~ Rapport de ZHPDiag v2014.2.23.20 - Nicolas Coolman (23/02/2014) ~ Lancé par damien (26/02/2014 10:16:07) ~ Adresse du Site Web http://nicolascoolman.webs.com ~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/ ~ Traduit par Nicolas Coolman ~ Etat de la version : ~ Liste blanche : Désactivée par l'utilisateur ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Deactivate by program ---\\ Navigateurs Internet MSIE: Internet Explorer v10.0.9200.16736 MFIE: Mozilla Firefox 6.0.2 ---\\ Informations sur les produits Windows ~ Langage: Français Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 7QJB7 Windows License : OK ~ Windows Remaining Initializations Number : 2 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Logiciels de protection du système AVG 2014 v14.0.3705 Malwarebytes Anti-Malware version 1.75.0.1300 Windows Defender W7 ---\\ Logiciels d'optimisation du système ---\\ Logiciels de partage PeerToPeer ---\\ Surveillance de Logiciels Adobe Flash Player 12 Plugin Adobe Reader 9.5.5 MUI Java 7 Update 51 ---\\ Informations sur le système ~ Processor: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 3766 MB (49% free) System Restore: Activé (Enable) System drive C: has 129 GB (28%) free of 450 GB ---\\ Mode de connexion au système ~ Computer Name: DAMIEN-PC ~ User Name: damien ~ All Users Names: HomeGroupUser$, damien, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\damien\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\damien\AppData\Roaming\ ~ %Desktop% : C:\Users\damien\Desktop\ ~ %Favorites% : C:\Users\damien\Favorites\ ~ %LocalAppData% : C:\Users\damien\AppData\Local\ ~ %StartMenu% : C:\Users\damien\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 129 Go of 450 Go) D: CD-ROM drive (Not Inserted) F: CD-ROM drive (Not Inserted) ---\\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Security Center: 46 Scanned in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.9706C99DAEBE3FEAC811B239617E98C4] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.12/10/2013 - 09:45:20.) -- C:\Windows\System32\wininet.dll [2241536] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.21/11/2010 - 04:24:29.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/09/2013 - 02:09:10.) -- C:\Windows\system32\Drivers\AFD.sys [497152] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632] [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808] ~ Generic Processes: Scanned in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes musiques (My Musics) : 1/2 ~ Mes Favoris (My Favorites) : 1/26 ~ Mes Documents (My Documents) : 1/59 ~ Mon Bureau (My Desktop) : 1/2718 ~ Menu demarrer (Programs) : 1/31 ~ Hidden Files: Scanned in 00mn 00s ---\\ Processus lancés [MD5.643F7A81B4FC27845886AB9650AD2C61] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176] [PID.3608] [MD5.2EEC5F825B88186DD158155A6F2D4DFE] - (.Pas de propriétaire - VProtect Application (Non Official).) -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2552856] [PID.3688] [MD5.42FEDBCB3ED926F6F529E0FDDF750BE0] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8339968] [PID.4176] [MD5.6E6656C6618C4B0B000267D9AF9EF743] - (.Google Inc. - Google Chrome.) -- C:\Users\damien\AppData\Local\Google\Chrome\Application\chrome.exe [859464] [PID.3024] [MD5.F89B2DACE0FBE54CF65D12B7081C19C3] - (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544] [PID.1768] [MD5.B747B6BB015E552F49C634BB19540F3D] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008] [PID.1788] [MD5.9E530C6F0EEE34CCEAC8104838AB68C7] - (.Microsoft Corporation - Updates Skype Click to Call.) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363616] [PID.1808] [MD5.96B14B79C71CE4A7783184CC8B5DBCE8] - (.Microsoft Corporation - Phone Number Recognition (PNR) module.) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1748640] [PID.1840] [MD5.32C2CD16DC801AEF9EDAAFEA0DBD769E] - (.Dritek System Inc. - Dritek WMI Service.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe [352848] [PID.1888] [MD5.F74285FC99CC90594619D6C85CCF37B7] - (.Dritek System Inc. - Launch Manager utility process.) -- C:\Program Files (x86)\Launch Manager\LMutilps32.exe [416848] [PID.1988] [MD5.0191DEE9B9EB7902AF2CF4F67301095D] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [23584] [PID.2044] [MD5.6BCEE9C766815BFFF89DE7D81AF34CE1] - (.Acer Incorporated - Updater Service.) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe [244624] [PID.1312] [MD5.DBC1136A62BD4DECC3632DF650284C2E] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [268824] [PID.1504] [MD5.773EED20BBF50809437373C0285BFA5E] - (.NTI Corporation - Backup Manager Module.) -- C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [257344] [PID.1900] [MD5.E5C796B621F6FBA8616511063D7F0FFE] - (.StarWind Software - StarWind iSCSI Target (Alcohol Edition).) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [370688] [PID.2128] [MD5.8F2CA8990B6F47A398ECF203330E5E47] - (.AVG Secure Search - ToolbarU Application (Official).) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe [1772056] [PID.2200] =>Toolbar.AVGSearch [MD5.6DB01688FDBF299F426EEB01DDEC684A] - (.Atheros - Atheros Coex Service Application.) -- C:\Program Files (x86)\Qualcomm Atheros Fast Reconnect\Ath_WlanAgent.exe [57344] [PID.2496] [MD5.573C74C3B2BFC839FA6EBC02B68B5B42] - (.Pas de propriétaire - loggings Application.) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\loggingserver.exe [159768] [PID.2672] =>Toolbar.AVGSearch [MD5.6B24D1C3096DE796D15571079EA5E98C] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [13336] [PID.804] [MD5.7466809E6DA561D60C2F1CE8EDE3C73F] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2320920] [PID.1320] ~ Processes Running: Scanned in 00mn 00s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Preferences G1 - GCS: Preference [User Data\Default] None G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.fr G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Store v.0.2 (Activé) G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.6 (Activé) G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.20 (Activé) G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé) G2 - GCE: Preference [User Data\Default] [flpcjncodpafbgdpnkljologafpionhb] Managera v.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [gfdkimpbcpahaombhbimeihdjnejgicl] Feedback v.1.0 (Activé) G2 - GCE: Preference [User Data\Default] [gighmmpiobklfepjocnamgkkbiglidom] AdBlock v.2.6.18, (Activé) G2 - GCE: Preference [User Data\Default] [jpmbfleldcgkldadpdinhjjopdfpjfjp] Wajam v.1.32 (Désactivé) =>PUP.Wajam G2 - GCE: Preference [User Data\Default] [lifbcibllhkdhoafpjfnlhfpfgnpldfl] Skype Click to Call v.7.0.14735.1561, (Désactivé) G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [ndibdjnfmopecpmkdieinmbadjfpblof] AVG SafeGuard v.17.2.0.38 (Désactivé) G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé) G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé) G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Wallet v.0.0.6.1 (Activé) G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé) ~ Google Browser: 19 Scanned in 00mn 09s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\damien\AppData\Roaming\Mozilla\Firefox\Profiles\fkowmk71.default\prefs.js M3 - MFPP: Plugins - [damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml M3 - MFPP: Plugins - [damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml M3 - MFPP: Plugins - [damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml M3 - MFPP: Plugins - [damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml =>Toolbar.eBay M3 - MFPP: Plugins - [damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml M3 - MFPP: Plugins - [damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\safeguard-secure-search.xml M3 - MFPP: Plugins - [damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml M3 - MFPP: Plugins - [damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml M0 - MFSP: prefs.js [damien - fkowmk71.default] http://mysearch.avg.com =>Adware.MyWebSearch P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20913.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\damien\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\damien\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll ~ Firefox Browser: 13 Scanned in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)) -- C:\Windows\SysWOW64\ieframe.dll R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ IE Browser: 18 Scanned in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG SafeGuard toolbar [64Bits] - {95B7759C-8C7F-4BF1-B163-73684A933233} . (.AVG Secure Search - toolbar.dll (Official).) -- C:\Program Files (x86)\AVG SafeGuard toolbar\17.3.1.91\AVG SafeGuard toolbar_toolbar.dll =>Toolbar.AVGSearch O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll ~ BHO: 6 Scanned in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\Desktop [Public]: Adobe Reader 9.lnk . (.Adobe Systems Incorporated - Adobe Reader 9.5.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe O4 - GS\Desktop [Public]: Age of Empires II.lnk . (.Microsoft Corporation - Age of Empires II.) -- C:\Program Files (x86)\Microsoft Games\Age of Empires II\EMPIRES2.exe O4 - GS\Desktop [Public]: Alcohol 52%.lnk . (.Alcohol Soft Development Team - Alcohol 52%.) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 52\Alcohol.exe O4 - GS\Desktop [Public]: AVG 2014.lnk . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe O4 - GS\Desktop [Public]: Battle.net.lnk . (.Blizzard Entertainment - Battle.net Setup.) -- C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe O4 - GS\Desktop [Public]: Hearthstone.lnk . (.Blizzard Entertainment - Hearthstone Setup.) -- C:\Program Files (x86)\Hearthstone\Hearthstone Beta Launcher.exe O4 - GS\Desktop [Public]: Malwarebytes Anti-Malware.lnk . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe O4 - GS\Desktop [Public]: OpenOffice.org 3.4.1.lnk . (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe O4 - GS\Desktop [Public]: Oracle VM VirtualBox.lnk . (...) -- C:\Program Files (x86)\Oracle\VirtualBox\VirtualBox.exe (.not file.) O4 - GS\Desktop [Public]: Skype.lnk . (...) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe O4 - GS\Desktop [Public]: Steam.lnk . (.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files (x86)\Steam\Steam.exe O4 - GS\Program [Public]: Adobe Help.lnk . (...) -- C:\Program Files (x86)\Adobe\Adobe Help\Adobe Help.exe O4 - GS\Program [Public]: Adobe Reader 9.lnk . (...) -- C:\Windows\Installer\{AC76BA86-7AD7-FFFF-7B44-A91000000001}\SC_Reader.ico O4 - GS\Program [Public]: Fooz Kids.lnk . (...) -- C:\Program Files (x86)\Preload\Fooz Kids\Setup.exe (.not file.) O4 - GS\Program [Public]: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\Program [Public]: Sidebar.lnk . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - GS\Program [Public]: Windows Anytime Upgrade.lnk . (.Microsoft Corporation - Interface utilisateur de Mise à niveau expr.) -- C:\Windows\system32\WindowsAnytimeUpgradeUI.exe O4 - GS\Program [Public]: Windows DVD Maker.lnk . (...) -- C:\Program Files (x86)\DVD Maker\DVDMaker.exe (.not file.) O4 - GS\Program [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe =>.Microsoft Corporation O4 - GS\Program [Public]: Windows Live Mail.lnk . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\wlmail.exe =>.Microsoft Corporation O4 - GS\Program [Public]: Windows Live Messenger.lnk . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe O4 - GS\Program [Public]: Windows Live Movie Maker.lnk . (.Microsoft Corporation - Windows Live Movie Maker.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe =>.Microsoft Corporation O4 - GS\Program [Public]: Windows Live Photo Gallery.lnk . (.Microsoft Corporation - Windows Live Photo Gallery.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe =>.Microsoft Corporation O4 - GS\Program [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O4 - GS\Program [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) -- C:\Windows\system32\xpsrchvw.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) -- C:\Windows\system32\calc.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: displayswitch.lnk . (.Microsoft Corporation - Afficher le commutateur.) -- C:\Windows\system32\displayswitch.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - Accessoire du panneau de saisie mathématiqu.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilité Windows.) -- C:\Windows\system32\mblctr.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) -- C:\Windows\system32\mspaint.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) -- C:\Windows\system32\mstsc.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.) -- C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) -- C:\Windows\system32\SoundRecorder.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.) -- C:\Windows\system32\StikyNot.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.) -- C:\Windows\System32\mobsync.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Mise en route.) -- C:\Windows\system32\OobeFldr.dll =>.Microsoft Corporation O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) -- C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) -- C:\Windows\system32\charmap.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.) -- C:\Windows\system32\dfrgui.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestionnaire de nettoyage de disque pour Wi.) -- C:\Windows\system32\cleanmgr.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Resource Monitor.lnk . (.Microsoft Corporation - Moniteur de ressources et de performances.) -- C:\Windows\system32\perfmon.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informations système.) -- C:\Windows\system32\msinfo32.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.) -- C:\Windows\system32\rstrui.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) -- C:\Windows\system32\taskschd.msc O4 - GS\SystemTools [Public]: Windows Easy Transfer Reports.lnk . (.Microsoft Corporation - Application post-migration de transfert de.) -- C:\Windows\system32\migwiz\postmig.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Windows Easy Transfer.lnk . (.Microsoft Corporation - Application Transfert de fichiers et paramè.) -- C:\Windows\system32\migwiz\migwiz.exe =>.Microsoft Corporation O4 - GS\QuickLaunch [damien]: CodeBlocks.lnk . (...) -- C:\Program Files (x86)\CodeBlocks\codeblocks.exe O4 - GS\QuickLaunch [damien]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\TaskBar [damien]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\damien\AppData\Local\Google\Chrome\Application\chrome.exe O4 - GS\TaskBar [damien]: Internet Explorer (2).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\TaskBar [damien]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\TaskBar [damien]: Windows Explorer (2).lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe =>.Microsoft Corporation O4 - GS\TaskBar [damien]: Windows Explorer (3).lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe =>.Microsoft Corporation O4 - GS\TaskBar [damien]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe =>.Microsoft Corporation O4 - GS\TaskBar [damien]: Windows Media Player (2).lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O4 - GS\TaskBar [damien]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O4 - GS\Program [damien]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Program [damien]: tarnbus.tarn.fr_Documents_TarnBus_FicheHoraire702.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\damien\AppData\Local\Google\Chrome\Application\chrome.exe http://tarnbus.tarn.fr =>Hijacker.Browsers O4 - GS\Accessories [damien]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation O4 - GS\Accessories [damien]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) -- C:\Windows\system32\notepad.exe =>.Microsoft Corporation O4 - GS\Accessories [damien]: Run.lnk - Clé orpheline O4 - GS\Accessories [damien]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe =>.Microsoft Corporation O4 - GS\SystemTools [damien]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\SystemTools [damien]: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe =>.Microsoft Corporation O4 - GS\SendTo [damien]: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O4 - GS\Desktop [damien]: Caml Light.lnk . (...) -- C:\CamlLight\CamlWin.exe O4 - GS\Desktop [damien]: CodeBlocks.lnk . (...) -- C:\Program Files (x86)\CodeBlocks\codeblocks.exe O4 - GS\Desktop [damien]: Flash - Raccourci.lnk . (.Adobe Systems Incorporated. - Adobe Flash CS6.) -- C:\Program Files (x86)\Adobe\Adobe Flash CS6\Flash.exe O4 - GS\Desktop [damien]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\damien\AppData\Local\Google\Chrome\Application\chrome.exe O4 - GS\Desktop [damien]: IDLE (Python GUI).lnk . (...) -- C:\Users\damien\AppData\Roaming\Microsoft\Installer\{110EB5C4-E995-4CFB-AB80-A5F315BEA9E9}\python_icon.exe (.not file.) O4 - GS\Desktop [damien]: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation O4 - GS\Desktop [damien]: Notepad++.lnk . (.Don HO don.h@free.fr - Notepad++ : a free (GNU) source code editor.) -- C:\Program Files (x86)\Notepad++\notepad++.exe O4 - GS\Desktop [damien]: OCamlWin.lnk . (...) -- C:\OCaml\OCamlWin.exe O4 - GS\Desktop [damien]: TERA.lnk . (.Solid State Networks - TERA.) -- C:\Program Files (x86)\TERA\tera-launcher.exe O4 - GS\Desktop [damien]: W40K.exe.lnk . (.Relic Entertainment Inc. - W40K.) -- C:\Program Files (x86)\THQ\Dawn of War\W40k.exe O4 - GS\Desktop [damien]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe =>.Nicolas Coolman O4 - GS\Desktop [damien]: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe =>.Nicolas Coolman ~ Global Startup: 79 Scanned in 00mn 00s ---\\ Applications lancées au démarrage du sytème (O4) O4 - HKLM\..\RunOnce: [NCInstallQueue] Clé orpheline O4 - HKCU\..\Run: [AdobeBridge] Clé orpheline O4 - HKCU\..\Run: [AVG-Secure-Search-Update_0214c] C:\Users\damien\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe (.not file.) O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\damien\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe O4 - HKLM\..\Wow6432Node\Run: [vProt] . (.Pas de propriétaire - VProtect Application (Non Official).) -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] . (.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\System32\msiexec.exe O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] . (.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\System32\msiexec.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\RunOnce: [IsMyWinLockerReboot] . (.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\System32\msiexec.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [IsMyWinLockerReboot] . (.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\System32\msiexec.exe O4 - HKUS\S-1-5-21-3410720944-1771471174-1398364667-1000\..\Run: [AdobeBridge] Clé orpheline O4 - HKUS\S-1-5-21-3410720944-1771471174-1398364667-1000\..\Run: [AVG-Secure-Search-Update_0214c] C:\Users\damien\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe (.not file.) O4 - HKUS\S-1-5-21-3410720944-1771471174-1398364667-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\damien\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc ~ Application: Scanned in 00mn 00s ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ IE Control Panel: 1 Scanned in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Skype Click to Call [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico ~ IE Extra Buttons: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation ~ Winsock: 8 Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{EAB3F335-2C66-4C05-ACF2-6C7854F3A39C}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{EAB3F335-2C66-4C05-ACF2-6C7854F3A39C}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{EAB3F335-2C66-4C05-ACF2-6C7854F3A39C}: DhcpNameServer = 109.0.66.10 109.0.66.20 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll ~ Winlogon: Scanned in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ SSODL: 1 Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) . (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe O23 - Service: Dritek WMI Service (DsiWMIService) . (.Dritek System Inc. - Dritek WMI Service.) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe O23 - Service: Acer ePower Service (ePowerSvc) . (.Acer Incorporated - ePowerSvc.) - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe O23 - Service: GREGService (GREGService) . (.Acer Incorporated - Global Registration Service.) - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: Live Updater Service (Live Updater Service) . (.Acer Incorporated - Updater Service.) - C:\Program Files\Acer\Acer Updater\UpdaterService.exe O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: NTI IScheduleSvc (NTI IScheduleSvc) . (.NTI Corporation - Backup Manager Module.) - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: StarWind AE Service (StarWindServiceAE) . (.StarWind Software - StarWind iSCSI Target (Alcohol Edition).) - C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe O23 - Service: Intel(R) Management & Security Application User Notificatio (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: (vToolbarUpdater17.3.0) . (.AVG Secure Search - ToolbarU Application (Official).) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe =>Toolbar.AVGSearch O23 - Service: ZAtheros Wlan Agent (ZAtheros Wlan Agent) . (.Atheros - Atheros Coex Service Application.) - C:\Program Files (x86)\Qualcomm Atheros Fast Reconnect\Ath_WlanAgent.exe ~ Services: 14 Scanned in 00mn 06s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Desktop Component: 4 Scanned in 00mn 00s ---\\ Enumère les données de BootExecute (BEX) (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ BEX: 1 Scanned in 00mn 00s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3410720944-1771471174-1398364667-1000Core.job [1030] O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3410720944-1771471174-1398364667-1000UA.job [1082] [MD5.F7AB315A4D400CA876381D1E188A2E20] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [257928] [MD5.1315C5C5C54CE2AA37A155F97027DB59] [APT] [AdobeAAMUpdater-1.0-damien-PC-damien] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392] [MD5.00000000000000000000000000000000] [APT] [clear.fi] (...) -- C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [clear.fiAgent] (...) -- C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [DMREngine] (...) -- C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe (.not file.) [0] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-3410720944-1771471174-1398364667-1000Core] (.Google Inc..) -- C:\Users\damien\AppData\Local\Google\Update\GoogleUpdate.exe [136176] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-3410720944-1771471174-1398364667-1000UA] (.Google Inc..) -- C:\Users\damien\AppData\Local\Google\Update\GoogleUpdate.exe [136176] [MD5.00000000000000000000000000000000] [APT] [{272E2F9F-9E6B-4338-B386-8759944C1574}] (...) -- E:\CS1.6\Portable_CS1.6.exe (.not file.) [0] [MD5.6E6656C6618C4B0B000267D9AF9EF743] [APT] [{79D6E881-4EF7-4CD2-A6EA-68D56FAECBA1}] (.Google Inc..) -- c:\users\damien\appdata\local\google\chrome\application\chrome.exe [859464] [MD5.00000000000000000000000000000000] [APT] [{DF6B6E28-2B38-4D8E-A22E-110F8DF05146}] (...) -- C:\Program Files (x86)\Acer GameZone\1912 Titanic Mystery\Uninstall.exe (.not file.) [0] ~ Scheduled Task: 16 Scanned in 00mn 01s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Active Setup: 10 Scanned in 00mn 00s ---\\ Pilotes lancés au démarrage du système (O41) O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (Avgdiska) . (.AVG Technologies CZ, s.r.o. - AVG File Vault Driver.) - C:\Windows\System32\DRIVERS\avgdiska.sys O41 - Driver: (AVGIDSDriver) . (.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) - C:\Windows\System32\DRIVERS\avgidsdrivera.sys O41 - Driver: (Avgldx64) . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - C:\Windows\System32\DRIVERS\avgldx64.sys O41 - Driver: (Avgtdia) . (.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - C:\Windows\System32\DRIVERS\avgtdia.sys O41 - Driver: (avgtp) . (.AVG Technologies - Pas de description.) - C:\Windows\system32\drivers\avgtpx64.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\drivers\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys O41 - Driver: (mwlPSDFilter) . (.Egis Technology Inc. - PSD Filter Driver.) - C:\Windows\System32\DRIVERS\mwlPSDFilter.sys O41 - Driver: (mwlPSDNServ) . (.Egis Technology Inc. - MyWinLocker PSD Named Pipe Driver.) - C:\Windows\System32\DRIVERS\mwlPSDNServ.sys O41 - Driver: (mwlPSDVDisk) . (.Egis Technology Inc. - MyWinLocker PSD Virtual Disk Driver.) - C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys O41 - Driver: (VBoxDrv) . (.Oracle Corporation - VirtualBox Support Driver.) - C:\Windows\System32\DRIVERS\VBoxDrv.sys O41 - Driver: (VBoxUSBMon) . (.Oracle Corporation - VirtualBox USB Monitor Driver.) - C:\Windows\System32\DRIVERS\VBoxUSBMon.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys ~ Drivers: 90 Scanned in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: 7-Zip 9.20 (x64 edition) - (.Igor Pavlov.) [HKLM][64Bits] -- {23170F69-40C1-2702-0920-000001000000} O42 - Logiciel: AVG 2014 - (.AVG Technologies.) [HKLM][64Bits] -- AVG O42 - Logiciel: AVG 2014 - (.AVG Technologies.) [HKLM][64Bits] -- {34883B9C-CDFE-46F0-9C5B-935484C218C3} O42 - Logiciel: AVG 2014 - (.AVG Technologies.) [HKLM][64Bits] -- {CE470020-CCCF-4C09-9AB9-B710A4FBE2C8} O42 - Logiciel: AVG SafeGuard toolbar - (.AVG Technologies.) [HKLM][64Bits] -- AVG SafeGuard toolbar O42 - Logiciel: Acer Backup Manager - (.NTI Corporation.) [HKLM][64Bits] -- InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270} O42 - Logiciel: Acer Crystal Eye Webcam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: Acer Crystal Eye Webcam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: Acer Registration - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Registration O42 - Logiciel: Acer ScreenSaver - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Screensaver O42 - Logiciel: Acer Updater - (.Acer Incorporated.) [HKLM][64Bits] -- {EE171732-BEB4-4576-887D-CB62727F01CA} O42 - Logiciel: Acer ePower Management - (.Acer Incorporated.) [HKLM][64Bits] -- {3DB0448D-AD82-4923-B305-D001E521A964} O42 - Logiciel: Acer eRecovery Management - (.Acer Incorporated.) [HKLM][64Bits] -- {7F811A54-5A09-4579-90E1-C93498E230D9} O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40} O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {FE23D063-934D-4829-A0D8-00634CE79B4A} O42 - Logiciel: Adobe Flash Player 12 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 12 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Flash Professional CS6 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {BD5669B5-49FF-4490-B956-E9D7CB9B0ADC} O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AF37176A-78CA-545B-34EF-8B6A21514DD1} O42 - Logiciel: Adobe Reader 9.5.5 MUI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-FFFF-7B44-A91000000001} O42 - Logiciel: Backup Manager V3 - (.NTI Corporation.) [HKLM][64Bits] -- {0B61BBD5-DA3C-409A-8730-0C3DC3B0F270} O42 - Logiciel: Battle.net - (.Blizzard Entertainment.) [HKLM][64Bits] -- Battle.net O42 - Logiciel: Broadcom Gigabit NetLink Controller - (.Broadcom Corporation.) [HKLM][64Bits] -- {C91DCB72-F5BB-410D-A91A-314F5D1B4284} O42 - Logiciel: Caml Light 0.74 - (.INRIA.) [HKLM][64Bits] -- Caml Light_is1 O42 - Logiciel: CodeBlocks - (.The Code::Blocks Team.) [HKCU][64Bits] -- CodeBlocks O42 - Logiciel: Counter-Strike: Source - (.Valve.) [HKLM][64Bits] -- Steam App 240 O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: DawnOfWar - (.THQ.) [HKLM][64Bits] -- InstallShield_{362D5167-9716-44BE-89FD-BF9EB6EF814B} O42 - Logiciel: ETDWare PS/2-X64 8.0.6.3_WHQL - (.ELAN Microelectronic Corp..) [HKLM][64Bits] -- Elantech O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU][64Bits] -- Google Chrome O42 - Logiciel: Hearthstone - (.Blizzard Entertainment.) [HKLM][64Bits] -- Hearthstone O42 - Logiciel: Identity Card - (.Acer Incorporated.) [HKLM][64Bits] -- Identity Card O42 - Logiciel: Intel(R) Control Center - (.Intel Corporation.) [HKLM][64Bits] -- {F8A9085D-4C7A-41a9-8A77-C8998A96C421} O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC} O42 - Logiciel: Java 7 Update 51 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217045FF} O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} O42 - Logiciel: Launch Manager - (.Acer Inc..) [HKLM][64Bits] -- LManager O42 - Logiciel: League of Legends - (.Riot Games.) [HKLM][64Bits] -- {92606477-9366-4D3B-8AE3-6BE4B29727AB} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E} O42 - Logiciel: Microsoft Age of Empires II - (...) [HKLM][64Bits] -- Age of Empires 2.0 O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Mozilla Firefox 6.0.2 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 6.0.2 (x86 fr) O42 - Logiciel: MyWinLocker - (.Egis Technology Inc..) [HKLM][64Bits] -- {0B78ECB0-1A6B-4E6D-89D7-0E7CE77F0427} O42 - Logiciel: MyWinLocker 4 - (.Egis Technology Inc..) [HKLM][64Bits] -- {39F15B50-A977-4CA6-B1C3-6A8724CDA025} O42 - Logiciel: MyWinLocker Suite - (.Egis Technology Inc..) [HKLM][64Bits] -- InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE} O42 - Logiciel: MyWinLocker Suite - (.Egis Technology Inc..) [HKLM][64Bits] -- {17DF9714-60C9-43C9-A9C2-32BCAED44CBE} O42 - Logiciel: NTI Media Maker 9 - (.NTI Corporation.) [HKLM][64Bits] -- InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44} O42 - Logiciel: Notepad++ - (.Notepad++ Team.) [HKLM][64Bits] -- Notepad++ O42 - Logiciel: Notification Mail - (.Orange.) [HKLM][64Bits] -- MailNotifier O42 - Logiciel: OCaml - (.Inria.) [HKLM][64Bits] -- OCaml O42 - Logiciel: OpenOffice.org 3.4.1 - (.Apache Software Foundation.) [HKLM][64Bits] -- {7DA1C06F-C913-46C7-8A0F-DA2CBA17EA1D} O42 - Logiciel: Oracle VM VirtualBox 4.2.18 - (.Oracle Corporation.) [HKLM][64Bits] -- {230C9C86-26A9-437F-8152-34D5F4C3F680} O42 - Logiciel: PDF Settings CS6 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {BFEAAE77-BD7F-4534-B286-9C5CB4697EB1} O42 - Logiciel: Python 2.6 PIL-1.1.7 - (...) [HKCU][64Bits] -- PIL-py2.6 O42 - Logiciel: Python 3.2 - (.Python Software Foundation.) [HKLM][64Bits] -- {b2042d5e-986d-44ec-aee3-afe4108ccc93} O42 - Logiciel: Qualcomm Atheros Fast Reconnect - (.QualComm Atheros.) [HKLM][64Bits] -- {0CA2063D-D43F-41F2-A8AC-A3C4A4C722D2} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911} O42 - Logiciel: Satsuki Decoder Pack 4301 - (...) [HKLM][64Bits] -- Satsuki Decoder Pack O42 - Logiciel: Shredder - (.Egis Technology Inc..) [HKLM][64Bits] -- {C2695E83-CF1D-43D1-84FE-B3BEC561012A} O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {BB285C9F-C821-4770-8970-56C4AB52C87E} O42 - Logiciel: Skype™ 6.3 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D} O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3} O42 - Logiciel: TERA - (.Gameforge Productions GmbH.) [HKLM][64Bits] -- {A2F166A0-F031-4E27-A057-C69733219434}_is1 =>.Gameforge Productions GmbH O42 - Logiciel: Visual Studio 2010 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {21B133D6-5979-47F0-BE1C-F6A6B304693F} O42 - Logiciel: Visual Studio 2012 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {8C775E70-A791-4DA8-BCC3-6AB7136F4484} O42 - Logiciel: Visual Studio 2012 x86 Redistributables - (.AVG Technologies CZ, s.r.o..) [HKLM][64Bits] -- {98EFF19A-30AB-4E4B-B943-F06B1C63EBF8} O42 - Logiciel: Welcome Center - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Welcome Center O42 - Logiciel: barre d'outils Orange - (.France Telecom SA.) [HKLM][64Bits] -- OrangeToolbarFR O42 - Logiciel: msvcrt_installer - (.SAH.) [HKLM][64Bits] -- {6068A42A-C1CF-45F2-9859-5DB16287FE5D} O42 - Logiciel: newsXpresso - (.esobi Inc..) [HKLM][64Bits] -- InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF} O42 - Logiciel: newsXpresso - (.esobi Inc..) [HKLM][64Bits] -- {613C0AC5-3A67-4B94-8B13-9176AD83F5BF} ~ Logic: 55 Scanned in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\7-Zip] [HKCU\Software\AC3Filter] [HKCU\Software\AVG SafeGuard toolbar] [HKCU\Software\AVG Secure Search] =>Toolbar.AVGSearch [HKCU\Software\Acer] [HKCU\Software\Adobe] [HKCU\Software\Alcohol Soft] [HKCU\Software\AppDataLow\Software\JavaSoft] [HKCU\Software\AppDataLow\Software\Orange] [HKCU\Software\AppDataLow\Software\ThinPrint] [HKCU\Software\AppDataLow] [HKCU\Software\Avg] [HKCU\Software\Blizzard Entertainment] [HKCU\Software\Bugsplat] [HKCU\Software\ChrmTB] [HKCU\Software\ClassesB] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Cyberlink] [HKCU\Software\Dritek] [HKCU\Software\EgisTec MyWinLocker] [HKCU\Software\Elantech] [HKCU\Software\Facebook] [HKCU\Software\GNU] [HKCU\Software\Gabest] [HKCU\Software\Google] [HKCU\Software\Haali] [HKCU\Software\IM Providers] [HKCU\Software\Intel] [HKCU\Software\JavaSoft] [HKCU\Software\Lavalys] [HKCU\Software\Local AppWizard-Generated Applications] [HKCU\Software\Logitech] [HKCU\Software\MCAFEE] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\Netscape] [HKCU\Software\NewTech Infosystems] [HKCU\Software\ODBC] [HKCU\Software\OEM] [HKCU\Software\OpenOffice.org] [HKCU\Software\Oracle] [HKCU\Software\Orange] [HKCU\Software\Pando Networks] [HKCU\Software\Policies] [HKCU\Software\Python] [HKCU\Software\RealNetworks] [HKCU\Software\Realtek] [HKCU\Software\Satsuki Decoder Pack] [HKCU\Software\SecuROM] [HKCU\Software\Skype] [HKCU\Software\System Management Bus] [HKCU\Software\TeleCharger] [HKCU\Software\Trolltech] [HKCU\Software\VMware, Inc.] [HKCU\Software\Valve] [HKCU\Software\WinRAR SFX] [HKCU\Software\Wow6432Node] [HKCU\Software\ZebHelpProcess Helper] [HKCU\Software\ej-technologies] [HKCU\Software\kde.org] [HKCU\Software\newsXpresso] [HKLM\Software\7-Zip] [HKLM\Software\ATI Technologies] [HKLM\Software\Acer] [HKLM\Software\Adobe] [HKLM\Software\CBSTEST] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\CoreSecurity] [HKLM\Software\CyberLink] [HKLM\Software\DTS] [HKLM\Software\Dolby] [HKLM\Software\EgisTec IPS] [HKLM\Software\EgisTec Shredder] [HKLM\Software\IM Providers] [HKLM\Software\Intel] [HKLM\Software\Macromedia] [HKLM\Software\McAfee.com] [HKLM\Software\McAfee] [HKLM\Software\McFPDetect] [HKLM\Software\MozillaPlugins] [HKLM\Software\ODBC] [HKLM\Software\OEM] [HKLM\Software\OOBEOffer] [HKLM\Software\OemSetup] [HKLM\Software\Oracle] [HKLM\Software\Policies] [HKLM\Software\Qualcomm Atheros Fast Reconnect] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\SRS Labs] [HKLM\Software\SiteAdvisor] [HKLM\Software\SonicFocus] [HKLM\Software\Sonic] [HKLM\Software\VMware, Inc.] [HKLM\Software\Waves Audio] [HKLM\Software\Wow6432Node\ATHEROS] [HKLM\Software\Wow6432Node\AVG Security Toolbar] =>Toolbar.AVGSearch [HKLM\Software\Wow6432Node\Acer Incorporated] [HKLM\Software\Wow6432Node\Adobe] [HKLM\Software\Wow6432Node\AdwCleaner] [HKLM\Software\Wow6432Node\Alcohol Soft] [HKLM\Software\Wow6432Node\Avg] [HKLM\Software\Wow6432Node\Bunndle] [HKLM\Software\Wow6432Node\C07ft5Y] [HKLM\Software\Wow6432Node\CPUCooL] [HKLM\Software\Wow6432Node\Classes] [HKLM\Software\Wow6432Node\Clients] [HKLM\Software\Wow6432Node\Crytek] [HKLM\Software\Wow6432Node\CyberLink] [HKLM\Software\Wow6432Node\Dritek] [HKLM\Software\Wow6432Node\EgisTec IPS] [HKLM\Software\Wow6432Node\EgisTec MyWinLockerSuite] [HKLM\Software\Wow6432Node\EgisTec MyWinLocker] [HKLM\Software\Wow6432Node\EgisTec Shredder] [HKLM\Software\Wow6432Node\Electronic Arts] [HKLM\Software\Wow6432Node\GNU] [HKLM\Software\Wow6432Node\Google] [HKLM\Software\Wow6432Node\HaaliMkx] [HKLM\Software\Wow6432Node\Hewlett-Packard] [HKLM\Software\Wow6432Node\IM Providers] [HKLM\Software\Wow6432Node\InstallShield] [HKLM\Software\Wow6432Node\Intel] [HKLM\Software\Wow6432Node\JavaSoft] [HKLM\Software\Wow6432Node\JreMetrics] [HKLM\Software\Wow6432Node\Macromedia] [HKLM\Software\Wow6432Node\Macrovision] [HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware] [HKLM\Software\Wow6432Node\McAfee.com] [HKLM\Software\Wow6432Node\McAfeeInstaller] [HKLM\Software\Wow6432Node\McAfee] [HKLM\Software\Wow6432Node\MozillaPlugins] [HKLM\Software\Wow6432Node\Mozilla] [HKLM\Software\Wow6432Node\NSISCrap] [HKLM\Software\Wow6432Node\NewTech Infosystems] [HKLM\Software\Wow6432Node\ODBC] [HKLM\Software\Wow6432Node\OEM] [HKLM\Software\Wow6432Node\Oberon Media] [HKLM\Software\Wow6432Node\Objective Caml] [HKLM\Software\Wow6432Node\OldTimer Tools] [HKLM\Software\Wow6432Node\OpenOffice.org] [HKLM\Software\Wow6432Node\Orange] [HKLM\Software\Wow6432Node\Pando Networks] [HKLM\Software\Wow6432Node\Policies] [HKLM\Software\Wow6432Node\Python] [HKLM\Software\Wow6432Node\Qualcomm Atheros Fast Reconnect] [HKLM\Software\Wow6432Node\RealNetworks] [HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.] [HKLM\Software\Wow6432Node\Realtek] [HKLM\Software\Wow6432Node\RegisteredApplications] [HKLM\Software\Wow6432Node\Riot Games] [HKLM\Software\Wow6432Node\Skype] [HKLM\Software\Wow6432Node\TERA] [HKLM\Software\Wow6432Node\THQ] [HKLM\Software\Wow6432Node\VMware, Inc.] [HKLM\Software\Wow6432Node\Valve] [HKLM\Software\Wow6432Node\VirualDiskRedist] [HKLM\Software\Wow6432Node\mcafeeupdater] [HKLM\Software\Wow6432Node\mozilla.org] [HKLM\Software\Wow6432Node\webtogo] [HKLM\Software\Wow6432Node] ~ Key Software: 306 Scanned in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 25/09/2011 - 10:43:17 - [87,688] ----D C:\Program Files (x86)\Acer O43 - CFD: 13/01/2014 - 21:48:39 - [1894,958] ----D C:\Program Files (x86)\Adobe O43 - CFD: 05/04/2013 - 17:13:46 - [8,917] ----D C:\Program Files (x86)\Alcohol Soft O43 - CFD: 10/01/2014 - 21:31:12 - [129,456] ----D C:\Program Files (x86)\AVG O43 - CFD: 07/02/2014 - 19:41:29 - [11,576] ----D C:\Program Files (x86)\AVG SafeGuard toolbar O43 - CFD: 23/02/2014 - 00:42:28 - [111,550] ----D C:\Program Files (x86)\Battle.net O43 - CFD: 09/01/2013 - 18:41:38 - [236,024] ----D C:\Program Files (x86)\CodeBlocks O43 - CFD: 23/02/2014 - 00:42:07 - [809,943] ----D C:\Program Files (x86)\Common Files O43 - CFD: 05/08/2011 - 09:38:47 - [0,064] ----D C:\Program Files (x86)\Cyberlink O43 - CFD: 07/04/2011 - 11:18:00 - [3,457] ----D C:\Program Files (x86)\EgisTec IPS O43 - CFD: 07/04/2011 - 11:18:07 - [18,307] ----D C:\Program Files (x86)\EgisTec MyWinLocker O43 - CFD: 07/04/2011 - 11:17:29 - [2,533] ----D C:\Program Files (x86)\EgisTec MyWinLockerSuite O43 - CFD: 07/04/2011 - 11:18:34 - [5,331] ----D C:\Program Files (x86)\EgisTec Shredder O43 - CFD: 23/02/2014 - 01:54:57 - [-1828,908] ----D C:\Program Files (x86)\Hearthstone O43 - CFD: 09/08/2013 - 18:08:18 - [186,340] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 05/08/2011 - 09:23:52 - [35,883] ----D C:\Program Files (x86)\Intel O43 - CFD: 15/11/2013 - 13:11:32 - [4,885] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 04/02/2014 - 21:18:48 - [121,317] ----D C:\Program Files (x86)\Java O43 - CFD: 05/08/2011 - 09:26:18 - [8,974] ----D C:\Program Files (x86)\Launch Manager O43 - CFD: 25/06/2013 - 16:19:29 - [13,265] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware O43 - CFD: 25/09/2011 - 10:40:25 - [0] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 28/02/2012 - 16:15:18 - [174,492] ----D C:\Program Files (x86)\Microsoft Games O43 - CFD: 08/11/2011 - 12:22:10 - [493,677] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 10/10/2013 - 01:17:43 - [40,851] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 07/04/2011 - 11:11:53 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 25/09/2011 - 11:02:11 - [0,014] ----D C:\Program Files (x86)\Microsoft Visual Studio O43 - CFD: 26/09/2011 - 16:22:31 - [3,554] ----D C:\Program Files (x86)\Microsoft Works O43 - CFD: 19/10/2011 - 18:58:56 - [7,797] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 12/01/2014 - 17:08:53 - [34,302] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 14/07/2009 - 06:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 07/04/2011 - 11:26:45 - [6,828] ----D C:\Program Files (x86)\newsXpresso O43 - CFD: 17/02/2014 - 18:04:58 - [14,923] ----D C:\Program Files (x86)\Notepad++ O43 - CFD: 05/08/2011 - 09:33:46 - [1976,616] ----D C:\Program Files (x86)\NTI O43 - CFD: 18/12/2013 - 13:07:55 - [0] ----D C:\Program Files (x86)\OCCTPT O43 - CFD: 02/10/2012 - 18:30:30 - [288,773] ----D C:\Program Files (x86)\OpenOffice.org 3 O43 - CFD: 26/10/2011 - 12:36:24 - [26,089] ----D C:\Program Files (x86)\Orange O43 - CFD: 02/10/2012 - 18:38:04 - [0] ----D C:\Program Files (x86)\Pando Networks O43 - CFD: 27/09/2012 - 07:17:55 - [0,092] ----D C:\Program Files (x86)\Qualcomm Atheros Fast Reconnect O43 - CFD: 07/04/2011 - 10:38:50 - [13,024] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 06:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 25/09/2011 - 11:05:09 - [48,814] ----D C:\Program Files (x86)\Satsuki Decoder Pack O43 - CFD: 26/01/2014 - 14:44:58 - [41,620] R---D C:\Program Files (x86)\Skype O43 - CFD: 18/12/2013 - 13:08:09 - [0] ----D C:\Program Files (x86)\SpeedFan O43 - CFD: 18/02/2014 - 20:40:32 - [1556,144] ----D C:\Program Files (x86)\Steam O43 - CFD: 07/04/2011 - 10:40:02 - [0] --H-D C:\Program Files (x86)\Temp O43 - CFD: 14/01/2014 - 12:32:49 - [-1065,074] ----D C:\Program Files (x86)\TERA O43 - CFD: 09/08/2013 - 17:51:50 - [1679,084] ----D C:\Program Files (x86)\THQ O43 - CFD: 14/07/2009 - 05:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 13/07/2013 - 22:30:59 - [0,500] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 05/08/2011 - 09:45:50 - [485,359] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 05/08/2011 - 19:13:21 - [5,895] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation O43 - CFD: 05/08/2011 - 19:13:21 - [4,791] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation O43 - CFD: 14/07/2009 - 06:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 05/08/2011 - 19:13:21 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 21/11/2010 - 04:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 05/08/2011 - 19:13:21 - [7,008] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 09/01/2013 - 19:00:48 - [0] ----D C:\Program Files (x86)\WinRAR O43 - CFD: 02/10/2012 - 18:33:53 - [69,672] ----D C:\Program Files (x86)\WorldOfGoo O43 - CFD: 26/02/2014 - 10:15:59 - [22,685] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman O43 - CFD: 13/01/2014 - 21:50:47 - [427,175] ----D C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 13/01/2014 - 21:45:21 - [37,554] ----D C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 06/02/2014 - 19:06:05 - [7,688] ----D C:\Program Files (x86)\Common Files\AVG Secure Search =>Toolbar.AVGSearch O43 - CFD: 23/02/2014 - 00:49:31 - [3,683] ----D C:\Program Files (x86)\Common Files\Blizzard Entertainment O43 - CFD: 25/09/2011 - 11:02:11 - [0,089] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 07/04/2011 - 11:17:59 - [0,165] ----D C:\Program Files (x86)\Common Files\EgisTec O43 - CFD: 09/08/2013 - 17:49:40 - [4,990] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 05/08/2011 - 09:23:50 - [12,658] ----D C:\Program Files (x86)\Common Files\Intel O43 - CFD: 01/10/2011 - 17:01:31 - [0] ----D C:\Program Files (x86)\Common Files\Intel Corporation O43 - CFD: 22/10/2013 - 16:47:37 - [1,191] ----D C:\Program Files (x86)\Common Files\Java O43 - CFD: 05/08/2011 - 09:33:16 - [0,625] ----D C:\Program Files (x86)\Common Files\Macrovision Shared O43 - CFD: 25/09/2011 - 10:38:41 - [0,782] ----D C:\Program Files (x86)\Common Files\mcafee O43 - CFD: 01/03/2012 - 11:48:52 - [228,989] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 07/04/2011 - 10:47:43 - [0,338] ----D C:\Program Files (x86)\Common Files\Oberon Media O43 - CFD: 07/04/2011 - 10:36:28 - [0,159] ----D C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 14/07/2009 - 04:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 12/04/2013 - 16:23:09 - [1,904] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 14/07/2009 - 04:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 12/02/2014 - 23:11:54 - [0,545] ----D C:\Program Files (x86)\Common Files\Steam O43 - CFD: 10/11/2011 - 12:01:10 - [42,206] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 07/04/2011 - 11:04:31 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 11/11/2011 - 18:30:44 - [0] ----D C:\ProgramData\2DBoy O43 - CFD: 07/04/2011 - 11:03:36 - [33,303] ----D C:\ProgramData\Acer O43 - CFD: 14/01/2014 - 02:00:03 - [320,207] ----D C:\ProgramData\Adobe O43 - CFD: 14/07/2009 - 06:08:56 - [0] -SH-D C:\ProgramData\Application Data O43 - CFD: 06/02/2014 - 19:06:08 - [5,521] ----D C:\ProgramData\AVG SafeGuard toolbar O43 - CFD: 06/02/2014 - 19:06:08 - [0] ----D C:\ProgramData\AVG Security Toolbar =>Toolbar.AVGSearch O43 - CFD: 25/06/2013 - 17:31:12 - [6,198] ----D C:\ProgramData\AVG2013 O43 - CFD: 10/01/2014 - 21:34:19 - [283,755] ----D C:\ProgramData\AVG2014 O43 - CFD: 07/04/2011 - 11:24:26 - [1,258] ----D C:\ProgramData\BackupManager O43 - CFD: 23/02/2014 - 00:36:15 - [29,340] ----D C:\ProgramData\Battle.net O43 - CFD: 23/02/2014 - 00:42:07 - [0,262] ----D C:\ProgramData\Blizzard Entertainment O43 - CFD: 18/09/2011 - 18:38:37 - [0] -SH-D C:\ProgramData\Bureau O43 - CFD: 05/08/2011 - 09:41:04 - [0] ----D C:\ProgramData\CLSK O43 - CFD: 02/10/2012 - 18:22:55 - [0] --H-D C:\ProgramData\Common Files O43 - CFD: 25/09/2011 - 10:42:52 - [0,003] ----D C:\ProgramData\CyberLink O43 - CFD: 14/07/2009 - 06:08:56 - [0] -SH-D C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - 06:08:56 - [0] -SH-D C:\ProgramData\Documents O43 - CFD: 05/08/2011 - 09:20:53 - [0] ----D C:\ProgramData\EgisTec O43 - CFD: 05/08/2011 - 09:20:44 - [0,268] ----D C:\ProgramData\EgisTec IPS O43 - CFD: 28/06/2012 - 19:21:37 - [0,036] ----D C:\ProgramData\FarmFrenzy3_Arctica O43 - CFD: 18/09/2011 - 18:38:37 - [0] -SH-D C:\ProgramData\Favoris O43 - CFD: 14/07/2009 - 06:08:56 - [0] -SH-D C:\ProgramData\Favorites O43 - CFD: 05/08/2011 - 09:33:17 - [0,003] ----D C:\ProgramData\FLEXnet O43 - CFD: 18/09/2011 - 23:49:52 - [0,012] ----D C:\ProgramData\InterAction studios O43 - CFD: 25/06/2013 - 16:19:25 - [6,811] ----D C:\ProgramData\Malwarebytes O43 - CFD: 17/11/2013 - 19:32:19 - [0,168] ----D C:\ProgramData\McAfee O43 - CFD: 18/09/2011 - 18:38:37 - [0] -SH-D C:\ProgramData\Menu Démarrer O43 - CFD: 26/02/2014 - 10:13:56 - [151,757] ----D C:\ProgramData\MFAData O43 - CFD: 18/12/2013 - 13:43:08 - [290,121] -S--D C:\ProgramData\Microsoft O43 - CFD: 16/01/2014 - 01:57:57 - [0,059] ----D C:\ProgramData\Microsoft Help O43 - CFD: 18/09/2011 - 18:38:37 - [0] -SH-D C:\ProgramData\Modèles O43 - CFD: 07/04/2011 - 11:26:48 - [0] ----D C:\ProgramData\newsXpresso O43 - CFD: 03/10/2011 - 16:57:58 - [0,069] ----D C:\ProgramData\NTI Launcher O43 - CFD: 07/04/2011 - 11:00:07 - [1,756] ----D C:\ProgramData\OberonGameConsole O43 - CFD: 18/09/2011 - 18:41:02 - [0,001] ----D C:\ProgramData\oem O43 - CFD: 04/02/2014 - 21:19:18 - [0] ----D C:\ProgramData\Oracle O43 - CFD: 26/09/2012 - 18:30:35 - [0,019] ----D C:\ProgramData\Qualcomm Atheros O43 - CFD: 13/01/2014 - 21:51:11 - [0,002] ----D C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 26/01/2014 - 14:44:55 - [61,458] ----D C:\ProgramData\Skype O43 - CFD: 14/07/2009 - 06:08:56 - [0] -SH-D C:\ProgramData\Start Menu O43 - CFD: 26/11/2012 - 19:19:06 - [0] ----D C:\ProgramData\Sun O43 - CFD: 08/11/2013 - 16:18:07 - [0,801] ---AD C:\ProgramData\Temp O43 - CFD: 14/07/2009 - 06:08:56 - [0] -SH-D C:\ProgramData\Templates O43 - CFD: 18/09/2011 - 23:58:03 - [0] ----D C:\ProgramData\VirtualizedApplications O43 - CFD: 18/12/2013 - 13:09:35 - [6,806] ----D C:\ProgramData\VMware O43 - CFD: 13/01/2014 - 22:21:28 - [4,207] ----D C:\Users\damien\AppData\Roaming\Adobe O43 - CFD: 30/01/2013 - 15:14:05 - [0,051] ----D C:\Users\damien\AppData\Roaming\AVG2013 O43 - CFD: 10/01/2014 - 21:33:31 - [0,047] ----D C:\Users\damien\AppData\Roaming\AVG2014 O43 - CFD: 26/10/2012 - 15:54:12 - [4,839] ----D C:\Users\damien\AppData\Roaming\Azureus =>P2P.Azureus O43 - CFD: 23/02/2014 - 00:47:11 - [0,001] ----D C:\Users\damien\AppData\Roaming\Battle.net O43 - CFD: 12/02/2014 - 20:06:12 - [0,073] ----D C:\Users\damien\AppData\Roaming\CodeBlocks O43 - CFD: 18/09/2011 - 18:42:29 - [0] ----D C:\Users\damien\AppData\Roaming\CyberLink O43 - CFD: 21/11/2010 - 03:51:08 - [0] ----D C:\Users\damien\AppData\Roaming\Identities O43 - CFD: 07/04/2011 - 10:26:19 - [0] ----D C:\Users\damien\AppData\Roaming\InstallShield O43 - CFD: 07/04/2011 - 10:47:06 - [0] ----D C:\Users\damien\AppData\Roaming\Intel Corporation O43 - CFD: 13/10/2012 - 23:18:58 - [0] ----D C:\Users\damien\AppData\Roaming\LolClient O43 - CFD: 07/04/2011 - 11:21:09 - [0,002] ----D C:\Users\damien\AppData\Roaming\Macromedia O43 - CFD: 25/06/2013 - 16:19:35 - [40,786] ----D C:\Users\damien\AppData\Roaming\Malwarebytes O43 - CFD: 25/09/2011 - 11:06:09 - [0] ----D C:\Users\damien\AppData\Roaming\Media Player Classic O43 - CFD: 16/10/2013 - 13:28:36 - [10,108] -S--D C:\Users\damien\AppData\Roaming\Microsoft O43 - CFD: 25/09/2011 - 10:54:45 - [12,421] ----D C:\Users\damien\AppData\Roaming\Mozilla O43 - CFD: 17/02/2014 - 19:11:17 - [0,481] ----D C:\Users\damien\AppData\Roaming\Notepad++ O43 - CFD: 08/10/2012 - 21:15:39 - [12,475] ----D C:\Users\damien\AppData\Roaming\OpenOffice.org O43 - CFD: 26/06/2013 - 14:21:31 - [0] R-H-D C:\Users\damien\AppData\Roaming\SecuROM O43 - CFD: 25/02/2014 - 22:03:57 - [8,970] ----D C:\Users\damien\AppData\Roaming\Skype O43 - CFD: 25/09/2011 - 10:26:47 - [0,710] ----D C:\Users\damien\AppData\Roaming\SoftGrid Client O43 - CFD: 25/09/2012 - 18:19:26 - [0,009] ----D C:\Users\damien\AppData\Roaming\SprillRichiEng O43 - CFD: 22/12/2013 - 21:47:11 - [1,991] ----D C:\Users\damien\AppData\Roaming\TERA O43 - CFD: 18/09/2011 - 21:47:36 - [0] ----D C:\Users\damien\AppData\Roaming\TP O43 - CFD: 30/01/2013 - 15:10:19 - [0] ----D C:\Users\damien\AppData\Roaming\TuneUp Software O43 - CFD: 18/12/2013 - 13:08:36 - [0] ----D C:\Users\damien\AppData\Roaming\VMware O43 - CFD: 05/11/2012 - 22:53:04 - [0] ----D C:\Users\damien\AppData\Roaming\Windows Live Writer O43 - CFD: 02/10/2012 - 18:15:45 - [0] ----D C:\Users\damien\AppData\Roaming\WinRAR O43 - CFD: 26/02/2014 - 10:16:34 - [0,316] ----D C:\Users\damien\AppData\Roaming\ZHP =>.Nicolas Coolman O43 - CFD: 11/11/2011 - 18:30:44 - [0,001] ----D C:\Users\damien\AppData\Local\2DBoy O43 - CFD: 18/09/2011 - 18:40:42 - [0,008] ----D C:\Users\damien\AppData\Local\Acer O43 - CFD: 26/02/2014 - 02:00:08 - [31,543] ----D C:\Users\damien\AppData\Local\Adobe O43 - CFD: 18/09/2011 - 18:38:50 - [0] -SH-D C:\Users\damien\AppData\Local\Application Data O43 - CFD: 18/09/2011 - 18:47:30 - [1,242] ----D C:\Users\damien\AppData\Local\Apps O43 - CFD: 06/02/2014 - 19:06:13 - [3,008] ----D C:\Users\damien\AppData\Local\AVG SafeGuard toolbar O43 - CFD: 30/01/2013 - 23:25:21 - [13,054] ----D C:\Users\damien\AppData\Local\Avg2013 O43 - CFD: 11/01/2014 - 02:17:38 - [8,898] ----D C:\Users\damien\AppData\Local\Avg2014 O43 - CFD: 26/02/2014 - 00:23:23 - [32,008] ----D C:\Users\damien\AppData\Local\Battle.net O43 - CFD: 23/02/2014 - 01:54:48 - [0] ----D C:\Users\damien\AppData\Local\Blizzard O43 - CFD: 23/02/2014 - 00:42:34 - [0] ----D C:\Users\damien\AppData\Local\Blizzard Entertainment O43 - CFD: 25/09/2011 - 10:31:47 - [0] ----D C:\Users\damien\AppData\Local\Cyberlink O43 - CFD: 18/09/2011 - 18:48:04 - [0] ----D C:\Users\damien\AppData\Local\Deployment O43 - CFD: 02/02/2014 - 14:19:16 - [0] ----D C:\Users\damien\AppData\Local\Diagnostics O43 - CFD: 07/04/2011 - 11:18:31 - [17,454] ----D C:\Users\damien\AppData\Local\Downloaded Installations O43 - CFD: 18/09/2011 - 18:41:06 - [0] ----D C:\Users\damien\AppData\Local\EgisTec IPS O43 - CFD: 06/05/2013 - 22:55:22 - [0] ----D C:\Users\damien\AppData\Local\ElevatedDiagnostics O43 - CFD: 27/10/2011 - 13:49:14 - [0] ----D C:\Users\damien\AppData\Local\Facebook O43 - CFD: 18/09/2011 - 18:51:44 - [1530,427] ----D C:\Users\damien\AppData\Local\Google O43 - CFD: 18/09/2011 - 18:38:50 - [0] -SH-D C:\Users\damien\AppData\Local\Historique O43 - CFD: 02/10/2012 - 18:22:55 - [15,531] ----D C:\Users\damien\AppData\Local\MFAData O43 - CFD: 05/11/2012 - 22:53:27 - [359,547] ----D C:\Users\damien\AppData\Local\Microsoft O43 - CFD: 08/10/2011 - 13:41:22 - [1,994] ----D C:\Users\damien\AppData\Local\Microsoft Games O43 - CFD: 25/09/2011 - 10:59:26 - [0] ----D C:\Users\damien\AppData\Local\Microsoft Help O43 - CFD: 25/09/2011 - 10:54:41 - [0] ----D C:\Users\damien\AppData\Local\Mozilla O43 - CFD: 23/09/2013 - 18:28:17 - [163,376] ----D C:\Users\damien\AppData\Local\Oberon Games O43 - CFD: 26/06/2013 - 09:55:30 - [0,007] ----D C:\Users\damien\AppData\Local\OCCT_-_Ocbase_-_Adrien_Me O43 - CFD: 26/10/2011 - 12:52:44 - [0] ----D C:\Users\damien\AppData\Local\Orange O43 - CFD: 25/06/2013 - 16:19:08 - [0] ----D C:\Users\damien\AppData\Local\Programs O43 - CFD: 18/09/2011 - 21:47:32 - [0,211] ----D C:\Users\damien\AppData\Local\SoftGrid Client O43 - CFD: 26/02/2014 - 10:16:40 - [202,119] ----D C:\Users\damien\AppData\Local\Temp O43 - CFD: 18/09/2011 - 18:38:50 - [0] -SH-D C:\Users\damien\AppData\Local\Temporary Internet Files O43 - CFD: 02/10/2012 - 18:24:39 - [0] ----D C:\Users\damien\AppData\Local\Trend Micro O43 - CFD: 16/11/2012 - 17:47:39 - [1,124] ----D C:\Users\damien\AppData\Local\VirtualStore O43 - CFD: 07/12/2013 - 23:12:39 - [0,001] ----D C:\Users\damien\AppData\Local\VMware O43 - CFD: 24/01/2013 - 15:02:14 - [0,066] ----D C:\Users\damien\AppData\Local\Windows Live O43 - CFD: 05/11/2012 - 22:53:16 - [0,618] ----D C:\Users\damien\AppData\Local\Windows Live Writer O43 - CFD: 14/07/2009 - 05:54:32 - [0,014] R---D C:\Users\damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 14/09/2013 - 09:51:25 - [0] R---D C:\Users\damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 09/01/2013 - 18:41:38 - [0,004] ----D C:\Users\damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks O43 - CFD: 13/01/2013 - 13:00:12 - [0] ----D C:\Users\damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 14/07/2009 - 05:49:38 - [0,001] R---D C:\Users\damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 17/02/2014 - 18:04:55 - [0] ----D C:\Users\damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ O43 - CFD: 25/09/2011 - 11:05:10 - [0,003] ----D C:\Users\damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Satsuki Decoder Pack O43 - CFD: 14/09/2013 - 09:51:25 - [0] R---D C:\Users\damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 12/12/2013 - 19:58:07 - [0,001] ----D C:\Users\damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam ~ 2 Dossiers CLSID vides (CLSID Empty Folders) ~ Program Folder: 202 Scanned in 00mn 12s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.44FE8331D96E0C975B5AD76E19F4A3CC] - 17/02/2014 - 00:31:32 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe [88567024] O44 - LFC:[MD5.5D525EF972C0A3DACD889A6505D66C6E] - 22/02/2014 - 22:22:36 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1669656] O44 - LFC:[MD5.38F41CA26984435567AD58A339E47599] - 22/02/2014 - 22:22:36 ---A- . (...) -- C:\Windows\System32\perfc009.dat [122352] O44 - LFC:[MD5.1085F3458EC7503EAD3BC0226404615D] - 22/02/2014 - 22:22:36 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [150402] O44 - LFC:[MD5.3D2A2675D4173AB404CE69DDB050B1A8] - 22/02/2014 - 22:22:36 ---A- . (...) -- C:\Windows\System32\perfh009.dat [654480] O44 - LFC:[MD5.07606142D7A83F61878F1D34A0B76D3E] - 22/02/2014 - 22:22:36 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [747910] O44 - LFC:[MD5.7F07C51AED5DD6CCE7E1B2C775ED6768] - 26/02/2014 - 10:08:48 ---A- . (...) -- C:\Windows\setupact.log [120625] O44 - LFC:[MD5.1A311C8A9A8791042EF6D1EBC6AE2388] - 26/02/2014 - 10:08:48 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.2BB32878D55F8F87ECA4698D0AD53834] - 26/02/2014 - 10:15:00 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1161681] ~ Files: 9 Scanned in 00mn 07s ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 07/08/2160 - 21:07:03 ----D - C:\Windows\Prefetch\ReadyBoot O45 - LFCP:[MD5.11C7DCA29264717514DB8B6311FB1A09] - 22/02/2014 - 14:38:13 ---A- - C:\Windows\Prefetch\AgCx_SC4.db O45 - LFCP:[MD5.0B0EE04E3B6E7034BF8C23A6A6900ADC] - 22/02/2014 - 22:21:29 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx O45 - LFCP:[MD5.274CCEDFBA3F90659445833E4F10D138] - 22/02/2014 - 22:22:29 ---A- - C:\Windows\Prefetch\AgCx_SC1.db O45 - LFCP:[MD5.DA612F235D4B3CC6E496135E7771F723] - 23/02/2014 - 23:53:49 ---A- - C:\Windows\Prefetch\WMPNSCFG.EXE-18FC9E64.pf O45 - LFCP:[MD5.7A69EBB2526FB9907AC6E3DB14F2F492] - 25/02/2014 - 10:00:05 ---A- - C:\Windows\Prefetch\SDCLT.EXE-94EAE077.pf O45 - LFCP:[MD5.FD7E69DDF51BFBD51A2A1D817824D7BD] - 25/02/2014 - 10:18:43 ---A- - C:\Windows\Prefetch\Layout.ini O45 - LFCP:[MD5.7AADB5193610236DE2673046A5C1AC54] - 25/02/2014 - 11:46:06 ---A- - C:\Windows\Prefetch\AUDIODG.EXE-AB22E9A6.pf O45 - LFCP:[MD5.6257DF11B7BD9AD4A72ED3D8BA3CD728] - 25/02/2014 - 11:49:52 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-3410720944-1771471174-1398364667-1000.db O45 - LFCP:[MD5.18C089300BD1235CA7A8E85EB4297294] - 25/02/2014 - 11:49:52 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-3410720944-1771471174-1398364667-1000.db O45 - LFCP:[MD5.4616AFF692C51FE70CB1B347052EEF5E] - 25/02/2014 - 13:10:39 ---A- - C:\Windows\Prefetch\EXPLORER.EXE-D5E97654.pf O45 - LFCP:[MD5.12ABE8DE6F5774E205DFDBF1B2F3B995] - 25/02/2014 - 15:31:25 ---A- - C:\Windows\Prefetch\BATTLE.NET LAUNCHER.EXE-EEA4FC72.pf O45 - LFCP:[MD5.0AFBE9E3EA719A7ECBD1C954C577E66B] - 25/02/2014 - 17:44:56 ---A- - C:\Windows\Prefetch\ATBROKER.EXE-5CD29207.pf O45 - LFCP:[MD5.C65C2068EDA1026B9D7525782D007E34] - 25/02/2014 - 17:44:56 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-F830317B.pf O45 - LFCP:[MD5.1803E6CA2FB25E149DB1102D5B18255A] - 25/02/2014 - 17:44:56 ---A- - C:\Windows\Prefetch\RUNONCE.EXE-BD8A4C8F.pf O45 - LFCP:[MD5.DF6992AE58CC5B9298AB4E91144983D9] - 25/02/2014 - 17:44:56 ---A- - C:\Windows\Prefetch\RUNONCE.EXE-FB4EF753.pf O45 - LFCP:[MD5.CE38B4DB1A87C02A566EB9D9194FABC4] - 25/02/2014 - 17:45:08 ---A- - C:\Windows\Prefetch\LOL.LAUNCHER.EXE-0B376BF8.pf O45 - LFCP:[MD5.D6A63E2DEA07615F322BF3FF77A6824A] - 25/02/2014 - 17:45:18 ---A- - C:\Windows\Prefetch\RADS_USER_KERNEL.EXE-12CA15E8.pf O45 - LFCP:[MD5.DEA83410F09BBC9DE82A508A4A24909F] - 25/02/2014 - 17:45:33 ---A- - C:\Windows\Prefetch\LOLLAUNCHER.EXE-7B070F94.pf O45 - LFCP:[MD5.338302C65CB637AE62C544858AAA4828] - 25/02/2014 - 17:45:52 ---A- - C:\Windows\Prefetch\LOLCLIENT.EXE-1A9A7BA3.pf O45 - LFCP:[MD5.11036AD46CBF5251E900ED16D32D08D1] - 25/02/2014 - 17:57:26 ---A- - C:\Windows\Prefetch\WERMGR.EXE-F439C551.pf O45 - LFCP:[MD5.49D52E1C90A75E186D289310D7102B63] - 25/02/2014 - 17:57:37 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-D2A040D5.pf O45 - LFCP:[MD5.A7FA6D0703A5400BC07D3AB78974CC1A] - 25/02/2014 - 17:59:30 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-D49D3641.pf O45 - LFCP:[MD5.8368546C9079854A008C9CA8660E35F4] - 25/02/2014 - 18:24:20 ---A- - C:\Windows\Prefetch\SNDVOL.EXE-425BC49B.pf O45 - LFCP:[MD5.CDC15D3C2CED88B655CFB3441073D9E0] - 25/02/2014 - 18:28:53 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-D9DCD0F3.pf O45 - LFCP:[MD5.63DE0CDF313FC977850D1A395B6C0436] - 25/02/2014 - 18:56:05 ---A- - C:\Windows\Prefetch\IGFXSRVC.EXE-C5618119.pf O45 - LFCP:[MD5.17E010B5214A1492C64EE433957EFDEA] - 25/02/2014 - 22:03:56 ---A- - C:\Windows\Prefetch\SKYPE.EXE-A716A034.pf O45 - LFCP:[MD5.A8F676E0E4AF5C37CA9607F60265FD75] - 25/02/2014 - 22:11:52 ---A- - C:\Windows\Prefetch\MSFEEDSSYNC.EXE-BDDD8ED1.pf O45 - LFCP:[MD5.8110106863E6CA74C1EEACAA2BE06883] - 26/02/2014 - 00:12:39 ---A- - C:\Windows\Prefetch\AGENT.EXE-60E61D9D.pf O45 - LFCP:[MD5.FDEA8A4500E6534F7E7F06B6F6092871] - 26/02/2014 - 00:12:49 ---A- - C:\Windows\Prefetch\AGENT.EXE-47ABB2D7.pf O45 - LFCP:[MD5.AB95D7DD4D1918BF069AC483DD149B51] - 26/02/2014 - 00:12:49 ---A- - C:\Windows\Prefetch\HEARTHSTONE BETA LAUNCHER.EXE-8A5B2ABE.pf O45 - LFCP:[MD5.ECB8207BCAA4DC71E1331E5DBB0C364F] - 26/02/2014 - 00:12:53 ---A- - C:\Windows\Prefetch\BATTLE.NET.EXE-B9577940.pf O45 - LFCP:[MD5.9CFFF29A005C34FEA42B44668855B8C6] - 26/02/2014 - 00:13:01 ---A- - C:\Windows\Prefetch\SYSTEMSURVEY.EXE-4E4C41DA.pf O45 - LFCP:[MD5.0522CAC19083E7459991ABCCD974C7F8] - 26/02/2014 - 00:13:04 ---A- - C:\Windows\Prefetch\BATTLE.NET.EXE-4C61145D.pf O45 - LFCP:[MD5.0382AAADF974ED3B809284615ECFFC39] - 26/02/2014 - 00:13:09 ---A- - C:\Windows\Prefetch\HEARTHSTONE.EXE-B8141D20.pf O45 - LFCP:[MD5.51CEF478BD7EFF3356D629AA2E1329F6] - 26/02/2014 - 03:08:22 ---A- - C:\Windows\Prefetch\LEAGUE OF LEGENDS.EXE-18503F4C.pf O45 - LFCP:[MD5.D4F9D28FC8D54BA505D8AAB345A7F2E9] - 26/02/2014 - 03:31:00 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-D27BF402.pf O45 - LFCP:[MD5.DC25C2F4C10E9BA4ECCC7DF9CDAA4479] - 26/02/2014 - 03:40:56 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db O45 - LFCP:[MD5.8172791126284265155CF4A650F86B88] - 26/02/2014 - 03:40:56 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db O45 - LFCP:[MD5.064A56778126CCE153CC6C6DC9986E68] - 26/02/2014 - 03:40:56 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db O45 - LFCP:[MD5.13CE6DEED756ED6B341192D4E011ABF9] - 26/02/2014 - 03:40:56 ---A- - C:\Windows\Prefetch\AgRobust.db O45 - LFCP:[MD5.248B9B4A0C6197DD5CC25ACE4EC779E5] - 26/02/2014 - 03:44:00 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-0129C0B2.pf O45 - LFCP:[MD5.C6BA1DA0BA5CFE7E055C24D2A541776F] - 26/02/2014 - 03:44:10 ---A- - C:\Windows\Prefetch\TASKENG.EXE-35FA9C06.pf O45 - LFCP:[MD5.EA5D618826F03D24D4F45BA0D9DD6E23] - 26/02/2014 - 03:51:52 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-F639BD7E.pf O45 - LFCP:[MD5.B11B4434791A23A654AB2B880D19882A] - 26/02/2014 - 03:52:23 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin O45 - LFCP:[MD5.FE75FCF7682485ADD879805548F6C2AD] - 26/02/2014 - 10:09:31 ---A- - C:\Windows\Prefetch\AVGCMGR.EXE-02734254.pf O45 - LFCP:[MD5.75773E40E3C2D39D76B14C87851C5688] - 26/02/2014 - 10:09:31 ---A- - C:\Windows\Prefetch\AVGUI.EXE-D13E71F5.pf O45 - LFCP:[MD5.4BB9273FB6002B4B9CC7A88888217CAC] - 26/02/2014 - 10:09:31 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf O45 - LFCP:[MD5.E15231B09AA143C7AC84A42FAEC904C2] - 26/02/2014 - 10:09:31 ---A- - C:\Windows\Prefetch\SCRIPTHELPER.EXE-E929FEF8.pf O45 - LFCP:[MD5.16F4803D6666FC6BF8A2BBB3673A9C7B] - 26/02/2014 - 10:09:31 ---A- - C:\Windows\Prefetch\VPROT.EXE-5FA07334.pf O45 - LFCP:[MD5.14CF6E0EEAFB302CC9A04B9C0ACAE81F] - 26/02/2014 - 10:10:58 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-16B291C4.pf O45 - LFCP:[MD5.090812882681CFA3A0E02481C642CCFA] - 26/02/2014 - 10:10:58 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-8CE1A322.pf O45 - LFCP:[MD5.95B4629F0648147A608133DFCA712853] - 26/02/2014 - 10:11:10 ---A- - C:\Windows\Prefetch\IASTORDATAMGRSVC.EXE-C93872B4.pf O45 - LFCP:[MD5.D25D9286BD30FFD2A0490F147CB45CAD] - 26/02/2014 - 10:11:11 ---A- - C:\Windows\Prefetch\UNS.EXE-40FB88B6.pf O45 - LFCP:[MD5.ABEF9EB7C433DBDF30F115333D7EC5EB] - 26/02/2014 - 10:11:13 ---A- - C:\Windows\Prefetch\WMPNETWK.EXE-F6E20E14.pf O45 - LFCP:[MD5.A48696AF13A951E08D8898906EBAC068] - 26/02/2014 - 10:12:01 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-A0F5E092.pf O45 - LFCP:[MD5.AC2F50AD1EC5E008059F385338CE0ADD] - 26/02/2014 - 10:12:01 ---A- - C:\Windows\Prefetch\WSQMCONS.EXE-4048402C.pf O45 - LFCP:[MD5.88FD635EC354D44DAA28D84CC22A2DC6] - 26/02/2014 - 10:12:22 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-5D573F0E.pf O45 - LFCP:[MD5.287E89960849DF2C33028065220DF384] - 26/02/2014 - 10:12:27 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-44162447.pf O45 - LFCP:[MD5.F21CC4AA37AB562B0066B73A34E9F457] - 26/02/2014 - 10:12:27 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-69C456C3.pf O45 - LFCP:[MD5.1DAFBFC1442E751C468B48B96ECB95EB] - 26/02/2014 - 10:12:31 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-661188F3.pf O45 - LFCP:[MD5.10EF8E65D2DC2608730B7888206F44B0] - 26/02/2014 - 10:12:51 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-BB21CD77.pf O45 - LFCP:[MD5.2298A2B4C24AAF813CCEA24374FEBD27] - 26/02/2014 - 10:12:57 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-0D53616E.pf O45 - LFCP:[MD5.E7CDBFB23A185E182E83406EE56BEF78] - 26/02/2014 - 10:13:55 ---A- - C:\Windows\Prefetch\AVGDIAGEX.EXE-39877671.pf O45 - LFCP:[MD5.949710E24076397C30995346A8D0A10B] - 26/02/2014 - 10:14:04 ---A- - C:\Windows\Prefetch\FIXCFG.EXE-F57F10CC.pf O45 - LFCP:[MD5.1C9C08860F6FF42D922D246D34E3A382] - 26/02/2014 - 10:14:06 ---A- - C:\Windows\Prefetch\AVGMFAPX.EXE-53EBA6AB.pf O45 - LFCP:[MD5.724F2F1F66FCDB646102B1066EBDBBB4] - 26/02/2014 - 10:14:12 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-766EFF52.pf O45 - LFCP:[MD5.31C1EC11E5CC0B4A5D9F0FEC46BC4902] - 26/02/2014 - 10:14:34 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-6389524F.pf O45 - LFCP:[MD5.0C652803DD92701EA9FC5355A42A8ABB] - 26/02/2014 - 10:14:35 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-E8B8DD29.pf O45 - LFCP:[MD5.638692F2469FE4B66E61B3131071C354] - 26/02/2014 - 10:14:37 ---A- - C:\Windows\Prefetch\ZHPDIAG20.TMP-D4C04C35.pf O45 - LFCP:[MD5.FC51F7FEF4051C0906BC2741A5DF62A9] - 26/02/2014 - 10:14:39 ---A- - C:\Windows\Prefetch\ZHPDIAG20.TMP-A33774BB.pf O45 - LFCP:[MD5.18DAB9182EA47799868B2BAF1CC2C459] - 26/02/2014 - 10:15:07 ---A- - C:\Windows\Prefetch\UNINS000.EXE-8A37044A.pf O45 - LFCP:[MD5.78BD6DB8BB0599895B72600AD9368FEB] - 26/02/2014 - 10:15:09 ---A- - C:\Windows\Prefetch\_IU14D2N.TMP-6A3EA1C5.pf O45 - LFCP:[MD5.7DF1A90024CC890D109D37A582B71A30] - 26/02/2014 - 10:15:14 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-851C5C91.pf O45 - LFCP:[MD5.ADCFBCB3924C4BFCE2F1FA0A278A4EB7] - 26/02/2014 - 10:15:36 ---A- - C:\Windows\Prefetch\ZHPDIAG20.EXE-A50783D4.pf O45 - LFCP:[MD5.20093D33434CEE24CF6DF970AD7C9743] - 26/02/2014 - 10:15:36 ---A- - C:\Windows\Prefetch\ZHPDIAG20.TMP-F61D2AAF.pf O45 - LFCP:[MD5.6B2EEE306146FCB676CEF3072AD41570] - 26/02/2014 - 10:15:45 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-4B6CB38A.pf O45 - LFCP:[MD5.81E14FD1CC07F1CF0585FE966EAF9342] - 26/02/2014 - 10:15:57 ---A- - C:\Windows\Prefetch\CONSENT.EXE-40419367.pf O45 - LFCP:[MD5.C52C461461D892F80815F8B691AD316F] - 26/02/2014 - 10:15:58 ---A- - C:\Windows\Prefetch\ZHPHEP.EXE-257D8644.pf O45 - LFCP:[MD5.E82C22DC1153E14767BBB98A39B3CD47] - 26/02/2014 - 10:16:06 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-960426D8.pf O45 - LFCP:[MD5.D2ECE6291989E10E799473B86E67A6FE] - 26/02/2014 - 10:16:08 ---A- - C:\Windows\Prefetch\ZHPDIAG.EXE-6A1D0894.pf O45 - LFCP:[MD5.CF9DFDFC9B1EFC5204EF85E1C4AA54AE] - 26/02/2014 - 10:16:11 ---A- - C:\Windows\Prefetch\CMD.EXE-6D6290C5.pf O45 - LFCP:[MD5.746B78C4C59BEC913FC2D7D017CEE127] - 26/02/2014 - 10:16:11 ---A- - C:\Windows\Prefetch\CONHOST.EXE-0C6456FB.pf O45 - LFCP:[MD5.AE525F6FC50F88F07404987DCB785B10] - 26/02/2014 - 10:16:11 ---A- - C:\Windows\Prefetch\CSCRIPT.EXE-FCD9ABA9.pf O45 - LFCP:[MD5.6DE8BE981D6B9CD563147E092CACE838] - 26/02/2014 - 10:16:15 ---A- - C:\Windows\Prefetch\PV.EXE-0748338F.pf O45 - LFCP:[MD5.7EF8CD9381B97C35F492697399CA5A3F] - 26/02/2014 - 10:16:17 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-96070FE0.pf O45 - LFCP:[MD5.0D4B66CB51D225B8283D7A265CBD0B36] - 26/02/2014 - 10:16:17 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-39F97B2D.pf O45 - LFCP:[MD5.E87736B95056A49153E29F090EFDB6EE] - 26/02/2014 - 10:16:20 ---A- - C:\Windows\Prefetch\CHROME.EXE-0D5FB357.pf O45 - LFCP:[MD5.289D2ED1041E8CAED8611033F4963C73] - 26/02/2014 - 10:16:26 ---A- - C:\Windows\Prefetch\SUBINACL.EXE-3DCC0576.pf O45 - LFCP:[MD5.946ECFF7AB694F88578A7EC947015BAC] - 26/02/2014 - 10:16:31 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-6E1A6101.pf O45 - LFCP:[MD5.CDFE4C8AD410301B0A744C58F1F21813] - 26/02/2014 - 10:16:34 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-DC1676CD.pf ~ Prefetcher: 91 Scanned in 00mn 01s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll ~ LSA: 9 Scanned in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys ~ CSB: 13 Scanned in 00mn 00s ---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm ~ TDSD: 2 Scanned in 00mn 00s ---\\ Enumération des clés de registre StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe O53 - SMSR:HKLM\...\startupreg\AdobeAAMUpdater-1.0 [Key] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated O53 - SMSR:HKLM\...\startupreg\AdobeCS6ServiceManager [Key] . (.Adobe Systems Incorporated - Adobe CS6 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe O53 - SMSR:HKLM\...\startupreg\AlcoholAutomount [Key] . (.Alcohol Soft Development Team - Alcohol Virual Drive Auto-mount Service.) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe O53 - SMSR:HKLM\...\startupreg\AVG-Secure-Search-Update_1213b [Key] . (...) -- C:\Users\damien\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\BackupManagerTray [Key] . (.NTI Corporation - Acer Backup Manager.) -- C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe O53 - SMSR:HKLM\...\startupreg\EgisTecPMMUpdate [Key] . (.Egis Technology Inc. - PMM Update Application.) -- C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe O53 - SMSR:HKLM\...\startupreg\EgisUpdate [Key] . (.Egis Technology Inc. - EgisUpdate Release Application.) -- C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe O53 - SMSR:HKLM\...\startupreg\ETDCtrl [Key] . (...) -- C:\Program Files (x86)\Elantech\ETDCtrl.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Google Update [Key] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\damien\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc O53 - SMSR:HKLM\...\startupreg\HotKeysCmds [Key] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe O53 - SMSR:HKLM\...\startupreg\IAStorIcon [Key] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe O53 - SMSR:HKLM\...\startupreg\IgfxTray [Key] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe O53 - SMSR:HKLM\...\startupreg\LManager [Key] . (.Dritek System Inc. - Launch Manager.) -- C:\Program Files (x86)\Launch Manager\LManager.exe O53 - SMSR:HKLM\...\startupreg\Persistence [Key] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe O53 - SMSR:HKLM\...\startupreg\Power Management [Key] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe O53 - SMSR:HKLM\...\startupreg\RtHDVCpl [Key] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp O53 - SMSR:HKLM\...\startupreg\Sidebar [Key] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O53 - SMSR:HKLM\...\startupreg\SuiteTray [Key] . (.Egis Technology Inc. - SuiteTray.) -- C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation O53 - SMSR:HKLM\...\startupreg\SwitchBoard [Key] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe ~ SMSR Keys: 22 Scanned in 00mn 00s ---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll ~ MSCP: 2 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 16 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0 ~ MWPE Keys: 4 Scanned in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:[MD5.64EDD3F59DB321947969FDF1DD747323] - 14/07/2009 - 01:06:38 ---A- . (.Microsoft Corporation - 1394 Bus Device Driver.) -- C:\Windows\System32\Drivers\1394bus.sys [68096] O58 - SDL:[MD5.A87D604AEA360176311474C87A63BB88] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - 1394 OpenHCI Driver.) -- C:\Windows\System32\Drivers\1394ohci.sys [229888] O58 - SDL:[MD5.D81D9E70B8A6DD14D42D7B4EFA65D5F2] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - Pilote ACPI pour NT.) -- C:\Windows\System32\Drivers\acpi.sys [334208] O58 - SDL:[MD5.99F8E788246D495CE3794D7E7821D2CA] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - ACPI Power Metering Driver.) -- C:\Windows\System32\Drivers\acpipmi.sys [12800] O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] O58 - SDL:[MD5.597F78224EE9224EA1A13D6350CED962] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\Drivers\adpahci.sys [339536] O58 - SDL:[MD5.E109549C90F62FB570B9540C4B148E54] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\Drivers\adpu320.sys [182864] O58 - SDL:[MD5.79059559E89D06E8B80CE2944BE20228] - 28/09/2013 - 02:09:10 ---A- . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\Drivers\afd.sys [497152] O58 - SDL:[MD5.7ECFF9B22276B73F43A99A15A6094E90] - 14/07/2009 - 01:10:24 ---A- . (.Microsoft Corporation - RAS Agile Vpn Miniport Call Manager.) -- C:\Windows\System32\Drivers\agilevpn.sys [60416] O58 - SDL:[MD5.608C14DBA7299D8CB6ED035A68A15799] - 14/07/2009 - 02:52:21 ---A- . (.Microsoft Corporation - Filtre AGP 440 NT.) -- C:\Windows\System32\Drivers\AGP440.sys [61008] O58 - SDL:[MD5.5812713A477A3AD7363C7438CA2EE038] - 14/07/2009 - 02:52:21 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\Drivers\aliide.sys [15440] O58 - SDL:[MD5.1FF8B4431C353CE385C875F194924C0C] - 14/07/2009 - 02:52:21 ---A- . (.Microsoft Corporation - Pilote IDE AMD.) -- C:\Windows\System32\Drivers\amdide.sys [15440] O58 - SDL:[MD5.7024F087CFF1833A806193EF9D22CDA9] - 14/07/2009 - 00:19:25 ---A- . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\Drivers\amdk8.sys [64512] O58 - SDL:[MD5.1E56388B3FE0D031C44144EB8C4D6217] - 14/07/2009 - 00:19:25 ---A- . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\Drivers\amdppm.sys [60928] O58 - SDL:[MD5.D4121AE6D0C0E7E13AA221AA57EF2D49] - 11/03/2011 - 07:41:12 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys [107904] O58 - SDL:[MD5.F67F933E79241ED32FF46A4F29B5120B] - 14/07/2009 - 02:52:20 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\System32\Drivers\amdsbs.sys [194128] O58 - SDL:[MD5.540DAF1CEA6094886D72126FD7C33048] - 11/03/2011 - 07:41:12 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys [27008] O58 - SDL:[MD5.89A69C3F2F319B43379399547526D952] - 21/11/2010 - 04:24:25 ---A- . (.Microsoft Corporation - AppID Driver.) -- C:\Windows\System32\Drivers\appid.sys [61440] O58 - SDL:[MD5.C484F8CEB1717C540242531DB7845C4E] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\Drivers\arc.sys [87632] O58 - SDL:[MD5.019AF6924AEFE7839F61C830227FE79C] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [97856] O58 - SDL:[MD5.769765CE2CC62867468CEA93969B2242] - 14/07/2009 - 01:10:13 ---A- . (.Microsoft Corporation - MS Remote Access serial network driver.) -- C:\Windows\System32\Drivers\asyncmac.sys [23040] O58 - SDL:[MD5.02062C0B390B7729EDC9E69C680A6F3C] - 14/07/2009 - 02:52:21 ---A- . (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\Drivers\atapi.sys [24128] O58 - SDL:[MD5.059F00DEF82BF41E433B7ED465847726] - 05/08/2013 - 03:25:45 ---A- . (.Microsoft Corporation - ATAPI Driver Extension.) -- C:\Windows\System32\Drivers\ataport.sys [155584] O58 - SDL:[MD5.16567AB05CD34F46D0DCBB129CA143C2] - 05/08/2011 - 15:33:48 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\System32\Drivers\athrx.sys [2768384] O58 - SDL:[MD5.27CA53E91543B800E16129BCEC3247AD] - 05/11/2013 - 21:55:48 ---A- . (.AVG Technologies CZ, s.r.o. - AVG File Vault Driver.) -- C:\Windows\System32\Drivers\avgdiska.sys [150808] O58 - SDL:[MD5.57250DDDE2523115D0927DBBA745F9FA] - 04/11/2013 - 21:52:42 ---A- . (.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) -- C:\Windows\System32\Drivers\avgidsdrivera.sys [240920] O58 - SDL:[MD5.19AD820FC44AA71EDD1BC70B6E3F36B0] - 24/10/2013 - 22:25:58 ---A- . (.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Helper Driver..) -- C:\Windows\System32\Drivers\avgidsha.sys [194872] O58 - SDL:[MD5.4BE8BB177B4C2BC3564845EF6D1073F1] - 31/10/2013 - 23:00:18 ---A- . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) -- C:\Windows\System32\Drivers\avgldx64.sys [212280] O58 - SDL:[MD5.D3772CC086FB81F76B5A82C85E1C7C8E] - 31/10/2013 - 22:49:46 ---A- . (.AVG Technologies CZ, s.r.o. - AVG Logging Driver.) -- C:\Windows\System32\Drivers\avgloga.sys [294712] O58 - SDL:[MD5.A0BCE5DC2C1F1EE5C1CA19A33375AC23] - 01/10/2013 - 00:52:08 ---A- . (.AVG Technologies CZ, s.r.o. - AVG Resident Shield Minifilter Driver.) -- C:\Windows\System32\Drivers\avgmfx64.sys [123704] O58 - SDL:[MD5.12FAAF366975B2BF2E93F1866C0E480D] - 10/09/2013 - 00:43:02 ---A- . (.AVG Technologies CZ, s.r.o. - AVG Anti-Rootkit Driver.) -- C:\Windows\System32\Drivers\avgrkx64.sys [31544] O58 - SDL:[MD5.4E364FABBD147F59E5D524C9EA86D772] - 01/08/2013 - 16:07:06 ---A- . (.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) -- C:\Windows\System32\Drivers\avgtdia.sys [251192] O58 - SDL:[MD5.A1F53D2A00E64679A1D81B61D2333D06] - 06/02/2014 - 19:05:18 ---A- . (.AVG Technologies - Pas de description.) -- C:\Windows\System32\Drivers\avgtpx64.sys [46368] O58 - SDL:[MD5.B5ACE6968304A3900EEB1EBFD9622DF2] - 10/06/2009 - 21:34:23 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\System32\Drivers\b57nd60a.sys [270848] O58 - SDL:[MD5.F4DE2AE7A9E1BADAC70BC71EA2C17612] - 14/07/2009 - 02:52:21 ---A- . (.Microsoft Corporation - Battery Class Driver.) -- C:\Windows\System32\Drivers\battc.sys [28240] O58 - SDL:[MD5.16A47CE2DECC9B099349A5F840654746] - 14/07/2009 - 01:00:13 ---A- . (.Microsoft Corporation - BEEP Driver.) -- C:\Windows\System32\Drivers\beep.sys [6656] O58 - SDL:[MD5.61583EE3C3A17003C4ACD0475646B4D3] - 14/07/2009 - 00:35:59 ---A- . (.Microsoft Corporation - BLB Drive Driver.) -- C:\Windows\System32\Drivers\blbdrive.sys [45056] O58 - SDL:[MD5.6C02A83164F5CC0A262F4199F0871CF5] - 23/02/2011 - 05:55:04 ---A- . (.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) -- C:\Windows\System32\Drivers\bowser.sys [90624] O58 - SDL:[MD5.F09EEE9EDC320B5E1501F749FDE686C8] - 10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltLo.sys [18432] O58 - SDL:[MD5.B114D3098E9BDB8BEA8B053685831BE6] - 10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltUp.sys [8704] O58 - SDL:[MD5.5C2F352A4E961D72518261257AAE204B] - 14/07/2009 - 02:01:48 ---A- . (.Microsoft Corporation - MAC Bridge Driver.) -- C:\Windows\System32\Drivers\bridge.sys [95232] O58 - SDL:[MD5.43BEA8D483BF1870F018E2D02E06A5BD] - 14/07/2009 - 02:19:07 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\Drivers\BrSerId.sys [286720] O58 - SDL:[MD5.A6ECA2151B08A09CACECA35C07F05B42] - 10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\Drivers\BrSerWdm.sys [47104] O58 - SDL:[MD5.B79968002C277E869CF38BD22CD61524] - 10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\Drivers\BrUsbMdm.sys [14976] O58 - SDL:[MD5.A87528880231C54E75EA7A44943B38BF] - 10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\Drivers\BrUsbSer.sys [14720] O58 - SDL:[MD5.9DA669F11D1F894AB4EB69BF546A42E8] - 14/07/2009 - 01:06:52 ---A- . (.Microsoft Corporation - Bluetooth Communications Driver.) -- C:\Windows\System32\Drivers\bthmodem.sys [72192] O58 - SDL:[MD5.3E5B191307609F7514148C6832BB0842] - 10/06/2009 - 21:34:28 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbda.sys [468480] O58 - SDL:[MD5.B8BD2BB284668C84865658C77574381A] - 14/07/2009 - 00:19:47 ---A- . (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\Drivers\cdfs.sys [92160] O58 - SDL:[MD5.F036CE71586E93D94DAB220D7BDF4416] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\Drivers\cdrom.sys [147456] O58 - SDL:[MD5.D7CD5C4E1B71FA62050515314CFB52CF] - 14/07/2009 - 01:06:34 ---A- . (.Microsoft Corporation - Consumer IR Class Driver for eHome.) -- C:\Windows\System32\Drivers\circlass.sys [45568] O58 - SDL:[MD5.ACFAD0B512226C7A83C7CB09FD55A9AD] - 21/11/2010 - 04:24:24 ---A- . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\Windows\System32\Drivers\Classpnp.sys [179072] O58 - SDL:[MD5.0840155D0BDDF1190F84A663C284BD33] - 14/07/2009 - 00:31:03 ---A- . (.Microsoft Corporation - Control Method Battery Driver.) -- C:\Windows\System32\Drivers\CmBatt.sys [17664] O58 - SDL:[MD5.E19D3F095812725D88F9001985B94EDD] - 14/07/2009 - 02:52:31 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\cmdide.sys [17488] O58 - SDL:[MD5.EBF28856F69CF094A902F884CF989706] - 04/07/2013 - 13:18:29 ---A- . (.Microsoft Corporation - Kernel Cryptography, Next Generation.) -- C:\Windows\System32\Drivers\cng.sys [458712] O58 - SDL:[MD5.102DE219C3F61415F964C88E9085AD14] - 14/07/2009 - 02:52:31 ---A- . (.Microsoft Corporation - Composite Battery Driver.) -- C:\Windows\System32\Drivers\compbatt.sys [21584] O58 - SDL:[MD5.03EDB043586CCEBA243D689BDDA370A8] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - Multi-Transport Composite Bus Enumerator.) -- C:\Windows\System32\Drivers\CompositeBus.sys [38912] O58 - SDL:[MD5.3E588B60EC061686BA05D33574A344C6] - 14/07/2009 - 02:47:48 ---A- . (.Microsoft Corporation - Crash Dump Driver.) -- C:\Windows\System32\Drivers\crashdmp.sys [39504] O58 - SDL:[MD5.1C827878A998C18847245FE1F34EE597] - 14/07/2009 - 02:47:48 ---A- . (.Microsoft Corporation - Disk Block Verification Filter Driver.) -- C:\Windows\System32\Drivers\crcdisk.sys [24144] O58 - SDL:[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - 21/11/2010 - 04:24:32 ---A- . (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\Drivers\dfsc.sys [102400] O58 - SDL:[MD5.13096B05847EC78F0977F2C0F79E9AB3] - 14/07/2009 - 00:37:18 ---A- . (.Microsoft Corporation - System Indexer/Cache Driver.) -- C:\Windows\System32\Drivers\discache.sys [40448] O58 - SDL:[MD5.9819EEE8B5EA3784EC4AF3B137A5244C] - 14/07/2009 - 02:47:48 ---A- . (.Microsoft Corporation - PnP Disk Driver.) -- C:\Windows\System32\Drivers\disk.sys [73280] O58 - SDL:[MD5.9BBD8B5855BC6578957F82341F9CDE5A] - 22/04/2011 - 23:15:29 ---A- . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\Windows\System32\Drivers\Diskdump.sys [27520] O58 - SDL:[MD5.21D26064AEDB4988F785BB4A3A2C051E] - 14/07/2009 - 02:01:25 ---A- . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\Windows\System32\Drivers\drmk.sys [116224] O58 - SDL:[MD5.9B19F34400D24DF84C858A421C205754] - 14/07/2009 - 01:06:16 ---A- . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\Windows\System32\Drivers\drmkaud.sys [5632] O58 - SDL:[MD5.839B5FE3D48E9F35B22C21A3D5103F6C] - 14/07/2009 - 02:47:48 ---A- . (.Microsoft Corporation - ATAPI Dump Driver.) -- C:\Windows\System32\Drivers\Dumpata.sys [28736] O58 - SDL:[MD5.814DB88F2641691575A455CF25354098] - 14/07/2009 - 02:43:14 ---A- . (.Microsoft Corporation - Bitlocker Drive Encryption Crashdump Filter.) -- C:\Windows\System32\Drivers\dumpfve.sys [55128] O58 - SDL:[MD5.BF24D6F2ED97FE830BFD52B246F98E67] - 14/07/2009 - 00:38:28 ---A- . (.Microsoft Corporation - DirectX API Driver.) -- C:\Windows\System32\Drivers\dxapi.sys [16896] O58 - SDL:[MD5.FEDE0629ECB23650D48989517D4914DA] - 14/07/2009 - 00:38:28 ---A- . (.Microsoft Corporation - DirectX Graphics Driver.) -- C:\Windows\System32\Drivers\dxg.sys [98816] O58 - SDL:[MD5.88612F1CE3BF42256913BF6E61C70D52] - 01/08/2013 - 13:09:36 ---A- . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys [983488] O58 - SDL:[MD5.1F04CFB79DD5FB7694468CE3FB3DCC31] - 10/04/2013 - 07:01:54 ---A- . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\Windows\System32\Drivers\dxgmms1.sys [265064] O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496] O58 - SDL:[MD5.34A3C54752046E79A126E15C51DB409B] - 14/07/2009 - 00:31:04 ---A- . (.Microsoft Corporation - Error Device Driver.) -- C:\Windows\System32\Drivers\errdev.sys [9728] O58 - SDL:[MD5.DBAA0C650C9549DC5C599D1E81DEDAAD] - 05/04/2011 - 12:26:26 ---A- . (.ELAN Microelectronics Corp. - ETD Kernel Center.) -- C:\Windows\System32\Drivers\ETD.sys [142632] O58 - SDL:[MD5.DC5D737F51BE844D8C82C695EB17372F] - 10/06/2009 - 21:34:33 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbda.sys [3286016] O58 - SDL:[MD5.A510C654EC00C1E9BDD91EEB3A59823B] - 14/07/2009 - 00:23:29 ---A- . (.Microsoft Corporation - Microsoft Extended FAT File System.) -- C:\Windows\System32\Drivers\exfat.sys [195072] O58 - SDL:[MD5.0ADC83218B66A6DB380C330836F3E36D] - 14/07/2009 - 00:23:29 ---A- . (.Microsoft Corporation - Fast FAT File System Driver.) -- C:\Windows\System32\Drivers\fastfat.sys [204800] O58 - SDL:[MD5.D765D19CD8EF61F650C384F62FAC00AB] - 14/07/2009 - 01:00:54 ---A- . (.Microsoft Corporation - Floppy Disk Controller Driver.) -- C:\Windows\System32\Drivers\fdc.sys [29696] O58 - SDL:[MD5.655661BE46B5F5F3FD454E2C3095B930] - 14/07/2009 - 02:47:48 ---A- . (.Microsoft Corporation - FileInfo Filter Driver.) -- C:\Windows\System32\Drivers\fileinfo.sys [70224] O58 - SDL:[MD5.5F671AB5BC87EEA04EC38A6CD5962A47] - 14/07/2009 - 00:25:40 ---A- . (.Microsoft Corporation - File Trace Filter Driver.) -- C:\Windows\System32\Drivers\filetrace.sys [34304] O58 - SDL:[MD5.C172A0F53008EAEB8EA33FE10E177AF5] - 14/07/2009 - 01:00:54 ---A- . (.Microsoft Corporation - Floppy Driver.) -- C:\Windows\System32\Drivers\flpydisk.sys [24576] O58 - SDL:[MD5.DA6B67270FD9DB3697B20FCE94950741] - 21/11/2010 - 04:24:00 ---A- . (.Microsoft Corporation - Gestionnaire de filtres de système de fichiers Microsoft.) -- C:\Windows\System32\Drivers\fltMgr.sys [289664] O58 - SDL:[MD5.D43703496149971890703B4B1B723EAC] - 14/07/2009 - 02:47:49 ---A- . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\fsdepends.sys [55376] O58 - SDL:[MD5.6BD9295CC032DD3077C671FCCF579A7B] - 01/03/2012 - 07:46:16 ---A- . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\Windows\System32\Drivers\fs_rec.sys [23408] O58 - SDL:[MD5.8F6322049018354F45F05A2FD2D4E5E0] - 24/01/2013 - 07:01:01 ---A- . (.Microsoft Corporation - BitLocker Drive Encryption Driver.) -- C:\Windows\System32\Drivers\fvevol.sys [223752] O58 - SDL:[MD5.41C67E4205C606A103DEC8651D0B6FE6] - 03/01/2013 - 07:00:42 ---A- . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) -- C:\Windows\System32\Drivers\FWPKCLNT.SYS [288088] O58 - SDL:[MD5.8C778D335C9D272CFD3298AB02ABE3B6] - 14/07/2009 - 02:47:48 ---A- . (.Microsoft Corporation - Filtre AGPv3.0 générique Microsoft pour plateformes de processe.) -- C:\Windows\System32\Drivers\GAGP30KX.SYS [65088] O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232] O58 - SDL:[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\Drivers\hdaudbus.sys [122368] O58 - SDL:[MD5.975761C778E33CD22498059B91E7373A] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\HdAudio.sys [350208] O58 - SDL:[MD5.B6AC71AAA2B10848F57FC49D55A651AF] - 17/09/2009 - 06:54:54 ---A- . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\Drivers\HECIx64.sys [56344] O58 - SDL:[MD5.78E86380454A7B10A5EB255DC44A355F] - 14/07/2009 - 00:31:06 ---A- . (.Microsoft Corporation - Hid Battery Driver.) -- C:\Windows\System32\Drivers\hidbatt.sys [26624] O58 - SDL:[MD5.7FD2A313F7AFE5C4DAB14798C48DD104] - 14/07/2009 - 01:06:52 ---A- . (.Microsoft Corporation - Pilote de miniport Bluetooth pour les périphériques HID.) -- C:\Windows\System32\Drivers\hidbth.sys [100864] O58 - SDL:[MD5.597C3699384E53CC59587ED50CCE5CA2] - 03/07/2013 - 05:05:05 ---A- . (.Microsoft Corporation - Hid Class Library.) -- C:\Windows\System32\Drivers\hidclass.sys [76800] O58 - SDL:[MD5.0A77D29F311B88CFAE3B13F9C1A73825] - 14/07/2009 - 01:06:23 ---A- . (.Microsoft Corporation - Infrared Miniport Driver for Input Devices.) -- C:\Windows\System32\Drivers\hidir.sys [46592] O58 - SDL:[MD5.856E76B3641746ABBC2946BED1372098] - 03/07/2013 - 05:05:04 ---A- . (.Microsoft Corporation - Hid Parsing Library.) -- C:\Windows\System32\Drivers\hidparse.sys [32896] O58 - SDL:[MD5.9592090A7E2B61CD582B612B6DF70536] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\Windows\System32\Drivers\hidusb.sys [30208] O58 - SDL:[MD5.39D2ABCD392F3D8A6DCE7B60AE7B8EFC] - 21/11/2010 - 04:23:47 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [78720] O58 - SDL:[MD5.0EA7DE1ACB728DD5A369FD742D6EEE28] - 21/11/2010 - 04:23:55 ---A- . (.Microsoft Corporation - HTTP Pile du protocole.) -- C:\Windows\System32\Drivers\http.sys [753664] O58 - SDL:[MD5.A5462BD6884960C9DC85ED49D34FF392] - 21/11/2010 - 04:24:24 ---A- . (.Microsoft Corporation - Hardware Policy Driver.) -- C:\Windows\System32\Drivers\hwpolicy.sys [14720] O58 - SDL:[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - 14/07/2009 - 00:19:57 ---A- . (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\Drivers\i8042prt.sys [105472] O58 - SDL:[MD5.1384872112E8E7FD5786ECEB8BDDF4C9] - 13/04/2010 - 17:44:22 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\Drivers\iaStor.sys [540696] O58 - SDL:[MD5.AAAF44DB3BD0B9D1FB6969B23ECC8366] - 11/03/2011 - 07:41:26 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\Drivers\iaStorV.sys [410496] O58 - SDL:[MD5.31569A2E836C12014148BF7342716946] - 20/07/2010 - 01:10:40 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\Drivers\igdkmd64.sys [10603904] O58 - SDL:[MD5.5C18831C61933628F5BB0EA2675B9D21] - 14/07/2009 - 02:48:04 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\Drivers\iirsp.sys [44112] O58 - SDL:[MD5.DD587A55390ED2295BCE6D36AD567DA9] - 27/02/2010 - 00:32:14 ---A- . (.Intel Corporation - Intel(R) Turbo Boost Technology Driver.) -- C:\Windows\System32\Drivers\Impcd.sys [158976] O58 - SDL:[MD5.F00F20E70C6EC3AA366910083A0518AA] - 14/07/2009 - 02:48:04 ---A- . (.Microsoft Corporation - Intel PCI IDE Driver.) -- C:\Windows\System32\Drivers\intelide.sys [16960] O58 - SDL:[MD5.ADA036632C664CAA754079041CF1F8C1] - 14/07/2009 - 00:19:25 ---A- . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\Drivers\intelppm.sys [62464] O58 - SDL:[MD5.C9F0E1BD74365A8771590E9008D22AB6] - 21/11/2010 - 04:24:27 ---A- . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\Windows\System32\Drivers\ipfltdrv.sys [82944] O58 - SDL:[MD5.0FC1AEA580957AA8817B8F305D18CA3A] - 21/11/2010 - 04:23:48 ---A- . (.Microsoft Corporation - PILOT IPMI WMI.) -- C:\Windows\System32\Drivers\IPMIDrv.sys [78848] O58 - SDL:[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - 14/07/2009 - 01:10:03 ---A- . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys [116224] O58 - SDL:[MD5.05360B1EA5A2ABF620D1D96EBD8BD8F1] - 14/07/2009 - 01:09:02 ---A- . (.Microsoft Corporation - IRDA Protocol Driver.) -- C:\Windows\System32\Drivers\irda.sys [120320] O58 - SDL:[MD5.3ABF5E7213EB28966D55D58B515D5CE9] - 14/07/2009 - 01:08:59 ---A- . (.Microsoft Corporation - Infra-Red Bus Enumerator.) -- C:\Windows\System32\Drivers\irenum.sys [17920] O58 - SDL:[MD5.2F7B28DC3E1183E5EB418DF55C204F38] - 14/07/2009 - 02:48:04 ---A- . (.Microsoft Corporation - Pilote de bus PNP ISA.) -- C:\Windows\System32\Drivers\isapnp.sys [20544] O58 - SDL:[MD5.0469BFF65BBDEE9E46D0C45EE32A08BD] - 17/01/2011 - 23:56:14 ---A- . (.Broadcom Corporation - Broadcom NetLink (TM) Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\System32\Drivers\k57nd60a.sys [412712] O58 - SDL:[MD5.BC02336F1CBA7DCC7D1213BB588A68A5] - 14/07/2009 - 02:48:04 ---A- . (.Microsoft Corporation - Pilote de la classe Clavier.) -- C:\Windows\System32\Drivers\kbdclass.sys [50768] O58 - SDL:[MD5.0705EFF5B42A9DB58548EEC3B26BB484] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - Pilote de filtre clavier HID.) -- C:\Windows\System32\Drivers\kbdhid.sys [33280] O58 - SDL:[MD5.24FBF5CC5C04150073C315A7C83521EE] - 21/11/2010 - 04:24:16 ---A- . (.Microsoft Corporation - Kernel CSA Library.) -- C:\Windows\System32\Drivers\ks.sys [243712] O58 - SDL:[MD5.8F489706472F7E9A06BAAA198703FA64] - 25/09/2013 - 03:26:40 ---A- . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\Windows\System32\Drivers\ksecdd.sys [95680] O58 - SDL:[MD5.868A2CAAB12EFC7A021682BCA0EEC54C] - 25/09/2013 - 03:26:40 ---A- . (.Microsoft Corporation - Kernel Security Support Provider Interface Packages.) -- C:\Windows\System32\Drivers\ksecpkg.sys [154560] O58 - SDL:[MD5.6869281E78CB31A43E969F06B57347C4] - 14/07/2009 - 01:00:19 ---A- . (.Microsoft Corporation - Kernel Streaming WOW Thunk Service.) -- C:\Windows\System32\Drivers\ksthunk.sys [20992] O58 - SDL:[MD5.1538831CF8AD2979A04C423779465827] - 14/07/2009 - 01:08:51 ---A- . (.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) -- C:\Windows\System32\Drivers\lltdio.sys [60928] O58 - SDL:[MD5.1A93E54EB0ECE102495A51266DCDB6A6] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_fc.sys [114752] O58 - SDL:[MD5.1047184A9FDC8BDBFF857175875EE810] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [106560] O58 - SDL:[MD5.30F5C0DE1EE8B5BC9306C1F0E4A75F93] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys [65600] O58 - SDL:[MD5.0504EACAFF0D3C8AED161C4B0D369D4A] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_scsi.sys [115776] O58 - SDL:[MD5.43D0F98E1D56CCDDB0D5254CFF7B356E] - 14/07/2009 - 00:26:13 ---A- . (.Microsoft Corporation - Pilote de filtre de virtualisation de fichier LUA.) -- C:\Windows\System32\Drivers\luafv.sys [113152] O58 - SDL:[MD5.0BB97D43299910CBFBA59C461B99B910] - 04/04/2013 - 13:50:32 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [25928] O58 - SDL:[MD5.3C9F072F9DCA856B9FB7A20CBD4281AC] - 14/07/2009 - 01:01:06 ---A- . (.Microsoft Corporation - Medium changer class driver.) -- C:\Windows\System32\Drivers\mcd.sys [22016] O58 - SDL:[MD5.A55805F747C6EDB6A9080D7C633BD0F4] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for.) -- C:\Windows\System32\Drivers\megasas.sys [35392] O58 - SDL:[MD5.BAF74CE0072480C3B6B7C13B2A94D6B3] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\MegaSR.sys [284736] O58 - SDL:[MD5.800BA92F7010378B09F9ED9270F07137] - 14/07/2009 - 01:10:48 ---A- . (.Microsoft Corporation - Pilote de périphérique modem.) -- C:\Windows\System32\Drivers\modem.sys [40448] O58 - SDL:[MD5.B03D591DC7DA45ECE20B3B467E6AADAA] - 14/07/2009 - 00:38:52 ---A- . (.Microsoft Corporation - Monitor Driver.) -- C:\Windows\System32\Drivers\monitor.sys [30208] O58 - SDL:[MD5.7D27EA49F3C1F687D357E77A470AEA99] - 14/07/2009 - 02:48:27 ---A- . (.Microsoft Corporation - Pilote de la classe Souris.) -- C:\Windows\System32\Drivers\mouclass.sys [49216] O58 - SDL:[MD5.D3BF052C40B0C4166D9FD86A4288C1E6] - 14/07/2009 - 01:00:20 ---A- . (.Microsoft Corporation - Pilote de filtre souris HID.) -- C:\Windows\System32\Drivers\mouhid.sys [31232] O58 - SDL:[MD5.32E7A3D591D671A6DF2DB515A5CBE0FA] - 21/11/2010 - 04:23:53 ---A- . (.Microsoft Corporation - Gestionnaire des points de montage.) -- C:\Windows\System32\Drivers\mountmgr.sys [94592] O58 - SDL:[MD5.A44B420D30BD56E145D6A2BC8768EC58] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - Pilote du bus de prise en charge des chemins d’accès multiples.) -- C:\Windows\System32\Drivers\mpio.sys [155008] O58 - SDL:[MD5.6C38C9E45AE0EA2FA5E551F2ED5E978F] - 14/07/2009 - 01:08:25 ---A- . (.Microsoft Corporation - Microsoft Protection Service Driver.) -- C:\Windows\System32\Drivers\mpsdrv.sys [77312] O58 - SDL:[MD5.1A4F75E63C9FB84B85DFFC6B63FD5404] - 04/07/2013 - 11:11:35 ---A- . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\Windows\System32\Drivers\mrxdav.sys [140800] O58 - SDL:[MD5.A5D9106A73DC88564C825D317CAC68AC] - 27/04/2011 - 03:40:40 ---A- . (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\Drivers\mrxsmb.sys [158208] O58 - SDL:[MD5.D711B3C1D5F42C0C2415687BE09FC163] - 09/07/2011 - 03:46:28 ---A- . (.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) -- C:\Windows\System32\Drivers\mrxsmb10.sys [288768] O58 - SDL:[MD5.9423E9D355C8D303E76B8CFBD8A5C30C] - 27/04/2011 - 03:39:37 ---A- . (.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) -- C:\Windows\System32\Drivers\mrxsmb20.sys [128000] O58 - SDL:[MD5.C25F0BAFA182CBCA2DD3C851C2E75796] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - MS AHCI 1.0 Standard Driver.) -- C:\Windows\System32\Drivers\msahci.sys [31104] O58 - SDL:[MD5.DB801A638D011B9633829EB6F663C900] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - Module spécifique de périphériques Microsoft.) -- C:\Windows\System32\Drivers\msdsm.sys [140672] O58 - SDL:[MD5.AA3FB40E17CE1388FA1BEDAB50EA8F96] - 14/07/2009 - 00:19:47 ---A- . (.Microsoft Corporation - Mailslot driver.) -- C:\Windows\System32\Drivers\msfs.sys [26112] O58 - SDL:[MD5.F9D215A46A8B9753F61767FA72A20326] - 14/07/2009 - 01:06:24 ---A- . (.Microsoft Corporation - Pass-through HID to KMDF Filter Driver.) -- C:\Windows\System32\Drivers\mshidkmdf.sys [8192] O58 - SDL:[MD5.D916874BBD4F8B07BFB7FA9B3CCAE29D] - 14/07/2009 - 02:48:27 ---A- . (.Microsoft Corporation - ISA Driver.) -- C:\Windows\System32\Drivers\msisadrv.sys [15424] O58 - SDL:[MD5.D931D7309DEB2317035B07C9F9E6B0BD] - 21/11/2010 - 04:23:48 ---A- . (.Microsoft Corporation - Microsoft iSCSI Initiator Driver.) -- C:\Windows\System32\Drivers\msiscsi.sys [273792] O58 - SDL:[MD5.49CCF2C4FEA34FFAD8B1B59D49439366] - 14/07/2009 - 01:00:18 ---A- . (.Microsoft Corporation - MS KS Server.) -- C:\Windows\System32\Drivers\mskssrv.sys [11136] O58 - SDL:[MD5.BDD71ACE35A232104DDD349EE70E1AB3] - 14/07/2009 - 01:00:17 ---A- . (.Microsoft Corporation - MS Proxy Clock.) -- C:\Windows\System32\Drivers\mspclock.sys [7168] O58 - SDL:[MD5.4ED981241DB27C3383D72092B618A1D0] - 14/07/2009 - 01:00:17 ---A- . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\Windows\System32\Drivers\mspqm.sys [6784] O58 - SDL:[MD5.759A9EEB0FA9ED79DA1FB7D4EF78866D] - 21/11/2010 - 04:24:15 ---A- . (.Microsoft Corporation - Kernel Remote Procedure Call Provider.) -- C:\Windows\System32\Drivers\msrpc.sys [366976] O58 - SDL:[MD5.0EED230E37515A0EAEE3C2E1BC97B288] - 14/07/2009 - 02:48:27 ---A- . (.Microsoft Corporation - System Management BIOS Driver.) -- C:\Windows\System32\Drivers\mssmbios.sys [32320] O58 - SDL:[MD5.2E66F9ECB30B4221A318C92AC2250779] - 14/07/2009 - 01:00:17 ---A- . (.Microsoft Corporation - WDM Tee/Communication Transform Filter.) -- C:\Windows\System32\Drivers\mstee.sys [8064] O58 - SDL:[MD5.7EA404308934E675BFFDE8EDF0757BCD] - 14/07/2009 - 01:02:08 ---A- . (.Microsoft Corporation - Pilote HID multipoint Microsoft.) -- C:\Windows\System32\Drivers\MTConfig.sys [15360] O58 - SDL:[MD5.F9A18612FD3526FE473C1BDA678D61C8] - 14/07/2009 - 02:48:27 ---A- . (.Microsoft Corporation - Multiple UNC Provider Driver.) -- C:\Windows\System32\Drivers\mup.sys [60496] O58 - SDL:[MD5.9B1EAC6FAF6F37305E822F5588DC8056] - 07/04/2011 - 11:18:06 ---A- . (.Egis Technology Inc. - PSD Filter Driver.) -- C:\Windows\System32\Drivers\mwlPSDFilter.sys [22912] O58 - SDL:[MD5.AD55C1524B296280ED9C6E0D730D35DA] - 07/04/2011 - 11:18:06 ---A- . (.Egis Technology Inc. - MyWinLocker PSD Named Pipe Driver.) -- C:\Windows\System32\Drivers\mwlPSDNserv.sys [20328] O58 - SDL:[MD5.2B599E6EC8843637BDD62E7F8F3BA201] - 07/04/2011 - 11:18:06 ---A- . (.Egis Technology Inc. - MyWinLocker PSD Virtual Disk Driver.) -- C:\Windows\System32\Drivers\mwlPSDVDisk.sys [62584] O58 - SDL:[MD5.760E38053BF56E501D562B70AD796B88] - 22/08/2012 - 19:12:40 ---A- . (.Microsoft Corporation - Pilote NDIS 6.20.) -- C:\Windows\System32\Drivers\ndis.sys [950128] O58 - SDL:[MD5.9F9A1F53AAD7DA4D6FEF5BB73AB811AC] - 14/07/2009 - 01:08:13 ---A- . (.Microsoft Corporation - NDIS Packet Capture Filter Driver.) -- C:\Windows\System32\Drivers\ndiscap.sys [35328] O58 - SDL:[MD5.30639C932D9FEF22B31268FE25A1B6E5] - 14/07/2009 - 01:10:00 ---A- . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) -- C:\Windows\System32\Drivers\ndistapi.sys [24064] O58 - SDL:[MD5.136185F9FB2CC61E573E676AA5402356] - 21/11/2010 - 04:24:32 ---A- . (.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) -- C:\Windows\System32\Drivers\ndisuio.sys [56832] O58 - SDL:[MD5.53F7305169863F0A2BDDC49E116C2E11] - 21/11/2010 - 04:24:08 ---A- . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\Windows\System32\Drivers\ndiswan.sys [164352] O58 - SDL:[MD5.015C0D8E0E0421B4CFD48CFFE2825879] - 21/11/2010 - 04:24:14 ---A- . (.Microsoft Corporation - NDIS Proxy.) -- C:\Windows\System32\Drivers\ndproxy.sys [57856] O58 - SDL:[MD5.86743D9F5D2B1048062B14B1D84501C4] - 14/07/2009 - 01:09:26 ---A- . (.Microsoft Corporation - NetBIOS interface driver.) -- C:\Windows\System32\Drivers\netbios.sys [44544] O58 - SDL:[MD5.09594D1089C523423B32A4229263F068] - 21/11/2010 - 04:23:51 ---A- . (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\Drivers\netbt.sys [261632] O58 - SDL:[MD5.7942B7AC3FF598F8A1736D51ADAF04E8] - 22/08/2012 - 19:12:40 ---A- . (.Microsoft Corporation - Network I/O Subsystem.) -- C:\Windows\System32\Drivers\netio.sys [376688] O58 - SDL:[MD5.77889813BE4D166CDAB78DDBA990DA92] - 14/07/2009 - 02:48:26 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\Drivers\nfrd960.sys [51264] O58 - SDL:[MD5.1E4C4AB5C9B8DD13179BBDC75A2A01F7] - 14/07/2009 - 00:19:48 ---A- . (.Microsoft Corporation - NPFS Driver.) -- C:\Windows\System32\Drivers\npfs.sys [44032] O58 - SDL:[MD5.E7F5AE18AF4168178A642A9247C63001] - 14/07/2009 - 00:21:02 ---A- . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys [24576] O58 - SDL:[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - 12/04/2013 - 15:45:08 ---A- . (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\Drivers\ntfs.sys [1656680] O58 - SDL:[MD5.EE3BA1024594D5D09E314F206B94069E] - 10/03/2011 - 05:01:45 ---A- . (.NTI Corporation - NTI CD-ROM Filter Driver.) -- C:\Windows\System32\Drivers\NTIDrvr.sys [18432] O58 - SDL:[MD5.69E894C5A09C6A6E6372E35653BB05F3] - 11/11/2010 - 20:12:02 ---A- . (.Pas de propriétaire - 1.00.) -- C:\Windows\System32\Drivers\ntiopnp.sys [19544] O58 - SDL:[MD5.9899284589F75FA8724FF3D16AED75C1] - 14/07/2009 - 00:19:38 ---A- . (.Microsoft Corporation - NULL Driver.) -- C:\Windows\System32\Drivers\null.sys [6144] O58 - SDL:[MD5.0A92CB65770442ED0DC44834632F66AD] - 11/03/2011 - 07:41:34 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [148352] O58 - SDL:[MD5.DAB0E87525C10052BF65F06152F37E4A] - 11/03/2011 - 07:41:34 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [166272] O58 - SDL:[MD5.270D7CD42D6E3979F6DD0146650F0E05] - 14/07/2009 - 02:48:26 ---A- . (.Microsoft Corporation - Filtre AGP NForce NT.) -- C:\Windows\System32\Drivers\NV_AGP.SYS [122960] O58 - SDL:[MD5.1EA3749C4114DB3E3161156FFFFA6B33] - 14/07/2009 - 01:07:23 ---A- . (.Microsoft Corporation - Pilote de miniport WiFi natif.) -- C:\Windows\System32\Drivers\nwifi.sys [318976] O58 - SDL:[MD5.3589478E4B22CE21B41FA1BFC0B8B8A0] - 14/07/2009 - 01:06:45 ---A- . (.Microsoft Corporation - 1394 OpenHCI Port Driver.) -- C:\Windows\System32\Drivers\ohci1394.sys [72832] O58 - SDL:[MD5.0557CF5A2556BD58E26384169D72438D] - 21/11/2010 - 04:24:08 ---A- . (.Microsoft Corporation - Planificateur de paquets QoS.) -- C:\Windows\System32\Drivers\pacer.sys [131584] O58 - SDL:[MD5.0086431C29C35BE1DBC43F52CC273887] - 14/07/2009 - 01:00:41 ---A- . (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\Drivers\parport.sys [97280] O58 - SDL:[MD5.E9766131EEADE40A27DC27D2D68FBA9C] - 17/03/2012 - 08:58:57 ---A- . (.Microsoft Corporation - Partition Management Driver.) -- C:\Windows\System32\Drivers\partmgr.sys [75120] O58 - SDL:[MD5.94575C0571D1462A0F70BDE6BD6EE6B3] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - Énumérateur Plug-and-Play PCI pour NT.) -- C:\Windows\System32\Drivers\pci.sys [184704] O58 - SDL:[MD5.B5B8B5EF2E5CB34DF8DCF8831E3534FA] - 14/07/2009 - 02:45:45 ---A- . (.Microsoft Corporation - Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\pciide.sys [12352] O58 - SDL:[MD5.144497DAA145BA0F7BE896064146C058] - 14/07/2009 - 02:45:46 ---A- . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) -- C:\Windows\System32\Drivers\pciidex.sys [48720] O58 - SDL:[MD5.B2E81D4E87CE48589F98CB8C05B01F2F] - 14/07/2009 - 02:45:45 ---A- . (.Microsoft Corporation - Pilote de bus PCMCIA.) -- C:\Windows\System32\Drivers\pcmcia.sys [220752] O58 - SDL:[MD5.D6B9C2E1A11A3A4B26A182FFEF18F603] - 14/07/2009 - 02:45:45 ---A- . (.Microsoft Corporation - Performance Counters for Windows Driver.) -- C:\Windows\System32\Drivers\pcw.sys [50768] O58 - SDL:[MD5.68769C3356B3BE5D1C732C97B9A80D6E] - 14/07/2009 - 02:01:19 ---A- . (.Microsoft Corporation - Protected Environment Authentication and Authorization Export D.) -- C:\Windows\System32\Drivers\PEAuth.sys [651264] O58 - SDL:[MD5.32E11315B5126921FFD9074840EF13D3] - 14/07/2009 - 01:06:29 ---A- . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport Devices).) -- C:\Windows\System32\Drivers\portcls.sys [230400] O58 - SDL:[MD5.0D922E23C041EFB1C3FAC2A6F943C9BF] - 14/07/2009 - 00:19:25 ---A- . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\Drivers\processr.sys [60416] O58 - SDL:[MD5.A53A15A11EBFD21077463EE2C7AFEEF0] - 14/07/2009 - 02:45:46 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\Drivers\ql2300.sys [1524816] O58 - SDL:[MD5.4F6D12B51DE1AAEFF7DC58C4D75423C8] - 14/07/2009 - 02:45:45 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\Drivers\ql40xx.sys [128592] O58 - SDL:[MD5.76707BB36430888D9CE9D705398ADB6C] - 14/07/2009 - 01:09:48 ---A- . (.Microsoft Corporation - Pilote du support de Microsoft Quality Windows Audio Video Expe.) -- C:\Windows\System32\Drivers\qwavedrv.sys [46592] O58 - SDL:[MD5.5A0DA8AD5762FA2D91678A8A01311704] - 14/07/2009 - 01:10:09 ---A- . (.Microsoft Corporation - RAS Automatic Connection Driver.) -- C:\Windows\System32\Drivers\rasacd.sys [14848] O58 - SDL:[MD5.471815800AE33E6F1C32FB1B97C490CA] - 21/11/2010 - 04:24:33 ---A- . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\Drivers\rasl2tp.sys [129536] O58 - SDL:[MD5.855C9B1CD4756C5E9A2AA58A15F58C25] - 14/07/2009 - 01:10:17 ---A- . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) -- C:\Windows\System32\Drivers\raspppoe.sys [92672] O58 - SDL:[MD5.F92A2C41117A11A00BE01CA01A7FCDE9] - 21/11/2010 - 04:24:33 ---A- . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\Windows\System32\Drivers\raspptp.sys [111104] O58 - SDL:[MD5.E8B1E447B008D07FF47D016C2B0EEECB] - 14/07/2009 - 01:10:25 ---A- . (.Microsoft Corporation - RAS SSTP Miniport Call Manager.) -- C:\Windows\System32\Drivers\rassstp.sys [83968] O58 - SDL:[MD5.77F665941019A1594D887A74F301FA2F] - 21/11/2010 - 04:24:08 ---A- . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire tampon de lecteur red.) -- C:\Windows\System32\Drivers\rdbss.sys [309248] O58 - SDL:[MD5.302DA2A0539F2CF54D7C6CC30C1F2D8D] - 14/07/2009 - 01:17:46 ---A- . (.Microsoft Corporation - Microsoft RDP Bus Device driver.) -- C:\Windows\System32\Drivers\rdpbus.sys [24064] O58 - SDL:[MD5.CEA6CC257FC9B7715F1C2B4849286D24] - 14/07/2009 - 01:16:34 ---A- . (.Microsoft Corporation - RDP Miniport.) -- C:\Windows\System32\Drivers\RDPCDD.sys [7680] O58 - SDL:[MD5.BB5971A4F00659529A5C44831AF22365] - 14/07/2009 - 01:16:34 ---A- . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\RDPENCDD.sys [7680] O58 - SDL:[MD5.216F3FA57533D98E1F74DED70113177A] - 14/07/2009 - 01:16:35 ---A- . (.Microsoft Corporation - RDP Reflector Driver Miniport.) -- C:\Windows\System32\Drivers\RDPREFMP.sys [8192] O58 - SDL:[MD5.E61608AA35E98999AF9AAEEEA6114B0A] - 28/04/2012 - 04:55:21 ---A- . (.Microsoft Corporation - Pilote de pile RDP Terminal.) -- C:\Windows\System32\Drivers\rdpwd.sys [210944] O58 - SDL:[MD5.34ED295FA0121C241BFEF24764FC4520] - 21/11/2010 - 04:24:33 ---A- . (.Microsoft Corporation - ReadyBoost Driver.) -- C:\Windows\System32\Drivers\rdyboost.sys [213888] O58 - SDL:[MD5.CAF88D6573D21CD2AA27001DDBFDC74D] - 21/11/2010 - 04:24:15 ---A- . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\Windows\System32\Drivers\rmcast.sys [146432] O58 - SDL:[MD5.0E01641D96889BDEB22DE12D30575B08] - 04/07/2012 - 21:26:03 ---A- . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\Windows\System32\Drivers\RNDISMP.sys [41472] O58 - SDL:[MD5.388D3DD1A6457280F3BADBA9F3ACD6B1] - 14/07/2009 - 01:10:47 ---A- . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) -- C:\Windows\System32\Drivers\rootmdm.sys [11264] O58 - SDL:[MD5.DDC86E4F8E7456261E637E3552E804FF] - 14/07/2009 - 01:08:51 ---A- . (.Microsoft Corporation - Link-Layer Topology Responder Driver for NDIS 6.) -- C:\Windows\System32\Drivers\rspndr.sys [76800] O58 - SDL:[MD5.650D06E28A43E365A01EC4EE0946FC24] - 22/02/2011 - 13:07:32 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\RTKVHD64.sys [2750312] O58 - SDL:[MD5.0E3DCF76F11DC431B088A2DFD7265CDA] - 22/09/2010 - 02:47:10 ---A- . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/Vista/Win7.) -- C:\Windows\System32\Drivers\RtsUStor.sys [243712] O58 - SDL:[MD5.AC03AF3329579FFFB455AA2DAABBE22B] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - SBP-2 Protocol Driver.) -- C:\Windows\System32\Drivers\sbp2port.sys [103808] O58 - SDL:[MD5.253F38D0D7074C02FF8DEB9836C97D2B] - 21/11/2010 - 04:24:09 ---A- . (.Microsoft Corporation - Pilote de filtre de lecteur de carte à puce Microsoft.) -- C:\Windows\System32\Drivers\scfilter.sys [29696] O58 - SDL:[MD5.1B1E264203D4EF9D3DA1987AD70355AB] - 21/11/2010 - 04:24:00 ---A- . (.Microsoft Corporation - SCSI Port Driver.) -- C:\Windows\System32\Drivers\scsiport.sys [171392] O58 - SDL:[MD5.3EA8A16169C26AFBEB544E0E48421186] - 10/06/2009 - 21:37:19 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [23040] O58 - SDL:[MD5.CB624C0035412AF0DEBEC78C41F5CA1B] - 14/07/2009 - 01:00:33 ---A- . (.Microsoft Corporation - Serial Port Enumerator.) -- C:\Windows\System32\Drivers\serenum.sys [23552] O58 - SDL:[MD5.C1D8E28B2C2ADFAEC4BA89E9FDA69BD6] - 14/07/2009 - 01:00:40 ---A- . (.Microsoft Corporation - Pilote de périphérique série.) -- C:\Windows\System32\Drivers\serial.sys [94208] O58 - SDL:[MD5.1C545A7D0691CC4A027396535691C3E3] - 14/07/2009 - 01:00:20 ---A- . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys [26624] O58 - SDL:[MD5.A554811BCD09279536440C964AE35BBF] - 14/07/2009 - 01:01:01 ---A- . (.Microsoft Corporation - Small Form Factor Disk Driver.) -- C:\Windows\System32\Drivers\sffdisk.sys [14336] O58 - SDL:[MD5.FF414F0BAEFEBA59BC6C04B3DB0B87BF] - 14/07/2009 - 01:01:03 ---A- . (.Microsoft Corporation - Small Form Factor MMC Protocol Driver.) -- C:\Windows\System32\Drivers\sffp_mmc.sys [13824] O58 - SDL:[MD5.DD85B78243A19B59F0637DCF284DA63C] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - Small Form Factor SD Protocol Driver.) -- C:\Windows\System32\Drivers\sffp_sd.sys [14336] O58 - SDL:[MD5.A9D601643A1647211A1EE2EC4E433FF4] - 14/07/2009 - 01:01:02 ---A- . (.Microsoft Corporation - SCSI Floppy Driver.) -- C:\Windows\System32\Drivers\sfloppy.sys [16896] O58 - SDL:[MD5.D5183ED285D2795491DC15BDDCBEE5AD] - 02/12/2009 - 21:23:26 ---A- . (.Microsoft Corporation - Microsoft Application Virtualization File System.) -- C:\Windows\System32\Drivers\Sftfslh.sys [721768] O58 - SDL:[MD5.00F118B68C50D2206DD51634F9142B83] - 02/12/2009 - 21:23:32 ---A- . (.Microsoft Corporation - Microsoft Application Virtualization SystemGuard.) -- C:\Windows\System32\Drivers\Sftplaylh.sys [269672] O58 - SDL:[MD5.76A827DF5640BFE16A0CDBB4108ADECA] - 02/12/2009 - 21:23:34 ---A- . (.Microsoft Corporation - Microsoft Application Virtualization SystemGuard.) -- C:\Windows\System32\Drivers\Sftredirlh.sys [25960] O58 - SDL:[MD5.1B4C9701645086BAB8CAFFFCE30ED284] - 02/12/2009 - 21:23:38 ---A- . (.Microsoft Corporation - Microsoft Application Virtualization Volume Manager.) -- C:\Windows\System32\Drivers\Sftvollh.sys [22376] O58 - SDL:[MD5.843CAF1E5FDE1FFD5FF768F23A51E2E1] - 14/07/2009 - 02:45:45 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [43584] O58 - SDL:[MD5.6A6C106D42E9FFFF8B9FCB4F754F6DA4] - 14/07/2009 - 02:45:46 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [80464] O58 - SDL:[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - 14/07/2009 - 01:09:09 ---A- . (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\Drivers\smb.sys [93184] O58 - SDL:[MD5.A80348BA03E96C70852959655CA3E084] - 14/07/2009 - 01:00:35 ---A- . (.Microsoft Corporation - Smart Card Driver Library.) -- C:\Windows\System32\Drivers\smclib.sys [20992] O58 - SDL:[MD5.B9E31E5CACDFE584F34F730A677803F9] - 14/07/2009 - 02:45:55 ---A- . (.Microsoft Corporation - loader for security processor.) -- C:\Windows\System32\Drivers\spldr.sys [19008] O58 - SDL:[MD5.FFF95479C7AB1550F0750A5D01744211] - 10/06/2009 - 21:48:43 ---A- . (.Microsoft Corporation - security processor.) -- C:\Windows\System32\Drivers\spsys.sys [426496] O58 - SDL:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 02/01/1601 - 23:00:00 ---A- . (...) -- C:\Windows\System32\Drivers\sptd.sys [828912] O58 - SDL:[MD5.441FBA48BFF01FDB9D5969EBC1838F0B] - 29/04/2011 - 04:06:10 ---A- . (.Microsoft Corporation - Server driver.) -- C:\Windows\System32\Drivers\srv.sys [467456] O58 - SDL:[MD5.B4ADEBBF5E3677CCE9651E0F01F7CC28] - 29/04/2011 - 04:05:49 ---A- . (.Microsoft Corporation - Smb 2.0 Server driver.) -- C:\Windows\System32\Drivers\srv2.sys [410112] O58 - SDL:[MD5.27E461F0BE5BFF5FC737328F749538C3] - 29/04/2011 - 04:05:37 ---A- . (.Microsoft Corporation - Server Network driver.) -- C:\Windows\System32\Drivers\srvnet.sys [168448] O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656] O58 - SDL:[MD5.19CB37AC38B802BE9C441D094521A29A] - 11/03/2011 - 07:41:37 ---A- . (.Microsoft Corporation - Microsoft Storage Port Driver.) -- C:\Windows\System32\Drivers\storport.sys [189824] O58 - SDL:[MD5.001CC10FA5E71AE1119115E126C8750D] - 14/07/2009 - 01:06:18 ---A- . (.Microsoft Corporation - WDM CODEC Class Device Driver 2.0.) -- C:\Windows\System32\Drivers\stream.sys [68864] O58 - SDL:[MD5.D01EC09B6711A5F8E7E6564A4D0FBC90] - 14/07/2009 - 02:45:55 ---A- . (.Microsoft Corporation - Plug and Play Software Device Enumerator.) -- C:\Windows\System32\Drivers\swenum.sys [12496] O58 - SDL:[MD5.6E316C01CBA8B785FE495F5CC4F48C6F] - 14/07/2009 - 01:01:04 ---A- . (.Microsoft Corporation - SCSI Tape Class Driver.) -- C:\Windows\System32\Drivers\tape.sys [29184] O58 - SDL:[MD5.40AF23633D197905F03AB5628C558C51] - 08/09/2013 - 03:30:37 ---A- . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\Windows\System32\Drivers\tcpip.sys [1903552] O58 - SDL:[MD5.1B16D0BD9841794A6E0CDE0CEF744ABC] - 03/10/2012 - 17:07:26 ---A- . (.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) -- C:\Windows\System32\Drivers\tcpipreg.sys [45568] O58 - SDL:[MD5.6F020A220388ECA0AB6062DC27BD16B6] - 21/11/2010 - 04:24:01 ---A- . (.Microsoft Corporation - TDI Wrapper.) -- C:\Windows\System32\Drivers\tdi.sys [26624] O58 - SDL:[MD5.3371D21011695B16333A3934340C4E7C] - 14/07/2009 - 01:16:32 ---A- . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\Windows\System32\Drivers\tdpipe.sys [15872] O58 - SDL:[MD5.51C5ECEB1CDEE2468A1748BE550CFBC8] - 17/02/2012 - 05:57:32 ---A- . (.Microsoft Corporation - TCP Transport Driver.) -- C:\Windows\System32\Drivers\tdtcp.sys [23552] O58 - SDL:[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - 21/11/2010 - 04:24:32 ---A- . (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\Drivers\tdx.sys [119296] O58 - SDL:[MD5.561E7E1F06895D78DE991E01DD0FB6E5] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - Remote Desktop Server Driver.) -- C:\Windows\System32\Drivers\termdd.sys [63360] O58 - SDL:[MD5.4CE278FC9671BA81A138D70823FCAA09] - 15/06/2013 - 05:32:16 ---A- . (.Microsoft Corporation - TS Security Filter Driver.) -- C:\Windows\System32\Drivers\tssecsrv.sys [39936] O58 - SDL:[MD5.D11C783E3EF9A3C52C0EBE83CC5000E9] - 21/11/2010 - 04:24:33 ---A- . (.Microsoft Corporation - Pilote de filtre pour concentrateur USB du Bureau à distance.) -- C:\Windows\System32\Drivers\TsUsbFlt.sys [59392] O58 - SDL:[MD5.9CC2CCAE8A84820EAECB886D477CBCB8] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - Remote Desktop Generic USB Driver.) -- C:\Windows\System32\Drivers\TsUsbGD.sys [31232] O58 - SDL:[MD5.3566A8DAAFA27AF944F5D705EAA64894] - 21/11/2010 - 04:24:15 ---A- . (.Microsoft Corporation - Pilote d’interface de tunnel Microsoft.) -- C:\Windows\System32\Drivers\tunnel.sys [125440] O58 - SDL:[MD5.B4DD609BD7E282BFC683CEC7EAAAAD67] - 14/07/2009 - 02:45:55 ---A- . (.Microsoft Corporation - Filtre MS AGPv3.5.) -- C:\Windows\System32\Drivers\UAGP35.SYS [64080] O58 - SDL:[MD5.A17D5E1A6DF4EAB0A480F2C490DE4C9D] - 10/03/2011 - 05:01:45 ---A- . (.NTI Corporation - NTI CD-ROM Filter Driver.) -- C:\Windows\System32\Drivers\UBHelper.sys [17408] O58 - SDL:[MD5.FF4232A1A64012BAA1FD97C7B67DF593] - 21/11/2010 - 04:23:55 ---A- . (.Microsoft Corporation - UDF File System Driver.) -- C:\Windows\System32\Drivers\udfs.sys [328192] O58 - SDL:[MD5.4BFE1BC28391222894CBF1E7D0E42320] - 14/07/2009 - 02:45:55 ---A- . (.Microsoft Corporation - Filtre ULi AGPv3.0 pour plateformes à processeur K8/9.) -- C:\Windows\System32\Drivers\ULIAGPKX.SYS [64592] O58 - SDL:[MD5.DC54A574663A895C8763AF0FA1FF7561] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - User-Mode Bus Enumerator.) -- C:\Windows\System32\Drivers\umbus.sys [48640] O58 - SDL:[MD5.B2E8E8CB557B156DA5493BBDDCC1474D] - 14/07/2009 - 01:06:52 ---A- . (.Microsoft Corporation - Generic pass-through driver.) -- C:\Windows\System32\Drivers\umpass.sys [9728] O58 - SDL:[MD5.92B3172E8C14C1444682F510843A9988] - 12/02/2013 - 05:12:05 ---A- . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\Windows\System32\Drivers\usb8023.sys [19968] O58 - SDL:[MD5.292A8E03B3FCE04E39B5BE9B14132030] - 21/11/2010 - 04:24:11 ---A- . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\Windows\System32\Drivers\USBCAMD2.sys [32896] O58 - SDL:[MD5.ACCEA6BC68D0C9A78EB97EE159028B4E] - 04/09/2013 - 13:11:49 ---A- . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\Windows\System32\Drivers\usbccgp.sys [99840] O58 - SDL:[MD5.80B0F7D5CCF86CEB5D402EAAF61FEC31] - 12/07/2013 - 11:41:12 ---A- . (.Microsoft Corporation - USB Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\usbcir.sys [100864] O58 - SDL:[MD5.861C197502A5057E68F0AC75D9EFCDD7] - 04/09/2013 - 13:11:40 ---A- . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\Windows\System32\Drivers\usbd.sys [7808] O58 - SDL:[MD5.311C1DD1088E55BEAE15954D17F50646] - 04/09/2013 - 13:11:43 ---A- . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\Windows\System32\Drivers\usbehci.sys [52736] O58 - SDL:[MD5.280E90CBF4B2DDD169F0728CB44D726F] - 04/09/2013 - 13:12:11 ---A- . (.Microsoft Corporation - Default Hub Driver for USB.) -- C:\Windows\System32\Drivers\usbhub.sys [343040] O58 - SDL:[MD5.9406D801042FAF859CF81B2C886413DC] - 04/09/2013 - 13:11:42 ---A- . (.Microsoft Corporation - OHCI USB Miniport Driver.) -- C:\Windows\System32\Drivers\usbohci.sys [25600] O58 - SDL:[MD5.E73A7A04FDAC9DD46EE2A4257F09E91C] - 04/09/2013 - 13:11:51 ---A- . (.Microsoft Corporation - Pilote de port USB 1.1 & 2.0.) -- C:\Windows\System32\Drivers\usbport.sys [325120] O58 - SDL:[MD5.73188F58FB384E75C4063D29413CEE3D] - 14/07/2009 - 01:38:18 ---A- . (.Microsoft Corporation - USB Printer driver.) -- C:\Windows\System32\Drivers\usbprint.sys [25088] O58 - SDL:[MD5.C3EC945DEC43C00E2AD4C98DDDD064C7] - 21/11/2010 - 04:24:39 ---A- . (.Microsoft Corporation - Gestionnaire de stratégie de redirection USB Windows.) -- C:\Windows\System32\Drivers\usbrpm.sys [31744] O58 - SDL:[MD5.9661DA76B4531B2DA272ECCE25A8AF24] - 03/07/2013 - 05:40:12 ---A- . (.Microsoft Corporation - USB Scanner Driver.) -- C:\Windows\System32\Drivers\usbscan.sys [42496] O58 - SDL:[MD5.FED648B01349A3C8395A5169DB5FB7D6] - 11/03/2011 - 05:37:16 ---A- . (.Microsoft Corporation - USB Mass Storage Class Driver.) -- C:\Windows\System32\Drivers\USBSTOR.SYS [91648] O58 - SDL:[MD5.A83D0EC9AE4C31704442099D40BA2471] - 04/09/2013 - 13:11:43 ---A- . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\Windows\System32\Drivers\usbuhci.sys [30720] O58 - SDL:[MD5.1F775DA4CF1A3A1834207E975A72E9D7] - 12/07/2013 - 11:41:35 ---A- . (.Microsoft Corporation - USB Video Class Driver.) -- C:\Windows\System32\Drivers\usbvideo.sys [185344] O58 - SDL:[MD5.2292941A3522B2AEB2C4138B8336027B] - 06/09/2013 - 14:27:12 ---A- . (.Oracle Corporation - VirtualBox Support Driver.) -- C:\Windows\System32\Drivers\VBoxDrv.sys [238352] O58 - SDL:[MD5.7BA06676AC91AF2EEAB05BCC70F14003] - 06/09/2013 - 14:25:40 ---A- . (.Oracle Corporation - VirtualBox Host-Only Network Adapter Driver.) -- C:\Windows\System32\Drivers\VBoxNetAdp.sys [131856] O58 - SDL:[MD5.4628619D91EB87183977158AA8386A7A] - 06/09/2013 - 14:25:40 ---A- . (.Oracle Corporation - VirtualBox Bridged Networking Driver.) -- C:\Windows\System32\Drivers\VBoxNetFlt.sys [146704] O58 - SDL:[MD5.93BDA0BF20F02E509354D1EBDE69E300] - 06/09/2013 - 14:25:40 ---A- . (.Oracle Corporation - VirtualBox USB Monitor Driver.) -- C:\Windows\System32\Drivers\VBoxUSBMon.sys [119056] O58 - SDL:[MD5.C5C876CCFC083FF3B128F933823E87BD] - 14/07/2009 - 02:45:55 ---A- . (.Microsoft Corporation - Énumérateur racine de lecteur virtuel.) -- C:\Windows\System32\Drivers\vdrvroot.sys [36432] O58 - SDL:[MD5.53E92A310193CB3C03BEA963DE7D9CFC] - 14/07/2009 - 00:38:47 ---A- . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys [29184] O58 - SDL:[MD5.DA4DA3F5E02943C2DC8C6ED875DE68DD] - 14/07/2009 - 00:38:47 ---A- . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vgapnp.sys [29184] O58 - SDL:[MD5.2CE2DF28C83AEAF30084E1B1EB253CBB] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - VHD Miniport Driver.) -- C:\Windows\System32\Drivers\vhdmp.sys [215936] O58 - SDL:[MD5.E5689D93FFE4E5D66C0178761240DD54] - 14/07/2009 - 02:45:55 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\viaide.sys [17488] O58 - SDL:[MD5.E7353D59C9842BC7299FAEB7E7E09340] - 14/07/2009 - 00:38:51 ---A- . (.Microsoft Corporation - Video Port Driver.) -- C:\Windows\System32\Drivers\videoprt.sys [129024] O58 - SDL:[MD5.D2AAFD421940F640B407AEFAAEBD91B0] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys [71552] O58 - SDL:[MD5.A255814907C89BE58B79EF2F189B843B] - 21/11/2010 - 04:24:15 ---A- . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys [363392] O58 - SDL:[MD5.0D08D2F3B3FF84E433346669B5E0F639] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\Drivers\volsnap.sys [295808] O58 - SDL:[MD5.5E2016EA6EBACA03C04FEAC5F330D997] - 14/07/2009 - 02:45:55 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\Drivers\vsmraid.sys [161872] O58 - SDL:[MD5.36D4720B72B5C5D9CB2B9C29E9DF67A1] - 14/07/2009 - 01:07:21 ---A- . (.Microsoft Corporation - Pilote de bus WiFi virtuel.) -- C:\Windows\System32\Drivers\vwifibus.sys [24576] O58 - SDL:[MD5.6A3D66263414FF0D6FA754C646612F3F] - 14/07/2009 - 01:07:22 ---A- . (.Microsoft Corporation - Virtual WiFi Filter Driver.) -- C:\Windows\System32\Drivers\vwififlt.sys [59904] O58 - SDL:[MD5.6A638FC4BFDDC4D9B186C28C91BD1A01] - 14/07/2009 - 01:07:28 ---A- . (.Microsoft Corporation - Virtual WiFi Miniport Driver.) -- C:\Windows\System32\Drivers\vwifimp.sys [17920] O58 - SDL:[MD5.4E9440F4F152A7B944CB1663D3935A3E] - 14/07/2009 - 01:02:07 ---A- . (.Microsoft Corporation - Wacom Serial Pen Tablet HID Driver.) -- C:\Windows\System32\Drivers\wacompen.sys [27776] O58 - SDL:[MD5.356AFD78A6ED4457169241AC3965230C] - 21/11/2010 - 04:24:11 ---A- . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\Windows\System32\Drivers\wanarp.sys [88576] O58 - SDL:[MD5.FC438D1430B28618E2D0C7C332A710AD] - 14/07/2009 - 00:37:35 ---A- . (.Microsoft Corporation - Watchdog Driver.) -- C:\Windows\System32\Drivers\watchdog.sys [42496] O58 - SDL:[MD5.72889E16FF12BA0F235467D6091B17DC] - 14/07/2009 - 02:45:55 ---A- . (.Microsoft Corporation - Microsoft Watchdog Timer Driver.) -- C:\Windows\System32\Drivers\wd.sys [21056] O58 - SDL:[MD5.E2C933EDBC389386EBE6D2BA953F43D8] - 25/06/2013 - 23:55:52 ---A- . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en mode noyau.) -- C:\Windows\System32\Drivers\Wdf01000.sys [785624] O58 - SDL:[MD5.AEA0A67275CFBA0E463E00C6E9A1DDAE] - 26/07/2012 - 05:55:47 ---A- . (.Microsoft Corporation - Kernel Mode Driver Framework Loader.) -- C:\Windows\System32\Drivers\WdfLdr.sys [54376] O58 - SDL:[MD5.611B23304BF067451A9FDEE01FBDD725] - 14/07/2009 - 01:09:26 ---A- . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) -- C:\Windows\System32\Drivers\wfplwf.sys [12800] O58 - SDL:[MD5.05ECAEC3E4529A7153B3136CEB49F0EC] - 14/07/2009 - 02:45:56 ---A- . (.Microsoft Corporation - Wim file system Driver.) -- C:\Windows\System32\Drivers\wimmount.sys [22096] O58 - SDL:[MD5.FE88B288356E7B47B74B13372ADD906D] - 21/11/2010 - 04:23:47 ---A- . (.Microsoft Corporation - Windows USB Class Driver BETA.) -- C:\Windows\System32\Drivers\winusb.sys [41984] O58 - SDL:[MD5.F6FF8944478594D0E414D3F048F0D778] - 14/07/2009 - 00:31:02 ---A- . (.Microsoft Corporation - Windows Management Interface for ACPI.) -- C:\Windows\System32\Drivers\wmiacpi.sys [14336] O58 - SDL:[MD5.FC146F46872D4C5B529B89A5131FD1E6] - 14/07/2009 - 02:45:55 ---A- . (.Microsoft Corporation - WMILIB WMI support library Dll.) -- C:\Windows\System32\Drivers\wmilib.sys [16464] O58 - SDL:[MD5.6BCC1D7D2FD2453957C5479A32364E52] - 14/07/2009 - 01:10:33 ---A- . (.Microsoft Corporation - Couche IFS Winsock2.) -- C:\Windows\System32\Drivers\ws2ifsl.sys [21504] O58 - SDL:[MD5.AB886378EEB55C6C75B4F2D14B6C869F] - 26/07/2012 - 03:26:45 ---A- . (.Microsoft Corporation - Windows Driver Foundation - User-mode Driver Framework Platform.) -- C:\Windows\System32\Drivers\WUDFPf.sys [87040] O58 - SDL:[MD5.DDA4CAF29D8C0A297F886BFE561E6659] - 26/07/2012 - 03:26:06 ---A- . (.Microsoft Corporation - Windows Driver Foundation - User-mode Driver Framework Reflecto.) -- C:\Windows\System32\Drivers\WUDFRd.sys [198656] O58 - SDL:[MD5.16567AB05CD34F46D0DCBB129CA143C2] - 05/08/2011 - 15:33:48 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\System32\athrx.sys [2768384] O58 - SDL:[MD5.FE1EC06F2253F691FE36217C592A0206] - 14/07/2009 - 02:52:31 ---A- . (.Microsoft Corporation - Common Log File System Driver.) -- C:\Windows\System32\clfs.sys [367696] O58 - SDL:[MD5.19320B121BFE7462EADD50A42C81AFD0] - 28/08/2013 - 02:21:06 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\System32\win32k.sys [3155968] O58 - SDL:[MD5.5CF95B35E59E2A38023836FFF31BE64C] - 14/07/2009 - 02:19:10 ---A- . (.Microsoft Corporation - Wim file system Driver.) -- C:\Windows\SysWOW64\drivers\wimmount.sys [19008] O58 - SDL:[MD5.0FFE35F0B0CD5A324BBE22F02569AE3B] - 29/12/2012 - 21:59:38 ---A- . (.Almico Software - SpeedFan x64 Driver.) -- C:\Windows\SysWOW64\speedfan.sys [28664] ~ Drivers: 16 Scanned in 00mn 35s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000001 [29644] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000002 [32802] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000003 [19482] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000004 [29976] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000005 [32775] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000006 [19482] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000007 [30096] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000008 [38935] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000009 [47677] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_00000a [55656] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_00000b [25549] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_00000c [17656] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_00000d [20355] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_00000e [20907] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_00000f [29408] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000010 [25750] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000011 [17849] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000012 [20207] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000013 [33542] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000014 [77361] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000015 [17643] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000016 [34158] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000017 [26796] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000018 [130410] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000019 [53625] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_00001a [73345] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_00001b [47744] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_00001c [73815] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_00001d [53678] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_00001e [43829] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_00001f [57491] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\index [524656] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\00\82\0082d7149af72433fc3606c3d66f9ec8 [679465] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\02\28\0228ba66bc1763e64987b17f581915e0 [340171] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\02\39\02396c33500dffbd24a6bcdb5e020f56 [134433] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\03\29\03297673b207314ffcbacc69b30b1342 [52252] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\05\52\05524d479e4de6190681509bc7d6463c [911549] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\06\dc\06dcad3a86a30cf5a0c6e285aa99cccb [6836] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\09\ba\09ba4f13dd28ac2c4e865a3b3f215491 [815243] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\0a\18\0a1855840fd7b452fffa9a72243c9b3e [51731] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\0a\2d\0a2d29eaccb72749248f46a8f2eb613f [42672] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\0a\9d\0a9d0c77af149348621d67dc5856aeb4 [7204] O61 - LFC: 23/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\0a\a4\0aa4299d6016575f7bae70878e890862 [98666] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\0d\a3\0da32f300d0363981df27279e08b88e0 [71158] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\14\53\1453acee4b26cd77c582224637ac1595 [99588] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\14\89\1489cb591c77797b350b72e1a65397f3 [894718] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\16\af\16afed8eed4f0b456a7f0e3771dd3686 [203028] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\17\20\1720c09be2b3df1e5fc88f93d681ddb6 [187124] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\17\d7\17d76ab1e48c3c3cbf21333d613e5c48 [93909] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\18\82\1882e743a43c5812ad2fc0d39dbe98ba [38565] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\18\ef\18ef7cb5cc4c63ee0637ac14d7034ca8 [72621] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\1a\b7\1ab75dbb8a52d1198a3cb1f49496f57f [118100] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\1c\41\1c41d095efd52e7244cfc85a113ef9e1 [168448] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\1c\ce\1ccea64b26b618e88b17db68bd04adee [159787] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\1d\68\1d68522a2874cdee7730333dbe33bd5b [73777] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\1d\ad\1dadd5f09db703af1a4995c182f975a3 [80076] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\1e\56\1e56b9610ec560860593f9281397e6ae [73805] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\1e\aa\1eaa6d789575b4a8b26212d1b5d4194b [114039] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\20\eb\20eb2a80689f8daeae153069e594d23c [72638] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\21\a6\21a684aa85f7ac505c08907010816b0f [52400] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\22\99\229960874d89f107e3211869b51892f0 [95480] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\24\36\243671016cdf1059aad0931f27942ad9 [74021] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\25\d6\25d6f9a93c2e453e94b1096a6906cc06 [14520] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\26\01\260150682f4d75e72e090317cf2b7c3e [49398] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\26\29\26298a6a5b541c95510b94418d274204 [72681] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\28\ee\28ee9c329e75eb99cdba9f5714b7e836 [7906] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\29\bc\29bce3dc4a38c41b8cd0beefd7ea71eb [99480] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\2a\02\2a0207ff99a8c1070b32bf856b7fd182 [132252] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\2a\58\2a58824f977189a158052cccf028d86f [99140] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\2a\f7\2af7b0d3a8d842469676eb60587685a1 [98511] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\2e\6d\2e6d4ffde3272f5d8a5b224552ed44b8 [104407] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\33\91\339184fdd6a9a8162c4bea121c111289 [15425] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\33\dd\33dd98e7885eabf8f314ef09e424ad17 [96129] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\35\89\3589157b2e62b5f1af9e720466dc9108 [828] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\35\9a\359a298ff6282899c56a21fe3b26549a [132523] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\36\3f\363f8c61592ab4b1bff1819179deb17c [77493] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\36\4c\364c858632b7ffcfa346ca9465146d6b [1032706] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\39\4e\394eb9d97f037300f6dc577f5a5f93a1 [5494] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\39\66\3966ecbfb79dbfe6b03f6100c0ac9428 [3000] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\3b\f2\3bf2ed484f51ce66f458cbfb711aeefc [72067] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\3e\bb\3ebbef70341a1172d0d0db91edb1f254 [131157] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\40\14\40146a9f6a203b26aeb85320444824e8 [129895] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\40\20\402064aadf232b29b85a6c17a274add4 [131832] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\40\b9\40b9e85885d1882685635d09101bd2e7 [202294] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\40\fa\40fad8afde8228ea9bc47e4e98d388ee [57822] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\41\0a\410a53c25402d33b7a1c943340edec53 [62593] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\43\3a\433a92beed24f2f6dee78fcb60c4a1cb [7445] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\46\63\46637d1eff4a390bb7aab451a57703bf [5507] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\46\f0\46f07fcecb1e8886403247843bd8ab55 [65165] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\49\9c\499cea38c7522d16675102cdcc36cdc8 [1075095] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\4c\6e\4c6e535d6ef634055131a90888e6afdb [722] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\4d\76\4d7639f2bb7ef3be824f0f04bb120226 [72496] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\4f\1c\4f1c75ad713d5d50288fc9da089721d7 [213153] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\50\32\50324f9ee86427c26121bc006ed0558a [828228] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\51\ad\51ad98fe66743c91ce365afd27b19fd0 [73443] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\52\01\520168fe1de96495a60e538bcfada66b [96992] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\52\79\5279fc2d92d0757a6506669a62b63a33 [125317] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\53\67\5367e91dccef7528988574408c7c6eb7 [97769] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\53\9d\539d390050a51d1f283cffb084ccd154 [94344] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\58\c7\58c7a26701788e233a08f747ef5944f2 [74158] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\59\1c\591c5f00d393fdc8560a05a284f53c7c [252710] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\5a\ac\5aac9ad893a25561cd6c87e03506b703 [74437] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\5c\c0\5cc08b4fc04fe0c1f910b751078b7d6c [14580] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\5d\67\5d6797c96e3616832dbdd2bd67e8d87a [759312] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\5f\07\5f07032487b4648a0aa79e8aa7b90ae9 [99962] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\5f\3d\5f3d61167491611887d8e4f3a0941718 [5038] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\61\4e\614ea3e2e20889979f4f45e952538328 [5756] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\62\a0\62a0dc68e7e7ed5c022b1020b846f6e0 [99104] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\62\b9\62b9c071f614fc897f21d355c2c9616d [219268] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\65\c4\65c4400f10ba54c4717f15527659881f [43068] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\6b\db\6bdb8c7175c7d87c1d0c6ca311ed22f5 [74358] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\6d\0e\6d0e9ec1df971aca565846052f51e33a [73784] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\6d\7b\6d7b60e28881134d09e8f1e5bc40ff0d [118288] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\6d\8a\6d8add430abcf649f8f581f8d888abfe [2878] O61 - LFC: 23/02/2014 - 10:17:39 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\6e\64\6e64825bbb0e68484d6666da6124c396 [135012] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\72\29\72292f67484fd84b2cd2e5342fa5931a [99045] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\72\e0\72e0f4059a9e22e2b90838f9fdf329a4 [98546] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\73\a7\73a71c4a9c683a10a05a3c79b0071110 [132966] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\74\ac\74ac40ab0786b8d088fa161f6088816c [15123] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\75\4c\754c17844a91aa9658915cce96428e29 [12957] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\76\74\76743d991e035f1f7cb2aee444613a07 [65284] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\76\b2\76b287de9ad4c7be740517322f5e2490 [890] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\78\04\78048ccde48d8efcb98b1447a61600b4 [105794] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\7c\0b\7c0bc10034b966eee76e58ff93c584bd [39717] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\7d\1e\7d1e1437d87914090526ac42527ac18b [76611] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\7d\51\7d5166185740c3e00a5efbd768b6ae22 [132704] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\7d\6d\7d6d4308992a317abdd2e5025f4079a6 [1918] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\80\26\802651da1898ff92ceb4e6edde10e6c0 [111756] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\81\c3\81c3acf26d77549b625b498c7da3a9e2 [886411] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\81\c8\81c84a0ccf91fd71097a102f403ab699 [36511] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\83\9f\839fa98c603152ce95ee93894cf9ec1f [110192] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\87\e9\87e9c9def711c3ec99c472e861879ffe [104339] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\88\5b\885b35566f382169eb843c717a5ba2db [56254] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\8c\3d\8c3da03201129e0d37d199a7176626b5 [132237] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\8c\cd\8ccdf96503075df983dbf8be62ae41e4 [344032] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\8f\34\8f34ed5f62013712ee930a5ab89335bb [116899] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\91\52\91525d5254cd30eb8760c309d9dd3e6a [7517] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\95\52\9552cf35c240a88d7a25fe26d3a2b324 [5691] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\95\9a\959a4b3e7a0d5920494572b618c51212 [97535] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\96\0a\960af57d6cf2bc9035192821c19a0738 [460620] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\96\48\96486cc8de8ee13394f113330acad0f1 [37727] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\96\f5\96f5900b99b3c4017ce0b9e423d96960 [131289] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\97\6e\976e9109afd3cd73ccf137b75bcc7838 [7552] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\99\1c\991cd5bac8c3c065b34099bb1414853c [454811] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\99\e0\99e04ef6b31c517cc7706daa311ab14b [206408] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\9b\e2\9be2ac9ccf509fa121ccb45ce1a18d2f [120941] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\9c\eb\9cebbd76c012fe4fbf7a747d8825d821 [49119] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\9d\18\9d1854fb864617680ed33f1414d238d3 [1009] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\9d\28\9d28a17902037fda043fb4147ff2a52a [74463] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\9f\cb\9fcbdfb061b0aa339f0cc370d68341f5 [2918] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\a7\4a\a74a06b49e3a45c08a87ed181a51506b [50940] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\a9\08\a9081b3be772509259467331c8d122cf [866242] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\aa\52\aa529ca82bfe7bb10d8f7247a0115d4c [99102] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\ab\d6\abd6b5ab4c5d0478aefd5a4682d631a6 [114885] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\ad\12\ad12d9c1a3e72ab441a08f634f33fbad [131364] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\b2\33\b2339a13b25eb7ee2c9664d013043abb [132602] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\b3\23\b3238c5cefb09f56089a7d19c21c09aa [964822] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\b3\64\b364f1d9cf9c2c2a9dce394427267ea0 [48640] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\b4\e1\b4e14686b98a6dcf707efd00317d91d3 [75594] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\b8\6e\b86e305025d752cf7e0af68d6d825c78 [99899] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\bb\d6\bbd6e357ed94a9469a6dfcfc72713189 [132527] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\bc\9d\bc9dc8cb59c52c78338c212dea1424f5 [74683] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\bd\64\bd644597add25df652c849ce9b31dff6 [127331] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\be\43\be43d33cb30784d85569f4f8aedc193b [98572] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\be\72\be725bc23d4f94387891682be960b828 [160907] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\c2\f7\c2f74c9582bc8bfa2dc91bfef99373c2 [301672] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\c3\0c\c30c7783e2fe54db4c41f86d8c4f5442 [98307] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\c6\1c\c61c2e314743b47ccb0fffc3706ae0e5 [110726] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\c6\24\c624e24aa6e36349d688e2bb815253d5 [845778] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\c8\da\c8dadd1df40b4f35e55fff9868e31de0 [2493] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\c9\7d\c97d0eaf22ef1a7f028c18a1a225f772 [96138] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\ce\bb\cebbfd405698946be2380aa2e04b24e6 [127798] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\cf\14\cf14e402fdff780a0271c3755b98e2cc [39771] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\d0\29\d0293b9893cfe186b01442836e22af07 [132596] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\d0\cf\d0cfd847931f5481d4f46933d9015644 [130910] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\d3\e7\d3e760fbd6f4e85c7b4990d095305156 [462274] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\d6\d0\d6d049e21d69df145f5ffe14960cf537 [35732] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\da\2d\da2da49f2ae8d40a22ca51e097bace66 [117526] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\e1\0c\e10c35cdbf6153fb5bae93e34c5095db [77034] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\e1\3e\e13ec82df6af266dcfa1c0f630633e10 [66066] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\e3\89\e3892d8b1695f90d074a3cafb868de64 [41677] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\e5\b0\e5b0ac4ba5f9adc93c46ff976cdf70dc [97092] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\e5\be\e5be128a0c274cc7ba215eefe1135609 [947455] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\e6\31\e631a5d629ed46497d7ce836cf844d08 [70122] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\ea\0c\ea0c04a5a1d6b51e74f628df24c50988 [99226] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\ef\b6\efb6837c45b5bf4aea1f99a1b3e9285c [71403] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\f0\9d\f09dad63e31356ce1e957026ad26fd42 [98017] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\f3\4a\f34abb79a8c8c7a34e01a8f5d8b12dc8 [132082] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\f4\f1\f4f1706bc501256245a37335bdb5ecb4 [66000] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\f8\77\f877cb8b09aa6f68e8cb06b13087e99f [40231] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\fd\3d\fd3dd729c9fd87f6c7d31f12853ed84c [182448] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\Cache\ff\70\ff70a786cff05f3de2386db222d53bfc [2780] O61 - LFC: 23/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Blizzard\Hearthstone\options.txt [125] O61 - LFC: 23/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\002980.ldb [227] O61 - LFC: 23/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\Paths\000005.ldb [630] O61 - LFC: 23/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\000618.ldb [168] O61 - LFC: 23/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.fr_0.indexeddb.leveldb\000264.bak [365] O61 - LFC: 23/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.fr_0.indexeddb.leveldb\000264.ldb [365] O61 - LFC: 23/02/2014 - 10:17:46 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MYCC2CTA\rutube.ru\analytics.sol [459] O61 - LFC: 23/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MYCC2CTA\www.dailymotion.com\com.dm.player.sol [284] O61 - LFC: 23/02/2014 - 10:17:48 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\1732_18244\crl-set [996] O61 - LFC: 23/02/2014 - 10:17:48 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\1732_18244\manifest.fingerprint [12] O61 - LFC: 23/02/2014 - 10:17:48 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\1732_18244\manifest.json [34] O61 - LFC: 23/02/2014 - 10:17:53 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.CE1508 [1150] O61 - LFC: 23/02/2014 - 10:17:53 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.Cv4136 [1150] O61 - LFC: 23/02/2014 - 10:17:53 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.FI4136 [1150] O61 - LFC: 23/02/2014 - 10:17:53 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.dS4136 [1150] O61 - LFC: 23/02/2014 - 10:17:53 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.js4080 [1150] O61 - LFC: 23/02/2014 - 10:17:54 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.ZP3048 [1150] O61 - LFC: 23/02/2014 - 10:17:54 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.zS4304 [1150] O61 - LFC: 23/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.Kr4136 [1150] O61 - LFC: 23/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.Mg3048 [1150] O61 - LFC: 23/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.PK4080 [1150] O61 - LFC: 23/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.ba4304 [1150] O61 - LFC: 23/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.iF4136 [1150] O61 - LFC: 23/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.oD4136 [1150] O61 - LFC: 23/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.vB1508 [1150] O61 - LFC: 23/02/2014 - 10:17:58 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.DR4080 [1150] O61 - LFC: 23/02/2014 - 10:17:58 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.JP4136 [1150] O61 - LFC: 23/02/2014 - 10:17:58 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.Kh4136 [1150] O61 - LFC: 23/02/2014 - 10:17:58 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.OC3048 [1150] O61 - LFC: 23/02/2014 - 10:17:58 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.ad1508 [1150] O61 - LFC: 23/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.Gl3048 [1150] O61 - LFC: 23/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.JB4136 [1150] O61 - LFC: 23/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.RV4136 [1150] O61 - LFC: 23/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.Sm4080 [1150] O61 - LFC: 23/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.kC4304 [1150] O61 - LFC: 23/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.kL1508 [1150] O61 - LFC: 23/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.tq4136 [1150] O61 - LFC: 23/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.WT4304 [1150] O61 - LFC: 23/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.uC4136 [1150] O61 - LFC: 23/02/2014 - 10:18:03 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\chatsync\03\032ab19a4d89eacd.dat [6074] O61 - LFC: 23/02/2014 - 10:18:04 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\chatsync\1e\1ed3b0aa925a561d.dat [6536] O61 - LFC: 23/02/2014 - 10:18:07 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\chatsync\98\98b85275c592ec14.dat [8127] O61 - LFC: 23/02/2014 - 10:18:15 ---A- . (.Blizzard Entertainment.) -- C:\Users\damien\Downloads\Hearthstone-Beta-Setup-frFR.exe [5971136] O61 - LFC: 24/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\AVG SafeGuard toolbar\SiteSafety\l_2014_02_24_11_23_50.db [1188528] O61 - LFC: 24/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Avg2014\log\avgcfg.log.1 [65644] O61 - LFC: 24/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Avg2014\log\avgui.log.1 [131082] O61 - LFC: 24/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_euw.lolesports.com_0.localstorage [77824] O61 - LFC: 24/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_euw.lolesports.com_0.localstorage-journal [16384] O61 - LFC: 24/02/2014 - 10:17:52 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\4800_32627\crl-set [547] O61 - LFC: 24/02/2014 - 10:17:52 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\4800_32627\manifest.fingerprint [12] O61 - LFC: 24/02/2014 - 10:17:52 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\4800_32627\manifest.json [34] O61 - LFC: 24/02/2014 - 10:17:53 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\5536_12828\crl-set [728] O61 - LFC: 24/02/2014 - 10:17:53 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\5536_12828\manifest.fingerprint [12] O61 - LFC: 24/02/2014 - 10:17:53 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\5536_12828\manifest.json [34] O61 - LFC: 24/02/2014 - 10:17:54 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.VG4552 [1150] O61 - LFC: 24/02/2014 - 10:17:54 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.mSM460 [1150] O61 - LFC: 24/02/2014 - 10:17:54 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.pQ3656 [1150] O61 - LFC: 24/02/2014 - 10:17:54 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.pV3964 [1150] O61 - LFC: 24/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.CY3656 [1150] O61 - LFC: 24/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.DP3964 [1150] O61 - LFC: 24/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.XyL460 [1150] O61 - LFC: 24/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.vR4552 [1150] O61 - LFC: 24/02/2014 - 10:17:58 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.gg3964 [1150] O61 - LFC: 24/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.Nk3656 [1150] O61 - LFC: 24/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.jz4552 [1150] O61 - LFC: 24/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.ols460 [1150] O61 - LFC: 24/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.tB3964 [1150] O61 - LFC: 24/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.Yl4552 [1150] O61 - LFC: 24/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.Zyl460 [1150] O61 - LFC: 24/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.wj3656 [1150] O61 - LFC: 25/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\AVG SafeGuard toolbar\Chrome\Default\Preferences [144336] O61 - LFC: 25/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\AVG SafeGuard toolbar\Chrome\Default\Web Data [303104] O61 - LFC: 25/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\AVG SafeGuard toolbar\SiteSafety\l_2014_02_25_11_44_38.db [1161568] O61 - LFC: 25/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000020 [19382] O61 - LFC: 25/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\f_000021 [59971] O61 - LFC: 25/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [270670] O61 - LFC: 25/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\Paths\LOG.old [145] O61 - LFC: 25/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_disqus.com_0.localstorage [5120] O61 - LFC: 25/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_disqus.com_0.localstorage-journal [5672] O61 - LFC: 25/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.deezer.com_0.localstorage [26624] O61 - LFC: 25/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.deezer.com_0.localstorage-journal [15992] O61 - LFC: 25/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage [74752] O61 - LFC: 25/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage-journal [16384] O61 - LFC: 25/02/2014 - 10:17:46 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MYCC2CTA\s.ytimg.com\soundData.sol [49] O61 - LFC: 25/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Preferences [150283] O61 - LFC: 25/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Web Data [303104] O61 - LFC: 25/02/2014 - 10:17:48 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\180_22798\crl-set [862] O61 - LFC: 25/02/2014 - 10:17:48 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\180_22798\manifest.fingerprint [12] O61 - LFC: 25/02/2014 - 10:17:48 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\180_22798\manifest.json [34] O61 - LFC: 25/02/2014 - 10:17:53 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.AL2176 [1150] O61 - LFC: 25/02/2014 - 10:17:53 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.Iw3924 [1150] O61 - LFC: 25/02/2014 - 10:17:53 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.Jm3844 [1150] O61 - LFC: 25/02/2014 - 10:17:54 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.Nu5112 [1150] O61 - LFC: 25/02/2014 - 10:17:54 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.XXt912 [1150] O61 - LFC: 25/02/2014 - 10:17:54 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.mr3112 [1150] O61 - LFC: 25/02/2014 - 10:17:54 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.ms4268 [1150] O61 - LFC: 25/02/2014 - 10:17:54 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.rw5616 [1150] O61 - LFC: 25/02/2014 - 10:17:54 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\ichcop [303104] O61 - LFC: 25/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.Hr4268 [1150] O61 - LFC: 25/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.Ht3924 [1150] O61 - LFC: 25/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.cd3844 [1150] O61 - LFC: 25/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.ct3112 [1150] O61 - LFC: 25/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.dQu912 [1150] O61 - LFC: 25/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.jd5616 [1150] O61 - LFC: 25/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.oY2176 [1150] O61 - LFC: 25/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.qW5112 [1150] O61 - LFC: 25/02/2014 - 10:17:58 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.Eh5616 [1150] O61 - LFC: 25/02/2014 - 10:17:58 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.IZS912 [1150] O61 - LFC: 25/02/2014 - 10:17:58 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.cv3924 [1150] O61 - LFC: 25/02/2014 - 10:17:58 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.mu2176 [1150] O61 - LFC: 25/02/2014 - 10:17:58 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.op3112 [1150] O61 - LFC: 25/02/2014 - 10:17:58 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.sn3844 [1150] O61 - LFC: 25/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.Cvx912 [1150] O61 - LFC: 25/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.DN3844 [1150] O61 - LFC: 25/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.Kk4268 [1150] O61 - LFC: 25/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.ae3924 [1150] O61 - LFC: 25/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.bc5616 [1150] O61 - LFC: 25/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.kz3112 [1150] O61 - LFC: 25/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.sa2176 [1150] O61 - LFC: 25/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.zH5112 [1150] O61 - LFC: 25/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.Uw4268 [1150] O61 - LFC: 25/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.vv5112 [1150] O61 - LFC: 25/02/2014 - 10:18:03 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\shared.xml [95110] O61 - LFC: 25/02/2014 - 10:18:03 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\shared_dynco\dc.db [2166784] O61 - LFC: 25/02/2014 - 10:18:03 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\shared_dynco\dc.db-journal [1215296] O61 - LFC: 25/02/2014 - 10:18:03 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\bistats.db [143360] O61 - LFC: 25/02/2014 - 10:18:03 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\bistats.db-journal [70280] O61 - LFC: 25/02/2014 - 10:18:04 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\chatsync\29\29796e3bb542a0f2.dat [6468] O61 - LFC: 25/02/2014 - 10:18:06 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\chatsync\89\890c9c09cbdfe7f8.dat [9013] O61 - LFC: 25/02/2014 - 10:18:08 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\chatsync\d4\d4eb6a77c2ffb21e.dat [8160] O61 - LFC: 25/02/2014 - 10:18:08 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\config.xml [10948] O61 - LFC: 25/02/2014 - 10:18:08 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\dc.db [45056] O61 - LFC: 25/02/2014 - 10:18:08 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\eas.db [65536] O61 - LFC: 25/02/2014 - 10:18:08 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\eas.db-journal [41552] O61 - LFC: 25/02/2014 - 10:18:08 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\httpfe\cookies.dat [2] O61 - LFC: 25/02/2014 - 10:18:08 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\keyval.db [61440] O61 - LFC: 25/02/2014 - 10:18:08 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\keyval.db-journal [53864] O61 - LFC: 25/02/2014 - 10:18:08 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\main.db [2637824] O61 - LFC: 25/02/2014 - 10:18:08 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Skype\totux.totux\main.db-journal [472472] O61 - LFC: 26/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\Cookies [6144] O61 - LFC: 26/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\Cookies-journal [4640] O61 - LFC: 26/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\data_0 [45056] O61 - LFC: 26/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\data_1 [270336] O61 - LFC: 26/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\data_2 [1056768] O61 - LFC: 26/02/2014 - 10:17:38 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\BrowserCache\data_3 [4202496] O61 - LFC: 26/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Battle.net\CachedData.db [11264] O61 - LFC: 26/02/2014 - 10:17:40 ---A- . (...) -- C:\Users\damien\AppData\Local\Blizzard Entertainment\System Survey\log.txt [260] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Archived History [9113600] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal [16384] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Cookies [925696] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal [16384] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Current Tabs [41182] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\CURRENT [16] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG [0] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old [151] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-003028 [1089] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Extension State\006452.ldb [875] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Extension State\006454.ldb [1762] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT [16] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG [0] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old [790] O61 - LFC: 26/02/2014 - 10:17:42 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-006453 [402] =>.Google Inc O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Favicons [1671168] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal [16384] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\.usage [24] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\Paths\CURRENT [16] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\Paths\LOG [145] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\Paths\MANIFEST-000021 [86] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT [16] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOG [148] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOG.old [148] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\MANIFEST-000648 [175] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\History [2846720] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache [156151] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\History-journal [16384] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.fr_0.indexeddb.leveldb\CURRENT [16] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.fr_0.indexeddb.leveldb\LOG [148] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.fr_0.indexeddb.leveldb\LOG.old [148] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.fr_0.indexeddb.leveldb\MANIFEST-000281 [108] O61 - LFC: 26/02/2014 - 10:17:44 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Last Session [62016] O61 - LFC: 26/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Last Tabs [131250] O61 - LFC: 26/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gighmmpiobklfepjocnamgkkbiglidom_0.localstorage [5663744] O61 - LFC: 26/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gighmmpiobklfepjocnamgkkbiglidom_0.localstorage-journal [16384] O61 - LFC: 26/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_24timezones.com_0.localstorage [3072] O61 - LFC: 26/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_24timezones.com_0.localstorage-journal [3608] O61 - LFC: 26/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.justin.tv_0.localstorage [3072] O61 - LFC: 26/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.justin.tv_0.localstorage-journal [3608] O61 - LFC: 26/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.wiktionary.org_0.localstorage [1157120] O61 - LFC: 26/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.wiktionary.org_0.localstorage-journal [3608] O61 - LFC: 26/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.facebook.com_0.localstorage [24576] O61 - LFC: 26/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.facebook.com_0.localstorage-journal [16384] O61 - LFC: 26/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor [171008] O61 - LFC: 26/02/2014 - 10:17:45 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal [16384] O61 - LFC: 26/02/2014 - 10:17:46 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MYCC2CTA\www-cdn.jtvnw.net\sessions.sol [50] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\QuotaManager [19456] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\QuotaManager-journal [8768] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Session Storage\005118.ldb [147] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Session Storage\005120.ldb [1683] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Session Storage\005123.ldb [55851] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT [16] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG [0] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old [275] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-005122 [210] =>.Google Inc O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Shortcuts [450560] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal [16384] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Top Sites [557056] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal [16384] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity [3205] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Visited Links [524192] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal [16384] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Local State [72678] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom [5713500] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set [1399364] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies [6144] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies-journal [4640] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Safe Browsing Csd Whitelist [135548] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Safe Browsing Download [868840] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Safe Browsing Download Whitelist [19504] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Safe Browsing Extension Blacklist [9364] O61 - LFC: 26/02/2014 - 10:17:47 ---A- . (...) -- C:\Users\damien\AppData\Local\Google\Chrome\User Data\Safe Browsing IP Blacklist [1312] O61 - LFC: 26/02/2014 - 10:17:53 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\D3.aN3584 [1150] O61 - LFC: 26/02/2014 - 10:17:57 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\S2.XJ3584 [1150] O61 - LFC: 26/02/2014 - 10:17:58 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WoW.aD3584 [1150] O61 - LFC: 26/02/2014 - 10:17:58 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\toolbar_log.txt [9186001] O61 - LFC: 26/02/2014 - 10:17:59 ---A- . (...) -- C:\Users\damien\AppData\Local\Temp\WTCG.Bn3584 [1150] O61 - LFC: 26/02/2014 - 10:18:00 ---A- . (...) -- C:\Users\damien\AppData\Roaming\AVG2014\cfgall\userawacs.cfg [49281] O61 - LFC: 26/02/2014 - 10:18:01 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Battle.net\3b9cef9e.config [482] O61 - LFC: 26/02/2014 - 10:18:01 ---A- . (...) -- C:\Users\damien\AppData\Roaming\Battle.net\Battle.net.config [1063] O61 - LFC: 26/02/2014 - 10:18:08 ---A- . (...) -- C:\Users\damien\AppData\Roaming\ZHP\Log.txt [71177] =>.Nicolas Coolman O61 - LFC: 26/02/2014 - 10:18:08 ---A- . (...) -- C:\Users\damien\AppData\Roaming\ZHP\TestsZHPDiag.txt [2878] =>.Nicolas Coolman O61 - LFC: 26/02/2014 - 10:18:28 ---A- . (.Nicolas Coolman.) -- C:\Users\damien\Downloads\zhpdiag20.exe [6865894] =>.Nicolas Coolman ~ 94 Fichiers temporaires (Temporary files) ~ Files: 423 Scanned in 00mn 51s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Liste les services legacy du registre (LALS) (O64) O64 - Services: CurCS - 28/09/2013 - C:\Windows\system32\drivers\afd.sys (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\atapi.sys (atapi) .(.Microsoft Corporation - ATAPI IDE Miniport Driver.) - LEGACY_ATAPI O64 - Services: CurCS - 05/11/2013 - C:\Windows\System32\DRIVERS\avgdiska.sys (Avgdiska) .(.AVG Technologies CZ, s.r.o. - AVG File Vault Driver.) - LEGACY_AVGDISKA O64 - Services: CurCS - 04/11/2013 - C:\Windows\System32\DRIVERS\avgidsdrivera.sys (AVGIDSDriver) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) - LEGACY_AVGIDSDRIVER O64 - Services: CurCS - 24/10/2013 - C:\Windows\System32\DRIVERS\avgidsha.sys (AVGIDSHA) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Helper Dri.) - LEGACY_AVGIDSHA O64 - Services: CurCS - 31/10/2013 - C:\Windows\System32\DRIVERS\avgldx64.sys (Avgldx64) .(.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - LEGACY_AVGLDX64 O64 - Services: CurCS - 31/10/2013 - C:\Windows\System32\DRIVERS\avgloga.sys (Avgloga) .(.AVG Technologies CZ, s.r.o. - AVG Logging Driver.) - LEGACY_AVGLOGA O64 - Services: CurCS - 01/10/2013 - C:\Windows\System32\DRIVERS\avgmfx64.sys (Avgmfx64) .(.AVG Technologies CZ, s.r.o. - AVG Resident Shield Minifilter Driver.) - LEGACY_AVGMFX64 O64 - Services: CurCS - 10/09/2013 - C:\Windows\System32\DRIVERS\avgrkx64.sys (Avgrkx64) .(.AVG Technologies CZ, s.r.o. - AVG Anti-Rootkit Driver.) - LEGACY_AVGRKX64 O64 - Services: CurCS - 01/08/2013 - C:\Windows\System32\DRIVERS\avgtdia.sys (Avgtdia) .(.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - LEGACY_AVGTDIA O64 - Services: CurCS - 06/02/2014 - C:\Windows\system32\drivers\avgtpx64.sys (avgtp) .(.AVG Technologies - Pas de description.) - LEGACY_AVGTP O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\Beep.sys (Beep) .(.Microsoft Corporation - BEEP Driver.) - LEGACY_BEEP O64 - Services: CurCS - 04/07/2012 - C:\Windows\system32\browser.dll (bowser) .(.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) - LEGACY_BOWSER O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\clfs.sys (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS O64 - Services: CurCS - 04/07/2013 - C:\Windows\System32\Drivers\cng.sys (CNG) .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\dfsc.sys (DfsC) .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\discache.sys (discache) .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE O64 - Services: CurCS - 01/08/2013 - C:\Windows\system32\drivers\dxgkrnl.sys (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\fileinfo.sys (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\fltmgr.sys (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR O64 - Services: CurCS - 24/01/2013 - C:\Windows\system32\drivers\fvevol.sys (fvevol) .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\http.sys (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy) .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY O64 - Services: CurCS - 25/09/2013 - C:\Windows\System32\Drivers\ksecdd.sys (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD O64 - Services: CurCS - 25/09/2013 - C:\Windows\System32\Drivers\ksecpkg.sys (KSecPkg) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\lltdio.sys (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\luafv.sys (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\mountmgr.sys (mountmgr) .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb10) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10 O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb20) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20 O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\msisadrv.sys (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP O64 - Services: CurCS - 07/04/2011 - C:\Windows\System32\DRIVERS\mwlPSDFilter.sys (mwlPSDFilter) .(.Egis Technology Inc. - PSD Filter Driver.) - LEGACY_MWLPSDFILTER O64 - Services: CurCS - 07/04/2011 - C:\Windows\System32\DRIVERS\mwlPSDNServ.sys (mwlPSDNServ) .(.Egis Technology Inc. - MyWinLocker PSD Named Pipe Driver.) - LEGACY_MWLPSDNSERV O64 - Services: CurCS - 07/04/2011 - C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys (mwlPSDVDisk) .(.Egis Technology Inc. - MyWinLocker PSD Virtual Disk Driver.) - LEGACY_MWLPSDVDISK O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\nwifi.sys (NativeWifiP) .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP O64 - Services: CurCS - 22/08/2012 - C:\Windows\system32\drivers\ndis.sys (NDIS) .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS O64 - Services: CurCS - 21/11/2010 - C:\Windows\System32\DRIVERS\ndisuio.sys (Ndisuio) .(.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\netbios.sys (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\netbt.sys (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\pcw.sys (pcw) .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\peauth.sys (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH O64 - Services: CurCS - 21/11/2010 - C:\Windows\System32\drivers\pacer.sys (Psched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (rdbss) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\rspndr.sys (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\spldr.sys (spldr) .(.Microsoft Corporation - loader for security processor.) - LEGACY_SPLDR O64 - Services: CurCS - 26/02/2014 - C:\Windows\System32\Drivers\sptd.sys (sptd) .(...) - LEGACY_SPTD O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\srvsvc.dll (srv) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\srvsvc.dll (srv2) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2 O64 - Services: CurCS - 29/04/2011 - C:\Windows\System32\DRIVERS\srvnet.sys (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP O64 - Services: CurCS - 03/10/2012 - C:\Windows\System32\drivers\tcpipreg.sys (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX O64 - Services: CurCS - 06/09/2013 - C:\Windows\System32\DRIVERS\VBoxDrv.sys (VBoxDrv) .(.Oracle Corporation - VirtualBox Support Driver.) - LEGACY_VBOXDRV O64 - Services: CurCS - 06/09/2013 - C:\Windows\System32\DRIVERS\VBoxUSBMon.sys (VBoxUSBMon) .(.Oracle Corporation - VirtualBox USB Monitor Driver.) - LEGACY_VBOXUSBMON O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\vga.sys (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\volmgrx.sys (volmgrx) .(.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) - LEGACY_VOLMGRX O64 - Services: CurCS - 21/11/2010 - C:\Windows\System32\drivers\volsnap.sys (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\vwififlt.sys (vwififlt) .(.Microsoft Corporation - Virtual WiFi Filter Driver.) - LEGACY_VWIFIFLT O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\rascfg.dll (Wanarpv6) .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6 O64 - Services: CurCS - 25/06/2013 - C:\Windows\System32\drivers\Wdf01000.sys (Wdf01000) .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000 O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\wfplwf.sys (WfpLwf) .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF ~ Legacy: 97 Scanned in 00mn 00s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\damien\AppData\Local\Google\Chrome\Application\chrome.exe ~ FASS Keys: 11 Scanned in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\damien\AppData\Local\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {95B7759C-8C7F-4BF1-B163-73684A933233} - (AVG Secure Search) - http://mysearch.avg.com =>Adware.MyWebSearch ~ Keys: Scanned in 00mn 00s ---\\ Enumère les service demarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [859648] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [99328] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [64512] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [680960] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [2428952] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [849920] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [67584] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [121856] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [90624] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ~ Services: 32 Scanned in 00mn 00s ---\\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.0D3B680986310AE5540578C0E481C6A0] [SPRF][02/03/2010] (...) -- C:\ProgramData\FullRemove.exe [131984] [MD5.152F79EFA41216650659853C3FA815E1] [SPRF][10/10/2013] (...) -- C:\Users\damien\Desktop\Adobe Flash Pro CS6.exe [1367096420] [MD5.54DB2B8C60F04C5ADE6D711D47EABA75] [SPRF][06/02/2014] (...) -- C:\Users\damien\Desktop\adwcleaner.exe [1166132] [MD5.ABCDCD188BC9DA9237340B5A85043019] [SPRF][09/01/2013] (.The Code::Blocks Team - Code::Blocks cross-platform IDE.) -- C:\Users\damien\Desktop\codeblocks-12.11mingw-setup.exe [100600973] [MD5.585C3764D0DD7E770B83E0DEFFC37BC5] [SPRF][13/05/2013] (...) -- C:\Users\damien\Desktop\PIL-1.1.7.win32-py2.6.exe [838324] ~ Files: 5 Scanned in 00mn 30s ---\\ Liste des exceptions du parefeu (FirewallRules) (O87) O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-WSD-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "WPDMTP-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WPDMTP-UPnPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WPDMTP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WPDMTP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WPDMTP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe O87 - FAEL: "WPDMTP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe O87 - FAEL: "MCX-FDPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MCX-PlayTo-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MCX-McrMgr-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Media Center Extender Manager.) -- C:\Windows\ehome\mcrmgr.exe O87 - FAEL: "MCX-PlayTo-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MCX-Prov-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - MCX2 Provisioning library.) -- C:\Windows\ehome\mcx2prov.exe O87 - FAEL: "MCX-MCX2SVC-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MCX-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation O87 - FAEL: "MCX-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation O87 - FAEL: "MCX-QWave-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MCX-QWave-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MCX-QWave-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MCX-QWave-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MCX-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation O87 - FAEL: "MCX-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation O87 - FAEL: "MCX-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MCX-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteAssistance-SSDPSrv-In-TCP-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteAssistance-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe O87 - FAEL: "RemoteAssistance-DCOM-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteAssistance-RAServer-Out-TCP-NoScope-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe O87 - FAEL: "RemoteAssistance-RAServer-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteAssistance-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteFwAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteFwAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteEventLogSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteEventLogSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MSDTC-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MSDTC-KTMRM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MSDTC-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe O87 - FAEL: "MSDTC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe O87 - FAEL: "MSDTC-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MSDTC-KTMRM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MSDTC-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe O87 - FAEL: "MSDTC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe O87 - FAEL: "RemoteTask-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteTask-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteTask-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteTask-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-FDPHOST-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-FDPHOST-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-LLMNR-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-LLMNR-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-FDPHOST-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-FDPHOST-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-UPnP-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "NETDIS-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMI-ASYNC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe O87 - FAEL: "WMI-WINMGMT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMI-WINMGMT-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMI-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMI-ASYNC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe O87 - FAEL: "WMI-WINMGMT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMI-WINMGMT-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMI-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MsiScsi-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MsiScsi-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MsiScsi-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "MsiScsi-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe O87 - FAEL: "CoreNet-DNS-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "CoreNet-GP-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "CoreNet-IPHTTPS-Out" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "CoreNet-Teredo-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "CoreNet-Teredo-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "CoreNet-DHCPV6-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "CoreNet-DHCPV6-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "CoreNet-DHCP-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "CoreNet-DHCP-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "FPS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "FPS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "Collab-PNRP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "Collab-PNRP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "Collab-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "Collab-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "Collab-P2PHost-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe O87 - FAEL: "Collab-P2PHost-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe O87 - FAEL: "Collab-P2PHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe O87 - FAEL: "Collab-P2PHost-In-TCP" | In - None - P6 - TRUE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe O87 - FAEL: "RVM-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RVM-VDSLDR-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe O87 - FAEL: "RVM-VDS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe O87 - FAEL: "RVM-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "RVM-VDSLDR-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe O87 - FAEL: "RVM-VDS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe O87 - FAEL: "PNRPMNRS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "PNRPMNRS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "PNRPMNRS-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "PNRPMNRS-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation O87 - FAEL: "WMPNSS-WMP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-WMP-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-WMP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-QWave-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-QWave-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-QWave-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-QWave-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation O87 - FAEL: "WMPNSS-WMP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-WMP-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-WMP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-QWave-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-QWave-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-QWave-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMPNSS-QWave-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "WMP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O87 - FAEL: "WMP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O87 - FAEL: "WMP-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O87 - FAEL: "SNMPTRAP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe O87 - FAEL: "SNMPTRAP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe O87 - FAEL: "{D1A2DAB8-2970-4873-92A9-DF1EE5E8DB8F}" | In - Public - P6 - TRUE | .(.Facebook Inc. - Setup.) -- C:\Users\damien\Downloads\FacebookVideoCallSetup_v1.2.203.0.exe O87 - FAEL: "{422467D7-D325-41E5-B381-72B620702930}" | In - Public - P17 - TRUE | .(.Facebook Inc. - Setup.) -- C:\Users\damien\Downloads\FacebookVideoCallSetup_v1.2.203.0.exe O87 - FAEL: "{2116663E-5CEE-4781-970A-CD3C67C7FDB6}" | In - Domain - P6 - FALSE | .(.Facebook Inc. - Setup.) -- C:\Users\damien\Downloads\FacebookVideoCallSetup_v1.2.203.0.exe O87 - FAEL: "{E3C773C0-67DE-454A-8ED1-3FB41024C20B}" | In - Domain - P17 - FALSE | .(.Facebook Inc. - Setup.) -- C:\Users\damien\Downloads\FacebookVideoCallSetup_v1.2.203.0.exe O87 - FAEL: "{C47C553A-2BB9-4DF0-89B3-8203F1DE7B18}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "{2C0F8156-8252-43BE-855B-DDE56A067176}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "{5EDC10A1-FA7E-48B9-936D-CD646C9C57A1}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "{05AAED49-1A31-4924-A146-33D4056D813E}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "{38650522-FCE7-4634-88B4-6055A0C1936C}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "TCP Query User{753CC02B-C941-4D29-9739-B2457BF2C549}C:\program files (x86)\microsoft games\age of empires ii\empires2.icd" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Age of Empires II.) -- C:\program files (x86)\microsoft games\age of empires ii\empires2.icd O87 - FAEL: "UDP Query User{2400473B-A26F-4F1C-B8DB-DA5B58AAFE34}C:\program files (x86)\microsoft games\age of empires ii\empires2.icd" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Age of Empires II.) -- C:\program files (x86)\microsoft games\age of empires ii\empires2.icd O87 - FAEL: "TCP Query User{28E74310-9B7C-4FA4-A7CA-A43FCAB788EE}C:\windows\syswow64\dplaysvr.exe" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application d’assistance Microsoft DirectPlay.) -- C:\windows\syswow64\dplaysvr.exe O87 - FAEL: "UDP Query User{D771C119-5BC1-4DC8-BB95-1E2F6FE5A365}C:\windows\syswow64\dplaysvr.exe" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Application d’assistance Microsoft DirectPlay.) -- C:\windows\syswow64\dplaysvr.exe O87 - FAEL: "{BFA32AFB-97A3-4D5A-872E-33027210C45A}" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "{ADAD5A5E-1A22-49E6-AED4-A349019FDE79}" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "{A34BE06C-27CE-45BA-8D15-6C832CD715EC}" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "{7D937F8F-22B5-4CE5-8E26-89515AFCA27C}" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "{FDD228F3-C8D6-4D63-B2DD-31029DFE6EF0}" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "{DF1D346B-E59D-4B1F-9A9F-48FBF4806375}" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "{B34D7F3F-D2CD-4FDE-92BB-2C4D6FB5AEB5}" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "{9CE950EC-D3DF-4EDA-90F6-B9619F8D3CE2}" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "{184D8F66-78FF-4CA0-BAA0-D25D2751CAE0}" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe =>.Microsoft Corporation O87 - FAEL: "{D6E1EC2E-BFF3-4A62-AB56-C87E8ABE3263}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\Vuze\Azureus.exe (.not file.) =>P2P.Azureus O87 - FAEL: "{03FEDAAD-BB76-4196-9DD5-6CAE1ED3431F}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\Vuze\Azureus.exe (.not file.) =>P2P.Azureus O87 - FAEL: "TCP Query User{1B8C16C0-354B-4D4B-9577-B3A947E17B84}C:\program files (x86)\vuze\azureus.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\vuze\azureus.exe (.not file.) =>P2P.Azureus O87 - FAEL: "UDP Query User{6E5817C5-7E7B-4ED3-B4BC-D5095F8D56A8}C:\program files (x86)\vuze\azureus.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\vuze\azureus.exe (.not file.) =>P2P.Azureus O87 - FAEL: "{F9944CFE-221E-48EE-AA5D-D15E7884FA45}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O87 - FAEL: "TCP Query User{73062C86-C0CA-4CC1-905C-D6A84E49D1F6}C:\program files (x86)\java\jre7\bin\java.exe" | In - Private - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre7\bin\java.exe O87 - FAEL: "UDP Query User{7CFF4EA5-6740-47B6-8CF1-629AF4F8116C}C:\program files (x86)\java\jre7\bin\java.exe" | In - Private - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre7\bin\java.exe O87 - FAEL: "TCP Query User{F8CF1703-0FFB-4128-AABB-E533940F272C}C:\program files (x86)\java\jre7\bin\java.exe" | In - Public - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre7\bin\java.exe O87 - FAEL: "UDP Query User{BD3FE2C2-099C-438A-A471-D342169B83D1}C:\program files (x86)\java\jre7\bin\java.exe" | In - Public - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre7\bin\java.exe O87 - FAEL: "{BA26E8DF-BCCD-454B-AD8C-402EFB782196}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\SysWOW64\msiexec.exe O87 - FAEL: "{E9D8061A-6087-40F6-8780-62B745B67ADC}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\SysWOW64\msiexec.exe O87 - FAEL: "{622AC3F1-BD85-40A2-8F52-6DA5C9ACD902}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe (.not file.) O87 - FAEL: "{F4C6B2EC-3CC1-41CA-A0A5-B65DF73A9B5A}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe (.not file.) O87 - FAEL: "{C04DD5C6-5650-44A2-85FE-B818DB7C46B2}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe (.not file.) O87 - FAEL: "{A95A6D53-98C6-446A-90B7-5ED9D7DA8BF9}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe (.not file.) O87 - FAEL: "{8C341EA0-5209-490D-9439-C33FF009C4E4}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe (.not file.) O87 - FAEL: "{754A210E-CD61-40A5-BA10-91D1ECD53A1B}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe (.not file.) O87 - FAEL: "{6F7AE560-F2C7-4EAC-94A9-47A94FD355E3}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgemca.exe (.not file.) O87 - FAEL: "{0229EE54-08D2-4F0A-8E40-25C3B1584BE3}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\AVG\AVG2013\avgemca.exe (.not file.) O87 - FAEL: "TCP Query User{E7F08F8A-1B2D-4086-9CE5-FE31EBC4F5AD}C:\program files (x86)\thq\dawn of war\w40k.exe" | In - Public - P6 - TRUE | .(.Relic Entertainment Inc. - W40K.) -- C:\program files (x86)\thq\dawn of war\w40k.exe O87 - FAEL: "UDP Query User{64B77D73-95F8-489E-B67A-8D78444A2CE2}C:\program files (x86)\thq\dawn of war\w40k.exe" | In - Public - P17 - TRUE | .(.Relic Entertainment Inc. - W40K.) -- C:\program files (x86)\thq\dawn of war\w40k.exe O87 - FAEL: "TCP Query User{44E061BD-997E-46C3-8803-20A962E3E2CC}C:\users\damien\appdata\local\temp\rarsfx0\hl.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\damien\appdata\local\temp\rarsfx0\hl.exe (.not file.) O87 - FAEL: "UDP Query User{0AD78F92-6F45-4E1B-AA47-B2031A949DD0}C:\users\damien\appdata\local\temp\rarsfx0\hl.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\damien\appdata\local\temp\rarsfx0\hl.exe (.not file.) O87 - FAEL: "TCP Query User{D36DCEC6-FCB9-4393-843F-97FF8D22A58D}C:\users\damien\appdata\local\temp\rarsfx1\hl.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\damien\appdata\local\temp\rarsfx1\hl.exe (.not file.) O87 - FAEL: "UDP Query User{069DD0EC-22B7-4E62-92C7-99D3CA37BC4E}C:\users\damien\appdata\local\temp\rarsfx1\hl.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\damien\appdata\local\temp\rarsfx1\hl.exe (.not file.) O87 - FAEL: "TCP Query User{304FAE1F-5617-441C-9700-7E272579AC3D}C:\users\damien\appdata\local\temp\rarsfx0\hl.exe" |In - Public - P6 - TRUE | .(...) -- C:\users\damien\appdata\local\temp\rarsfx0\hl.exe (.not file.) O87 - FAEL: "UDP Query User{8835E731-0A93-42D7-AAF5-4E51F666D413}C:\users\damien\appdata\local\temp\rarsfx0\hl.exe" |In - Public - P17 - TRUE | .(...) -- C:\users\damien\appdata\local\temp\rarsfx0\hl.exe (.not file.) O87 - FAEL: "{508413AA-8C52-437A-BFF3-EB77E3D3853F}" | In - Domain - P6 - TRUE | .(.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files (x86)\Steam\Steam.exe O87 - FAEL: "{006959AB-4057-4F84-BC9E-EC8B79CEB553}" | In - Domain - P17 - TRUE | .(.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files (x86)\Steam\Steam.exe O87 - FAEL: "{8C86A6FC-E077-4390-B810-B5938F387268}" | In - Domain - P6 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe O87 - FAEL: "{09D40C34-2267-45A2-845C-0EF270011733}" | In - Domain - P17 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe O87 - FAEL: "{D79B2B29-9D49-4F53-AB59-BA11DD60E673}" | In - None - P6 - FALSE | .(.Microsoft Corporation - SMSvcHost.exe.) -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe O87 - FAEL: "TCP Query User{7469DFCE-322F-44A6-BBE0-A74A0ED1555A}C:\program files (x86)\tera\tera-launcher.exe" | In - Public - P6 - TRUE | .(.Solid State Networks - TERA.) -- C:\program files (x86)\tera\tera-launcher.exe O87 - FAEL: "UDP Query User{A3BE82AC-18AF-4EFB-B3FC-38FA7EC8FA78}C:\program files (x86)\tera\tera-launcher.exe" | In - Public - P17 - TRUE | .(.Solid State Networks - TERA.) -- C:\program files (x86)\tera\tera-launcher.exe O87 - FAEL: "{00FE5F32-9821-4DBC-91F9-933A66EDC371}" | In - Public - P6 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Online Shield Service.) -- C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe O87 - FAEL: "{7A5BA623-585A-4092-937C-FB20F957BB81}" | In - Public - P17 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Online Shield Service.) -- C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe O87 - FAEL: "{4067D3F2-55D1-4484-8736-692C3072D35B}" | In - Public - P6 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Diagnostics.) -- C:\Program Files (x86)\AVG\AVG2014\avgdiagex.exe O87 - FAEL: "{AB677CD6-959B-49AA-97EE-70AB850EF886}" | In - Public - P17 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Diagnostics.) -- C:\Program Files (x86)\AVG\AVG2014\avgdiagex.exe O87 - FAEL: "{17A7F4F5-FF86-487D-A022-142F974060EF}" | In - Public - P6 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Installer Application.) -- C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe O87 - FAEL: "{1B80FF5F-E82B-4C29-A5B6-C987D572AE58}" | In - Public - P17 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Installer Application.) -- C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe O87 - FAEL: "{2C88BADF-AC92-43BB-9A81-3F90729ABE2F}" | In - Public - P6 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG E-mail Scanner.) -- C:\Program Files (x86)\AVG\AVG2014\avgemca.exe O87 - FAEL: "{DFAADB12-50F0-4172-BBBA-49ED3D361FD3}" | In - Public - P17 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG E-mail Scanner.) -- C:\Program Files (x86)\AVG\AVG2014\avgemca.exe O87 - FAEL: "{ABBAE10B-6FED-425B-8706-C315EFF617A6}" | In - Public - P6 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe O87 - FAEL: "{6961A754-72F1-41BB-A60C-EEF4EB822ABD}" | In - Public - P17 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe O87 - FAEL: "{C529F281-3C61-4EBE-954C-9CD571C22F29}" | In - Public - P6 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe O87 - FAEL: "{C9A304A6-04DE-4231-9A9E-4F4EF690B1F6}" | In - Public - P17 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe O87 - FAEL: "{4B5533E0-7623-43C8-80F2-B42176C2D9D3}" | In - Public - P6 - TRUE | .(.Blizzard Entertainment - Blizzard File Switcher.) -- C:\Program Files (x86)\Battle.net\Battle.net.exe O87 - FAEL: "{546BE9A1-7BF9-4E2F-A513-E0D9F734761D}" | In - Public - P17 - TRUE | .(.Blizzard Entertainment - Blizzard File Switcher.) -- C:\Program Files (x86)\Battle.net\Battle.net.exe O87 - FAEL: "{838EE62C-7BFD-430A-B696-FDD3F53F9254}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\Hearthstone\Hearthstone.exe O87 - FAEL: "{254EB075-A309-4258-B53F-9918E1A3D906}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\Hearthstone\Hearthstone.exe ~ Firewall: 239 Scanned in 00mn 01s ---\\ Enumère les codes produits des logiciels (PUC) (O90) O90 - PUC: "05B51F93779A6AC41B3CA67842DC0A52" . (.MyWinLocker 4.) -- C:\Windows\Installer\{39F15B50-A977-4CA6-B1C3-6A8724CDA025}\ARPPRODUCTICON.exe O90 - PUC: "076CFAAAB965F2A4284B2449E5D03EFE" . (.Windows Live Writer.) -- C:\Windows\Installer\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}\ApplicationIcon.ico O90 - PUC: "0BCE87B0B6A1D6E4987DE0C77EF74072" . (.MyWinLocker.) -- C:\Windows\Installer\{0B78ECB0-1A6B-4E6D-89D7-0E7CE77F0427}\ARPPRODUCTICON.exe O90 - PUC: "121E2D80A6F7BE3479DF26B944094330" . (.Microsoft_VC90_CRT_x86.) -- C:\Windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon O90 - PUC: "27BCD19CBB5FD0149AA113F4D5B12448" . (.Broadcom Gigabit NetLink Controller.) -- C:\Windows\Installer\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}\ARPPRODUCTICON.exe O90 - PUC: "38E5962CD1FC1D3448EF3BEB5C1610A2" . (.Shredder.) -- C:\Windows\Installer\{C2695E83-CF1D-43D1-84FE-B3BEC561012A}\ARPPRODUCTICON.exe O90 - PUC: "4179FD719C069C349A2C23CBEA4DC4EB" . (.MyWinLocker Suite.) -- C:\Windows\Installer\{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}\ARPPRODUCTICON.exe O90 - PUC: "5CA0C31676A349B4B8311967DA385FFB" . (.newsXpresso.) -- C:\Windows\Installer\{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}\ARPPRODUCTICON.exe O90 - PUC: "5DBB16B0C3ADA9047803C0D33C0B2F07" . (.Backup Manager V3.) -- C:\Windows\Installer\{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}\ARPPRODUCTICON.exe O90 - PUC: "613755F10CFCDB14FA7FB84CC94E447D" . (.Shredder.) -- C:\Windows\Installer\{1F557316-CFC0-41BD-AFF7-8BC49CE444D7}\ARPPRODUCTICON.exe O90 - PUC: "68AB67CA7DA7FFFFB7449A0100000010" . (.Adobe Reader 9.5.5 MUI.) -- C:\Windows\Installer\{AC76BA86-7AD7-FFFF-7B44-A91000000001}\SC_Reader.ico O90 - PUC: "68C9C0329A62F7341825435D4F3C6F08" . (.Oracle VM VirtualBox 4.2.18.) -- C:\Windows\Installer\{230C9C86-26A9-437F-8152-34D5F4C3F680}\IconVirtualBox O90 - PUC: "7615D2636179EB4498DFFBE96BFE18B4" . (.DawnOfWar.) -- C:\Windows\Installer\{362D5167-9716-44BE-89FD-BF9EB6EF814B}\ARPPRODUCTICON.exe O90 - PUC: "884FD4BEFEAAF6043A14BCA2AA13B509" . (.Windows Live Messenger.) -- C:\Windows\Installer\{EB4DF488-AAEF-406F-A341-CB2AAA315B90}\MsblIco.Exe O90 - PUC: "8994BF104C33134458DE70E9E3FE7ED5" . (.Vedio WebCam.) -- C:\Windows\Installer\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\ARPPRODUCTICON.exe O90 - PUC: "8E4C5D3DF040F6C41850144DC39FF444" . (.NTI Media Maker 9.) -- C:\Windows\Installer\{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}\ARPPRODUCTICON.exe O90 - PUC: "91785D291CBB3CC40AB8659C8E48CCC2" . (.Microsoft_VC80_CRT_x86.) -- C:\Windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon O90 - PUC: "E7FF67E4ABEA78C47B88DC745E24B5D9" . (.Skype™ 6.3.) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe O90 - PUC: "F60C1AD7319C7C64A8F0ADC2AB71AED1" . (.OpenOffice.org 3.4.1.) -- C:\Windows\Installer\{7DA1C06F-C913-46C7-8A0F-DA2CBA17EA1D}\soffice.ico O90 - PUC: "F9C582BB128C07749807654CBA258CE7" . (.Skype Click to Call.) -- C:\Windows\Installer\{BB285C9F-C821-4770-8970-56C4AB52C87E}\ICON_PRODUCT ~ Update Products: 440 Scanned in 00mn 00s ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) [MD5.A8DEBA7E10866FA500034E58DC5EE736] [WIS][10/03/2011] (.NTI Corporation - Media Maker.) -- C:\Windows\Installer\1048a.msi [14192128] [MD5.CAC92727C33BEC0A79965C61BBB1C82F] [WIS][30/01/2013] (.Igor Pavlov - 7-Zip (x64 edition) Package.) -- C:\Windows\Installer\10de7f.msi [1376768] [MD5.D2F34AF196CCAF29A124324392FC3DFF] [WIS][12/12/2013] (.Valve Corporation - Steam.) -- C:\Windows\Installer\1f09ae5.msi [8532992] [MD5.6EBF60DB33B54B09136D538D52B12723] [WIS][27/01/2011] (.Broadcom Corporation - Broadcom Driver Installer.) -- C:\Windows\Installer\2583ca.msi [1987584] [MD5.C93102D26CC671373241FD363AC7B924] [WIS][17/05/2013] (.Skype Technologies S.A. - Skype.) -- C:\Windows\Installer\3e81b0.msi [20627456] [MD5.C667C8E0147244201C671A0080A573B1] [WIS][05/09/2004] (.Relic Entertainment - Dawn of War.) -- C:\Windows\Installer\3edea4.msi [3290228] [MD5.E4AF16B0574B2598AADD353A35A3722B] [WIS][05/04/2012] (.Adobe - Blank Project Template.) -- C:\Windows\Installer\ab027f.msi [2211328] [MD5.78B41A323699DAF1C25265890733BE26] [WIS][05/04/2012] (.Adobe - Blank Project Template.) -- C:\Windows\Installer\ab0286.msi [1997312] [MD5.569F66128124B45B4E62D7C9A24AAD76] [WIS][18/02/2011] (.NTI Corporation - Backup Manager V3.) -- C:\Windows\Installer\d54ef.msi [1114624] [MD5.384D0D94B59B93157E0A2C5A32DB4754] [WIS][07/04/2011] (.esobi Inc. - newsXpresso.) -- C:\Windows\Installer\d54f5.msi [5219328] ~ WIS: 441 Scanned in 00mn 41s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 21/02/2014 257928 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Demand 28/09/2010 172912 | (EgisTec Ticket Service) . (.Egis Technology Inc..) - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe SS - | Demand 05/08/2011 655624 | (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe SS - | Auto 28/02/2013 161384 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Demand 27/01/2014 571816 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe SS - | Demand 19/02/2010 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 11/11/2013 3478544 | (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe SR - | Auto 24/09/2013 348008 | (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe SR - | Auto 31/03/2011 352848 | (DsiWMIService) . (.Dritek System Inc..) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe SR - | Auto 22/02/2011 873064 | (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe SR - | Auto 08/01/2010 23584 | (GREGService) . (.Acer Incorporated.) - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe SR - | Auto 13/04/2010 13336 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe SR - | Auto 31/01/2011 244624 | (Live Updater Service) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer Updater\UpdaterService.exe SR - | Auto 18/03/2010 268824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe SR - | Auto 15/02/2011 257344 | (NTI IScheduleSvc) . (.NTI Corporation.) - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe SR - | Auto 23/12/2009 370688 | (StarWindServiceAE) . (.StarWind Software.) - C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe SR - | Auto 18/03/2010 2320920 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe SR - | Auto 06/02/2014 1772056 | (vToolbarUpdater17.3.0) . (.AVG Secure Search.) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe =>Toolbar.AVGSearch SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 10/08/2011 57344 | (ZAtheros Wlan Agent) . (.Atheros.) - C:\Program Files (x86)\Qualcomm Atheros Fast Reconnect\Ath_WlanAgent.exe ~ Services: Scanned in 00mn 44s ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Run by damien at 26/02/2014 10:21:07 ~ OS 64 not supported by MBR tool ~ MBR: 0 Scanned in 00mn 00s ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by damien at 26/02/2014 10:21:09 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 02s ---\\ Liste des émulateurs de CD/DVD (MBR Hook) O58 - SDL:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 02/01/1601 - 23:00:00 ---A- . (...) -- C:\Windows\System32\Drivers\sptd.sys [828912] ~ Emulateurs: Scanned in 00mn 02s ---\\ Scan Additionnel (O88) Database Version : 13031 - (23/02/2014) Clés trouvées (Keys found) : 29 Valeurs trouvées (Values found) : 1 Dossiers trouvés (Folders found) : 4 Fichiers trouvés (Files found) : 4 [HKLM\Software\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp] =>PUP.Wajam^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] =>Toolbar.AVGSearch^ [HKLM\SYSTEM\CurrentControlSet\Services\vToolbarUpdater17.3.0] =>Toolbar.AVGSearch^ [HKLM\Software\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}] =>Toolbar.AVGSearch [HKLM\Software\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}] =>Toolbar.AVGSearch [HKLM\Software\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}] =>Toolbar.AVGSearch [HKLM\Software\Wow6432Node\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}] =>Toolbar.AVGSearch [HKLM\Software\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}] =>Toolbar.AVGSearch [HKLM\Software\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}] =>Toolbar.AVGSearch [HKLM\Software\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}] =>Toolbar.AVGSearch [HKLM\Software\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}] =>Toolbar.AVGSearch [HKLM\Software\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}] =>PUP.ToparcadeHits [HKLM\Software\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}] =>PUP.ToparcadeHits [HKLM\Software\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}] =>Toolbar.AVGSearch [HKLM\Software\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}] =>Toolbar.AVGSearch [HKLM\Software\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}] =>Toolbar.AVGSearch [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}] =>Toolbar.AVGSearch [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}] =>Toolbar.AVGSearch [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}] =>Toolbar.AVGSearch [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}] =>Toolbar.AVGSearch [HKLM\Software\Classes\S] =>Toolbar.Agent [HKLM\Software\Classes\ScriptHelper.ScriptHelperApi] =>Toolbar.AVGSearch [HKLM\Software\Classes\ScriptHelper.ScriptHelperApi.1] =>Toolbar.AVGSearch [HKLM\Software\Classes\ViProtocol.ViProtocolOLE] =>Toolbar.AVGSearch [HKLM\Software\Classes\ViProtocol.ViProtocolOLE.1] =>Toolbar.AVGSearch [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar] =>Toolbar.AVGSafeGuard [HKCU\Software\AVG SafeGuard toolbar] =>Toolbar.AVGSafeGuard [HKLM\Software\Wow6432Node\AVG SafeGuard toolbar] =>Toolbar.AVGSafeGuard C:\Users\damien\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp =>PUP.Wajam^ C:\Program Files (x86)\Common Files\AVG Secure Search =>Toolbar.AVGSearch^ C:\ProgramData\AVG Security Toolbar =>Toolbar.AVGSearch^ C:\Users\damien\AppData\Roaming\Azureus =>P2P.Azureus^ C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe =>Toolbar.AVGSearch^ C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\loggingserver.exe =>Toolbar.AVGSearch^ [HKCU\Software\AVG Secure Search] =>Toolbar.AVGSearch^ [HKLM\Software\Wow6432Node\AVG Security Toolbar] =>Toolbar.AVGSearch^ ~ Additionnel Scan: 304841 Items scanned in 00mn 28s ---\\ Récapitulatif des détections trouvées sur votre station ~ http://nicolascoolman.webs.com/apps/blog/show/27379491-toolbar-wajam =>PUP.Wajam ~ http://nicolascoolman.webs.com/apps/blog/show/27146838-adware-mywebsearch =>Adware.MyWebSearch ~ http://nicolascoolman.webs.com/apps/blog/show/33263878-hijacker-browser =>Hijacker.Browsers ~ http://nicolascoolman.webs.com/apps/blog/show/30234464-pup-toparcadehits =>PUP.ToparcadeHits ~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit =>Toolbar.Conduit ~ MSI: 5 link(s) detected in 00mn 29s End of the scan (2484 lines in 05mn 36s)(0)