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\vertical_border.png   [983]
O61 - LFC: 12/06/2013 - 13:22:48 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\options\vertical_border@2x.png   [1557]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\_locales\de\messages.json   [936]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\_locales\en\messages.json   [807]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\_locales\es\messages.json   [921]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\_locales\fr\messages.json   [994]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\_locales\it\messages.json   [897]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\_locales\pt\messages.json   [948]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\_locales\tr\messages.json   [988]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\css\angular-ui.min.css   [373]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\css\content.css   [4396]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\css\fonts.css   [815]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\css\jquery-ui-1.9.2.custom.min.css   [26141]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\css\options.css   [7383]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\fonts\MTP_ySUJH_bn48VBG8sNSnhCUOGz7vYGh680lGh-uXM.woff   [22604]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\fonts\cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff   [21956]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\fonts\k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff   [22748]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\search128.png   [10097]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\search16.png   [631]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\search32.png   [1594]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\images\search48.png   [2843]
O61 - LFC: 12/06/2013 - 13:22:49 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Extensions\cipmepknanmbbaneimacddfemfbfgpgo\1.1.0.3257_0\manifest.json   [4271]
O61 - LFC: 12/06/2013 - 13:22:50 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Cache\data_2   [1056768]
O61 - LFC: 12/06/2013 - 13:22:50 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Favicons   [223232]
O61 - LFC: 12/06/2013 - 13:22:50 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Favicons-journal   [16384]
O61 - LFC: 12/06/2013 - 13:22:55 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Cache\f_000001   [19329]
O61 - LFC: 12/06/2013 - 13:22:56 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Sync Extension Settings\cipmepknanmbbaneimacddfemfbfgpgo\LOCK   [0]
O61 - LFC: 12/06/2013 - 13:22:57 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Local Storage\http_home.torchbrowser.com_0.localstorage   [286720]
O61 - LFC: 12/06/2013 - 13:22:57 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Local Storage\http_home.torchbrowser.com_0.localstorage-journal   [5672]
O61 - LFC: 12/06/2013 - 13:23:03 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Sync Extension Settings\cipmepknanmbbaneimacddfemfbfgpgo\000005.sst   [9324]
O61 - LFC: 12/06/2013 - 13:23:04 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Last Session   [1105]
O61 - LFC: 12/06/2013 - 13:23:04 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Last Tabs   [850]
O61 - LFC: 12/06/2013 - 13:23:04 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Sync Extension Settings\cipmepknanmbbaneimacddfemfbfgpgo\LOG.old   [260]
O61 - LFC: 12/06/2013 - 13:23:08 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Web Data   [73728]
O61 - LFC: 12/06/2013 - 13:23:08 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Web Data-journal   [6680]
O61 - LFC: 12/06/2013 - 13:23:10 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Sync Extension Settings\cipmepknanmbbaneimacddfemfbfgpgo\CURRENT   [16]
O61 - LFC: 12/06/2013 - 13:23:10 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Sync Extension Settings\cipmepknanmbbaneimacddfemfbfgpgo\MANIFEST-000007   [96]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Cache\data_0   [45056]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Cache\data_1   [270336]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Cache\data_3   [4202496]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Cookies   [6144]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Cookies-journal   [4640]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Current Session   [1904]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Current Tabs   [850]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\History   [241664]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\History Index 2013-06   [176128]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\History Index 2013-06-journal   [16384]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\History Provider Cache   [110508]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\History-journal   [16384]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Managed Mode Settings   [8]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Preferences   [75781]
O61 - LFC: 12/06/2013 - 13:23:12 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Default\Sync Extension Settings\cipmepknanmbbaneimacddfemfbfgpgo\LOG   [142]
O61 - LFC: 12/06/2013 - 13:25:01 ---A- C:\Users\AZO\AppData\Local\Torch\User Data\Local State   [4274]
O61 - LFC: 12/06/2013 - 14:44:10 ---A- C:\Users\AZO\Music\Eminem-Recovery-(Retail)-2010-[NoFS]\01-Eminem-Cold Wind Blows.mp3   [12185536]
O61 - LFC: 12/06/2013 - 14:44:24 ---A- C:\Users\AZO\Music\Eminem-Recovery-(Retail)-2010-[NoFS]\09-Eminem Ft. Lil Wayne-No Love (Prod. By Just Blaze).mp3   [12015616]
O61 - LFC: 12/06/2013 - 14:45:11 ---A- C:\Users\AZO\Music\Eminem-Recovery-(Retail)-2010-[NoFS]\15-Eminem Ft. Rihanna-Love The Way You Lie (Prod. By Alex Da Kid).mp3   [10570816]
O61 - LFC: 12/06/2013 - 14:50:06 ---A- C:\Users\AZO\Music\3605511\Shaka Ponk (ShakaPonk) - The Geeks and the Jerkin' Socks - 2011\03 Brunette Localicious.mp3   [3561600]
O61 - LFC: 12/06/2013 - 18:26:02 ---A- C:\Users\AZO\Music\3605511\Shaka Ponk (ShakaPonk) - The Geeks and the Jerkin' Socks - 2011\01 Let's Bang.mp3   [3885818]
O61 - LFC: 12/06/2013 - 18:26:18 ---A- C:\Users\AZO\Music\3605511\Shaka Ponk (ShakaPonk) - The Geeks and the Jerkin' Socks - 2011\02 I'm Picky.mp3   [3750649]
O61 - LFC: 12/06/2013 - 18:28:52 ---A- C:\Users\AZO\Music\Archimede\Archimède - Le bonheur.mp3   [2777213]
O61 - LFC: 12/06/2013 - 18:28:52 ---A- C:\Users\AZO\Music\Archimede\fear facteur - ARCHIMèDE.mp3   [4297460]
O61 - LFC: 12/06/2013 - 18:28:53 ---A- C:\Users\AZO\Music\Archimede\Archimède je prends.mp3   [3674279]
O61 - LFC: 12/06/2013 - 18:28:54 ---A- C:\Users\AZO\Music\Archimede\Archimède - Nos vies d'avant.mp3   [2981595]
O61 - LFC: 12/06/2013 - 18:28:54 ---A- C:\Users\AZO\Music\Archimede\Archimède - Passe Par Paris - 10.07.09.mp3   [3451250]
O61 - LFC: 12/06/2013 - 18:28:55 ---A- C:\Users\AZO\Music\Archimede\Archimède - Les Petites Mains.mp3   [2907617]
O61 - LFC: 12/06/2013 - 18:28:55 ---A- C:\Users\AZO\Music\Archimede\Archimède - Les premiers lundis de Septembre.mp3   [4371728]
O61 - LFC: 12/06/2013 - 18:28:56 ---A- C:\Users\AZO\Music\Archimede\Archimède   On aura tout essayé.mp3   [3769030]
O61 - LFC: 12/06/2013 - 18:28:56 ---A- C:\Users\AZO\Music\Archimede\Archimède - L'été revient.mp3   [3091519]
O61 - LFC: 12/06/2013 - 18:28:57 ---A- C:\Users\AZO\Music\Archimede\Archimède - Bye bye bailleur.mp3   [3980518]
O61 - LFC: 12/06/2013 - 18:28:57 ---A- C:\Users\AZO\Music\Archimede\Archimède - Est-ce que c'est juste _.mp3   [2594983]
O61 - LFC: 12/06/2013 - 18:28:58 ---A- C:\Users\AZO\Music\Archimede\Archimède - Au diable vauvert.mp3   [4399313]
O61 - LFC: 12/06/2013 - 18:28:58 ---A- C:\Users\AZO\Music\Archimede\Archimède - � Mes Dépens.mp3   [3119522]
O61 - LFC: 12/06/2013 - 18:28:59 ---A- C:\Users\AZO\Music\Archimede\Archimède  - Vilaine canaille.mp3   [3140002]
O61 - LFC: 12/06/2013 - 18:34:49 ---A- C:\Users\AZO\Music\Eminem-Recovery-(Retail)-2010-[NoFS]\02-Eminem Ft. kobe-Talkin 2 Myself (Prod. By DJ Kahlil).mp3   [12053056]
O61 - LFC: 12/06/2013 - 20:34:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pmcmflmkceipgecmhoddphflfndnfbbe\LOCK   [0]
O61 - LFC: 12/06/2013 - 20:34:34 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db   [7168]
O61 - LFC: 12/06/2013 - 20:37:11 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Web Data.protect   [77824]
O61 - LFC: 12/06/2013 - 20:42:53 ---A- C:\Users\AZO\AppData\Local\Temp\MSI3b8b5.LOG   [610]
O61 - LFC: 12/06/2013 - 20:46:14 ---A- C:\Users\AZO\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2013-06-12 (21-41-14).txt   [2100]
O61 - LFC: 12/06/2013 - 20:49:45 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pmcmflmkceipgecmhoddphflfndnfbbe\000016.sst   [429]
O61 - LFC: 12/06/2013 - 20:49:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pmcmflmkceipgecmhoddphflfndnfbbe\LOG.old   [716]
O61 - LFC: 12/06/2013 - 20:51:44 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pmcmflmkceipgecmhoddphflfndnfbbe\000018.sst   [177]
O61 - LFC: 12/06/2013 - 20:51:44 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pmcmflmkceipgecmhoddphflfndnfbbe\CURRENT   [16]
O61 - LFC: 12/06/2013 - 20:51:44 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pmcmflmkceipgecmhoddphflfndnfbbe\MANIFEST-000017   [235]
O61 - LFC: 12/06/2013 - 20:51:52 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pmcmflmkceipgecmhoddphflfndnfbbe\LOG   [264]
O61 - LFC: 12/06/2013 - 21:04:39 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gomekmidlodglbbmalcneegieacbdmki_0.localstorage   [866304]
O61 - LFC: 12/06/2013 - 21:06:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pmcmflmkceipgecmhoddphflfndnfbbe_0.localstorage   [860160]
O61 - LFC: 12/06/2013 - 21:06:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_pmcmflmkceipgecmhoddphflfndnfbbe_0\6   [2167808]
O61 - LFC: 12/06/2013 - 21:06:56 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Preferences.bad   [165905]
O61 - LFC: 12/06/2013 - 21:17:56 --HA- C:\Users\AZO\AppData\Local\IconCache.db   [1973458]
O61 - LFC: 12/06/2013 - 21:32:12 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs   [16384]
O61 - LFC: 13/06/2013 - 09:45:36 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Archived History   [57344]
O61 - LFC: 13/06/2013 - 09:45:36 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal   [512]
O61 - LFC: 13/06/2013 - 09:50:22 ---A- C:\Users\AZO\AppData\Roaming\AlauxSoft\Comptes et Budget\6.0\Data\Compte Courant ALB.bdu   [55512]
O61 - LFC: 13/06/2013 - 09:50:22 ---A- C:\Users\AZO\AppData\Roaming\AlauxSoft\Comptes et Budget\6.0\Data\Compte Courant ALB20130613.sav   [55512]
O61 - LFC: 13/06/2013 - 09:50:22 ---A- C:\Users\AZO\Documents\Compte Courant ALB.bdu   [55512]
O61 - LFC: 13/06/2013 - 09:50:27 ---A- C:\Users\AZO\AppData\Roaming\AlauxSoft\Comptes et Budget\6.0\Data\Fparam.dac   [1141]
O61 - LFC: 13/06/2013 - 17:50:14 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\no\messages.json   [210]
O61 - LFC: 13/06/2013 - 17:50:14 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\se\messages.json   [210]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\128.png   [5920]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ar\messages.json   [556]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\bg\messages.json   [492]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ca\messages.json   [262]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\cs\messages.json   [289]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\da\messages.json   [240]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\de\messages.json   [239]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\el\messages.json   [624]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\en\messages.json   [215]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\es\messages.json   [281]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fi\messages.json   [284]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fil\messages.json   [234]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fr\messages.json   [272]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hi\messages.json   [391]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hr\messages.json   [246]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hu\messages.json   [234]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\id\messages.json   [242]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\it\messages.json   [260]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ja\messages.json   [364]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ko\messages.json   [328]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lt\messages.json   [269]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lv\messages.json   [262]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\nl\messages.json   [232]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pl\messages.json   [292]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_BR\messages.json   [230]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_PT\messages.json   [231]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ro\messages.json   [281]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ru\messages.json   [482]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sk\messages.json   [238]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sl\messages.json   [249]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sr\messages.json   [511]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\th\messages.json   [471]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\tr\messages.json   [250]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\uk\messages.json   [536]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\vi\messages.json   [257]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_CN\messages.json   [339]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_TW\messages.json   [321]
O61 - LFC: 13/06/2013 - 17:50:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\manifest.json   [755]
O61 - LFC: 13/06/2013 - 17:54:09 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\eu\messages.json   [243]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\128.png   [7654]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ar\messages.json   [422]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\bg\messages.json   [559]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ca\messages.json   [265]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\cs\messages.json   [283]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\da\messages.json   [251]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\de\messages.json   [256]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\el\messages.json   [565]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\en_GB\messages.json   [249]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\en_US\messages.json   [249]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\es\messages.json   [259]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\es_419\messages.json   [259]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\et\messages.json   [259]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fi\messages.json   [277]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fil\messages.json   [260]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\fr\messages.json   [260]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\he\messages.json   [438]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hi\messages.json   [492]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hr\messages.json   [263]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\hu\messages.json   [276]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\id\messages.json   [261]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\it\messages.json   [258]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ja\messages.json   [395]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ko\messages.json   [365]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\lt\messages.json   [309]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\lv\messages.json   [262]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ms\messages.json   [254]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\nl\messages.json   [250]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\no\messages.json   [218]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pl\messages.json   [261]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pt_BR\messages.json   [250]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\pt_PT\messages.json   [272]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ro\messages.json   [309]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\ru\messages.json   [614]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sk\messages.json   [293]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sl\messages.json   [268]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sr\messages.json   [467]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\sv\messages.json   [261]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\th\messages.json   [521]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\tr\messages.json   [302]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\uk\messages.json   [657]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\vi\messages.json   [321]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\zh_CN\messages.json   [360]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\_locales\zh_TW\messages.json   [348]
O61 - LFC: 13/06/2013 - 17:54:10 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\manifest.json   [996]
O61 - LFC: 13/06/2013 - 17:55:04 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.youtube.com_0.localstorage   [3072]
O61 - LFC: 13/06/2013 - 17:55:04 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.youtube.com_0.localstorage-journal   [3608]
O61 - LFC: 13/06/2013 - 18:04:51 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_store.apple.com_0.localstorage   [8192]
O61 - LFC: 13/06/2013 - 18:04:51 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_store.apple.com_0.localstorage-journal   [8768]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ar\messages.json   [374]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\bg\messages.json   [428]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ca\messages.json   [207]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\cs\messages.json   [230]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\da\messages.json   [216]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\de\messages.json   [217]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\el\messages.json   [416]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\en_GB\messages.json   [208]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\en_US\messages.json   [209]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\es\messages.json   [206]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\es_419\messages.json   [206]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\et\messages.json   [216]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fi\messages.json   [216]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fil\messages.json   [219]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\fr\messages.json   [224]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\he\messages.json   [293]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\hi\messages.json   [375]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\hu\messages.json   [251]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\id\messages.json   [209]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\it\messages.json   [213]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ja\messages.json   [263]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ko\messages.json   [254]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\lt\messages.json   [234]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\lv\messages.json   [232]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ms\messages.json   [207]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\nl\messages.json   [217]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\no\messages.json   [195]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pl\messages.json   [217]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pt_BR\messages.json   [206]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\pt_PT\messages.json   [208]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ro\messages.json   [225]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\ru\messages.json   [434]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sk\messages.json   [225]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sl\messages.json   [218]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sr\messages.json   [380]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\sv\messages.json   [214]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\th\messages.json   [329]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\tr\messages.json   [243]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\uk\messages.json   [428]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\vi\messages.json   [252]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\zh_CN\messages.json   [233]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\_locales\zh_TW\messages.json   [233]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\icon_128.png   [3009]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\icon_16.png   [143]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\main.html   [92]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\main.js   [98]
O61 - LFC: 13/06/2013 - 18:26:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\manifest.json   [724]
O61 - LFC: 13/06/2013 - 18:28:06 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_chrome.google.com_0.localstorage   [3072]
O61 - LFC: 13/06/2013 - 18:28:06 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_chrome.google.com_0.localstorage-journal   [3608]
O61 - LFC: 13/06/2013 - 18:28:23 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\no\messages.json   [300]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\128.png   [5367]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\16.png   [499]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\32.png   [1154]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\48.png   [1872]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ar\messages.json   [423]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\bg\messages.json   [515]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ca\messages.json   [330]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\cs\messages.json   [355]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\da\messages.json   [328]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\de\messages.json   [307]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\el\messages.json   [569]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en\messages.json   [314]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en_GB\messages.json   [314]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\en_US\messages.json   [314]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\es\messages.json   [340]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\es_419\messages.json   [341]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\et\messages.json   [314]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fi\messages.json   [305]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fil\messages.json   [337]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\fr\messages.json   [329]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\he\messages.json   [471]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hi\messages.json   [326]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hr\messages.json   [340]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\hu\messages.json   [336]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\id\messages.json   [319]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\it\messages.json   [324]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ja\messages.json   [388]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ko\messages.json   [380]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\lt\messages.json   [359]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\lv\messages.json   [360]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\nl\messages.json   [323]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pl\messages.json   [336]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pt_BR\messages.json   [332]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\pt_PT\messages.json   [331]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ro\messages.json   [332]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\ru\messages.json   [471]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sk\messages.json   [338]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sl\messages.json   [329]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sr\messages.json   [483]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\sv\messages.json   [333]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\th\messages.json   [472]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\tr\messages.json   [330]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\uk\messages.json   [501]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\vi\messages.json   [363]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\zh_CN\messages.json   [346]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\_locales\zh_TW\messages.json   [346]
O61 - LFC: 13/06/2013 - 18:28:24 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\manifest.json   [817]
O61 - LFC: 13/06/2013 - 18:28:25 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\QuotaManager   [15360]
O61 - LFC: 13/06/2013 - 18:28:25 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\QuotaManager-journal   [8768]
O61 - LFC: 13/06/2013 - 19:52:23 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000427.sst   [1905]
O61 - LFC: 13/06/2013 - 19:53:02 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.programme-tv.net_0.localstorage   [3072]
O61 - LFC: 13/06/2013 - 19:53:02 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.programme-tv.net_0.localstorage-journal   [3608]
O61 - LFC: 13/06/2013 - 20:17:10 ---A- C:\Users\AZO\AppData\Local\Temp\~DF55B029FF8D2D4446.TMP   [512]
O61 - LFC: 13/06/2013 - 20:17:10 ---A- C:\Users\AZO\AppData\Local\Temp\~DF7A51DF078A6A3621.TMP   [512]
O61 - LFC: 13/06/2013 - 20:17:10 ---A- C:\Users\AZO\AppData\Local\Temp\~DFC343780A498DABE8.TMP   [32768]
O61 - LFC: 13/06/2013 - 20:17:10 ---A- C:\Users\AZO\AppData\Local\Temp\~DFE8F556D750E6675A.TMP   [49152]
O61 - LFC: 14/06/2013 - 08:33:03 ---A- C:\Users\AZO\AppData\Local\PMB Files\cert\secmod.db   [16384]   =>P2P.Pando
O61 - LFC: 14/06/2013 - 08:40:31 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists   [270272]
O61 - LFC: 14/06/2013 - 08:40:31 ---A- C:\Users\AZO\AppData\Local\Temp\CRX_75DAF8CB7768\crl-set   [911]
O61 - LFC: 14/06/2013 - 08:40:31 ---A- C:\Users\AZO\AppData\Local\Temp\CRX_75DAF8CB7768\manifest.json   [34]
O61 - LFC: 14/06/2013 - 09:04:03 ---A- C:\Users\AZO\AppData\Local\PMB Files\pando.save   [787]   =>P2P.Pando
O61 - LFC: 14/06/2013 - 09:04:04 ---A- C:\Users\AZO\AppData\Local\PMB Files\cert\cert8.db   [65536]   =>P2P.Pando
O61 - LFC: 14/06/2013 - 09:04:04 ---A- C:\Users\AZO\AppData\Local\PMB Files\cert\key3.db   [16384]   =>P2P.Pando
O61 - LFC: 14/06/2013 - 09:14:27 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3DEQK6PZ\s.ytimg.com\soundData.sol   [49]
O61 - LFC: 14/06/2013 - 09:14:29 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage   [3072]
O61 - LFC: 14/06/2013 - 09:14:29 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage-journal   [3608]
O61 - LFC: 14/06/2013 - 09:15:54 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3DEQK6PZ\macromedia.com\support\flashplayer\sys\#www.nrj12.fr\settings.sol   [82]
O61 - LFC: 14/06/2013 - 09:32:06 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3DEQK6PZ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol   [89]
O61 - LFC: 14/06/2013 - 09:32:06 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3DEQK6PZ\macromedia.com\support\flashplayer\sys\settings.sol   [807]
O61 - LFC: 14/06/2013 - 09:32:06 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3DEQK6PZ\www.nrj12.fr\#com.junkbyte\Console\UserData.sol   [105]
O61 - LFC: 14/06/2013 - 09:32:06 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3DEQK6PZ\www.nrj12.fr\analytics.sol   [436]
O61 - LFC: 14/06/2013 - 09:32:06 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3DEQK6PZ\www.nrj12.fr\swf\player_video\playerNR12.swf\eNRJPlayer_site_1.sol   [61]
O61 - LFC: 14/06/2013 - 10:10:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Bookmarks   [41914]
O61 - LFC: 14/06/2013 - 10:10:15 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Bookmarks.bak   [41914]
O61 - LFC: 14/06/2013 - 10:15:42 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\PepperFlash\11.7.700.225\manifest.json   [2054]
O61 - LFC: 14/06/2013 - 10:15:42 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\PepperFlash\11.7.700.225\pepflashplayer.dll   [13140872]
O61 - LFC: 14/06/2013 - 10:17:40 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Shortcuts   [24576]
O61 - LFC: 14/06/2013 - 10:17:40 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal   [12824]
O61 - LFC: 14/06/2013 - 10:53:35 ---A- C:\Users\AZO\AppData\Local\Windows Live Writer\ResourceCache\live\Writer_Config.cab   [26214]
O61 - LFC: 14/06/2013 - 11:24:31 ---A- C:\Users\AZO\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2013-06-14 (10-06-32).txt   [2142]
O61 - LFC: 14/06/2013 - 11:28:01 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache   [61507]
O61 - LFC: 14/06/2013 - 11:51:31 ---A- C:\Users\AZO\AppData\Local\Windows Live\uxcore_wlmail_00.etl   [8192]
O61 - LFC: 14/06/2013 - 11:54:36 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old   [148]
O61 - LFC: 14/06/2013 - 11:54:41 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor   [63488]
O61 - LFC: 14/06/2013 - 11:54:41 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal   [16384]
O61 - LFC: 14/06/2013 - 11:54:42 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old   [148]
O61 - LFC: 14/06/2013 - 11:55:08 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old   [264]
O61 - LFC: 14/06/2013 - 11:57:20 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Last Tabs   [43894]
O61 - LFC: 14/06/2013 - 20:23:35 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Last Session   [162523]
O61 - LFC: 14/06/2013 - 20:24:04 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Visited Links   [131072]
O61 - LFC: 14/06/2013 - 20:26:56 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\CURRENT   [16]
O61 - LFC: 14/06/2013 - 20:26:56 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000434   [334]
O61 - LFC: 14/06/2013 - 20:26:57 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Custom Dictionary.txt   [68]
O61 - LFC: 14/06/2013 - 20:26:57 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Custom Dictionary.txt.backup   [57]
O61 - LFC: 14/06/2013 - 20:26:57 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Web Data   [81920]
O61 - LFC: 14/06/2013 - 20:26:57 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal   [12848]
O61 - LFC: 14/06/2013 - 20:26:58 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG   [0]
O61 - LFC: 14/06/2013 - 20:26:58 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT   [16]
O61 - LFC: 14/06/2013 - 20:26:58 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000595   [405]
O61 - LFC: 14/06/2013 - 20:27:00 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG   [0]
O61 - LFC: 14/06/2013 - 20:27:06 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings   [8]
O61 - LFC: 14/06/2013 - 20:27:07 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Favicons   [305152]
O61 - LFC: 14/06/2013 - 20:27:07 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal   [16384]
O61 - LFC: 14/06/2013 - 20:27:46 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000675.sst   [243]
O61 - LFC: 14/06/2013 - 20:27:46 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT   [16]
O61 - LFC: 14/06/2013 - 20:27:46 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000672   [549]
O61 - LFC: 14/06/2013 - 20:27:50 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG   [0]
O61 - LFC: 14/06/2013 - 20:28:27 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Top Sites   [53248]
O61 - LFC: 14/06/2013 - 20:28:27 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal   [16384]
O61 - LFC: 14/06/2013 - 20:28:39 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\History   [274432]
O61 - LFC: 14/06/2013 - 20:28:39 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-06   [557056]
O61 - LFC: 14/06/2013 - 20:28:39 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-06-journal   [16384]
O61 - LFC: 14/06/2013 - 20:28:39 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\History-journal   [16384]
O61 - LFC: 14/06/2013 - 20:28:40 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity   [1108]
O61 - LFC: 14/06/2013 - 20:28:47 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3   [499712]
O61 - LFC: 14/06/2013 - 20:28:47 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3-journal   [16384]
O61 - LFC: 14/06/2013 - 20:29:04 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Safe Browsing Download   [1052980]
O61 - LFC: 14/06/2013 - 20:29:05 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom   [9093120]
O61 - LFC: 14/06/2013 - 20:29:05 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set   [1717732]
O61 - LFC: 14/06/2013 - 20:29:05 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Safe Browsing Csd Whitelist   [135072]
O61 - LFC: 14/06/2013 - 20:29:05 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Safe Browsing Download Whitelist   [19668]
O61 - LFC: 14/06/2013 - 20:29:05 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Safe Browsing Extension Blacklist   [5284]
O61 - LFC: 14/06/2013 - 20:29:32 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies   [6144]
O61 - LFC: 14/06/2013 - 20:29:32 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies-journal   [2576]
O61 - LFC: 14/06/2013 - 20:32:12 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Cookies   [109568]
O61 - LFC: 14/06/2013 - 20:32:12 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal   [16384]
O61 - LFC: 14/06/2013 - 20:34:37 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Local State   [36851]
O61 - LFC: 14/06/2013 - 20:34:48 ---A- C:\Users\AZO\AppData\Local\Google\Chrome\User Data\Default\Preferences   [101176]
~ 90 Fichiers temporaires (Temporary files)
~ Files: 611 Scanned in 02mn 53s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS:  Scanned in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 28/12/2011 - C:\Windows\system32\drivers\afd.sys (AFD)  .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - 09/05/2013 - C:\Windows\System32\Drivers\aswFsBlk.sys (aswFsBlk)  .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK
O64 - Services: CurCS - 09/05/2013 - C:\Windows\system32\drivers\aswMonFlt.sys (aswMonFlt)  .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - 09/05/2013 - C:\Windows\system32\Drivers\aswrdr2.sys (aswRdr)  .(.AVAST Software - avast! WFP Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - 09/05/2013 - Pas de propriétaire (aswRvrt)  .(...) - LEGACY_ASWRVRT
O64 - Services: CurCS - 09/05/2013 - C:\Windows\System32\Drivers\aswSnx.sys (aswSnx)  .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - 09/05/2013 - C:\Windows\System32\Drivers\aswSP.sys (aswSP)  .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - 09/05/2013 - C:\Windows\System32\Drivers\aswTdi.sys (aswTdi)  .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI
O64 - Services: CurCS - 09/05/2013 - Pas de propriétaire (aswVmm)  .(...) - LEGACY_ASWVMM
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\atapi.sys (atapi)  .(.Microsoft Corporation - ATAPI IDE Miniport Driver.) - LEGACY_ATAPI
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\Beep.sys (Beep)  .(.Microsoft Corporation - BEEP Driver.) - LEGACY_BEEP
O64 - Services: CurCS - 04/07/2012 - C:\Windows\system32\browser.dll (bowser)  .(.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) - LEGACY_BOWSER
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\cdfs.sys (cdfs)  .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\clfs.sys (CLFS)  .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\cng.sys (CNG)  .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\dfsc.sys (DfsC)  .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\discache.sys (discache)  .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
O64 - Services: CurCS - 10/04/2013 - C:\Windows\system32\drivers\dxgkrnl.sys (DXGKrnl)  .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\fastfat.sys (fastfat)  .(.Microsoft Corporation - Fast FAT File System Driver.) - LEGACY_FASTFAT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\fileinfo.sys (FileInfo)  .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\fltmgr.sys (FltMgr)  .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR
O64 - Services: CurCS - 24/01/2013 - C:\Windows\system32\drivers\fvevol.sys (fvevol)  .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\http.sys (HTTP)  .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy)  .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\rascfg.dll (IpFilterDriver)  .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_IPFILTERDRIVER
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\ksecdd.sys (KSecDD)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\ksecpkg.sys (KSecPkg)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\lltdio.sys (lltdio)  .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\luafv.sys (luafv)  .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\mountmgr.sys (mountmgr)  .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\FirewallAPI.dll (mpsdrv)  .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb10)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb20)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\msisadrv.sys (msisadrv)  .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\mup.sys (Mup)  .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
O64 - Services: CurCS - 03/06/2009 - C:\Windows\System32\DRIVERS\mwlPSDFilter.sys (mwlPSDFilter)  .(.Egis Technology Inc. - PSD Filter Driver.) - LEGACY_MWLPSDFILTER
O64 - Services: CurCS - 03/06/2009 - C:\Windows\System32\DRIVERS\mwlPSDNServ.sys (mwlPSDNServ)  .(.Egis Technology Inc. - MyWinLocker PSD Named Pipe Driver.) - LEGACY_MWLPSDNSERV
O64 - Services: CurCS - 03/06/2009 - C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys (mwlPSDVDisk)  .(.Egis Technology Inc. - MyWinLocker PSD Virtual Disk Driver.) - LEGACY_MWLPSDVDISK
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\nwifi.sys (NativeWifiP)  .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP
O64 - Services: CurCS - 22/08/2012 - C:\Windows\system32\drivers\ndis.sys (NDIS)  .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\DRIVERS\ndisuio.sys (Ndisuio)  .(.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\netbios.sys (NetBIOS)  .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\netbt.sys (NetBT)  .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy)  .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\pcw.sys (pcw)  .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\peauth.sys (PEAUTH)  .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\pacer.sys (Psched)  .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (rdbss)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD)  .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD)  .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP)  .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\rspndr.sys (rspndr)  .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\spldr.sys (spldr)  .(.Microsoft Corporation - loader for security processor.) - LEGACY_SPLDR
O64 - Services: CurCS - 08/06/2012 - C:\Windows\system32\Drivers\sptd.sys (sptd)  .(.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) - LEGACY_SPTD
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\srvsvc.dll (srv)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\srvsvc.dll (srv2)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
O64 - Services: CurCS - 29/04/2011 - C:\Windows\System32\DRIVERS\srvnet.sys (srvnet)  .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\tcpipcfg.dll (Tcpip)  .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP
O64 - Services: CurCS - 03/10/2012 - C:\Windows\System32\drivers\tcpipreg.sys (tcpipreg)  .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\tcpipcfg.dll (tdx)  .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\DRIVERS\udfs.sys (udfs)  .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\vga.sys (VgaSave)  .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\volmgrx.sys (volmgrx)  .(.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) - LEGACY_VOLMGRX
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\volsnap.sys (volsnap)  .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\vwififlt.sys (vwififlt)  .(.Microsoft Corporation - Virtual WiFi Filter Driver.) - LEGACY_VWIFIFLT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\rascfg.dll (Wanarpv6)  .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6
O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\Wdf01000.sys (Wdf01000)  .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\wfplwf.sys (WfpLwf)  .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\wimmount.sys (WIMMount)  .(.Microsoft Corporation - Wim file system Driver.) - LEGACY_WIMMOUNT
O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\WudfPf.sys (WudfPf)  .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF
O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\DRIVERS\XAudio64.sys (XAudio)  .(.Conexant Systems, Inc. - Modem Audio Device Driver.) - LEGACY_XAUDIO
~ Legacy: 83 Scanned in 00mn 01s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
~ FASS Keys: 19 Scanned in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <Torch> <>[HKLM\..\Shell\open\Command] (.Not Key.)
~ Keys:  Scanned in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {aa196ed7-ba30-439f-9279-3bd79d046b8e} - (iadah) - http://www.iadah.com
O69 - SBI: SearchScopes [HKCU] {C29F1F77-FA01-40CD-98DB-FE0BFF500BC8} - (Ask Search) - http://websearch.ask.com
~ Keys:  Scanned in 00mn 00s



---\\ Crack & Keygen Files (O82)
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\AngryBirds.exe
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\fonts\pc_build\FONT_BASIC.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\fonts\pc_build\FONT_BIG_NUMBERS.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\fonts\pc_build\FONT_INGAME_SCORE.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\fonts\pc_build\FONT_LS_SMALL.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\fonts\pc_build\FONT_MENU.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\fonts\pc_build\FONT_SCORE.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\BACKGROUNDS_GE_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\BACKGROUNDS_LS_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\BACKGROUNDS_MAIN_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\BUTTONS_SHEET_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\CURSORS_SHEET_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\CUTSCENES_BACKGROUNDS_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\CUTSCENES_BACKGROUNDS_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\CUTSCENES_BACKGROUNDS_3.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\CUTSCENES_ELEMENTS_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\CUTSCENES_ELEMENTS_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\CUTSCENES_ELEMENTS_3.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\GOLDEN_EGGS_SHEET_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_BIRDS_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_BIRDS_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_BLOCKS_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_BLOCKS_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_GROUNDS_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_3.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_4.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_5.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_6.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_7.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_8.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_9.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_CRANES.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_SKIES_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_SKIES_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_3.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_4.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_5.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_6.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_7.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_8.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_9.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\LEVELSELECTION_SHEET_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\LEVELSELECTION_SHEET_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\MENU_ELEMENTS_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\POPUPS_SHEET_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\SPLASHES_SHEET_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\SPLASHES_SHEET_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\TUTORIALS_composprites.dat   =>Spyware.AgenceExcusive
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\TUTORIALS_SHEET_1.dat   =>Spyware.AgenceExcusive
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\localization\TEXTS_BASIC.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry_Birds_PC_Cracked.rar
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\AngryBirds.exe
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\fonts\pc_build\FONT_BASIC.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\fonts\pc_build\FONT_BIG_NUMBERS.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\fonts\pc_build\FONT_INGAME_SCORE.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\fonts\pc_build\FONT_LS_SMALL.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\fonts\pc_build\FONT_MENU.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\fonts\pc_build\FONT_SCORE.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\BACKGROUNDS_GE_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\BACKGROUNDS_LS_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\BACKGROUNDS_MAIN_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\BUTTONS_SHEET_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\CURSORS_SHEET_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\CUTSCENES_BACKGROUNDS_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\CUTSCENES_BACKGROUNDS_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\CUTSCENES_BACKGROUNDS_3.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\CUTSCENES_ELEMENTS_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\CUTSCENES_ELEMENTS_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\CUTSCENES_ELEMENTS_3.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\GOLDEN_EGGS_SHEET_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_BIRDS_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_BIRDS_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_BLOCKS_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_BLOCKS_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_GROUNDS_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_3.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_4.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_5.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_6.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_7.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_8.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_9.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_PARALLAX_CRANES.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_SKIES_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_SKIES_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_3.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_4.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_5.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_6.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_7.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_8.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\INGAME_THEME_GROUND_9.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\LEVELSELECTION_SHEET_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\LEVELSELECTION_SHEET_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\MENU_ELEMENTS_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\POPUPS_SHEET_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\SPLASHES_SHEET_1.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\SPLASHES_SHEET_2.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\TUTORIALS_composprites.dat   =>Spyware.AgenceExcusive
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\images\pc_build\TUTORIALS_SHEET_1.dat   =>Spyware.AgenceExcusive
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry Birds\data\localization\TEXTS_BASIC.dat
C:\Users\AZO\Documents\Angry Birds - 2011 - PC - Cracked\Angry_Birds_PC_Cracked.rar
~ Files:  Scanned in 01mn 17s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll   [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll   [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll   [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll   [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll   [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll   [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll   [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll   [2428952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll   [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [70144]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll   [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll   [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll   [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll   [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [100864]
~ Services: 32 Scanned in 00mn 00s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.62B7C506B092D460898F3296DA94B728] [SPRF][18/07/2009] (.Oberon Media - FullRemove.) -- C:\ProgramData\FullRemove.exe   [36136]
[MD5.7FB29C4EAE315351E6A5151E54C194E2] [SPRF][10/04/2013] (...) -- C:\ProgramData\od4beq.bat   [56]
[MD5.2E429A7D56B68D83D19C46577C69E560] [SPRF][10/04/2013] (...) -- C:\ProgramData\od4beq.reg   [152]
[MD5.4C3398613C129D20DE09F6B716A2121A] [SPRF][12/06/2013] (...) -- C:\Users\AZO\AppData\Local\Temp\apnuserid.dat   [16]
[MD5.CFCD208495D565EF66E7DFF9F98764DA] [SPRF][12/06/2013] (...) -- C:\Users\AZO\AppData\Local\Temp\appid.dat   [1]
[MD5.66808E327DC79D135BA18E051673D906] [SPRF][12/06/2013] (...) -- C:\Users\AZO\AppData\Local\Temp\sysid.dat   [3]
[MD5.F0277491AD3B6CA14DCD8224ADA217D8] [SPRF][12/06/2013] (...) -- C:\Users\AZO\AppData\Local\Temp\trackid.dat   [6]
[MD5.435EC5A16E8BEC26F111EC66A00B3E16] [SPRF][18/01/2012] (...) -- C:\Users\AZO\AppData\Roaming\24w9e5mba24fk0y2.dat   [8]
[MD5.4EF33D516F31BEB1C9847D1FDA69375C] [SPRF][12/06/2013] (...) -- C:\Users\AZO\Desktop\adwcleaner.exe   [648201]
[MD5.1CD51AE9BCEAC9F0CEE159821A1817B8] [SPRF][10/04/2013] (...) -- C:\Users\AZO\Desktop\RogueKiller.exe   [816128]
[MD5.19EF6FE92855D6CC84CDD628D44B2EC5] [SPRF][14/06/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\AZO\Desktop\ZHPDiag2.exe   [5678428]
[MD5.6F315BDFE7148459DE3B4B59E6DFA1D4] [SPRF][19/08/2009] (.Microsoft® Corporation - Windows Live Photo Upload Tool.) -- C:\Windows\Downloaded Program Files\MsnPUpld.dll   [641368]
[MD5.732CACA8E848F6E721B093E51FC50B1D] [SPRF][09/01/2007] (.Microsoft® Corporation - Outil MSN Téléchargement de photos.) -- C:\Windows\Downloaded Program Files\PURfr-fr.dll   [110592]
~ Files:  Scanned in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "SNMPTRAP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "SNMPTRAP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "WMP-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-QWave-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-QWave-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-P2PHost-In-TCP" | In - None - P6 - TRUE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-IPHTTPS-Out" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DNS-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-RAServer-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-RAServer-Out-TCP-NoScope-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-DCOM-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-TCP-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-QWave-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-MCX2SVC-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-Prov-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - MCX2 Provisioning library.) -- C:\Windows\ehome\mcx2prov.exe
O87 - FAEL: "MCX-PlayTo-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-McrMgr-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Media Center Extender Manager.) -- C:\Windows\ehome\mcrmgr.exe
O87 - FAEL: "MCX-PlayTo-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-FDPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "{A5A48B92-8A06-46CC-AB98-D30EDF70F628}" | In - Public - P6 - TRUE | .(.NewTech Infosystems, Inc. - NTI Backup Now 5 SchedulerSvc NT Service.) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O87 - FAEL: "{D8AABB03-CA8D-478A-9763-5281D43A0491}" | In - Public - P6 - TRUE | .(.NewTech InfoSystems, Inc. - NTI Backup Now 5 BackupSvc Application.) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O87 - FAEL: "{709F98C6-1B56-469C-AA7C-7E33F537B2FB}" | In - Public - P17 - TRUE | .(.NewTech Infosystems, Inc. - NTI Backup Now 5 SchedulerSvc NT Service.) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O87 - FAEL: "{0DB6F52F-2488-4615-B42D-CC238964C6BE}" | In - Public - P17 - TRUE | .(.NewTech InfoSystems, Inc. - NTI Backup Now 5 BackupSvc Application.) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O87 - FAEL: "{ADD8971B-59AD-431E-9318-2AB8089FE6E6}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files (x86)\Microsoft Office\Office12\outlook.exe
O87 - FAEL: "{394F7B81-D225-4EBC-A6CA-7AF1E1B7D1A4}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{01CC2016-4A4F-467F-A2CB-5BE1AF49AD0C}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{833527B0-2EB0-45C0-93B7-28CEB07635DF}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{337A291A-4059-45E9-9BE2-DE2BDFC543F1}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{D7FD28F6-D69C-457E-8FDD-F18C5C3C08C5}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{35C2A9F2-C6C9-489E-B787-A153165874CA}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{2003954E-DA79-411A-89A2-DEEF24975CE7}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{467E23CB-29FC-4CAF-A6C7-2D809028401D}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{CB3F3C50-3DF7-4075-A3C1-97021AD4A40F}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{1539EB59-9045-4CEE-AD91-C4D36CC575B8}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{40626508-728D-478F-9591-A2D8AE523B76}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{1078C783-6898-44BF-A7E8-D2C24EDDFEFA}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{A08C1C82-057D-4E6C-8BF7-4670A7EDE828}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{95AD9AEA-07D7-49ED-B819-AC2DAEA144BD}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{775FAE8F-D867-41C7-A25B-806122E9DD58}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{C83AF0C0-19AB-455E-9A9A-43A59BE8AAB1}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{B2B80A13-6867-4EC2-B065-2FBB02377F26}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{D4089BBC-E87A-4FFF-AB99-5BDABAF308E5}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{8CC40390-8A73-4E5B-BB41-F12AC0AAB98A}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{D31B7C1C-8E8B-41FB-9983-D7B23BBC2E56}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "TCP Query User{0A340EAA-0A77-48A8-AAE0-BFD39FDD3E78}C:\program files (x86)\internet explorer\iexplore.exe" | In - Private - P6 - TRUE | .(.Microsoft Corporation.) -- C:\program files (x86)\internet explorer\iexplore.exe
O87 - FAEL: "UDP Query User{3EA03A3B-C589-486E-8400-2ACEE88426C4}C:\program files (x86)\internet explorer\iexplore.exe" | In - Private - P17 - TRUE | .(.Microsoft Corporation.) -- C:\program files (x86)\internet explorer\iexplore.exe
O87 - FAEL: "TCP Query User{CFC9051A-6A05-4AA7-A39F-02E5B81559BC}C:\program files (x86)\abc\abc.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\abc\abc.exe
O87 - FAEL: "UDP Query User{5297C8A8-7EB8-430A-98ED-42BBE014139E}C:\program files (x86)\abc\abc.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\abc\abc.exe
O87 - FAEL: "{C45166F8-56F7-4EF0-AACB-43BB6C5E614C}" | In - Public - P6 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\System32\lxddcoms.exe
O87 - FAEL: "{3EB965D1-2E66-41F7-900E-ECDD5D07133A}" | In - Public - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\System32\lxddcoms.exe
O87 - FAEL: "{85C680AF-AD72-4191-9E4E-32B394A1B2C6}" | In - Public - P6 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\SysWOW64\lxddcoms.exe
O87 - FAEL: "{D182B2E5-3D58-40C0-94C7-7D167DB3C48D}" | In - Public - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\SysWOW64\lxddcoms.exe
O87 - FAEL: "{0FCC8AB7-F2E2-43FE-B787-600B0A15782B}" | In - Public - P6 - TRUE | .(.Pas de propriétaire - Device Monitor.) -- C:\Program Files (x86)\Lexmark 2500 Series\lxddmon.exe
O87 - FAEL: "{F6B99E08-49D2-41EC-BC6E-1F7CEA39D27A}" | In - Public - P17 - TRUE | .(.Pas de propriétaire - Device Monitor.) -- C:\Program Files (x86)\Lexmark 2500 Series\lxddmon.exe
O87 - FAEL: "{FB87183A-5D28-4C7C-9559-CED668969559}" | In - Public - P6 - TRUE | .(.Pas de propriétaire - Device Monitor Application.) -- C:\Program Files (x86)\Lexmark 2500 Series\lxddamon.exe
O87 - FAEL: "{C292CD6D-B448-4592-BB78-13A9DF9E8A10}" | In - Public - P17 - TRUE | .(.Pas de propriétaire - Device Monitor Application.) -- C:\Program Files (x86)\Lexmark 2500 Series\lxddamon.exe
O87 - FAEL: "{214C7D47-035A-4AA5-80E9-77C229E4DCD6}" | In - Public - P6 - TRUE | .(.Pas de propriétaire - Printing Application.) -- C:\Program Files (x86)\Lexmark 2500 Series\App4R.exe
O87 - FAEL: "{D6AC902A-754F-4984-97CD-30FCF5F9416F}" | In - Public - P17 - TRUE | .(.Pas de propriétaire - Printing Application.) -- C:\Program Files (x86)\Lexmark 2500 Series\App4R.exe
O87 - FAEL: "{A10A08C4-34D1-44DD-8441-564A9013158E}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{F1AB3498-B9EF-417B-847E-5D87F0FC3AF2}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "TCP Query User{9A201824-54B8-4533-8FB6-F34623E42B81}E:\lisco\apache\apache.exe" |In - Public - P6 - TRUE | .(...) -- E:\lisco\apache\apache.exe (.not file.)
O87 - FAEL: "UDP Query User{E664E0DC-6102-4C94-8E0A-25BEE0AC53DF}E:\lisco\apache\apache.exe" |In - Public - P17 - TRUE | .(...) -- E:\lisco\apache\apache.exe (.not file.)
O87 - FAEL: "TCP Query User{83FD56D7-AE2D-4C5F-A5AA-7E6BA633BD03}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Private - P6 - TRUE | .(.Google.) -- C:\program files (x86)\google\google earth\client\googleearth.exe
O87 - FAEL: "UDP Query User{7E42198E-CC02-4B00-A481-7D24BF98D1C9}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Private - P17 - TRUE | .(.Google.) -- C:\program files (x86)\google\google earth\client\googleearth.exe
O87 - FAEL: "TCP Query User{6E719F65-EE6B-47DD-B7C4-895454486544}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Public - P6 - TRUE | .(.Google.) -- C:\program files (x86)\google\google earth\client\googleearth.exe
O87 - FAEL: "UDP Query User{704D8519-2716-4B7E-BA05-FAAC16A556AA}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Public - P17 - TRUE | .(.Google.) -- C:\program files (x86)\google\google earth\client\googleearth.exe
O87 - FAEL: "{D011EE12-5D29-4A39-AD95-D4C1BB787D53}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\System32\svchost.exe
O87 - FAEL: "{84D03A7E-049E-43A0-A9B3-8F52579CA951}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Sync.) -- C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
O87 - FAEL: "{8769D779-CC01-4B40-ACEC-EA007441DB96}" | In - Private - P6 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\SysWOW64\lxczcoms.exe
O87 - FAEL: "{9F68D419-0A30-4101-9CC9-57815C5034E8}" | In - Private - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\SysWOW64\lxczcoms.exe
O87 - FAEL: "TCP Query User{268F2026-74E0-4419-883B-2436F3C3606A}C:\windows\syswow64\lxddcoms.exe" | In - Private - P6 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\windows\syswow64\lxddcoms.exe
O87 - FAEL: "UDP Query User{A3E46ABD-D3B9-4679-BCF2-9A9A8605CEA8}C:\windows\syswow64\lxddcoms.exe" | In - Private - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\windows\syswow64\lxddcoms.exe
O87 - FAEL: "{F5CEA859-CA53-4824-93BF-E133D5FDE224}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Communications Platform.) -- C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
O87 - FAEL: "{7B999231-7C12-4FD3-9A32-4593F1876DE5}" | In - Domain - P6 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{E7B3A0D2-B26F-4AED-91AB-00557AC522DA}" | In - Domain - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{68B8EB13-2D39-4C9A-9D9B-B91E5F064F07}" | In - Private - P6 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{38BE454A-D537-4D3A-A1C1-4D652094D9CF}" | In - Private - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{C3C3CBD1-4032-4F7F-A9A2-3DD51C8EAFAB}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{F4527FE8-83C7-49DC-8263-42348A5F761E}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\system32\lxeacoms.exe
O87 - FAEL: "{46D12DD8-3CAD-44D5-AFBE-CE96685C3058}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\system32\LXEAcoms.exe
O87 - FAEL: "{4FDF1739-844C-41B6-B846-AEE5F8CD0304}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\system32\LXEAcoms.exe
O87 - FAEL: "{4B4AC234-4514-42DD-A7B2-E12991E4ABFE}" |In - Private - P6 - TRUE | .(...) -- C:\Users\AZO\Downloads\SweetImSetup.exe (.not file.)   =>PUP.SweetIM
O87 - FAEL: "{20DE9352-B4D0-402B-BC77-2D004F82C3E2}" |In - Private - P17 - TRUE | .(...) -- C:\Users\AZO\Downloads\SweetImSetup.exe (.not file.)   =>PUP.SweetIM
O87 - FAEL: "{CC0468EA-2488-4B83-B3B2-F1DF8C3A5459}" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{A8C615DB-1B32-4B5F-B0FB-7C820E28BE9B}" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{DC8CE308-830B-421B-9A8F-9C6A4C38B6D6}" | In - None - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{F6739AEE-0283-4627-8CF3-E776822F6383}" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{0C019C1F-1DF5-412F-9E19-9A993CB433A9}" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{6BBC6F63-DF44-46D6-B705-62D2676C024D}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O87 - FAEL: "{EE82DFAD-7E75-4B24-BA57-BA15CA9938EC}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
O87 - FAEL: "{9717CDFE-6420-46A1-847A-3168DAAD69A1}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{EF79940B-5FF2-4ADA-BD68-EBF6CF544F1C}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{1A6F709F-BFC5-43B8-A174-472F90DB4B7E}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "{099BD585-F832-4424-B873-C42561A9D31D}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "{1A74C526-C2DD-4593-A309-C205012D0062}" | In - None - P17 - TRUE | .(.Skype Limited - Facebook Video Calling.) -- C:\Users\AZO\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
O87 - FAEL: "{BACDCB10-E202-4C09-9ED2-7A20ABA8AC80}" | In - Private - P6 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\System32\lxddcoms.exe
O87 - FAEL: "{3A7B061F-C142-441D-B63E-6AD861E6D6C8}" | In - Private - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\System32\lxddcoms.exe
O87 - FAEL: "TCP Query User{D7C9CD04-7716-490E-81A7-F0FBA8AD2291}C:\program files (x86)\lexmark 2500 series\lxddamon.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\lexmark 2500 series\lxddamon.exe
O87 - FAEL: "UDP Query User{4CC40115-4D0A-44FF-A2CE-272C43560F25}C:\program files (x86)\lexmark 2500 series\lxddamon.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\lexmark 2500 series\lxddamon.exe
O87 - FAEL: "TCP Query User{8FBC16BF-B261-488A-AD3E-85A6E11226D4}C:\program files (x86)\lexmark 2500 series\app4r.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\lexmark 2500 series\app4r.exe
O87 - FAEL: "{DD90BD30-CA01-4213-860D-A4340B274255}" | In - Private - P6 - TRUE | .(.Lexmark International, Inc. - Lexmark Connect Time Executable.) -- C:\Windows\System32\spool\drivers\x64\3\lxddtime.exe
O87 - FAEL: "{3AFE969D-348A-4446-9C78-E4B1E1D94434}" | In - Private - P17 - TRUE | .(.Lexmark International, Inc. - Lexmark Connect Time Executable.) -- C:\Windows\System32\spool\drivers\x64\3\lxddtime.exe
O87 - FAEL: "{7CD59ECF-E40B-4EF6-9286-C074A17EADC8}" | In - Private - P6 - TRUE | .(.Pas de propriétaire - Printer Status Window Interface.) -- C:\Windows\System32\spool\drivers\x64\3\lxddpswx.exe
O87 - FAEL: "{0661A6A3-9D0A-4D69-AF01-FF2801281425}" | In - Private - P17 - TRUE | .(.Pas de propriétaire - Printer Status Window Interface.) -- C:\Windows\System32\spool\drivers\x64\3\lxddpswx.exe
O87 - FAEL: "{841140E7-F5AD-4379-A859-9E771FDFC5E6}" | In - Private - P6 - TRUE | .(.Pas de propriétaire - Device Monitor.) -- C:\Program Files (x86)\Lexmark 2500 Series\lxddmon.exe
O87 - FAEL: "{6698AEFC-1C54-4A7F-A7B4-CF3B45085B0B}" | In - Private - P17 - TRUE | .(.Pas de propriétaire - Device Monitor.) -- C:\Program Files (x86)\Lexmark 2500 Series\lxddmon.exe
O87 - FAEL: "{DF9CFD3C-4B61-47B8-92FF-1630AB881851}" | In - None - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files (x86)\iTunes\iTunes.exe
~ Firewall: 255 Scanned in 00mn 02s



---\\ Scan Additionnel (O88)
Database Version : v2.12472 - (13/06/2013)
Clés trouvées (Keys found) : 31
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 0
Fichiers trouvés  (Files found) : 0

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]   =>Toolbar.Skype
[HKLM\Software\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]   =>Toolbar.Skype
[HKLM\Software\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]   =>Toolbar.Skype
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]   =>Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Skype
[HKLM\Software\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Skype
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Skype
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{b9e20919-fa55-471f-989b-b107bf8de785}]   =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B9E20919-FA55-471F-989B-B107BF8DE785}]   =>Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E]   =>Toolbar.Ask
[HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls]   =>Trojan.FakeAlert
[HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls]   =>Trojan.FakeAlert
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375]   =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5]   =>Toolbar.Agent
[HKLM\Software\Wow6432Node\KoyoteSRTB]   =>Toolbar.CoyoteSoft
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011431152}]   =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011431152}]   =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011431152}]   =>PUP.CrossRider
~ Additionnel Scan: 277090 Items scanned in 00mn 35s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "000021090200C0400000000000F01FEC" . (.Module de compatibilité pour Microsoft Office System 2007.) -- c:\Windows\Installer\{90120000-0020-040C-0000-0000000FF1CE}\O12ConvIcon.exe
O90 - PUC: "00002159FA00C0400000000000F01FEC" . (.Microsoft Office PowerPoint Viewer 2007 (French).) -- c:\Windows\Installer\{95120000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe,0
O90 - PUC: "00006FCA9B229EC4896DC2FC53B9CA70" . (.ABBYY FineReader 6.0 Sprint.) -- C:\Windows\Installer\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}\ARPPRODUCTICON.exe
O90 - PUC: "045F27F206F16624596059B2126D46D0" . (.Apple Mobile Device Support.) -- C:\Windows\Installer\{2F72F540-1F60-4266-9506-952B21D6640D}\Installer.ico
O90 - PUC: "076CFAAAB965F2A4284B2449E5D03EFE" . (.Windows Live Writer.) -- C:\Windows\Installer\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}\ApplicationIcon.ico
O90 - PUC: "0C22D86408082E118BE68BCAF689CC3E" . (.Google Earth.) -- C:\Windows\Installer\{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}\ARPPRODUCTICON.exe
O90 - PUC: "0C7EC0FA4E3A37D489B82B1978CEE6A9" . (.QuickTime.) -- C:\Windows\Installer\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}\Installer.ico
O90 - PUC: "121E2D80A6F7BE3479DF26B944094330" . (.Microsoft_VC90_CRT_x86.) -- C:\Windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe
O90 - PUC: "144A4120BA4A8A34D8FEF2375C636437" . (.Microsoft Works.) -- c:\Windows\Installer\{0214A441-A4AB-43A8-8DEF-2F73C5364673}\MSWorks.exe
O90 - PUC: "19DA96544F74E9D4F89C17E73CD2A71E" . (.Microsoft_VC80_CRT_x86_x64.) -- C:\Windows\Installer\{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}\ARPPRODUCTICON.exe
O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon
O90 - PUC: "20B91A1DE71869244AB57058F37DD475" . (.Microsoft_VC80_MFC_x86.) -- C:\Windows\Installer\{D1A19B02-817E-4296-A45B-07853FD74D57}\ARPPRODUCTICON.exe
O90 - PUC: "25BBB29DFF28DE24A8C3E460F249A47B" . (.Microsoft_VC80_MFCLOC_x86.) -- C:\Windows\Installer\{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}\ARPPRODUCTICON.exe
O90 - PUC: "277C90D53BCEB244C96C4B43C187DF2C" . (.Apple Application Support.) -- C:\Windows\Installer\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}\WinInstall.ico
O90 - PUC: "2B0163E6D0340BE4183EB2758E9BEDD8" . (.Bonjour.) -- C:\Windows\Installer\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}\Bonjour.ico
O90 - PUC: "30F0FF67707B23345B1D5AC6383015E4" . (.iTunes.) -- C:\Windows\Installer\{76FF0F03-B707-4332-B5D1-A56C8303514E}\Installer.ico
O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico
O90 - PUC: "487EA05EEBAFAD641A8FB7B665CD2BE2" . (.Microsoft Office Suite Activation Assistant.) -- C:\Windows\Installer\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}\ARPPRODUCTICON.exe
O90 - PUC: "4A1AFE21B3CAC344183432E7ED674030" . (.NTI Backup Now Standard.) -- C:\Windows\Installer\{12EFA1A4-AC3B-443C-8143-237EDE760403}\ARPPRODUCTICON.exe
O90 - PUC: "4E9B274AFFA0B7F42BD56FF4E829A8BA" . (.Microsoft_VC90_MFC_x86_x64.) -- C:\Windows\Installer\{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}\ARPPRODUCTICON.exe
O90 - PUC: "50910386AED2EC144A4D8E4B340B99AB" . (.MyWinLocker.) -- C:\Windows\Installer\{68301905-2DEA-41CE-A4D4-E8B443B099BA}\ARPPRODUCTICON.exe
O90 - PUC: "5DAB1C8C6E456414DA70A3A83D56963C" . (.Microsoft_VC80_MFC_x86_x64.) -- C:\Windows\Installer\{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}\ARPPRODUCTICON.exe
O90 - PUC: "5E677B270354B4C4493557D18FD7D939" . (.Backup Manager Basic.) -- C:\Windows\Installer\{72B776E5-4530-4C4B-9453-751DF87D9D93}\ARPPRODUCTICON.exe
O90 - PUC: "68AB67CA7DA76301B744BA0000000010" . (.Adobe Reader XI (11.0.03) - Français.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico
O90 - PUC: "7692FC6BE18C0C0489510C7547EF1F02" . (.Skype Click to Call.) -- C:\Windows\Installer\{B6CF2967-C81E-40C0-9815-C05774FEF120}\IconUninstallIco
O90 - PUC: "811CF9E1D156439479EB5EC3EAC5D754" . (.Microsoft_VC80_MFCLOC_x86_x64.) -- C:\Windows\Installer\{1E9FC118-651D-4934-97BE-E53CAE5C7D45}\ARPPRODUCTICON.exe
O90 - PUC: "853297B7A204D764BAC4B63A1185A8DD" . (.Fnacmusic - Gestionnaire de téléchargement.) -- C:\Windows\Installer\{7B792358-402A-467D-AB4C-6BA311588ADD}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "8F7463F0D15ECCF48826A9D8C0A5FC52" . (.Microsoft_VC80_ATL_x86.) -- C:\Windows\Installer\{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}\ARPPRODUCTICON.exe
O90 - PUC: "8FD07F69F061C9F4B9E9A2B934B9E49B" . (.Broadcom Gigabit NetLink Controller.) -- c:\Windows\Installer\{96F70DF8-160F-4F9C-9B9E-2A9B439B4EB9}\ARPPRODUCTICON.exe
O90 - PUC: "907018673D7AD86419761A87C0E167C6" . (.Windows Live FolderShare.) -- C:\Windows\Installer\{76810709-A7D3-468D-9167-A1780C1E766C}\FolderShare48x48.ico
O90 - PUC: "91785D291CBB3CC40AB8659C8E48CCC2" . (.Microsoft_VC80_CRT_x86.) -- C:\Windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe
O90 - PUC: "B5DEF536D6C2EB94786EA7F6DC22CBA5" . (.Microsoft_VC90_MFC_x86.) -- C:\Windows\Installer\{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}\ARPPRODUCTICON.exe
O90 - PUC: "B850D529A465A3444B2BE7096C34E255" . (.Microsoft_VC80_ATL_x86_x64.) -- C:\Windows\Installer\{925D058B-564A-443A-B4B2-7E90C6432E55}\ARPPRODUCTICON.exe
O90 - PUC: "C039314290386A74CB16E52FA72422CB" . (.NTI Media Maker 8.) -- C:\Windows\Installer\{2413930C-8309-47A6-BC61-5EF27A4222BC}\ARPPRODUCTICON.exe
O90 - PUC: "C7937558D24AF684793B2ABC2C735239" . (.Microsoft_VC90_ATL_x86_x64.) -- C:\Windows\Installer\{8557397C-A42D-486F-97B3-A2CBC2372593}\ARPPRODUCTICON.exe
O90 - PUC: "D0AC3A29DC55D5C4AB59C562002CF062" . (.Microsoft_VC90_CRT_x86_x64.) -- C:\Windows\Installer\{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}\ARPPRODUCTICON.exe
O90 - PUC: "D5ADFB912EF152F4799FA197DD40EE02" . (.Microsoft XNA Framework Redistributable 3.1.) -- C:\Windows\Installer\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}\ProductIcon
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "DC276626FCFB9A94EAEFBAF0DEB3CFB5" . (.Gestionnaire pour appareils Windows Mobile.) -- C:\Windows\Installer\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}\wmdc.exe
O90 - PUC: "E6F30ED82DCF79448AFF6F4C3460816B" . (.Plug-in du navigateur BlackBerry App World.) -- C:\Windows\Installer\{8DE03F6E-FCD2-4497-A8FF-F6C4430618B6}\ARPIcon
O90 - PUC: "E7FF67E4ABEA78C47B88DC745E24B5D9" . (.Skype™ 6.3.) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
O90 - PUC: "E873E3303DA65DA4DBBEBC6DB91340C6" . (.Microsoft_VC90_ATL_x86.) -- C:\Windows\Installer\{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}\ARPPRODUCTICON.exe
~ Update Products: 114 Scanned in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 11/05/2013 65640 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 11/06/2013 256904 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 21/12/2012 57008 |  (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 09/05/2013 46808 |  (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
SR - | Auto 30/08/2011 462184 |  (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 05/08/2009 844320 |  (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
SR - | Auto 04/06/2009 1150496 |  (Greg_Service) . (.Acer Incorporated.) - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
SS - | Auto 27/10/2010 136176 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 27/10/2010 136176 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 22/12/2009 136120 |  (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\SysWOW64\XAudio64.dll (HsfXAudioService) . (.Conexant Systems, Inc..) - C:\Windows\System32\svchost.exe
SS - | Auto 05/06/2009 354840 |  (IAANTMON) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
SR - | Demand 31/05/2013 641352 |  (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SS - | Auto 25/05/2007 34224 |  (lxddCATSCustConnectService) . (.Lexmark International, Inc..) - C:\Windows\system32\spool\DRIVERS\x64\3\lxddserv.exe
SR - | Auto  567216 |  (lxdd_device) . (...) - C:\Windows\system32\lxddcoms.exe
SS - | Auto 14/04/2010 45736 |  (lxeaCATSCustConnectService) . (.Lexmark International, Inc..) - C:\Windows\system32\spool\DRIVERS\x64\3\lxeaserv.exe
SR - | Auto  1052328 |  (lxea_device) . (...) - C:\Windows\system32\lxeacoms.exe
SR - | Auto 07/08/2009 311592 |  (MWLService) . (.Egis Technology Inc..) - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
SR - | Auto 21/08/2009 62720 |  (NTI IScheduleSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
SS - | Demand 18/06/2009 50432 |  (NTIBackupSvc) . (.NewTech InfoSystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
SR - | Auto 18/06/2009 144640 |  (NTISchedulerSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
SR - | Auto 26/01/2009 1153368 |  (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
SR - | Auto 02/10/2012 3064000 |  (Skype C2C Service) . (.Skype Technologies S.A..) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
SS - | Auto 28/02/2013 161384 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 19/02/2010 517096 |  (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SR - | Auto 04/07/2009 240160 |  (Updater Service) . (.Acer.) - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto  0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services:  Scanned in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by AZO at 14/06/2013 21:41:03

device: opened successfully
user: error reading MBR 

Disk trace:
error: Read  Descripteur non valide
kernel: error reading MBR 
~ MBR: 9 Scanned in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by AZO at 14/06/2013 21:41:05

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR:  Scanned in 00mn 04s



End of the scan (2679 lines in 06mn 48s)(110)