Rapport de ZHPDiag v1.3.5.60 par Nicolas Coolman, Update du 12/02/2013
Run by Jeff at 16/02/2013 10:50:50
State : Version � jour.
UAC : Deactivate by program


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 14.0.1 v14.0.1
GCIE: Google Chrome v24.0.1312.57 (Defaut)

---\\ Windows Product Information
~ Langage: Fran�ais
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : DVQJG
Windows License : OK
~ Windows Remaining Initializations Number : 1
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 12269 MB (71% free)
System Restore: Activ� (Enable)
System drive C: has 3 GB (5%) free of 45 GB

---\\ Logged in mode
~ Computer Name: JEFF-PC
~ User Name: Jeff
~ All Users Names: UpdatusUser, Jeff, HomeGroupUser$, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Jeff\AppData\Roaming\
~ %Desktop% : C:\Users\Jeff\Desktop\
~ %Favorites% : C:\Users\Jeff\Favorites\
~ %LocalAppData% : C:\Users\Jeff\AppData\Local\
~ %StartMenu% : C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 3 Go of 45 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 1545 Go of 1863 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particuli�re de fichiers g�n�riques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.30/08/2011 - 20:47:03.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de d�marrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.435E9C764E1EF70058580996452BE6A2] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.09/01/2013 - 02:12:03.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d�ouverture de session Windows.) (.21/11/2010 - 04:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Biblioth�que de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.30/08/2011 - 20:48:27.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.E453ACF4E7D44E5530B5D5F2B9CA8563] - (.Microsoft Corporation - Pilote du syst�me de fichiers NT.) (.31/08/2012 - 19:19:35.) -- C:\Windows\system32\Drivers\ntfs.sys [1659760]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parall�le.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.DF8126BD41180351A093A3AD2FC8903B] - (.Microsoft Corporation - Pilote de clich� instantan� du volume.) (.30/08/2011 - 20:46:15.) -- C:\Windows\system32\Drivers\volsnap.sys [296320]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cach�s (Cach�/Total)
~ Mes images (My Pictures) : 1/7
~ Mes musiques (My Musics) : 1/81
~ Mes Videos (My Videos) : 2/4
~ Mes Favoris (My Favorites) : 1/9
~ Mes Documents (My Documents) : 1/457
~ Mon Bureau (My Desktop) : 1/4236
~ Menu demarrer (Programs) : 1/58
~ Scan Hidden Files in 00mn 01s



---\\ Processus lanc�s
[MD5.7853D2AB445C10F97610B2B05FA4CF0A] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [512360] [PID.3432]
[MD5.9F0A78629F451BAAFE21DFCCD887F087] - (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- D:\Steam\steam.exe [1597864] [PID.4036]
[MD5.71975ADFC2D3E7B53019B1D182FE5613] - (.Eye-Fi, Inc. - Eye-Fi Helper.) -- D:\SD WIFI\Helper\EyeFiHelper.exe [3961464] [PID.4072]
[MD5.7DFCCC67990B6DE7F30F553A4E4612A4] - (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe [495616] [PID.1820]
[MD5.C2DE814059CF6F1AC29B60849B1681C1] - (.Pas de propri�taire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3092088] [PID.1556]
[MD5.497F27E279C0F921E2130BB89C1CB5CA] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [18705664] [PID.4012]
[MD5.BD712BF585CBE46FEC924398E852A29E] - (.ASUSTeK Computer Inc. - Helper AP for Windows ShellExec for NT.) -- C:\Program Files (x86)\ASUS\AI Manager\AsShellApplication.exe [232064] [PID.3364]
[MD5.6BA433E1E4C815CFB819DD99447F847A] - (.ASUSTek Computer Inc. - AiChargerPlus MFC Application.) -- C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [465536] [PID.4008]
[MD5.D203D7CD1214721CDA8477186AE16ACE] - (.ASUSTeK Computer Inc. - ALU MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe [195200] [PID.1852]
[MD5.C637FC4638A96165256B28D38DE7B953] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208] [PID.3284]
[MD5.E4401CF27225C1D6E664E86195978562] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152544] [PID.3952]
[MD5.AD8BD96B41C40AC36D803DF267B26EF0] - (.LogMeIn Inc. - Hamachi Client Application.) -- D:\hamachi-2-ui.exe [2254768] [PID.4412]
[MD5.ECF085A92859F34F335D2B2FCBEEB7DD] - (.Razer USA Ltd - Razer Synapse.) -- C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [338864] [PID.4516]
[MD5.13E83F57B7A9849348D968C0E73F3BEA] - (.Razer USA Ltd - Razer Mamba System Tray.) -- C:\Program Files (x86)\Razer\Mamba\RazerMambaSysTray.exe [973720] [PID.4912]
[MD5.12916E0642E92561C98B18A2A2D01B14] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848] [PID.4972]
[MD5.576C72830E3FD6ACE2910545B6130803] - (.ASUSTeK Computer Inc. - ASUS Routine Controller.) -- C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2931328] [PID.5144]
[MD5.617B43FE89B8DF6A8BFE84DB4426E040] - (.ASUSTeK Computer Inc. - EPUHelp.) -- C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe [1214080] [PID.5772]
[MD5.181AF444730081C86E917CAD31250880] - (.Pas de propri�taire - PVP.net Patcher Kernel.) -- D:\Jeux\League of Legends\League of Legends\RADS\system\rads_user_kernel.exe [1300376] [PID.3372]
[MD5.58D95CA10D4E31057E53A86C14FB5D6C] - (.Pas de propri�taire - PVP.net Patcher.) -- D:\Jeux\League of Legends\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.108\deploy\LoLLauncher.exe [2693008] [PID.6112]
[MD5.63020815EEA332A61E35B8580B312D32] - (.Adobe Systems Inc. - Adobe AIR Debug Launcher.) -- D:\Jeux\League of Legends\League of Legends\RADS\projects\lol_air_client\releases\0.0.0.240\deploy\LolClient.exe [144384] [PID.5952]
[MD5.0654E4C1F597FC07D6FC7443D4F94840] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1248208] [PID.4000]
[MD5.8906FFADDF99ACCB5C751E75E879481F] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [5676032] [PID.1696]
[MD5.3927397AC60D943DAF8808AFFED582B7] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65192] [PID.1800]
[MD5.A5299D04ED225D64CF07A568A3E1BF8C] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55184] [PID.1868]
[MD5.6E3F4538B33BC19259E99BE1826286A3] - (...) -- C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe [922240] [PID.1920]
[MD5.A63173897EA1A73A75D0E65036DE5B15] - (...) -- C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [915584] [PID.1836]
[MD5.5C31DFB196CB3A488A041881634D86D2] - (...) -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880] [PID.1216]
[MD5.0A403702CB00432AC818523CD416BF67] - (.ASUSTeK Computer Inc. - Device Handle.) -- C:\Windows\SysWOW64\AsHookDevice.exe [203392] [PID.1280]
[MD5.1ACAA67676E9E7BDA5E0C41B6E0DECAF] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [398184] [PID.2272]
[MD5.916B8954AC3E06DC9E898AFFB41F3FB6] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [682344] [PID.2300]
[MD5.3A2BDD76E7D2A5F40A7174793D1BA794] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [75136] [PID.2384]
[MD5.388AE59FE75F1B959DFA0900923C61BB] - (.Skype Technologies S.A. - Skype C2C Service.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000] [PID.2416]
[MD5.2BBB318EA9F34FDC508CEA4AAB98D770] - (.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2673064] [PID.2520]
[MD5.22F8AB79C3F90A6E5EC909050B44F728] - (.Pas de propri�taire - Updater.) -- C:\ProgramData\Premium\MagniPic\MagniPic.exe [235008] [PID.5016]
[MD5.62C19B78555EFC35FEC72C285233A250] - (.Valve Corporation - Steam Client Service (buildbot_winslave04_s.) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe [543144] [PID.3488]
[MD5.7F32D4C47A50E7223491E8FB9359907D] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [325656] [PID.5804]
[MD5.2C16648A12999AE69A9EBF41974B0BA2] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2656280] [PID.6236]
~ Scan Processes Running in 00mn 00s



---\\ Google Chrome, D�marrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Jeff\AppData\Local\Google\Chrome\User Data\Default\Preferences
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Jeff\AppData\Roaming\Mozilla\Firefox\Profiles\k81voj3o.default\prefs.js
M3 - MFPP: Plugins - [Jeff] -- C:\Users\Jeff\AppData\Roaming\Mozilla\Firefox\Profiles\k81voj3o.default\searchplugins\askcom.xml
M3 - MFPP: Plugins - [Jeff] -- C:\Users\Jeff\AppData\Roaming\Mozilla\Firefox\Profiles\k81voj3o.default\searchplugins\Searchab.xml
M3 - MFPP: Plugins - [Jeff] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Jeff] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Jeff] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Jeff] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Jeff] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\fcmdSrch.xml
M3 - MFPP: Plugins - [Jeff] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Jeff] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Jeff] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [Jeff - k81voj3o.default] http://searchab.com
M2 - MFEP: prefs.js [Jeff - k81voj3o.default\5116567b3c34e@5116567b3c387.com] [] MagniPic v1.5 (.MagniPic.)
M2 - MFEP: prefs.js [Jeff - k81voj3o.default\{ba14329e-9550-4989-b3f2-9732e92d17cc}] [] Vuze Remote v10.10.27.6 (.Conduit Ltd..)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - The plugin allows you to have a better experience with Microsoft Lync.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npMeetingJoinPluginOC.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.5.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_149.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.5.0] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (...) -- C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (.not file.)
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.5.0] - (.Oracle Corporation - Next Generation Java Plug-in 10.5.0 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\Jeff\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, D�marrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://searchab.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://cloud-search.linkury.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://cloud-search.linkury.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\SysWOW64\ieframe.dll
R3 - URLSearchHook: Vuze Remote Toolbar [64Bits] - {ba14329e-9550-4989-b3f2-9732e92d17cc} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO [64Bits] - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} . (...) -- C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1504\6.6.1088\TmIEPlg32.dll (.not file.)
O2 - BHO: Babylon toolbar helper [64Bits] - {2EECD738-5844-4a99-B4B6-146BF802613B} . (.Babylon BHO - Pas de description.) -- C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll
O2 - BHO: Lync Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Microsoft Lync.) -- D:\MO\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft� Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- D:\MO\Office15\URLREDIR.dll
O2 - BHO: Vuze Remote [64Bits] - {ba14329e-9550-4989-b3f2-9732e92d17cc} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
O2 - BHO: TmBpIeBHO [64Bits] - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} . (...) -- C:\Program Files\Trend Micro\AMSP\Module\20002\6.6.1010\6.6.1010\TmBpIe32.dll (.not file.)
O2 - BHO: Microsoft SkyDrive Pro Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft SkyDrive Pro Extensions.) -- D:\MO\Office15\GROOVEEX.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) [64Bits] - [HKLM]{ae07101b-46d4-4a98-af68-0333ea26e113} Cl� orpheline
~ Scan Toolbar in 00mn 00s



---\\ Applications d�marr�es par registre & par dossier (O4)
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- D:\Steam\Steam.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O4 - HKCU\..\Run: [msnmsgr] C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.)
O4 - HKCU\..\Run: [Eye-Fi] . (.Eye-Fi, Inc. - Eye-Fi Helper.) -- D:\SD WIFI\Helper\EyeFiHelper.exe
O4 - HKCU\..\Run: [HP Officejet Pro 8600 (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe
O4 - HKCU\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Jeff\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [Pando Media Booster] . (.Pas de propri�taire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - HKLM\..\Wow6432Node\Run: [RunAIShell] . (.ASUSTeK Computer Inc. - Helper AP for Windows ShellExec for NT.) -- C:\Program Files (x86)\ASUS\AI Manager\AsShellApplication.exe
O4 - HKLM\..\Wow6432Node\Run: [ASUS AiChargerPlus Execute] . (.ASUSTek Computer Inc. - AiChargerPlus MFC Application.) -- C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Wow6432Node\Run: [ASUSWebStorage] . (.ecareme - AsusWebStorage.) -- C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.104.216\AsusWSPanel.exe
O4 - HKLM\..\Wow6432Node\Run: [ASUS Easy Update] . (.ASUSTeK Computer Inc. - ALU MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe
O4 - HKLM\..\Wow6432Node\Run: [ASUSPRP] . (.ASUSTek Computer Inc. - ASUS Product Register Program.) -- C:\Program Files (x86)\ASUS\APRP\APRP.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [LogMeIn Hamachi Ui] . (.LogMeIn Inc. - Hamachi Client Application.) -- D:\hamachi-2-ui.exe
O4 - HKLM\..\Wow6432Node\Run: [Razer Synapse] . (.Razer USA Ltd - Razer Synapse.) -- C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
O4 - HKLM\..\Wow6432Node\Run: [Razer Mamba Elite Driver] . (.Razer USA Ltd - Razer Mamba System Tray.) -- C:\Program Files (x86)\Razer\Mamba\RazerMambaSysTray.exe
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-1768589950-2430844179-4221336210-1001\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- D:\Steam\Steam.exe
O4 - HKUS\S-1-5-21-1768589950-2430844179-4221336210-1001\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O4 - HKUS\S-1-5-21-1768589950-2430844179-4221336210-1001\..\Run: [msnmsgr] C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.)
O4 - HKUS\S-1-5-21-1768589950-2430844179-4221336210-1001\..\Run: [Eye-Fi] . (.Eye-Fi, Inc. - Eye-Fi Helper.) -- D:\SD WIFI\Helper\EyeFiHelper.exe
O4 - HKUS\S-1-5-21-1768589950-2430844179-4221336210-1001\..\Run: [HP Officejet Pro 8600 (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe
O4 - HKUS\S-1-5-21-1768589950-2430844179-4221336210-1001\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - HKUS\S-1-5-21-1768589950-2430844179-4221336210-1001\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Jeff\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-1768589950-2430844179-4221336210-1001\..\Run: [Pando Media Booster] . (.Pas de propri�taire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKUS\S-1-5-21-1768589950-2430844179-4221336210-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\UpdatusUser\Desktop\Outlook Express.lnk . (.OLab.) -- D:\MS Office\Outlook Express Launcher\OELauncher.exe
O4 - Global Startup: C:\Users\UpdatusUser\Desktop\PS3Eye Test App.lnk . (.AlexP.) -- C:\Program Files (x86)\AlexP\PS3EyeTest.exe
O4 - Global Startup: C:\Users\UpdatusUser\Desktop\Warcraft III.lnk . (...) -- D:\Warcraft III\Warcraft III.exe (.not file.)
O4 - Global Startup: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Outlook Express.lnk . (.OLab.) -- D:\MS Office\Outlook Express Launcher\OELauncher.exe
O4 - Global Startup: C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Jeff\Desktop\Fraps.lnk . (.Beepa P/L.) -- D:\Fraps\fraps.exe
O4 - Global Startup: C:\Users\Jeff\Desktop\fsx - Raccourci.lnk . (.Microsoft Corp..) -- D:\Jeux\Flight Simulator X\fsx.exe
O4 - Global Startup: C:\Users\Jeff\Desktop\GeoGebra 4.2.lnk . (.Oracle Corporation.) -- C:\Program Files (x86)\Java\jre7\bin\javaws.exe
O4 - Global Startup: C:\Users\Jeff\Desktop\GeoGebra 4.lnk . (.Oracle Corporation.) -- C:\Program Files (x86)\Java\jre7\bin\javaws.exe
O4 - Global Startup: C:\Users\Jeff\Desktop\gwenaelm.free.fr-Physique-Physchim-c02-Chimie-C11-Solutions.pdf.url . (...) -- C:\Users\Jeff\Desktop\gwenaelm.free.fr-Physique-Physchim-c02-Chimie-C11-Solutions.pdf.url
O4 - Global Startup: C:\Users\Jeff\Desktop\Igneous.lnk . (...) -- D:\Jeux\Igneous\Igneous.exe
O4 - Global Startup: C:\Users\Jeff\Desktop\NetSurveyor.lnk . (.Nuts About Nets, LLC.) -- C:\Program Files (x86)\NutsAboutNets\NetSurveyor\NetSurveyor.exe
O4 - Global Startup: C:\Users\Jeff\Desktop\PS3Eye Test App.lnk . (.AlexP.) -- C:\Program Files (x86)\AlexP\PS3EyeTest.exe
O4 - Global Startup: C:\Users\Jeff\Desktop\Rainmeter - Raccourci.lnk . (...) -- C:\Program Files (x86)\Rainmeter\Rainmeter.exe (.not file.)
O4 - Global Startup: C:\Users\Jeff\Desktop\RocketDock.lnk . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - Global Startup: C:\Users\Jeff\Desktop\TeamSpeak 3 Client.lnk . (.TeamSpeak Systems GmbH.) -- C:\Users\Jeff\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe
O4 - Global Startup: C:\Users\Jeff\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Jeff\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Outlook Express.lnk . (.OLab.) -- D:\MS Office\Outlook Express Launcher\OELauncher.exe
O4 - Global Startup: C:\Users\Jeff\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Vuze.lnk . (.Azureus Software, Inc.) -- C:\Program Files (x86)\Vuze\Azureus.exe
~ Scan Global Startup in 00mn 01s



---\\ Invisibilit� de l'ic�ne d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ Scan IE Control Panel in 00mn 00s



---\\ Boutons situ�s sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Se&nd to OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} -- C:\Program Files (x86)\MICROS~3\Office15\ONBttnIE.dll (.not file.)
O9 - Extra button: Lync Click to Call [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -- C:\Program Files\Microsoft Office\Office15\lync.exe (.not file.)
O9 - Extra button: OneNote Lin&ked Notes [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -- C:\Program Files (x86)\MICROS~3\Office15\ONBTTN~1.dll (.not file.)
O9 - Extra button: Skype Click to Call [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d�affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft� Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft� Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000010\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
~ Scan Winsock in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{6F38481D-8022-42AE-B57D-6AB3E24887FA}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CCS\Services\Tcpip\..\{B16EBDE1-1F97-4F8B-9B4A-B9B7383DC8F9}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS1\Services\Tcpip\..\{6F38481D-8022-42AE-B57D-6AB3E24887FA}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{B16EBDE1-1F97-4F8B-9B4A-B9B7383DC8F9}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS2\Services\Tcpip\..\{6F38481D-8022-42AE-B57D-6AB3E24887FA}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{B16EBDE1-1F97-4F8B-9B4A-B9B7383DC8F9}: DhcpNameServer = 212.27.40.240 212.27.40.241
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Cl� de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non d�sactiv�s (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASUS Com Service (asComSvc) . (...) - C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe
O23 - Service: ASUS HM Com Service (asHmComSvc) . (...) - C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe
O23 - Service: ASUS System Control Service (AsSysCtrlService) . (...) - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Device Handle Service (Device Handle Service) . (.ASUSTeK Computer Inc. - Device Handle.) - C:\Windows\SysWOW64\AsHookDevice.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc. - Hamachi Client Tunneling Engine.) - D:\hamachi-2.exe
O23 - Service: Hi-Rez Studios Authenticate and Update S (HiPatchService) . (.Hi-Rez Studios - HiPatchService.) - D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 296.1.) - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\SysWOW64\PnkBstrA.exe
O23 - Service: Skype C2C Service (Skype C2C Service) . (.Skype Technologies S.A. - Skype C2C Service.) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 7 (TeamViewer7) . (.TeamViewer GmbH - TeamViewer Remote Control Application.) - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: Intel(R) Management and Security Applica (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
~ Scan Services in 00mn 04s



---\\ Enum�ration Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ T�ches planifi�es en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1768589950-2430844179-4221336210-1001Core.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1768589950-2430844179-4221336210-1001UA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\MagniPicUpdaterTask{F3723691-04C5-480C-B39A-BA23EA8EB505}.job
[MD5.EC807244904FA170C299AB06D87FBDBE] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
[MD5.BE66B026CF488C87B4D0EA9E616FFA4A] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-1768589950-2430844179-4221336210-1001Core] (.Facebook Inc..) -- C:\Users\Jeff\AppData\Local\Facebook\Update\FacebookUpdate.exe
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-1768589950-2430844179-4221336210-1001UA] (.Facebook Inc..) -- C:\Users\Jeff\AppData\Local\Facebook\Update\FacebookUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
[MD5.CC1A991B2128738CDBF0151109655857] [APT] [HPCustParticipation HP Officejet Pro 8600] (.Hewlett-Packard Co..) -- C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPCustPartic.exe
[MD5.C1F772600C57199B7974A71058B9FB54] [APT] [hpUrlLauncher.exe_{80AB7CFF-9229-43DB-9B0C-0785FF67DAA2}] (.Hewlett-Packard Co..) -- C:\Program Files\HP\HP Officejet Pro 8600\Bin\utils\hpUrlLauncher.exe
[MD5.22F8AB79C3F90A6E5EC909050B44F728] [APT] [MagniPicUpdaterTask{F3723691-04C5-480C-B39A-BA23EA8EB505}] (...) -- C:\ProgramData\Premium\MagniPic\MagniPic.exe
[MD5.00000000000000000000000000000000] [APT] [RealUpgradeLogonTaskS-1-5-21-1768589950-2430844179-4221336210-1001] (...) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [RealUpgradeScheduledTaskS-1-5-21-1768589950-2430844179-4221336210-1001] (...) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [RunAsStdUser Task] (...) -- C:\Users\Jeff\AppData\Local\BrightBreezeSA\bin\3.0.5.0\BrightBreezeSA.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [SmartDefrag_Startup] (...) -- C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe (.not file.)
[MD5.9F0A78629F451BAAFE21DFCCD887F087] [APT] [{18116958-A6C5-457D-8922-B2B1655C67F4}] (.Valve Corporation.) -- D:\Steam\steam.exe
[MD5.00000000000000000000000000000000] [APT] [{74511A3F-DBB8-4DD2-A5EC-1A2757714C36}] (...) -- E:\install.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{D2719ECA-EE69-44A3-BA3F-670F21F9B4B5}] (...) -- D:\plugins\VuzeDL\Crack + Keygen\SetupReg.exe (.not file.)
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
[MD5.D241DDF08B6BEB9E5EAF01E2B8829EA8] [APT] [AsBackupWizard_Run] (.ASUSTeK Computer Inc..) -- C:\Program Files (x86)\ASUS\AsBackupWizard\AsRunBkWizardHelper.exe
[MD5.576C72830E3FD6ACE2910545B6130803] [APT] [ASUS AI Suite II Execute] (.ASUSTeK Computer Inc..) -- C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
~ Scan Scheduled Task in 00mn 01s



---\\ Composants install�s (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d�IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Java (Sun) [64Bits] - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (...) -- C:\Program Files\Java\jre6\bin\regutils.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lanc�s au d�marrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (AsIO) . (...) - C:\Windows\Syswow64\drivers\AsIO.sys
O41 - Driver: (AsUpIO) . (...) - C:\Windows\Syswow64\drivers\AsUpIO.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\drivers\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\Windows\System32\DRIVERS\dtsoftbus01.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-syst�me de mise en m�moire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels install�s (O42)
O42 - Logiciel: 64 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM][64Bits] -- {9301985B-D116-4A93-A93D-94580084FF86}
O42 - Logiciel: 64 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM][64Bits] -- {FF21C3E6-97FD-474F-9518-8DCBE94C2854}
O42 - Logiciel: AI Manager - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {4AF95DE2-B54D-4C3F-9494-FD3B558E2C2D}
O42 - Logiciel: AI Suite II - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {34D3688E-A737-44C5-9E2A-FF73618728E1}
O42 - Logiciel: ASUS Backup Wizard - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {124C9BD0-8C52-40AB-8238-0605703B1C28}
O42 - Logiciel: ASUS Easy Update - (.Pas de propri�taire.) [HKLM][64Bits] -- {9A9FEC4E-8696-43B4-8C19-5BE4D9038B55}
O42 - Logiciel: ASUS WebStorage - (.eCareme Technologies, Inc..) [HKLM][64Bits] -- ASUS WebStorage
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {FE23D063-934D-4829-A0D8-00634CE79B4A}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader X (10.1.5) MUI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-FFFF-7B44-AA0000000001}
O42 - Logiciel: Aerosoft's - FlorenceX - (.Aerosoft.) [HKLM][64Bits] -- {E764BA22-C1F3-4770-94E3-FB4948786248}
O42 - Logiciel: AirMech - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 206500
O42 - Logiciel: Alien Swarm - (.Valve.) [HKLM][64Bits] -- Steam App 630
O42 - Logiciel: Amnesia: The Dark Descent - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 57300
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {CCE825DB-347A-4004-A186-5F4A6FDD8547}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {D70884EA-E2CE-4539-91DB-4766CC1E5F5F}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Asmedia ASM104x USB 3.0 Host Controller Driver - (.Asmedia Technology.) [HKLM][64Bits] -- {E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}
O42 - Logiciel: AsusVibe2.0 - (.ASUSTEK.) [HKLM][64Bits] -- Asus Vibe2.0
O42 - Logiciel: Audiosurf - (.BestGameEver.) [HKLM][64Bits] -- Steam App 12900
O42 - Logiciel: Awesomenauts - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 204300
O42 - Logiciel: Babylon toolbar on IE - (.Pas de propri�taire.) [HKLM][64Bits] -- BabylonToolbar
O42 - Logiciel: Battlefield Heroes - (.EA Digital illusions.) [HKCU][64Bits] -- {8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}
O42 - Logiciel: Blocks That Matter - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 111800
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: Brawl Busters - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 109410
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: CL-Eye Driver - (.Code Laboratories, Inc..) [HKLM][64Bits] -- CL-Eye Driver
O42 - Logiciel: Champions Online: Free For All - (.Cryptic Studios.) [HKLM][64Bits] -- Steam App 9880
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
O42 - Logiciel: DC Universe Online - (.Sony Online Entertainment.) [HKLM][64Bits] -- Steam App 24200
O42 - Logiciel: Darksiders - (.Vigil Games.) [HKLM][64Bits] -- Steam App 50620
O42 - Logiciel: Darksiders II - (.Vigil Games.) [HKLM][64Bits] -- Steam App 50650
O42 - Logiciel: DarksidersInstaller - (.Nom de votre soci�t�.) [HKLM][64Bits] -- {B93EEE50-9C8F-45DF-95E4-3D85A6E242F3}
O42 - Logiciel: Dota 2 - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 570
O42 - Logiciel: Dota 2 Test - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 205790
O42 - Logiciel: Dragonica version TEST - (.Gala Networks Europe Ltd..) [HKLM][64Bits] -- {46BE6D86-7BEF-4DAB-B3E6-7B932D3872F3}_is1
O42 - Logiciel: Eye-Fi Center 3.4 - (.Eye-Fi, Inc.) [HKLM][64Bits] -- {CCF19F20-A6E6-405A-A219-325DF22D9C37}
O42 - Logiciel: FINAL FANTASY XIV - (.SQUARE ENIX CO., LTD..) [HKLM][64Bits] -- {F2C4E6E0-EB78-4824-A212-6DF6AF0E8E82}
O42 - Logiciel: Facebook Video Calling 1.2.0.287 - (.Skype Limited.) [HKLM][64Bits] -- {B92C5909-1D37-4C51-8397-A28BB28E5DC3}
O42 - Logiciel: Fraps (remove only) - (.Pas de propri�taire.) [HKLM][64Bits] -- Fraps
O42 - Logiciel: GEONExT 1.0 - (.GEONExT Group.) [HKLM][64Bits] -- GEONExT_is1
O42 - Logiciel: GameMaker: Studio - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 214850
O42 - Logiciel: Garry's Mod - (.Team Garry.) [HKLM][64Bits] -- Steam App 4000
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google�Earth - (.Google.) [HKLM][64Bits] -- {28E82311-8616-11E1-BEB0-B8AC6F97B88E}
O42 - Logiciel: Gotham City Impostors: Free To Play - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 206210
O42 - Logiciel: HP FWUpdateEDO2 - (.Hewlett-Packard.) [HKLM][64Bits] -- {415FA9AD-DA10-4ABE-97B6-5051D4795C90}
O42 - Logiciel: HP Officejet Pro 8600 - Enqu�te sur l'am�lioration du produit - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {6603EAD5-B4B6-4EAE-A4C1-E926EE2A5084}
O42 - Logiciel: HP Officejet Pro 8600 Aide - (.Hewlett Packard.) [HKLM][64Bits] -- {B6F5C6D8-C443-4B55-932F-AE11B5743FC4}
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}
O42 - Logiciel: Hi-Rez Studios Authenticate and Update Service - (.Hi-Rez Studios.) [HKLM][64Bits] -- {3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}
O42 - Logiciel: I.R.I.S. OCR - (.HP.) [HKLM][64Bits] -- {CA6BCA2F-EDEB-408F-850B-31404BE16A61}
O42 - Logiciel: Igneous - (.DigiPen (USA) Corp..) [HKLM][64Bits] -- Igneous_is1
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: JDownloader 0.9 - (.AppWork GmbH.) [HKLM][64Bits] -- 5513-1208-7298-9440
O42 - Logiciel: Java 7 Update 13 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217013FF}
O42 - Logiciel: Java(TM) 7 Update 5 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86417005FF}
O42 - Logiciel: JavaFX 2.1.1 - (.Oracle Corporation.) [HKLM][64Bits] -- {1111706F-666A-4037-7777-211328764D10}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: King Arthur's Gold - (.THD.) [HKLM][64Bits] -- {643B056F-61C1-4489-9797-4D846D101A7A}
O42 - Logiciel: LIMBO - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 48000
O42 - Logiciel: LOLReplay - (.www.leaguereplays.com.) [HKLM][64Bits] -- LOLReplay
O42 - Logiciel: League of Legends - (.Riot Games.) [HKLM][64Bits] -- {92606477-9366-4D3B-8AE3-6BE4B29727AB}
O42 - Logiciel: Left 4 Dead 2 - (.Valve.) [HKLM][64Bits] -- Steam App 550
O42 - Logiciel: Livestream Procaster - (.Procaster.) [HKLM][64Bits] -- {2515EAA9-AE9F-4F0A-8301-B40034838B8A}
O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM][64Bits] -- LogMeIn Hamachi
O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM][64Bits] -- {106B4413-ACBB-4CDE-8707-587DB9BD77EC}
O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propri�taire.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Logiciel de base du p�riph�rique HP Officejet Pro 8600 - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {71376510-6CE4-410E-8EB8-515071FA0E16}
O42 - Logiciel: LudoColl - (.FdSoft.) [HKLM][64Bits] -- LUDOCOLL
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2721691) - (.Microsoft Corporation.) [HKLM][64Bits] -- {355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2758694) - (.Microsoft Corporation.) [HKLM][64Bits] -- {1D95BA90-F4F8-47EC-A882-441C99D30C1E}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB973685) - (.Microsoft Corporation.) [HKLM][64Bits] -- {859DFA95-E4A6-48CD-B88E-A3E483E89B44}
O42 - Logiciel: Magicka - (.Arrowhead Game Studios AB.) [HKLM][64Bits] -- Steam App 42910
O42 - Logiciel: MagniPic - (.Pas de propri�taire.) [HKLM][64Bits] -- {88D5B027-09D6-4856-AABD-41F4533692D1}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.70.0.1100 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Mamba Firmware Updater 1.13 - (.Razer USA Ltd..) [HKLM][64Bits] -- {6C6ED584-9F75-4235-8718-1F35B59814E8}
O42 - Logiciel: ManiaPlanet - (.Nadeo.) [HKLM][64Bits] -- ManiaPlanet_is1
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: Metro 2033 - (.THQ.) [HKLM][64Bits] -- Steam App 43110
O42 - Logiciel: Microsoft Access MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0015-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Access Setup Metadata MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0117-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}
O42 - Logiciel: Microsoft DCF MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0090-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Excel MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0016-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Flight Simulator X - (.Microsoft Game Studios.) [HKLM][64Bits] -- InstallShield_{F535B2CF-C9BB-4162-B03A-02D6971F32CC}
O42 - Logiciel: Microsoft Games for Windows - LIVE - (.Microsoft Corporation.) [HKLM][64Bits] -- {F97E3841-CA9D-4964-9D64-26066241D26F}
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}
O42 - Logiciel: Microsoft Groove MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00BA-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft InfoPath MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0044-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Lync MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-012B-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft OneNote MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00A1-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Outlook MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001A-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft PowerPoint MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0018-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Publisher MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0019-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {C78D3032-9DFD-41D0-9DE9-58EAE750CBA4}
O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {DC911ADF-7B60-40F2-A112-FB1EB6402D07}
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Word MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001B-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft XNA Framework Redistributable 3.1 - (.Microsoft Corporation.) [HKLM][64Bits] -- {19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}
O42 - Logiciel: Microsoft XNA Framework Redistributable 4.0 - (.Microsoft Corporation.) [HKLM][64Bits] -- {2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}
O42 - Logiciel: Mirror's Edge - (.DICE.) [HKLM][64Bits] -- Steam App 17410
O42 - Logiciel: Mises � jour NVIDIA 1.7.11 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update
O42 - Logiciel: Mozilla Firefox 14.0.1 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 14.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: Mumble 1.2.3 - (.Thorvald Natvig.) [HKLM][64Bits] -- {E1019541-10A2-464F-A23E-A4F23DA65160}
O42 - Logiciel: NVIDIA 3D Vision Controller Driver - (.NVIDIA Corporation.) [HKLM][64Bits] -- NVIDIA StereoUSB Driver
O42 - Logiciel: NVIDIA Logiciel syst�me PhysX 9.12.0213 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}
O42 - Logiciel: NVIDIA Pilote audio HD : 1.3.12.0 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver
O42 - Logiciel: NVIDIA Pilote du contr�leur 3D Vision 296.10 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB
O42 - Logiciel: NVIDIA Pilote graphique 296.10 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: NetSurveyor 2.0.9686.0 - (.Nuts About Nets, LLC.) [HKLM][64Bits] -- NetSurveyor_is1
O42 - Logiciel: Nexus Mod Manager - (.Black Tree Gaming.) [HKLM][64Bits] -- 6af12c54-643b-4752-87d0-8335503010de_is1
O42 - Logiciel: Nitronic Rush (2011-12-25) version 20111225.0 - (.DigiPen.) [HKLM][64Bits] -- {9B55759D-424F-4CB1-B84E-AAE83CC1D20A}_is1
O42 - Logiciel: OpenAL - (.Pas de propri�taire.) [HKLM][64Bits] -- OpenAL
O42 - Logiciel: Orcs Must Die! 2 - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 201790
O42 - Logiciel: Outlook Express Launcher 2.2 - (.Pas de propri�taire.) [HKLM][64Bits] -- OELauncher
O42 - Logiciel: PS3Eye Camera v2.0b81111 - (.AlexP.) [HKLM][64Bits] -- PS3Eye Camera
O42 - Logiciel: Pando Media Booster - (.Pando Networks Inc..) [HKLM][64Bits] -- {980A182F-E0A2-4A40-94C1-AE0C1235902E}
O42 - Logiciel: Portal - (.Valve.) [HKLM][64Bits] -- Steam App 400
O42 - Logiciel: Portal 2 - (.Valve.) [HKLM][64Bits] -- Steam App 620
O42 - Logiciel: PunkBuster Services - (.Even Balance, Inc..) [HKLM][64Bits] -- PunkBusterSvc
O42 - Logiciel: Rainmeter - (.Pas de propri�taire.) [HKLM][64Bits] -- Rainmeter
O42 - Logiciel: Ralink RT2860 Wireless LAN Card - (.Ralink.) [HKLM][64Bits] -- {8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}
O42 - Logiciel: Razer Mamba - (.Razer USA Ltd..) [HKLM][64Bits] -- {BF60B320-3AA3-4DFB-B542-BDA6D4F1A60E}
O42 - Logiciel: Razer Synapse 2.0 - (.Razer USA Ltd..) [HKLM][64Bits] -- {0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}
O42 - Logiciel: Realm of the Mad God - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 200210
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek Ethernet Diagnostic Utility - (.Realtek.) [HKLM][64Bits] -- {7236672F-6430-439E-9B27-27EDEAF1D676}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: RocketDock 1.3.5 - (.Punk Software.) [HKLM][64Bits] -- RocketDock_is1
O42 - Logiciel: RomStation - (.RomStation.) [HKLM][64Bits] -- {223B62A8-F6FF-4BEB-BC17-230D12723CD0}_is1
O42 - Logiciel: Saints Row: The Third - (.Volition.) [HKLM][64Bits] -- Steam App 55230
O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM][64Bits] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}
O42 - Logiciel: Skype� 6.1 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
O42 - Logiciel: Smite - (.Hi-Rez Studios.) [HKLM][64Bits] -- {3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}
O42 - Logiciel: Sonic Generations - (.Sega.) [HKLM][64Bits] -- Steam App 71340
O42 - Logiciel: Source Filmmaker - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 1840
O42 - Logiciel: Spiral Knights - (.SEGA.) [HKLM][64Bits] -- Steam App 99900
O42 - Logiciel: StarCraft II - (.Blizzard Entertainment.) [HKLM][64Bits] -- StarCraft II
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3}
O42 - Logiciel: Super Crate Box - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 212800
O42 - Logiciel: Super Meat Boy - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 40800
O42 - Logiciel: System Requirements Lab CYRI - (.Husdawg, LLC.) [HKLM][64Bits] -- {943A8D28-80D6-41DC-AE94-81FEB42041BF}
O42 - Logiciel: Team Fortress 2 - (.Valve.) [HKLM][64Bits] -- Steam App 440
O42 - Logiciel: TeamSpeak 3 Client - (.TeamSpeak Systems GmbH.) [HKCU][64Bits] -- TeamSpeak 3 Client
O42 - Logiciel: TeamViewer 7 - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer 7
O42 - Logiciel: The Binding of Isaac - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 113200
O42 - Logiciel: The Elder Scrolls V: Skyrim - (.Bethesda Game Studios.) [HKLM][64Bits] -- Steam App 72850
O42 - Logiciel: Toki Tori - (.Two Tribes.) [HKLM][64Bits] -- Steam App 38700
O42 - Logiciel: Tribes: Ascend - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 17080
O42 - Logiciel: Trine 2 - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 35720
O42 - Logiciel: VLC media player 1.0.5 - (.VideoLAN Team.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: VirginMega.Fr Premium - (.VirginMega.Fr.) [HKLM][64Bits] -- {EE467474-04A8-48D5-8DDF-0F8D3A3CCBE5}
O42 - Logiciel: Vuze - (.Azureus Software, Inc..) [HKLM][64Bits] -- 8461-7759-5462-8226
O42 - Logiciel: Vuze Remote Toolbar - (.Vuze Remote.) [HKLM][64Bits] -- Vuze_Remote Toolbar
O42 - Logiciel: Waveform - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 204180
O42 - Logiciel: Waves - (.Pas de propri�taire.) [HKLM][64Bits] -- Steam App 107600
O42 - Logiciel: XSplit - (.SplitMediaLabs.) [HKLM][64Bits] -- {24570B2F-3937-47F0-A16A-E82B480A7699}
O42 - Logiciel: aerosoft's - AES-Base&&AirportPack - FS2004 - (.Pas de propri�taire.) [HKLM][64Bits] -- {20A96613-3802-436C-842E-653C62FABA0D}
O42 - Logiciel: aerosoft's - Mega Airport London Heathrow X - (.aerosoft.) [HKLM][64Bits] -- {2F4AF40B-433A-494E-BB41-816D113F32BA}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {0E5D76AD-A3FB-48D5-8400-8903B10317D3}
O42 - Logiciel: osu! - (.peppy.) [HKLM][64Bits] -- {C3592426-531E-4110-911D-BFECE2CE284C}
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\4A-Games]
[HKCU\Software\ASProtect]
[HKCU\Software\ASUS]
[HKCU\Software\ATI]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\RealNetworks]
[HKCU\Software\AppDataLow\SProtector]
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\PriceGong]
[HKCU\Software\AppDataLow\Software\SmartBar]
[HKCU\Software\AppDataLow\Software\Vuze_Remote]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Azureus]
[HKCU\Software\BabylonToolbar]
[HKCU\Software\BitTorrent]
[HKCU\Software\Blizzard Entertainment]
[HKCU\Software\Bugsplat]
[HKCU\Software\CL-EyeTest]
[HKCU\Software\CarbonGames]
[HKCU\Software\ClassesB]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Conduit]
[HKCU\Software\Cryptic]
[HKCU\Software\DT Soft]
[HKCU\Software\DigiPen]
[HKCU\Software\ECAREME]
[HKCU\Software\Electronic Arts]
[HKCU\Software\Emulators]
[HKCU\Software\Enterbrain]
[HKCU\Software\Epic Games]
[HKCU\Software\Eye-Fi]
[HKCU\Software\Facebook]
[HKCU\Software\FdSoft]
[HKCU\Software\Fraps3]
[HKCU\Software\GEONExT Group]
[HKCU\Software\GMStudio_Steam]
[HKCU\Software\GNU]
[HKCU\Software\Game Maker]
[HKCU\Software\Google]
[HKCU\Software\Gravity]
[HKCU\Software\HP]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\HmelyoffLabs]
[HKCU\Software\IGA]
[HKCU\Software\IM Providers]
[HKCU\Software\INCAInternet]
[HKCU\Software\JaboSoft]
[HKCU\Software\JavaSoft]
[HKCU\Software\JvJ]
[HKCU\Software\KAG]
[HKCU\Software\LOLReplay]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\LogMeIn]
[HKCU\Software\Macromedia]
[HKCU\Software\Magical Jelly Bean Software]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Mumble]
[HKCU\Software\N64 Emulation]
[HKCU\Software\NAPALM]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\OGPlanet]
[HKCU\Software\OLab]
[HKCU\Software\PC SOFT]
[HKCU\Software\PS3EyeCamera]
[HKCU\Software\Pando Networks]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\PrivitizeVPNInstallDates]
[HKCU\Software\Raptr]
[HKCU\Software\Razer]
[HKCU\Software\RealNetworks]
[HKCU\Software\Realtek]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\Riot Games]
[HKCU\Software\RockHippo]
[HKCU\Software\RocketDock]
[HKCU\Software\SP2ClientUS]
[HKCU\Software\SkypeRS]
[HKCU\Software\Skype]
[HKCU\Software\Softonic]
[HKCU\Software\SolidWorks]
[HKCU\Software\SplitMediaLabs]
[HKCU\Software\StartSearch]
[HKCU\Software\SweetIM]
[HKCU\Software\System Requirements Lab]
[HKCU\Software\TeamViewer]
[HKCU\Software\Terraria]
[HKCU\Software\Trolltech]
[HKCU\Software\Two Tribes]
[HKCU\Software\Valve]
[HKCU\Software\VirginMega]
[HKCU\Software\Volition]
[HKCU\Software\WBGames]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\ej-technologies]
[HKCU\Software\gPotato]
[HKCU\Software\osu!]
[HKCU\Software\perforce]
[HKCU\Software\redsn0w]
[HKLM\Software\8169Diag]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\CBSTEST]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CoreSecurity]
[HKLM\Software\DTS]
[HKLM\Software\Dolby]
[HKLM\Software\ECAREME]
[HKLM\Software\GEAR Software]
[HKLM\Software\HP]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\IM Providers]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Khronos]
[HKLM\Software\LogMeIn, Inc.]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Razer]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\SonicFocus]
[HKLM\Software\Sonic]
[HKLM\Software\Waves Audio]
[HKLM\Software\WinRAR]
[HKLM\Software\Windows]
[HKLM\Software\Wow6432Node\8169Diag]
[HKLM\Software\Wow6432Node\AGEIA Technologies]
[HKLM\Software\Wow6432Node\ASUS]
[HKLM\Software\Wow6432Node\Activision]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AppDataLow]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\Azureus]
[HKLM\Software\Wow6432Node\Babylon]
[HKLM\Software\Wow6432Node\Bethesda Softworks]
[HKLM\Software\Wow6432Node\Bunndle]
[HKLM\Software\Wow6432Node\CDDB]
[HKLM\Software\Wow6432Node\Caphyon]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Conduit]
[HKLM\Software\Wow6432Node\DT Soft]
[HKLM\Software\Wow6432Node\DigiPen]
[HKLM\Software\Wow6432Node\EA Games]
[HKLM\Software\Wow6432Node\ECAREME]
[HKLM\Software\Wow6432Node\Enterbrain]
[HKLM\Software\Wow6432Node\Even Balance]
[HKLM\Software\Wow6432Node\Eye-Fi]
[HKLM\Software\Wow6432Node\Fraps2]
[HKLM\Software\Wow6432Node\GEONExT Group]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\Gravity Soft]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HKLM\Software\Wow6432Node\Hi-Rez Studios]
[HKLM\Software\Wow6432Node\HiRez Studios]
[HKLM\Software\Wow6432Node\Hyperionics]
[HKLM\Software\Wow6432Node\IM Providers]
[HKLM\Software\Wow6432Node\IObit]
[HKLM\Software\Wow6432Node\InstallShield]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\NVIDIA Corporation]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Oracle]
[HKLM\Software\Wow6432Node\Pando Networks]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Ralink]
[HKLM\Software\Wow6432Node\Razer]
[HKLM\Software\Wow6432Node\RealNetworks]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Riot Games]
[HKLM\Software\Wow6432Node\RockHippo]
[HKLM\Software\Wow6432Node\SP Global]
[HKLM\Software\Wow6432Node\SProtector]
[HKLM\Software\Wow6432Node\Sega]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\SolidWorks]
[HKLM\Software\Wow6432Node\SplitMediaLabs]
[HKLM\Software\Wow6432Node\SquareEnix]
[HKLM\Software\Wow6432Node\SweetIM]
[HKLM\Software\Wow6432Node\SwingSwingSubmarine]
[HKLM\Software\Wow6432Node\Symantec]
[HKLM\Software\Wow6432Node\TeamMeat]
[HKLM\Software\Wow6432Node\TeamViewer]
[HKLM\Software\Wow6432Node\Trolltech]
[HKLM\Software\Wow6432Node\Valve]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\VirginMega]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\Vuze_Remote]
[HKLM\Software\Wow6432Node\WBGames]
[HKLM\Software\Wow6432Node\Windows]
[HKLM\Software\Wow6432Node\Wow6432Node]
[HKLM\Software\Wow6432Node\Xing Technology Corp.]
[HKLM\Software\Wow6432Node\Xvid Team]
[HKLM\Software\Wow6432Node\aerosoft]
[HKLM\Software\Wow6432Node\ej-technologies]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 07/01/2013 - 19:58:42 - [455,964] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 10/07/2012 - 12:00:51 - [5,227] ----D C:\Program Files (x86)\AlexP
O43 - CFD: 13/01/2012 - 07:28:21 - [2,316] ----D C:\Program Files (x86)\Apple Software Update
O43 - CFD: 30/08/2011 - 21:11:34 - [2,219] ----D C:\Program Files (x86)\ASM104xUSB3
O43 - CFD: 30/08/2011 - 21:17:10 - [173,387] ----D C:\Program Files (x86)\ASUS
O43 - CFD: 12/01/2012 - 23:27:33 - [1,725] ----D C:\Program Files (x86)\BabylonToolbar
O43 - CFD: 25/06/2012 - 06:22:41 - [0,602] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 15/08/2012 - 14:46:48 - [3,178] ----D C:\Program Files (x86)\Code Laboratories
O43 - CFD: 06/02/2013 - 21:51:17 - [616,657] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 30/01/2012 - 23:52:31 - [0,609] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 30/01/2012 - 17:44:48 - [24,765] ----D C:\Program Files (x86)\DAEMON Tools Lite
O43 - CFD: 23/04/2012 - 15:30:10 - [439,933] ----D C:\Program Files (x86)\Google
O43 - CFD: 30/06/2012 - 11:27:56 - [4,055] ----D C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 07/07/2012 - 22:29:41 - [77,295] ----D C:\Program Files (x86)\HP
O43 - CFD: 18/11/2012 - 20:17:29 - [118,225] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 30/08/2011 - 21:11:21 - [8,990] ----D C:\Program Files (x86)\Intel
O43 - CFD: 13/02/2013 - 15:40:28 - [5,793] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 30/01/2012 - 18:54:34 - [11,744] ----D C:\Program Files (x86)\IObit
O43 - CFD: 16/12/2012 - 13:28:09 - [152,491] ----D C:\Program Files (x86)\iTunes
O43 - CFD: 07/02/2013 - 17:31:43 - [121,961] ----D C:\Program Files (x86)\Java
O43 - CFD: 25/06/2012 - 06:06:13 - [46,989] ----D C:\Program Files (x86)\Livestream Procaster
O43 - CFD: 06/03/2012 - 16:12:31 - [3,374] ----D C:\Program Files (x86)\LudoColl
O43 - CFD: 09/02/2013 - 14:33:51 - [1,491] ----D C:\Program Files (x86)\MagniPic
O43 - CFD: 11/02/2013 - 20:14:09 - [12,170] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 12/01/2013 - 13:48:39 - [0] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 29/11/2012 - 14:13:16 - [97,831] ----D C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 30/08/2011 - 21:23:42 - [3,469] ----D C:\Program Files (x86)\Microsoft Chart Controls
O43 - CFD: 08/02/2012 - 20:58:07 - [13,561] ----D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
O43 - CFD: 02/10/2012 - 02:00:24 - [1,182] ----D C:\Program Files (x86)\Microsoft Security Client
O43 - CFD: 17/06/2012 - 14:36:32 - [36,641] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 29/11/2012 - 14:14:51 - [0,029] ----D C:\Program Files (x86)\Microsoft SQL Server
O43 - CFD: 30/08/2011 - 21:29:22 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 15/02/2012 - 18:44:37 - [11,124] ----D C:\Program Files (x86)\Microsoft XNA
O43 - CFD: 29/11/2012 - 14:14:51 - [8,445] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 29/11/2012 - 14:14:14 - [37,948] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 19/07/2012 - 16:09:06 - [0,195] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 14/07/2009 - 06:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 30/08/2011 - 21:22:39 - [0,147] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 14/02/2012 - 22:01:50 - [31,006] ----D C:\Program Files (x86)\Mumble
O43 - CFD: 18/01/2013 - 19:22:34 - [24,151] ----D C:\Program Files (x86)\NutsAboutNets
O43 - CFD: 05/11/2012 - 15:09:21 - [94,814] ----D C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 28/06/2012 - 18:16:49 - [0,488] ----D C:\Program Files (x86)\OGPlanet
O43 - CFD: 11/10/2012 - 18:38:46 - [0,772] ----D C:\Program Files (x86)\OpenAL
O43 - CFD: 18/07/2012 - 22:07:20 - [33,207] ----D C:\Program Files (x86)\Oracle
O43 - CFD: 28/01/2012 - 00:20:47 - [7,233] ----D C:\Program Files (x86)\Pando Networks
O43 - CFD: 01/03/2012 - 10:57:55 - [0] ----D C:\Program Files (x86)\PlayerPlus
O43 - CFD: 24/07/2012 - 16:09:46 - [0,121] ----D C:\Program Files (x86)\Raptr
O43 - CFD: 31/12/2012 - 00:21:05 - [33,909] ----D C:\Program Files (x86)\Razer
O43 - CFD: 07/11/2012 - 16:52:16 - [0] ----D C:\Program Files (x86)\Real
O43 - CFD: 30/08/2011 - 21:13:12 - [7,458] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 06:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 24/07/2012 - 13:45:21 - [11,080] ----D C:\Program Files (x86)\RocketDock
O43 - CFD: 26/01/2013 - 14:08:38 - [49,119] R---D C:\Program Files (x86)\Skype
O43 - CFD: 26/03/2012 - 20:46:33 - [0,470] ----D C:\Program Files (x86)\SystemRequirementsLab
O43 - CFD: 10/03/2012 - 13:46:04 - [24,714] ----D C:\Program Files (x86)\TeamViewer
O43 - CFD: 30/08/2011 - 21:06:47 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 07/10/2012 - 21:40:20 - [146,315] ----D C:\Program Files (x86)\THQ
O43 - CFD: 14/07/2009 - 05:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 29/03/2012 - 22:12:53 - [74,952] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 28/01/2012 - 17:19:04 - [1,503] ----D C:\Program Files (x86)\VirginMega
O43 - CFD: 27/10/2012 - 23:04:08 - [19,522] ----D C:\Program Files (x86)\Vuze
O43 - CFD: 30/01/2012 - 23:52:30 - [4,795] ----D C:\Program Files (x86)\Vuze_Remote
O43 - CFD: 09/01/2012 - 07:55:36 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 13/02/2013 - 13:54:08 - [196,976] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 09/01/2012 - 07:55:36 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 09/01/2012 - 07:55:36 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 06:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 09/01/2012 - 07:55:36 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 21/11/2010 - 04:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 09/01/2012 - 07:55:36 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 25/06/2012 - 05:41:51 - [5,490] ----D C:\Program Files (x86)\Xvid
O43 - CFD: 16/02/2013 - 10:50:58 - [11,466] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 07/01/2013 - 20:03:18 - [40,330] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 28/02/2012 - 13:05:37 - [37,554] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 16/12/2012 - 13:27:49 - [105,340] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 06/02/2013 - 21:51:17 - [1,871] ----D C:\Program Files (x86)\Common Files\Blizzard Entertainment
O43 - CFD: 29/11/2012 - 14:15:16 - [0,013] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 04/01/2013 - 15:32:42 - [1,636] ----D C:\Program Files (x86)\Common Files\Gestionnaire d'installation SolidWorks
O43 - CFD: 15/01/2012 - 07:54:38 - [6,310] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 03/09/2012 - 13:24:00 - [1,184] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 26/01/2012 - 23:11:52 - [0] ----D C:\Program Files (x86)\Common Files\Microsoft Games
O43 - CFD: 29/11/2012 - 14:15:18 - [313,018] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 06/03/2012 - 16:11:58 - [31,282] ----D C:\Program Files (x86)\Common Files\PC SOFT
O43 - CFD: 30/08/2011 - 21:11:22 - [0,155] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 14/07/2009 - 04:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 26/01/2013 - 14:08:38 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - 04:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 16/02/2013 - 10:40:46 - [0,518] ----D C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 29/11/2012 - 14:13:38 - [10,151] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 30/08/2011 - 21:25:09 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 25/11/2012 - 13:10:41 - [26,037] ----D C:\Program Files (x86)\Common Files\Wise Installation Wizard
O43 - CFD: 16/12/2012 - 13:28:14 - [2,775] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 07/01/2013 - 19:59:03 - [15,501] ----D C:\ProgramData\Adobe
O43 - CFD: 13/01/2012 - 07:28:20 - [178,238] ----D C:\ProgramData\Apple
O43 - CFD: 28/01/2012 - 17:25:27 - [57,095] ----D C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 07/02/2013 - 17:31:59 - [0] ----D C:\ProgramData\Ask
O43 - CFD: 30/08/2011 - 21:14:01 - [12,520] ----D C:\ProgramData\ASUS
O43 - CFD: 30/08/2011 - 21:16:21 - [0,002] ----D C:\ProgramData\ASUS WebStorage
O43 - CFD: 12/01/2012 - 23:27:25 - [0] ----D C:\ProgramData\Babylon
O43 - CFD: 06/02/2013 - 21:49:19 - [106,664] ----D C:\ProgramData\Battle.net
O43 - CFD: 06/02/2013 - 21:51:17 - [141,439] ----D C:\ProgramData\Blizzard Entertainment
O43 - CFD: 09/02/2013 - 14:33:57 - [0] ----D C:\ProgramData\CLSoft LTD
O43 - CFD: 30/01/2012 - 17:44:21 - [0,001] ----D C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 28/01/2012 - 17:19:33 - [5,962] ----D C:\ProgramData\Downloaded Installations
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 28/11/2012 - 20:38:55 - [0,000] ----D C:\ProgramData\fltk.org
O43 - CFD: 03/10/2012 - 21:05:50 - [0,001] ----D C:\ProgramData\gamemaker_studio
O43 - CFD: 27/01/2013 - 10:48:09 - [15,827] ----D C:\ProgramData\Hi-Rez Studios
O43 - CFD: 30/06/2012 - 11:26:15 - [23,508] ----D C:\ProgramData\HP
O43 - CFD: 09/02/2013 - 14:33:57 - [2,173] ----D C:\ProgramData\InstallMate
O43 - CFD: 30/01/2012 - 18:54:22 - [0,012] ----D C:\ProgramData\IObit
O43 - CFD: 06/03/2012 - 16:16:07 - [0,001] ----D C:\ProgramData\LudoColl
O43 - CFD: 11/02/2013 - 20:14:09 - [6,751] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 12/02/2013 - 23:11:59 - [1221,659] ----D C:\ProgramData\ManiaPlanet
O43 - CFD: 28/08/2012 - 10:57:28 - [0] ----D C:\ProgramData\McAfee
O43 - CFD: 12/01/2013 - 13:47:47 - [657,825] -S--D C:\ProgramData\Microsoft
O43 - CFD: 16/02/2013 - 10:45:49 - [0,008] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 19/07/2012 - 16:09:06 - [0,000] ----D C:\ProgramData\Mozilla
O43 - CFD: 19/07/2012 - 13:11:27 - [5,019] ----D C:\ProgramData\Nexon
O43 - CFD: 05/11/2012 - 15:40:55 - [2,815] ----D C:\ProgramData\NVIDIA
O43 - CFD: 08/01/2012 - 03:51:13 - [2,395] ----D C:\ProgramData\NVIDIA Corporation
O43 - CFD: 16/02/2013 - 02:02:40 - [0,039] ----D C:\ProgramData\PMB Files
O43 - CFD: 09/02/2013 - 14:33:54 - [6,027] ----D C:\ProgramData\Premium
O43 - CFD: 08/01/2012 - 03:52:42 - [2,942] ----D C:\ProgramData\Ralink Driver
O43 - CFD: 31/12/2012 - 00:09:22 - [61,378] ----D C:\ProgramData\Razer
O43 - CFD: 07/11/2012 - 16:52:15 - [0,001] ----D C:\ProgramData\Real
O43 - CFD: 03/09/2012 - 13:36:10 - [0,002] ----D C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 29/11/2012 - 14:14:30 - [0,001] ----D C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 26/01/2013 - 14:08:40 - [102,042] ----D C:\ProgramData\Skype
O43 - CFD: 02/01/2013 - 13:09:22 - [8,372] ----D C:\ProgramData\SplitMediaLabs
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 26/01/2012 - 19:32:22 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 08/04/2012 - 15:42:10 - [9,731] ----D C:\ProgramData\TmForever
O43 - CFD: 26/01/2012 - 22:18:03 - [2,781] ----D C:\ProgramData\Trend Micro
O43 - CFD: 13/01/2012 - 07:28:52 - [0,002] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
O43 - CFD: 19/01/2013 - 20:07:56 - [164,642] ----D C:\Users\Jeff\AppData\Roaming\.minecraft
O43 - CFD: 07/01/2013 - 19:58:55 - [8,194] ----D C:\Users\Jeff\AppData\Roaming\Adobe
O43 - CFD: 25/03/2012 - 12:49:10 - [797,189] ----D C:\Users\Jeff\AppData\Roaming\Apple Computer
O43 - CFD: 18/01/2012 - 14:32:03 - [0] ----D C:\Users\Jeff\AppData\Roaming\ASUS WebStorage
O43 - CFD: 27/08/2012 - 12:18:35 - [0,010] ----D C:\Users\Jeff\AppData\Roaming\Awesomium
O43 - CFD: 04/02/2013 - 22:32:26 - [13,182] ----D C:\Users\Jeff\AppData\Roaming\Azureus
O43 - CFD: 12/01/2012 - 23:27:25 - [0,014] ----D C:\Users\Jeff\AppData\Roaming\Babylon
O43 - CFD: 19/11/2012 - 19:05:54 - [0] ----D C:\Users\Jeff\AppData\Roaming\Carbon
O43 - CFD: 03/09/2012 - 12:02:21 - [0,023] ----D C:\Users\Jeff\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
O43 - CFD: 28/02/2012 - 13:17:39 - [0,000] ----D C:\Users\Jeff\AppData\Roaming\com.doubleperfect.ggpo
O43 - CFD: 29/02/2012 - 11:26:27 - [0,786] ----D C:\Users\Jeff\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 18/01/2012 - 15:21:36 - [0] ----D C:\Users\Jeff\AppData\Roaming\digipen
O43 - CFD: 31/08/2012 - 21:39:58 - [22,680] ----D C:\Users\Jeff\AppData\Roaming\Downloaded Installations
O43 - CFD: 19/07/2012 - 12:13:29 - [0,000] ----D C:\Users\Jeff\AppData\Roaming\DragonicaECB
O43 - CFD: 23/12/2012 - 12:19:33 - [0,000] ----D C:\Users\Jeff\AppData\Roaming\dvdcss
O43 - CFD: 25/03/2012 - 13:09:40 - [2,080] ----D C:\Users\Jeff\AppData\Roaming\Eye-Fi
O43 - CFD: 06/03/2012 - 16:12:44 - [67,679] ----D C:\Users\Jeff\AppData\Roaming\FdSoft
O43 - CFD: 17/03/2012 - 16:44:46 - [0,000] ----D C:\Users\Jeff\AppData\Roaming\Firefly Studios
O43 - CFD: 28/11/2012 - 20:38:55 - [0,000] ----D C:\Users\Jeff\AppData\Roaming\fltk.org
O43 - CFD: 14/07/2012 - 23:09:54 - [0,012] ----D C:\Users\Jeff\AppData\Roaming\HpUpdate
O43 - CFD: 08/01/2012 - 03:57:07 - [0] ----D C:\Users\Jeff\AppData\Roaming\Identities
O43 - CFD: 08/01/2012 - 03:52:31 - [0] ----D C:\Users\Jeff\AppData\Roaming\InstallShield
O43 - CFD: 30/01/2012 - 22:37:33 - [3,503] ----D C:\Users\Jeff\AppData\Roaming\IObit
O43 - CFD: 28/01/2012 - 11:38:16 - [0,000] ----D C:\Users\Jeff\AppData\Roaming\LolClient
O43 - CFD: 25/06/2012 - 15:09:00 - [0,000] ----D C:\Users\Jeff\AppData\Roaming\LolClient2
O43 - CFD: 08/01/2012 - 04:00:22 - [0,055] ----D C:\Users\Jeff\AppData\Roaming\Macromedia
O43 - CFD: 11/02/2013 - 20:14:15 - [0,875] ----D C:\Users\Jeff\AppData\Roaming\Malwarebytes
O43 - CFD: 21/11/2010 - 08:16:41 - [0] ----D C:\Users\Jeff\AppData\Roaming\Media Center Programs
O43 - CFD: 07/02/2013 - 07:06:59 - [30,937] -S--D C:\Users\Jeff\AppData\Roaming\Microsoft
O43 - CFD: 01/11/2012 - 14:40:20 - [18,646] ----D C:\Users\Jeff\AppData\Roaming\Mozilla
O43 - CFD: 04/09/2012 - 11:52:12 - [1,110] ----D C:\Users\Jeff\AppData\Roaming\Mumble
O43 - CFD: 25/08/2012 - 15:11:07 - [3,496] ----D C:\Users\Jeff\AppData\Roaming\NVIDIA
O43 - CFD: 02/02/2012 - 17:53:41 - [12,307] ----D C:\Users\Jeff\AppData\Roaming\OpenCandy
O43 - CFD: 18/12/2012 - 15:51:31 - [0] ----D C:\Users\Jeff\AppData\Roaming\PDAppFlex
O43 - CFD: 05/11/2012 - 15:41:57 - [0,012] ----D C:\Users\Jeff\AppData\Roaming\Rainmeter
O43 - CFD: 07/11/2012 - 16:52:14 - [0] ----D C:\Users\Jeff\AppData\Roaming\Real
O43 - CFD: 08/02/2012 - 13:07:37 - [27,300] ----D C:\Users\Jeff\AppData\Roaming\redsn0w
O43 - CFD: 24/02/2012 - 20:11:21 - [0,002] ----D C:\Users\Jeff\AppData\Roaming\RotMG.Production
O43 - CFD: 16/02/2013 - 10:50:09 - [42,471] ----D C:\Users\Jeff\AppData\Roaming\Skype
O43 - CFD: 04/01/2013 - 15:29:57 - [4,960] ----D C:\Users\Jeff\AppData\Roaming\SolidWorks
O43 - CFD: 02/01/2013 - 13:08:17 - [0,814] ----D C:\Users\Jeff\AppData\Roaming\SplitMediaLabs
O43 - CFD: 25/03/2012 - 12:49:10 - [0,098] ----D C:\Users\Jeff\AppData\Roaming\Titanium
O43 - CFD: 13/02/2013 - 22:48:31 - [0,006] ----D C:\Users\Jeff\AppData\Roaming\Trine2
O43 - CFD: 12/02/2013 - 20:33:36 - [1,523] ----D C:\Users\Jeff\AppData\Roaming\TS3Client
O43 - CFD: 01/11/2012 - 14:40:20 - [0] ----D C:\Users\Jeff\AppData\Roaming\TuneUpMedia
O43 - CFD: 12/02/2013 - 08:51:00 - [1,576] ----D C:\Users\Jeff\AppData\Roaming\uTorrent
O43 - CFD: 06/01/2013 - 15:49:38 - [0,457] ----D C:\Users\Jeff\AppData\Roaming\vlc
O43 - CFD: 02/12/2012 - 12:48:22 - [0] ----D C:\Users\Jeff\AppData\Roaming\Waveform
O43 - CFD: 26/01/2012 - 20:34:45 - [0,000] ----D C:\Users\Jeff\AppData\Roaming\WinRAR
O43 - CFD: 08/02/2012 - 22:03:26 - [0,051] ----D C:\Users\Jeff\AppData\Local\.inapptracking
O43 - CFD: 11/12/2012 - 23:29:26 - [0,003] ----D C:\Users\Jeff\AppData\Local\4A Games
O43 - CFD: 07/01/2013 - 19:21:22 - [28,034] ----D C:\Users\Jeff\AppData\Local\Adobe
O43 - CFD: 02/02/2012 - 17:25:54 - [0,177] ----D C:\Users\Jeff\AppData\Local\APN
O43 - CFD: 13/01/2012 - 07:28:22 - [28,289] ----D C:\Users\Jeff\AppData\Local\Apple
O43 - CFD: 25/03/2012 - 12:49:10 - [66,051] ----D C:\Users\Jeff\AppData\Local\Apple Computer
O43 - CFD: 08/01/2012 - 03:50:56 - [0] ----D C:\Users\Jeff\AppData\Local\Application Data
O43 - CFD: 18/01/2012 - 14:37:11 - [1,226] ----D C:\Users\Jeff\AppData\Local\Apps
O43 - CFD: 12/01/2012 - 23:27:25 - [3,744] ----D C:\Users\Jeff\AppData\Local\Babylon
O43 - CFD: 03/02/2012 - 20:27:54 - [0,037] ----D C:\Users\Jeff\AppData\Local\Black_Tree_Gaming
O43 - CFD: 02/02/2012 - 12:26:10 - [0,006] ----D C:\Users\Jeff\AppData\Local\BrightBreezeSA
O43 - CFD: 28/06/2012 - 13:42:24 - [0] ----D C:\Users\Jeff\AppData\Local\Chromium
O43 - CFD: 30/01/2012 - 23:52:30 - [0,063] ----D C:\Users\Jeff\AppData\Local\Conduit
O43 - CFD: 13/03/2012 - 22:03:34 - [0] ----D C:\Users\Jeff\AppData\Local\CrashRpt
O43 - CFD: 07/10/2012 - 22:01:10 - [0,001] ----D C:\Users\Jeff\AppData\Local\Darksiders
O43 - CFD: 02/11/2012 - 13:24:46 - [0,001] ----D C:\Users\Jeff\AppData\Local\Darksiders2
O43 - CFD: 18/01/2012 - 14:37:18 - [0] ----D C:\Users\Jeff\AppData\Local\Deployment
O43 - CFD: 25/01/2013 - 19:17:59 - [1,665] ----D C:\Users\Jeff\AppData\Local\Diagnostics
O43 - CFD: 18/01/2012 - 15:21:36 - [13,109] ----D C:\Users\Jeff\AppData\Local\digipen
O43 - CFD: 28/03/2012 - 21:04:02 - [0,026] ----D C:\Users\Jeff\AppData\Local\Downloader
O43 - CFD: 11/02/2013 - 19:48:56 - [0,717] ----D C:\Users\Jeff\AppData\Local\ElevatedDiagnostics
O43 - CFD: 16/02/2013 - 10:40:07 - [0,237] ----D C:\Users\Jeff\AppData\Local\Eye-Fi
O43 - CFD: 15/09/2012 - 22:48:42 - [7,386] ----D C:\Users\Jeff\AppData\Local\Facebook
O43 - CFD: 03/10/2012 - 21:05:53 - [0] ----D C:\Users\Jeff\AppData\Local\gamemaker_studio
O43 - CFD: 17/03/2012 - 16:44:49 - [0,555] ----D C:\Users\Jeff\AppData\Local\Geckofx
O43 - CFD: 04/02/2012 - 22:48:18 - [785,035] ----D C:\Users\Jeff\AppData\Local\Google
O43 - CFD: 08/01/2012 - 03:50:56 - [0] ----D C:\Users\Jeff\AppData\Local\Historique
O43 - CFD: 30/06/2012 - 11:28:44 - [0,053] ----D C:\Users\Jeff\AppData\Local\HP
O43 - CFD: 05/02/2012 - 20:42:30 - [0,001] ----D C:\Users\Jeff\AppData\Local\Linkury
O43 - CFD: 16/02/2013 - 10:40:12 - [0,020] ----D C:\Users\Jeff\AppData\Local\LogMeIn Hamachi
O43 - CFD: 19/07/2012 - 16:14:59 - [0] ----D C:\Users\Jeff\AppData\Local\Macromedia
O43 - CFD: 12/01/2013 - 13:48:39 - [1023,827] ----D C:\Users\Jeff\AppData\Local\Microsoft
O43 - CFD: 29/11/2012 - 14:24:12 - [0,062] ----D C:\Users\Jeff\AppData\Local\Microsoft Help
O43 - CFD: 19/07/2012 - 16:09:10 - [51,262] ----D C:\Users\Jeff\AppData\Local\Mozilla
O43 - CFD: 26/01/2012 - 23:19:25 - [0] ----D C:\Users\Jeff\AppData\Local\Mumble
O43 - CFD: 16/02/2013 - 10:50:48 - [0,248] ----D C:\Users\Jeff\AppData\Local\PMB Files
O43 - CFD: 11/07/2012 - 15:12:32 - [0,831] ----D C:\Users\Jeff\AppData\Local\Procaster
O43 - CFD: 11/02/2013 - 20:13:58 - [0] ----D C:\Users\Jeff\AppData\Local\Programs
O43 - CFD: 16/12/2012 - 01:28:47 - [1,350] ----D C:\Users\Jeff\AppData\Local\PunkBuster
O43 - CFD: 31/12/2012 - 00:09:22 - [0,001] ----D C:\Users\Jeff\AppData\Local\Razer
O43 - CFD: 11/04/2012 - 21:59:37 - [0,000] ----D C:\Users\Jeff\AppData\Local\Skyrim
O43 - CFD: 07/02/2012 - 17:35:12 - [0] ----D C:\Users\Jeff\AppData\Local\Smartbar
O43 - CFD: 02/01/2013 - 13:10:08 - [7,607] ----D C:\Users\Jeff\AppData\Local\SplitMediaLabs
O43 - CFD: 08/12/2012 - 21:46:00 - [63,202] ----D C:\Users\Jeff\AppData\Local\TeamSpeak 3 Client
O43 - CFD: 16/02/2013 - 10:50:57 - [22,014] ----D C:\Users\Jeff\AppData\Local\Temp
O43 - CFD: 08/01/2012 - 03:50:56 - [0] ----D C:\Users\Jeff\AppData\Local\Temporary Internet Files
O43 - CFD: 30/06/2012 - 23:38:38 - [0,557] ----D C:\Users\Jeff\AppData\Local\VirtualStore
O43 - CFD: 06/03/2012 - 16:11:58 - [0,001] ----D C:\Users\Jeff\AppData\Local\WDSetup
O43 - CFD: 21/09/2012 - 10:25:06 - [0,141] ----D C:\Users\Jeff\AppData\Local\Windows Live
O43 - CFD: 15/08/2012 - 14:46:10 - [0] ----D C:\Users\Jeff\AppData\Local\Xenocode
O43 - CFD: 12/08/2012 - 13:08:39 - [0] ----D C:\Users\Jeff\AppData\Local\{057D209E-5768-4BBB-8E2D-A560E0CE8211}
O43 - CFD: 14/09/2012 - 17:54:51 - [0] ----D C:\Users\Jeff\AppData\Local\{064553DF-07F5-4392-9320-32F9292EAB1E}
O43 - CFD: 18/09/2012 - 16:41:21 - [0] ----D C:\Users\Jeff\AppData\Local\{06BF66C0-F9B5-4B0E-8CF4-DC76135B77A0}
O43 - CFD: 09/02/2012 - 17:59:28 - [0] ----D C:\Users\Jeff\AppData\Local\{0A52258D-8190-49E5-9D7A-E8D3595CFADD}
O43 - CFD: 10/07/2012 - 12:12:31 - [0] ----D C:\Users\Jeff\AppData\Local\{0E2BF24D-A018-417E-A6E2-842668A35BF4}
O43 - CFD: 04/02/2013 - 22:04:54 - [0] ----D C:\Users\Jeff\AppData\Local\{0ECF4B02-213D-4E83-B376-A97DADCB155E}
O43 - CFD: 10/03/2012 - 12:27:47 - [0] ----D C:\Users\Jeff\AppData\Local\{0F2CCEFC-58D7-4EDA-9297-A29321219590}
O43 - CFD: 18/10/2012 - 21:39:03 - [0] ----D C:\Users\Jeff\AppData\Local\{0FD5029D-6656-4881-8A26-F8065C14C592}
O43 - CFD: 22/11/2012 - 21:35:38 - [0] ----D C:\Users\Jeff\AppData\Local\{1110C68D-18D1-41D7-8250-043FF16746F0}
O43 - CFD: 01/09/2012 - 10:33:09 - [0] ----D C:\Users\Jeff\AppData\Local\{14106CD6-813C-442B-A996-91E05A6F878F}
O43 - CFD: 10/01/2013 - 18:18:07 - [0] ----D C:\Users\Jeff\AppData\Local\{14C77C07-559D-47EA-991B-24C66E2E1BF3}
O43 - CFD: 28/07/2012 - 11:43:38 - [0] ----D C:\Users\Jeff\AppData\Local\{14ED6804-CC16-48DF-80FC-F6EDA42A8FEE}
O43 - CFD: 29/02/2012 - 10:42:22 - [0] ----D C:\Users\Jeff\AppData\Local\{1758C368-45E6-41A4-B3CD-29AC1160E07D}
O43 - CFD: 18/02/2012 - 11:28:21 - [0] ----D C:\Users\Jeff\AppData\Local\{19971453-B91C-4DCC-A27E-502190B0FFF8}
O43 - CFD: 08/11/2012 - 19:27:23 - [0] ----D C:\Users\Jeff\AppData\Local\{1E23E174-1520-46D0-925E-2C1DA205721D}
O43 - CFD: 25/06/2012 - 05:27:37 - [0] ----D C:\Users\Jeff\AppData\Local\{201FA720-C288-48D1-A8D1-35783C383449}
O43 - CFD: 18/10/2012 - 16:05:46 - [0] ----D C:\Users\Jeff\AppData\Local\{21C9798D-9B9B-4F5D-96B6-F5620F61B623}
O43 - CFD: 29/11/2012 - 10:52:21 - [0] ----D C:\Users\Jeff\AppData\Local\{2302871E-526E-48DB-8E36-8CECEF2264CD}
O43 - CFD: 14/03/2012 - 16:27:02 - [0] ----D C:\Users\Jeff\AppData\Local\{2384F92F-DEC1-4120-B92C-A7DB7BFC4746}
O43 - CFD: 18/11/2012 - 17:45:49 - [0] ----D C:\Users\Jeff\AppData\Local\{24A011E1-AFED-4283-B818-2A96DB23E243}
O43 - CFD: 28/08/2012 - 10:57:02 - [0] ----D C:\Users\Jeff\AppData\Local\{250AE778-DB74-4250-9BA4-40A2E80162CF}
O43 - CFD: 05/07/2012 - 22:43:21 - [0] ----D C:\Users\Jeff\AppData\Local\{252DE2BC-3408-4B45-8293-8499849D728B}
O43 - CFD: 02/10/2012 - 16:24:26 - [0] ----D C:\Users\Jeff\AppData\Local\{2AB7C00E-B685-4B65-91DA-6D2BE4010584}
O43 - CFD: 13/11/2012 - 20:38:41 - [0] ----D C:\Users\Jeff\AppData\Local\{2CAFED39-B39B-4A15-BCC4-C6B1D79D74C3}
O43 - CFD: 02/12/2012 - 10:36:54 - [0] ----D C:\Users\Jeff\AppData\Local\{2CBC4D84-2944-4BD8-8694-98D7219D1D34}
O43 - CFD: 13/02/2012 - 10:04:53 - [0] ----D C:\Users\Jeff\AppData\Local\{2D84DB69-3057-4B2E-A12D-5AD7B8DDEBD1}
O43 - CFD: 26/03/2012 - 15:34:12 - [0] ----D C:\Users\Jeff\AppData\Local\{2FCE6195-B4DF-44FF-BB61-C9AF23434893}
O43 - CFD: 18/11/2012 - 18:07:22 - [0] ----D C:\Users\Jeff\AppData\Local\{3655BA91-C377-4A91-9916-2F4949E7313E}
O43 - CFD: 16/03/2012 - 19:11:18 - [0] ----D C:\Users\Jeff\AppData\Local\{3788A962-0E8E-444A-91AB-C271BB4D8F2E}
O43 - CFD: 09/07/2012 - 12:15:48 - [0] ----D C:\Users\Jeff\AppData\Local\{38A7FCCC-BF1E-4078-934E-5B5C77B49E10}
O43 - CFD: 29/10/2012 - 12:56:36 - [0] ----D C:\Users\Jeff\AppData\Local\{3CDCB18B-ACD3-4670-BDA1-12532D280DD1}
O43 - CFD: 22/03/2012 - 18:07:57 - [0] ----D C:\Users\Jeff\AppData\Local\{3E64FDC3-5DE9-45F8-8404-01576045D733}
O43 - CFD: 14/02/2012 - 21:00:21 - [0] ----D C:\Users\Jeff\AppData\Local\{3EED35DB-F8B7-45B0-A256-D461B9700951}
O43 - CFD: 12/07/2012 - 18:29:34 - [0] ----D C:\Users\Jeff\AppData\Local\{3FEAE808-5ABB-45B7-BDD3-C9D75F7F6898}
O43 - CFD: 18/10/2012 - 15:44:30 - [0] ----D C:\Users\Jeff\AppData\Local\{456C2DFF-9729-44CC-A81A-9F1A74D74275}
O43 - CFD: 15/04/2012 - 13:31:11 - [0] ----D C:\Users\Jeff\AppData\Local\{4DC3B0A4-DB5F-40F1-B3AC-B6AD46911B02}
O43 - CFD: 10/12/2012 - 18:26:25 - [0] ----D C:\Users\Jeff\AppData\Local\{4EDA9065-4022-4D2E-963B-2044C5EA3AE6}
O43 - CFD: 27/02/2012 - 11:48:51 - [0] ----D C:\Users\Jeff\AppData\Local\{50246D5E-BBF4-4BDF-977C-37DC604C7292}
O43 - CFD: 28/07/2012 - 11:45:31 - [0] ----D C:\Users\Jeff\AppData\Local\{53627628-5A13-400D-A6F4-1A5377FC43D8}
O43 - CFD: 26/07/2012 - 15:45:07 - [0] ----D C:\Users\Jeff\AppData\Local\{545F74DC-745E-408B-9D48-DBB0433AD27C}
O43 - CFD: 16/01/2013 - 13:03:54 - [0] ----D C:\Users\Jeff\AppData\Local\{54F4FFA5-D4E6-4A67-A0AF-D924BBE127D7}
O43 - CFD: 17/09/2012 - 16:57:23 - [0] ----D C:\Users\Jeff\AppData\Local\{58D69768-105E-4EC2-9342-1DAFD451F5F5}
O43 - CFD: 10/09/2012 - 08:27:11 - [0] ----D C:\Users\Jeff\AppData\Local\{5925916E-1187-4392-BDA8-92ADF3FB86B2}
O43 - CFD: 18/04/2012 - 11:56:51 - [0] ----D C:\Users\Jeff\AppData\Local\{59FAFF32-F6D2-4162-82AF-D821FE4A4D29}
O43 - CFD: 26/03/2012 - 15:34:02 - [0] ----D C:\Users\Jeff\AppData\Local\{5AA6F5F1-C046-4F7F-AA57-75DE06AB6060}
O43 - CFD: 23/09/2012 - 10:37:45 - [0] ----D C:\Users\Jeff\AppData\Local\{5ADA4507-F521-4E4F-8F0A-E0DD1A223A33}
O43 - CFD: 09/02/2013 - 11:04:24 - [0] ----D C:\Users\Jeff\AppData\Local\{60E87BB4-DF36-4D96-AFD6-E420BE4967BC}
O43 - CFD: 05/11/2012 - 15:41:29 - [0] ----D C:\Users\Jeff\AppData\Local\{62A854C7-CEE5-4643-B447-0DE10471A076}
O43 - CFD: 16/08/2012 - 00:16:40 - [0] ----D C:\Users\Jeff\AppData\Local\{63390797-C60E-4748-87B7-E66CEE97E3F1}
O43 - CFD: 14/07/2012 - 14:50:58 - [0] ----D C:\Users\Jeff\AppData\Local\{685CDFCD-C2F8-463F-A42A-AAFCDA222CEC}
O43 - CFD: 25/07/2012 - 12:08:28 - [0] ----D C:\Users\Jeff\AppData\Local\{689B1842-8642-48E3-91D0-0A4BA7AE995D}
O43 - CFD: 17/06/2012 - 14:37:17 - [0] ----D C:\Users\Jeff\AppData\Local\{690CAC64-5E58-4C79-A722-001616DECD49}
O43 - CFD: 19/12/2012 - 17:15:07 - [0] ----D C:\Users\Jeff\AppData\Local\{6A9537CC-83BD-4AE8-96CA-F45E93F01508}
O43 - CFD: 19/11/2012 - 17:36:36 - [0] ----D C:\Users\Jeff\AppData\Local\{6AB7C457-67FF-479D-AC6F-B7194A74431B}
O43 - CFD: 22/01/2013 - 20:07:13 - [0] ----D C:\Users\Jeff\AppData\Local\{6E2CEE06-99C6-47CC-8F36-F73BD0021FE7}
O43 - CFD: 22/01/2012 - 18:30:14 - [0] ----D C:\Users\Jeff\AppData\Local\{6F938512-ED0F-4762-8C41-6D3919002135}
O43 - CFD: 13/02/2012 - 10:05:04 - [0] ----D C:\Users\Jeff\AppData\Local\{739DE46D-38A6-4930-9471-0F2F10E22B09}
O43 - CFD: 17/02/2012 - 18:17:13 - [0] ----D C:\Users\Jeff\AppData\Local\{760D967B-781D-4B40-B273-3517FF406121}
O43 - CFD: 20/10/2012 - 15:18:13 - [0] ----D C:\Users\Jeff\AppData\Local\{77B6FADF-6959-4FA3-A3F9-234D620074D0}
O43 - CFD: 28/02/2012 - 18:48:30 - [0] ----D C:\Users\Jeff\AppData\Local\{77E74B7D-569B-4FDF-A285-5504DE1E3E4D}
O43 - CFD: 19/07/2012 - 11:20:20 - [0] ----D C:\Users\Jeff\AppData\Local\{7C2F256E-10D1-442E-A17B-6D0BA747616B}
O43 - CFD: 07/12/2012 - 19:26:43 - [0] ----D C:\Users\Jeff\AppData\Local\{7D141C0B-C64A-44F2-8F1C-C2325BAB1F24}
O43 - CFD: 19/10/2012 - 18:04:18 - [0] ----D C:\Users\Jeff\AppData\Local\{7EED2512-8890-4DAF-A2A4-C78C82108A5D}
O43 - CFD: 09/07/2012 - 12:24:48 - [0] ----D C:\Users\Jeff\AppData\Local\{7FD60725-44B2-473D-B655-5DDAF59DF1C8}
O43 - CFD: 26/02/2012 - 10:46:29 - [0] ----D C:\Users\Jeff\AppData\Local\{854C2E87-42B1-430B-BDF8-9E0A987E869E}
O43 - CFD: 16/06/2012 - 23:21:08 - [0] ----D C:\Users\Jeff\AppData\Local\{86BB6A74-F8B8-4082-96AF-28BF4F9DBD66}
O43 - CFD: 17/01/2013 - 18:54:46 - [0] ----D C:\Users\Jeff\AppData\Local\{87002D51-A5F6-4427-BF0D-54E40811829F}
O43 - CFD: 24/07/2012 - 16:45:37 - [0] ----D C:\Users\Jeff\AppData\Local\{870BC2A3-B089-4A80-B24B-FDCFA3B493B5}
O43 - CFD: 24/07/2012 - 16:45:47 - [0] ----D C:\Users\Jeff\AppData\Local\{8CD7A90B-E912-4F1D-B502-636527FE1E11}
O43 - CFD: 01/12/2012 - 12:50:04 - [0] ----D C:\Users\Jeff\AppData\Local\{8D1B5752-2216-496B-B6F9-7689FA4049B9}
O43 - CFD: 16/08/2012 - 00:16:25 - [0] ----D C:\Users\Jeff\AppData\Local\{8DFCBC64-79C7-49D4-9E5B-F41144F09670}
O43 - CFD: 30/09/2012 - 12:35:25 - [0] ----D C:\Users\Jeff\AppData\Local\{8FBF3813-535C-4471-BA63-C2398A8530ED}
O43 - CFD: 23/04/2012 - 11:19:41 - [0] ----D C:\Users\Jeff\AppData\Local\{97C1A8CD-DDC6-4C6E-8634-80F57A140214}
O43 - CFD: 26/01/2012 - 14:44:47 - [0] ----D C:\Users\Jeff\AppData\Local\{97F1767B-0ABD-44FF-A507-FA851E9A77DB}
O43 - CFD: 17/01/2013 - 18:44:12 - [0] ----D C:\Users\Jeff\AppData\Local\{987F07FF-C7B2-4FE5-B170-3C8F5B2CA081}
O43 - CFD: 18/06/2012 - 07:16:58 - [0] ----D C:\Users\Jeff\AppData\Local\{9A62713E-38AB-49F8-B672-252D82C0F7EE}
O43 - CFD: 06/12/2012 - 18:21:42 - [0] ----D C:\Users\Jeff\AppData\Local\{9AF0EDC5-23B3-4C01-9BC8-EF50B1A030AE}
O43 - CFD: 12/08/2012 - 13:08:50 - [0] ----D C:\Users\Jeff\AppData\Local\{9C25198D-1D9B-4D4B-BD15-186E22A787B8}
O43 - CFD: 02/02/2012 - 21:14:14 - [0] ----D C:\Users\Jeff\AppData\Local\{9CE65B46-0449-4A08-8203-EFF3F5603C74}
O43 - CFD: 07/12/2012 - 19:03:58 - [0] ----D C:\Users\Jeff\AppData\Local\{9D6B5D58-C3A8-4510-B7A3-74F3F82F429F}
O43 - CFD: 31/12/2012 - 00:43:28 - [0] ----D C:\Users\Jeff\AppData\Local\{A1048482-B604-4121-8DD2-B93DF0107FD9}
O43 - CFD: 02/01/2013 - 11:43:05 - [0] ----D C:\Users\Jeff\AppData\Local\{A4FCF250-1A2B-4AC4-A0B5-4578768593DC}
O43 - CFD: 25/07/2012 - 12:08:17 - [0] ----D C:\Users\Jeff\AppData\Local\{A621B135-A6FD-4048-BDD0-7E03ECFF7792}
O43 - CFD: 30/12/2012 - 23:18:42 - [0] ----D C:\Users\Jeff\AppData\Local\{A78B2798-5BB7-417A-A552-6439E8F40F7E}
O43 - CFD: 29/06/2012 - 21:10:34 - [0] ----D C:\Users\Jeff\AppData\Local\{A7E87676-E9BD-4751-BA80-95E6DAA6B699}
O43 - CFD: 07/02/2012 - 13:53:24 - [0] ----D C:\Users\Jeff\AppData\Local\{A83F33D3-C536-45CE-A250-17EFC2FE5950}
O43 - CFD: 25/01/2013 - 19:11:11 - [0] ----D C:\Users\Jeff\AppData\Local\{ABC9DE58-00DD-4568-A979-E39B791EDC63}
O43 - CFD: 26/01/2013 - 11:06:52 - [0] ----D C:\Users\Jeff\AppData\Local\{AC20DBBB-01BA-4CA6-982B-524FBAEE7ED9}
O43 - CFD: 03/10/2012 - 17:58:26 - [0] ----D C:\Users\Jeff\AppData\Local\{AC9A58E3-20BE-455B-AE24-4CE65FDABA74}
O43 - CFD: 07/04/2012 - 08:45:43 - [0] ----D C:\Users\Jeff\AppData\Local\{ACBA65BA-3110-4034-B3DF-D5D4A0BCAB4A}
O43 - CFD: 16/12/2012 - 12:01:15 - [0] ----D C:\Users\Jeff\AppData\Local\{B03B6D34-C27F-4833-A249-16EBC7ED2758}
O43 - CFD: 02/02/2012 - 12:12:58 - [0] ----D C:\Users\Jeff\AppData\Local\{B43FDA9C-26FD-4B36-8044-1E7F4E5F9F75}
O43 - CFD: 04/02/2012 - 12:24:39 - [0] ----D C:\Users\Jeff\AppData\Local\{B6E94C7E-F109-4F1F-8265-8AAB2DA6B628}
O43 - CFD: 01/02/2012 - 10:25:08 - [0] ----D C:\Users\Jeff\AppData\Local\{B76C8CA4-34A8-4CCD-90C6-9887AFBF1196}
O43 - CFD: 13/02/2013 - 13:50:16 - [0] ----D C:\Users\Jeff\AppData\Local\{B8589E93-70CF-410D-B4EC-1CAF5B5EDFF1}
O43 - CFD: 29/06/2012 - 21:10:23 - [0] ----D C:\Users\Jeff\AppData\Local\{B88C9E77-BD78-482D-BF0D-69932D2BDC3C}
O43 - CFD: 05/02/2012 - 11:29:30 - [0] ----D C:\Users\Jeff\AppData\Local\{B8DA08C5-3E10-43B4-8C46-1C63421BF583}
O43 - CFD: 05/07/2012 - 22:04:28 - [0] ----D C:\Users\Jeff\AppData\Local\{BA13B630-B029-4C69-95C4-957888C1B7F0}
O43 - CFD: 09/01/2013 - 17:14:41 - [0] ----D C:\Users\Jeff\AppData\Local\{BA1AA2B9-655B-4691-9142-9D913CC92547}
O43 - CFD: 19/07/2012 - 11:20:31 - [0] ----D C:\Users\Jeff\AppData\Local\{BB4946FE-4354-4495-B664-1E6D62C5C64B}
O43 - CFD: 08/11/2012 - 21:57:34 - [0] ----D C:\Users\Jeff\AppData\Local\{BC339505-AB8E-4392-B480-96EFE82ED0A1}
O43 - CFD: 11/02/2013 - 22:28:23 - [0] ----D C:\Users\Jeff\AppData\Local\{BCA70674-21E8-4603-868E-4D1E0B3165A1}
O43 - CFD: 20/02/2012 - 17:03:12 - [0] ----D C:\Users\Jeff\AppData\Local\{BEFD0FD2-9457-4E2D-A6FA-EF1D8925D0A4}
O43 - CFD: 01/01/2013 - 23:20:33 - [0] ----D C:\Users\Jeff\AppData\Local\{BF09B626-94D1-4A55-AE29-561BA1B8C912}
O43 - CFD: 19/06/2012 - 20:08:05 - [0] ----D C:\Users\Jeff\AppData\Local\{C033653C-520E-4F64-AF84-165D8A5CAA44}
O43 - CFD: 10/10/2012 - 19:37:10 - [0] ----D C:\Users\Jeff\AppData\Local\{C3095FAA-C775-4508-B912-62488CC82FD9}
O43 - CFD: 07/02/2012 - 13:53:35 - [0] ----D C:\Users\Jeff\AppData\Local\{C3ACB6C0-22C7-4156-A4BF-733C02852FB9}
O43 - CFD: 22/11/2012 - 21:27:35 - [0] ----D C:\Users\Jeff\AppData\Local\{C651C138-BB0E-4EAC-8B44-EB551F318354}
O43 - CFD: 09/07/2012 - 12:15:48 - [0] ----D C:\Users\Jeff\AppData\Local\{C6533451-BC23-4B94-BF0B-CF364A1DAA71}
O43 - CFD: 07/10/2012 - 11:15:34 - [0] ----D C:\Users\Jeff\AppData\Local\{C7341D0E-DE24-4F45-8172-C78E4543DFEE}
O43 - CFD: 20/12/2012 - 10:30:12 - [0] ----D C:\Users\Jeff\AppData\Local\{CACE8875-43BC-4634-AED6-EBAC17F231F8}
O43 - CFD: 04/02/2012 - 12:24:27 - [0] ----D C:\Users\Jeff\AppData\Local\{CC6986D9-A1FB-4870-A264-EE0394FFA080}
O43 - CFD: 14/07/2012 - 14:51:09 - [0] ----D C:\Users\Jeff\AppData\Local\{CD37D2C0-DBE7-4E24-8E7B-6A8EBC0B047A}
O43 - CFD: 05/07/2012 - 22:43:10 - [0] ----D C:\Users\Jeff\AppData\Local\{CDDA6ABF-E591-4916-9E54-4B749239EB43}
O43 - CFD: 12/07/2012 - 18:29:45 - [0] ----D C:\Users\Jeff\AppData\Local\{CE77238F-D0CC-4189-9850-AA989D814F03}
O43 - CFD: 09/07/2012 - 12:24:59 - [0] ----D C:\Users\Jeff\AppData\Local\{CF8FB5A4-79A0-413F-903D-B8C5F56B6F1E}
O43 - CFD: 19/10/2012 - 17:56:53 - [0] ----D C:\Users\Jeff\AppData\Local\{CFB4DB7E-489E-41CC-8C9E-3A69511BE4FB}
O43 - CFD: 01/02/2012 - 10:24:39 - [0] ----D C:\Users\Jeff\AppData\Local\{D2E627B4-DDF1-43C5-AAEB-E2F0751BF49D}
O43 - CFD: 01/02/2012 - 10:24:55 - [0] ----D C:\Users\Jeff\AppData\Local\{D6209AC9-9FEC-408D-9284-5EB5B7A2C1BF}
O43 - CFD: 22/09/2012 - 20:05:47 - [0] ----D C:\Users\Jeff\AppData\Local\{D6C1D4BE-EFDB-43EC-ACE1-67A5CCE55DDA}
O43 - CFD: 07/12/2012 - 21:37:18 - [0] ----D C:\Users\Jeff\AppData\Local\{D9151A1D-A825-406A-A863-D781AA2A1AE4}
O43 - CFD: 16/03/2012 - 19:11:07 - [0] ----D C:\Users\Jeff\AppData\Local\{D9812235-E8CE-47A0-B5FD-FBC61E334691}
O43 - CFD: 03/08/2012 - 23:52:28 - [0] ----D C:\Users\Jeff\AppData\Local\{D9EFF42B-6826-4911-BD1C-6D0DD3532885}
O43 - CFD: 29/06/2012 - 11:51:50 - [0] ----D C:\Users\Jeff\AppData\Local\{DB36D16E-22F7-4075-AB29-D49AB63B7CAA}
O43 - CFD: 10/03/2012 - 12:27:57 - [0] ----D C:\Users\Jeff\AppData\Local\{DD74B8E3-2CEE-4503-8CBA-395A91191367}
O43 - CFD: 08/02/2012 - 12:45:31 - [0] ----D C:\Users\Jeff\AppData\Local\{DE9F39CE-BA84-4A8A-9946-D39C1DA95197}
O43 - CFD: 14/02/2012 - 21:00:32 - [0] ----D C:\Users\Jeff\AppData\Local\{DFD0A37A-4D79-476C-A8E0-3F4E8E781E66}
O43 - CFD: 02/02/2012 - 21:14:03 - [0] ----D C:\Users\Jeff\AppData\Local\{E059BD2C-0ECC-4761-8DD4-BE8DE4A28438}
O43 - CFD: 18/12/2012 - 14:57:05 - [0] ----D C:\Users\Jeff\AppData\Local\{E08CBD07-4085-4BA4-AB5B-5D6A8D2FE049}
O43 - CFD: 24/01/2013 - 20:00:53 - [0] ----D C:\Users\Jeff\AppData\Local\{E284E2C4-894F-4384-9D0B-BBAB101202E1}
O43 - CFD: 13/08/2012 - 12:27:46 - [0] ----D C:\Users\Jeff\AppData\Local\{E3308D50-5030-4146-98A8-85C0C4B0C3A0}
O43 - CFD: 23/07/2012 - 16:16:01 - [0] ----D C:\Users\Jeff\AppData\Local\{E840813C-8269-4849-8B39-60900B9BB7A5}
O43 - CFD: 11/11/2012 - 10:46:27 - [0] ----D C:\Users\Jeff\AppData\Local\{E8F35E67-65D0-45EF-8ECB-2229A3A7B33C}
O43 - CFD: 09/02/2012 - 17:59:17 - [0] ----D C:\Users\Jeff\AppData\Local\{EBB83B96-4B51-433C-B362-79C178FE0EC7}
O43 - CFD: 13/09/2012 - 17:09:24 - [0] ----D C:\Users\Jeff\AppData\Local\{EC07567F-2C84-47BA-A019-E64A0B367BA9}
O43 - CFD: 24/08/2012 - 12:26:13 - [0] ----D C:\Users\Jeff\AppData\Local\{ECB9E08E-7DAE-4D53-BEAE-D47BBB1814E5}
O43 - CFD: 30/01/2013 - 14:02:20 - [0] ----D C:\Users\Jeff\AppData\Local\{EF192B29-5A76-40A5-AF85-028FFB624480}
O43 - CFD: 28/07/2012 - 11:45:31 - [0] ----D C:\Users\Jeff\AppData\Local\{EFBA6352-42D9-4025-A153-53B50C3DAE63}
O43 - CFD: 27/02/2012 - 11:48:40 - [0] ----D C:\Users\Jeff\AppData\Local\{F1441E20-80EA-4FBF-8842-33975ECBCA7B}
O43 - CFD: 15/01/2013 - 19:01:37 - [0] ----D C:\Users\Jeff\AppData\Local\{F252A4C8-61E8-49CD-896A-BE70DDC1471F}
O43 - CFD: 19/12/2012 - 16:58:49 - [0] ----D C:\Users\Jeff\AppData\Local\{F2B5C62D-9BDD-4E9F-AC03-5024FDD25F8F}
O43 - CFD: 05/11/2012 - 14:55:17 - [0] ----D C:\Users\Jeff\AppData\Local\{F5FDC8B8-64BC-4C79-9EEB-6936D6B2A287}
O43 - CFD: 08/02/2012 - 12:45:42 - [0] ----D C:\Users\Jeff\AppData\Local\{F715A617-EF27-41A0-AA86-C8751AA55ABB}
O43 - CFD: 18/04/2012 - 17:35:16 - [0] ----D C:\Users\Jeff\AppData\Local\{F812E7A7-8106-4232-82EA-AFB38DA4178E}
O43 - CFD: 10/11/2012 - 11:58:32 - [0] ----D C:\Users\Jeff\AppData\Local\{F877C7CC-571F-4B5E-B6BD-CEB9C1D6D3D2}
O43 - CFD: 29/06/2012 - 11:55:41 - [0] ----D C:\Users\Jeff\AppData\Local\{FB5BB909-7DDD-4B0A-9138-1900A0015518}
O43 - CFD: 14/12/2012 - 12:17:28 - [0] ----D C:\Users\Jeff\AppData\Local\{FDA33BFC-9709-49D1-8B49-97C21FDD0460}
O43 - CFD: 22/03/2012 - 18:07:57 - [0] ----D C:\Users\Jeff\AppData\Local\{FF885832-60B9-490A-900C-5EC52B26BBC0}
O43 - CFD: 14/07/2009 - 05:54:32 - [0,014] R---D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 12/07/2012 - 18:29:09 - [0,000] R---D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 16/12/2012 - 01:20:20 - [0,000] ----D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games
O43 - CFD: 25/03/2012 - 12:48:39 - [0,003] ----D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Eye-Fi
O43 - CFD: 12/01/2012 - 23:27:23 - [0,002] ----D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FoxTab Video Player
O43 - CFD: 13/02/2012 - 18:08:12 - [0,001] ----D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
O43 - CFD: 12/02/2013 - 23:06:18 - [0,001] ----D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 09/11/2012 - 11:52:35 - [0,007] ----D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4
O43 - CFD: 31/01/2013 - 19:22:37 - [0,007] ----D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.2
O43 - CFD: 09/11/2012 - 11:49:22 - [0,005] ----D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebraPrim
O43 - CFD: 14/07/2009 - 05:49:38 - [0,001] R---D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 21/10/2012 - 11:32:45 - [0,001] ----D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OGPlanet
O43 - CFD: 29/06/2012 - 11:56:40 - [0] ----D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook Express Launcher
O43 - CFD: 30/06/2012 - 20:41:16 - [0,000] ----D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PS3Eye Camera
O43 - CFD: 24/07/2012 - 14:55:40 - [0,004] R---D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 08/12/2012 - 21:46:00 - [0,002] ----D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
O43 - CFD: 19/02/2012 - 20:44:03 - [0] ----D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wakfu
O43 - CFD: 02/02/2012 - 23:27:13 - [0,003] ----D C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ Scan Program Folder in 00mn 04s



---\\ Derniers fichiers modifi�s ou cr�es sous Windows et System32 (O44)
O44 - LFC:[MD5.EA7FB4E1CD11DB3B8C4F10B9B33E33A8] - 16/02/2013 - 10:51:07 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1070332]
O44 - LFC:[MD5.D74E3C688AA4F552EB9F55CB8EA67170] - 16/02/2013 - 10:39:57 ---A- . (...) -- C:\Windows\setupact.log [56]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/02/2013 - 10:39:57 ---A- . (...) -- C:\Windows\setuperr.log [0]
O44 - LFC:[MD5.4B53C25216A8472422478200BA772978] - 16/02/2013 - 10:39:14 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.EBDB610F2A04E3741F63936E6E297DD9] - 16/02/2013 - 00:07:46 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1693326]
O44 - LFC:[MD5.9F248CA6FEB85D4A44DBE3C03B0161C3] - 16/02/2013 - 00:07:46 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [124834]
O44 - LFC:[MD5.2701A58DACB5BBDD10CDC4ABEA8D1E0F] - 16/02/2013 - 00:07:46 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [152538]
O44 - LFC:[MD5.09340CED31FCDBA9107B63C92BDF4099] - 16/02/2013 - 00:07:46 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [663562]
O44 - LFC:[MD5.E0F156C0133BAF6E5562F3EB853F3D86] - 16/02/2013 - 00:07:46 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [756680]
O44 - LFC:[MD5.EBDB610F2A04E3741F63936E6E297DD9] - 16/02/2013 - 00:07:46 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1693326]
O44 - LFC:[MD5.CFF37555017097A0C9B70F62052A163B] - 13/02/2013 - 15:41:25 . (...) -- C:\Windows\System32\FNTCACHE.DAT []
O44 - LFC:[MD5.CFF37555017097A0C9B70F62052A163B] - 13/02/2013 - 15:41:25 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [5078112]
O44 - LFC:[MD5.F899139DF5E1059396431415E770C6DD] - 11/02/2013 - 22:25:38 . (...) -- C:\Windows\System32\HRUPPROG.TXT []
O44 - LFC:[MD5.F899139DF5E1059396431415E770C6DD] - 11/02/2013 - 22:25:38 ---A- . (...) -- C:\Windows\SysNative\HRUPPROG.TXT [3]
~ Scan Files in 00mn 03s



---\\ D�ni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l��diteur de configuration de s�curit� Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de s�curit� Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll
~ Scan Keys in 00mn 00s



---\\ Contr�le du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s



---\\ MountPoints2 Shell Key (O51)
O51 - MPSK:{be02338b-4b55-11e1-98f3-5404a68a3517}\AutoRun\command. (...) -- F:\setup.exe (.not file.)
~ Scan Keys in 00mn 00s



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"VIDC.FPS1"="frapsv64.dll" . (.Beepa P/L - Fraps.) -- C:\Windows\System32\frapsv64.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"frapsv64.dll"="Fraps Video Decompressor" . (.Beepa P/L - Fraps.) -- C:\Windows\System32\frapsv64.dll
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53) (None)

---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Syst�me (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088]
O58 - SDL:[MD5.1E6438D4EA6E1174A3B3B1EDC4DE660B] - 30/12/1899 - 16:35:42 --HA- . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\Windows\System32\hamachi.sys [33856]
O58 - SDL:[MD5.ADAA34740E9F6AFF94CC75D5CF8ED7E2] - 04/01/2008 - 22:34:42 ---A- . (...) -- C:\Windows\SysWOW64\drivers\AsInsHelp32.sys [10216]
O58 - SDL:[MD5.9131FE60ADFAB595C8DA53AD6A06AA31] - 04/01/2005 - 01:43:08 ---A- . (.INCA Internet Co., Ltd. - nProtect NPSC Kernel Mode Driver for NT.) -- C:\Windows\SysWOW64\npptNT2.sys [4682]
~ Scan Drivers in 00mn 00s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.3.5 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ Scan ADS in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 04/01/2008 - C:\Windows\sysWow64\drivers\AsInsHelp64.sys - ASInsHelp (ASInsHelp) .(...) - LEGACY_ASINSHELP
O64 - Services: CurCS - 24/08/2010 - C:\Windows\Syswow64\drivers\AsIO.sys - AsIO (AsIO) .(...) - LEGACY_ASIO
O64 - Services: CurCS - 03/08/2010 - C:\Windows\Syswow64\drivers\AsUpIO.sys - AsUpIO (AsUpIO) .(...) - LEGACY_ASUPIO
O64 - Services: CurCS - 14/12/2012 - C:\Windows\system32\drivers\mbam.sys (MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR
O64 - Services: CurCS - 25/03/2010 - C:\Windows\System32\Drivers\NANMp50.sys (NANMp50) .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 MPR Protocol Driver (AMD64).) - LEGACY_NANMP50
O64 - Services: CurCS - 25/03/2010 - C:\Windows\System32\Drivers\NANSp50.sys (NANSp50) .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 SPR Protocol Driver (AMD64).) - LEGACY_NANSP50
O64 - Services: CurCS - 16/01/2010 - C:\Windows\System32\DRIVERS\RtNdPt60.sys (RtNdPt60) .(.Realtek - Realtek NDIS Protocol Driver.) - LEGACY_RTNDPT60
O64 - Services: CurCS - ??\??\???? - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - ??\??\???? - (X6va008) .(. - .) - LEGACY_X6VA008
~ Scan Services in 00mn 00s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: C:\Users\Jeff\AppData\Roaming\Mozilla\Firefox\Profiles\k81voj3o.default\searchplugins\askcom.xml
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.FirstTime", "true");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.FirstTimeFF3", "true");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.UserID", "UN51592531918467830");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.addressBarTakeOverEnabledInHidden", "true");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.autoDisableScopes", -1);
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.defaultSearch", "false");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.embeddedsData", "[{\"appId\":\"129079840422026594\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFra[...]
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.enableAlerts", "always");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.enableSearchFromAddressBar", "true");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.firstTimeDialogOpened", "true");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.fixPageNotFoundError", "true");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.fixPageNotFoundErrorInHidden", "true");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.fixUrls", true);
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.installId", "ConduitInstallerStub.exe");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.installType", "ConduitNSISIntegration");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.isNewTabEnabled", true);
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.isPerformedSmartBarTransition", "true");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"about%3Ablank\",\"EB_MAIN_FRAME_TIT[...]
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.openThankYouPage", "false");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.openUninstallPage", "false");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.search.searchAppId", "129079840422026594");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.search.searchCount", "0");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.searchInNewTabEnabledInHidden", "true");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2504091\"}");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"http://VuzeRemo[...]
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Vuze Remote\"}"[...]
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1352067267294");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_services_appsMetadata_lastUpdate", "1352067267190");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1352067267653");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_services_login_10.10.27.6_lastUpdate", "1352067267758");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_services_optimizer_lastUpdate", "1352067267598");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1352067267702");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_services_searchAPI_lastUpdate", "1352067267086");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_services_serviceMap_lastUpdate", "1352067266919");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_services_toolbarContextMenu_lastUpdate", "1352067267679");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_services_toolbarSettings_lastUpdate", "1352067266983");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.serviceLayer_services_translation_lastUpdate", "1352067267193");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.settingsINI", true);
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.shouldFirstTimeDialog", "false");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.smartbar.CTID", "CT2504091");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.smartbar.Uninstall", "0");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.smartbar.toolbarName", "Vuze Remote ");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.startPage", "false");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.toolbarBornServerTime", "5-11-2012");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("CT2504091.toolbarCurrentServerTime", "5-11-2012");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("aol_toolbar.default.homepage.check", false);
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("aol_toolbar.default.search.check", false);
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("extensions.BabylonToolbar.prtkDS", 0);
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("sweetim.toolbar.previous.keyword.URL", "");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
O69 - SBI: prefs.js [Jeff - k81voj3o.default] user_pref("sweetim.toolbar.searchguard.enable", "");
O69 - SBI: SearchScopes [HKCU] {006ee092-9658-4fd6-bd8e-a21a348e59f5} - (Linkury Smartbar Search) - http://cloud-search.linkury.com
O69 - SBI: SearchScopes [HKCU] {0D7562AE-8EF6-416d-A838-AB665251703A} - (Facemoods Search) - http://start.facemoods.com
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Search the web (Babylon)) - http://search.babylon.com
O69 - SBI: SearchScopes [HKCU] {471A30E7-9BA7-4894-B119-0907CBF78E8B} [DefaultScope] - (Privitize VPN) - http://searchab.com
O69 - SBI: SearchScopes [HKCU] {9FB985DE-1ACD-4FAD-9777-DD93A79A8A08} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {A892A4DA-2220-419F-9B18-822655569246} - (Yahoo! Search) - http://fr.search.yahoo.com
O69 - SBI: SearchScopes [HKCU] {C6937AAB-2FF7-426A-9F2E-1F4AB29C753F} - (Ask Search) - http://websearch.ask.com
O69 - SBI: SearchScopes [HKCU] {E0979341-3861-4F01-BEE0-219FB2B80010} - (Web Search) - http://search.conduit.com
O69 - SBI: SearchScopes [HKCU] {EEE6C360-6118-11DC-9C72-001320C79847} - (SweetIM Search) - http://search.sweetim.com
~ Scan Keys in 00mn 00s



---\\ Recherche des services d�marr�s par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Exp�rience d�application.) -- C:\Windows\System32\aelupsvc.dll [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de strat�gie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de num�rotation automatique d�acc�s distant.) -- C:\Windows\System32\rasauto.dll [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d�acc�s distant.) -- C:\Windows\System32\rasmans.dll [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d�interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d��v�nements syst�me (SENS).) -- C:\Windows\System32\sens.dll [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l�application d�assistance � Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de t�l�phonie Microsoft� Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur h�te de session Burea.) -- C:\Windows\System32\termsrv.dll [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise � jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [2428952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arri�re-plan.) -- C:\Windows\System32\qmgr.dll [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivit� IPv6 sur un r�seau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d�ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d�application.) -- C:\Windows\System32\appinfo.dll [70656]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de d�couverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multim�dias.) -- C:\Windows\System32\mmcss.dll [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau � distance.) -- C:\Windows\System32\sessenv.dll [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d�ordinateurs.) -- C:\Windows\System32\browser.dll [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de t�ches.) -- C:\Windows\System32\schedsvc.dll [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des cl�s.) -- C:\Windows\System32\kmsvc.dll [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux probl�mes.) -- C:\Windows\System32\wercplsupport.dll [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des th�mes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864]
~ Scan Services in 00mn 00s



---\\ Recherche particuliere � la racine de certains dossiers (O84)
[MD5.946FF0173C1CC02EE491F862F8493E06] [SPRF][17/02/2012] (...) -- C:\ProgramData\hash.dat [32]
~ Scan Files in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "{5298BB57-E257-410F-AB30-96AFC718BCA8}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{A43ABD64-AF31-4589-AF51-0732591893AA}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{7DA16AE4-CB17-454B-9B53-E7C2AA8C7483}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{7B0A4916-8915-48A5-96A1-E21C59AD61F5}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{F7D0FC46-FEED-44EE-9729-115CA5E513A5}" |In - Private - P6 - FALSE | .(...) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (.not file.)
O87 - FAEL: "{3A47B5BC-68B0-4CF2-9E5D-84CAF1DD3191}" |In - Private - P17 - FALSE | .(...) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (.not file.)
O87 - FAEL: "{81370822-1457-43AA-9454-41915FAC27CC}" |In - Private - P6 - TRUE | .(...) -- D:\SquareEnix\FINAL FANTASY XIV\ffxivboot.exe (.not file.)
O87 - FAEL: "{A30C3C6B-7068-4C37-85C6-09837E7BB3DA}" |In - Private - P17 - TRUE | .(...) -- D:\SquareEnix\FINAL FANTASY XIV\ffxivboot.exe (.not file.)
O87 - FAEL: "{3DC668EA-0BF2-4A4D-81D4-800E56319210}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
O87 - FAEL: "{3536BC5C-3252-4E6F-BC93-741AA5FA67DC}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{C3953BD0-BFB9-440E-961B-B416F8E173DC}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{369D5D51-3F2D-4A6D-8944-94CB3B844DA9}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "{E806CBF6-BB6C-4289-A659-7BF2850D33DC}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "{8795E23D-1385-4920-8FDB-574AD3827DE6}" |In - Private - P6 - TRUE | .(...) -- C:\Users\Jeff\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RFAYN3Y1\SweetImSetup.exe (.not file.)
O87 - FAEL: "{6A7B7A92-050D-4290-93E8-B7005DA9DD9C}" |In - Private - P17 - TRUE | .(...) -- C:\Users\Jeff\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RFAYN3Y1\SweetImSetup.exe (.not file.)
O87 - FAEL: "{FB4C6685-A2CC-4487-810D-5E1B6FDF4E9B}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O87 - FAEL: "TCP Query User{46FCAD82-BC31-420A-859D-1DA3933D00B9}C:\program files (x86)\java\jre6\bin\javaw.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\java\jre6\bin\javaw.exe (.not file.)
O87 - FAEL: "UDP Query User{C0377CD9-57DF-4939-A9C1-B02E1E1117B7}C:\program files (x86)\java\jre6\bin\javaw.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\java\jre6\bin\javaw.exe (.not file.)
O87 - FAEL: "{C912BF80-385A-4EA4-B911-C833B65DAAB3}" |In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\java\jre6\bin\javaw.exe (.not file.)
O87 - FAEL: "{D1FB56B3-9730-4AA8-A393-5AE4C319E283}" |In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\java\jre6\bin\javaw.exe (.not file.)
O87 - FAEL: "TCP Query User{3A4C5568-4792-4C47-8786-940C796A2CD7}D:\jeux\tmnationsforever\tmforever.exe" |In - Private - P6 - TRUE | .(...) -- D:\jeux\tmnationsforever\tmforever.exe (.not file.)
O87 - FAEL: "UDP Query User{9BFB87FF-764E-4F47-A00F-D418D0A8F5DE}D:\jeux\tmnationsforever\tmforever.exe" |In - Private - P17 - TRUE | .(...) -- D:\jeux\tmnationsforever\tmforever.exe (.not file.)
O87 - FAEL: "{E434D83F-0AB3-4E9A-B25A-D7018381BA77}" |In - Public - P17 - TRUE | .(...) -- D:\jeux\tmnationsforever\tmforever.exe (.not file.)
O87 - FAEL: "{ACEF5428-7003-45A1-98CD-8B989CE6A799}" |In - Public - P6 - TRUE | .(...) -- D:\jeux\tmnationsforever\tmforever.exe (.not file.)
O87 - FAEL: "{A2169119-0398-42D3-9A55-575282850E63}" | In - None - P6 - TRUE | .(.Pas de propri�taire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "TCP Query User{97CD4D09-40A5-4FCF-9083-8F82B2B3690F}C:\program files\java\jre6\bin\javaw.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\java\jre6\bin\javaw.exe (.not file.)
O87 - FAEL: "UDP Query User{223C855A-D5A1-401E-8654-DEE53B2A9753}C:\program files\java\jre6\bin\javaw.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\java\jre6\bin\javaw.exe (.not file.)
O87 - FAEL: "{A8B7EC88-525D-4F99-873B-1991584496C5}" |In - Public - P17 - TRUE | .(...) -- C:\program files\java\jre6\bin\javaw.exe (.not file.)
O87 - FAEL: "{2A026899-4D36-4EB4-94E9-1EC1736152A5}" |In - Public - P6 - TRUE | .(...) -- C:\program files\java\jre6\bin\javaw.exe (.not file.)
O87 - FAEL: "{AD400083-C982-444D-B9FD-BF5F5E9221CB}" | In - Private - P6 - TRUE | .(.LogMeIn Inc. - Hamachi Client Application.) -- D:\hamachi-2-ui.exe
O87 - FAEL: "{DD68F4A6-B312-40F9-B45B-6523FC3BA820}" | In - Private - P17 - TRUE | .(.LogMeIn Inc. - Hamachi Client Application.) -- D:\hamachi-2-ui.exe
O87 - FAEL: "{BD0A4683-8C25-4B6D-9743-F4994BDF760C}" | In - Domain - P6 - TRUE | .(.LogMeIn Inc. - Hamachi Client Application.) -- D:\hamachi-2-ui.exe
O87 - FAEL: "{B4B199C5-FDE1-4C2C-B650-A3951F11C920}" | In - Domain - P17 - TRUE | .(.LogMeIn Inc. - Hamachi Client Application.) -- D:\hamachi-2-ui.exe
O87 - FAEL: "{FBCDA5D4-7419-44CC-AB4D-1B9E399D2ABF}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\FrostWire 5\FrostWire.exe (.not file.)
O87 - FAEL: "{DD8C841F-4295-4714-A718-6091949F9130}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\FrostWire 5\FrostWire.exe (.not file.)
O87 - FAEL: "{0C5D6024-C38F-420D-A170-EBDF8184A534}" |In - Domain - P6 - TRUE | .(...) -- C:\Users\Jeff\Desktop\Minecraft server\Minecraft_Server.exe (.not file.)
O87 - FAEL: "{64CC2EB4-E0C7-4BE9-8399-A27FBAF4E170}" |In - Domain - P17 - TRUE | .(...) -- C:\Users\Jeff\Desktop\Minecraft server\Minecraft_Server.exe (.not file.)
O87 - FAEL: "{6C3B60EE-2F36-4D5A-BF57-1983B5C0489B}" |In - Domain - P6 - TRUE | .(...) -- C:\Users\Jeff\Desktop\Minecraft server\Minecraft_Server.exe (.not file.)
O87 - FAEL: "{6ACE1E88-4260-486B-8148-0B42C7C129A1}" |In - Domain - P17 - TRUE | .(...) -- C:\Users\Jeff\Desktop\Minecraft server\Minecraft_Server.exe (.not file.)
O87 - FAEL: "TCP Query User{8701BCEE-E425-4820-B457-4F320A51E411}D:\jeux\t�l�hargementscrack\redsn0w0.9.10b1.exe" |In - Private - P6 - TRUE | .(...) -- D:\jeux\t�l�hargementscrack\redsn0w0.9.10b1.exe (.not file.)
O87 - FAEL: "UDP Query User{03E452CE-79F3-4836-A81C-A2B3C5CC456C}D:\jeux\t�l�hargementscrack\redsn0w0.9.10b1.exe" |In - Private - P17 - TRUE | .(...) -- D:\jeux\t�l�hargementscrack\redsn0w0.9.10b1.exe (.not file.)
O87 - FAEL: "{BE3B0457-4BB7-43D2-9C7C-4CE1F9686E99}" |In - Public - P17 - TRUE | .(...) -- D:\jeux\t�l�hargementscrack\redsn0w0.9.10b1.exe (.not file.)
O87 - FAEL: "{F99846C4-E2BF-4310-9F91-67312E928A1E}" |In - Public - P6 - TRUE | .(...) -- D:\jeux\t�l�hargementscrack\redsn0w0.9.10b1.exe (.not file.)
O87 - FAEL: "TCP Query User{DD3D72F6-CD15-44E0-951B-14BFA6D631F5}D:\steam\steamapps\nanoztag\team fortress 2\hl2.exe" | In - Private - P6 - TRUE | .(...) -- D:\steam\steamapps\nanoztag\team fortress 2\hl2.exe
O87 - FAEL: "UDP Query User{46A29239-1323-44A7-9859-699A2DD06C0D}D:\steam\steamapps\nanoztag\team fortress 2\hl2.exe" | In - Private - P17 - TRUE | .(...) -- D:\steam\steamapps\nanoztag\team fortress 2\hl2.exe
O87 - FAEL: "{E84FD849-9C6C-426E-80F4-E6C13C948687}" | In - Public - P17 - TRUE | .(...) -- D:\steam\steamapps\nanoztag\team fortress 2\hl2.exe
O87 - FAEL: "{C0B238D9-5DE1-4213-8B41-616C7438D19D}" | In - Public - P6 - TRUE | .(...) -- D:\steam\steamapps\nanoztag\team fortress 2\hl2.exe
O87 - FAEL: "TCP Query User{3C0DF644-BED8-4D0A-8798-FAC34E4803B9}C:\users\jeff\desktop\terraria 1.1.2\terrariaserver.exe" | In - Private - P6 - TRUE | .(.Re-Logic - Terraria.) -- C:\users\jeff\desktop\terraria 1.1.2\terrariaserver.exe
O87 - FAEL: "UDP Query User{82AAC36E-E121-4A86-BA0B-B2D05FBD8695}C:\users\jeff\desktop\terraria 1.1.2\terrariaserver.exe" | In - Private - P17 - TRUE | .(.Re-Logic - Terraria.) -- C:\users\jeff\desktop\terraria 1.1.2\terrariaserver.exe
O87 - FAEL: "{0535634B-834E-47BD-B2B6-E573C0BB96EE}" | In - Public - P17 - TRUE | .(.Re-Logic - Terraria.) -- C:\users\jeff\desktop\terraria 1.1.2\terrariaserver.exe
O87 - FAEL: "{18A78AA0-9912-4255-9F2E-BECF01D4602B}" | In - Public - P6 - TRUE | .(.Re-Logic - Terraria.) -- C:\users\jeff\desktop\terraria 1.1.2\terrariaserver.exe
O87 - FAEL: "TCP Query User{F704C7F8-EDCC-4899-9647-1B74B4604531}C:\users\jeff\desktop\ggpo\ggpo.exe" |In - Public - P6 - TRUE | .(...) -- C:\users\jeff\desktop\ggpo\ggpo.exe (.not file.)
O87 - FAEL: "UDP Query User{AFD1F0FE-D70D-49FA-A306-76540E6F6474}C:\users\jeff\desktop\ggpo\ggpo.exe" |In - Public - P17 - TRUE | .(...) -- C:\users\jeff\desktop\ggpo\ggpo.exe (.not file.)
O87 - FAEL: "{1BD3B114-778C-49BC-8DC5-9CC0A9FCF45E}" |In - Public - P17 - TRUE | .(...) -- C:\users\jeff\desktop\ggpo\ggpo.exe (.not file.)
O87 - FAEL: "{7C3EC992-D154-40C2-9C9E-C3D0A663A16C}" |In - Public - P6 - TRUE | .(...) -- C:\users\jeff\desktop\ggpo\ggpo.exe (.not file.)
O87 - FAEL: "{B99FE18C-437B-439D-B9D0-C9991A634862}" | In - Public - P6 - TRUE | .(.SkeinGlobe - BustersLauncher.) -- D:\Steam\SteamApps\common\brawl busters\bin\PbLauncher.exe
O87 - FAEL: "{5813199C-3708-4E92-8ADD-5020263C57C6}" | In - Public - P17 - TRUE | .(.SkeinGlobe - BustersLauncher.) -- D:\Steam\SteamApps\common\brawl busters\bin\PbLauncher.exe
O87 - FAEL: "{D6F12B24-4FCD-4098-AD8A-C4882F0EA828}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\brawl busters\bin\pbclient.exe
O87 - FAEL: "{04E99BF1-77EA-4773-A759-49E8AE82CB09}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\brawl busters\bin\pbclient.exe
O87 - FAEL: "{3174F93E-C2A4-4B68-AEE3-670BE9E0E66B}" | In - Public - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
O87 - FAEL: "{96F88EAC-01D9-40A8-A7CC-58EBB547216A}" | In - Public - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
O87 - FAEL: "{83FAE578-294C-43AD-A477-D9B1D3F3C0A1}" | In - Public - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O87 - FAEL: "{E92ABB35-B2F1-4A89-9F4A-E2B85D2131AB}" | In - Public - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O87 - FAEL: "{FAD3DDC5-45B5-4CC7-B73C-2B6DD779B469}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\alien swarm\srcds.exe
O87 - FAEL: "{D3393AFD-A559-4B9F-A5B7-B8CC9DA26083}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\alien swarm\srcds.exe
O87 - FAEL: "{8E866272-8687-4EA1-82AF-F949FDC09B16}" | In - Public - P6 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O87 - FAEL: "{51BD1E08-42F0-455E-AE80-E293E6303348}" | In - Public - P17 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O87 - FAEL: "TCP Query User{9BCAC3AC-92A2-4648-8596-C4DDD3C3F72C}D:\sd wifi\helper\eyefihelper.exe" | In - Private - P6 - TRUE | .(.Eye-Fi, Inc. - Eye-Fi Helper.) -- D:\sd wifi\helper\eyefihelper.exe
O87 - FAEL: "UDP Query User{531C3D94-A327-46DF-BDCC-899D99805629}D:\sd wifi\helper\eyefihelper.exe" | In - Private - P17 - TRUE | .(.Eye-Fi, Inc. - Eye-Fi Helper.) -- D:\sd wifi\helper\eyefihelper.exe
O87 - FAEL: "{C2479AAD-8F02-4883-923D-6FF744495615}" | In - Public - P17 - TRUE | .(.Eye-Fi, Inc. - Eye-Fi Helper.) -- D:\sd wifi\helper\eyefihelper.exe
O87 - FAEL: "{A3069123-948F-4AD0-89A0-D5035E576F6C}" | In - Public - P6 - TRUE | .(.Eye-Fi, Inc. - Eye-Fi Helper.) -- D:\sd wifi\helper\eyefihelper.exe
O87 - FAEL: "TCP Query User{6F4C34D9-71F1-4E8D-9953-05D5D000AAFE}C:\program files (x86)\maniaplanet\maniaplanet.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\maniaplanet\maniaplanet.exe (.not file.)
O87 - FAEL: "UDP Query User{C6A947B2-974C-45AB-983B-92CEC42F369C}C:\program files (x86)\maniaplanet\maniaplanet.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\maniaplanet\maniaplanet.exe (.not file.)
O87 - FAEL: "{235D0908-44E8-4646-9A1F-0FB2CCAA9F19}" |In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\maniaplanet\maniaplanet.exe (.not file.)
O87 - FAEL: "{E4103218-E410-40FF-AE51-6BBB5B1AE726}" |In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\maniaplanet\maniaplanet.exe (.not file.)
O87 - FAEL: "{14E4D213-94C2-43C3-B41F-876D407AC757}" | In - Public - P6 - TRUE | .(.Valve Corporation - Steam Client Bootstrapper (buildbot_winslave04_steam_steam_rel_client_win.) -- D:\Steam\Steam.exe
O87 - FAEL: "{B9D75E11-7D33-4528-8A1F-4CD7F9B8F92B}" | In - Public - P17 - TRUE | .(.Valve Corporation - Steam Client Bootstrapper (buildbot_winslave04_steam_steam_rel_client_win.) -- D:\Steam\Steam.exe
O87 - FAEL: "{615C2CB6-413E-43D3-892C-BDEF68E19CEB}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\Raptr\raptr.exe (.not file.)
O87 - FAEL: "{B8667E1D-2006-45AB-8493-543FC8BB83B6}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\Raptr\raptr.exe (.not file.)
O87 - FAEL: "{818C91CA-DFBE-4143-AE0B-17E8CCA8C261}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\Raptr\raptr_im.exe (.not file.)
O87 - FAEL: "{344763EA-85EC-4780-9A64-0313845A9BFC}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\Raptr\raptr_im.exe (.not file.)
O87 - FAEL: "{C19F80FB-3B07-4D55-83C6-446AE8368890}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{BDCEF3F6-20D3-4D3A-9A56-AB1D48C527A4}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{EAA59E88-7EFA-4729-A4F2-68D64814B21C}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "{649A5831-AE49-4F06-B8E2-03609BD6EEBC}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "TCP Query User{859E3E2E-CC9F-4217-B844-8915256C7AA4}D:\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe" | In - Private - P6 - TRUE | .(.Hirez Studios, Inc..) -- D:\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe
O87 - FAEL: "UDP Query User{7388652A-9B52-4D77-8917-BBEB1E509B90}D:\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe" | In - Private - P17 - TRUE | .(.Hirez Studios, Inc..) -- D:\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe
O87 - FAEL: "{7F750794-55CB-4690-AD7E-1BFC7B70439D}" | In - Public - P17 - TRUE | .(.Hirez Studios, Inc. - Pas de description.) -- D:\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe
O87 - FAEL: "{4FC6299F-1AD5-4700-9A83-7FC938160D89}" | In - Public - P6 - TRUE | .(.Hirez Studios, Inc. - Pas de description.) -- D:\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe
O87 - FAEL: "{3CDACC92-31B1-4154-A5E0-E9F18057C214}" |In - Public - P6 - TRUE | .(...) -- D:\Jeux\Lost Saga\LostSagaEU\autoupgrade.exe (.not file.)
O87 - FAEL: "{63AF579A-20AC-44FE-A442-C45134D65C11}" |In - Public - P17 - TRUE | .(...) -- D:\Jeux\Lost Saga\LostSagaEU\autoupgrade.exe (.not file.)
O87 - FAEL: "{C38C643D-2650-4A69-B1B7-F70B6D381F0F}" |In - Public - P6 - TRUE | .(...) -- D:\Jeux\Lost Saga\LostSagaEU\lostsaga.exe (.not file.)
O87 - FAEL: "{0A2E9BF6-D745-4684-8909-90D52BC56384}" |In - Public - P17 - TRUE | .(...) -- D:\Jeux\Lost Saga\LostSagaEU\lostsaga.exe (.not file.)
O87 - FAEL: "{ACCB096D-3F39-4EF6-A5AE-52DF1FD22C64}" |In - Public - P6 - TRUE | .(...) -- D:\Jeux\Elsword_FR\data\x2.exe (.not file.)
O87 - FAEL: "{DA2A79DA-E99E-45F7-8499-80B93FE225E9}" |In - Public - P17 - TRUE | .(...) -- D:\Jeux\Elsword_FR\data\x2.exe (.not file.)
O87 - FAEL: "{138600D3-4759-4B54-95C4-99C58DF8D815}" | In - None - P17 - TRUE | .(.Hewlett-Packard Co. - DeviceSetup.exe.) -- C:\Program Files\HP\HP Officejet Pro 8600\Bin\DeviceSetup.exe
O87 - FAEL: "{64174A94-E2CD-4F06-9A0A-1E6D6D244E91}" | In - None - P17 - TRUE | .(.Hewlett-Packard Co. - HPNetworkCommunicator.) -- C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe
O87 - FAEL: "{7919F943-D682-4A04-959B-0440E7CD3B52}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\alien swarm\swarm.exe
O87 - FAEL: "{FB2CD62A-4440-4ABE-BC37-479B4442118F}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\alien swarm\swarm.exe
O87 - FAEL: "{CE415DEE-9FC7-4438-9001-D56221E99808}" | In - Public - P6 - TRUE | .(...) -- D:\RomStation\Emulation\Super Nintendo\ZSNES\zsnesw.exe
O87 - FAEL: "{7FA8D4F6-39AB-4C9C-91D3-0F3D49DFFAEB}" | In - Public - P17 - TRUE | .(...) -- D:\RomStation\Emulation\Super Nintendo\ZSNES\zsnesw.exe
O87 - FAEL: "{C6CF562D-CB86-4A66-A303-57FA12ECF1F1}" | In - Domain - P6 - TRUE | .(...) -- D:\RomStation\Emulation\Super Nintendo\ZSNES\zsnesw.exe
O87 - FAEL: "{EA99FE28-32C3-4248-9FD6-1D70D2962156}" | In - Domain - P17 - TRUE | .(...) -- D:\RomStation\Emulation\Super Nintendo\ZSNES\zsnesw.exe
O87 - FAEL: "TCP Query User{AF952863-2BC3-453A-BA66-0C49243BECA8}D:\steam\steamapps\nanoztag\garrysmod\hl2.exe" |In - Private - P6 - TRUE | .(...) -- D:\steam\steamapps\nanoztag\garrysmod\hl2.exe (.not file.)
O87 - FAEL: "UDP Query User{66EEF8AC-ED6D-428E-A063-06B5E627F421}D:\steam\steamapps\nanoztag\garrysmod\hl2.exe" |In - Private - P17 - TRUE | .(...) -- D:\steam\steamapps\nanoztag\garrysmod\hl2.exe (.not file.)
O87 - FAEL: "TCP Query User{FE415B5B-A93D-4F49-BAFF-674CF79D16B0}C:\program files\java\jre7\bin\javaw.exe" | In - Public - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\javaw.exe
O87 - FAEL: "UDP Query User{A1145DF2-BEEF-4955-AE22-4C25FF48C05F}C:\program files\java\jre7\bin\javaw.exe" | In - Public - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\javaw.exe
O87 - FAEL: "{48509FEB-EDDF-49EB-886A-97743EEAF03C}" | In - Public - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\javaw.exe
O87 - FAEL: "{62BE50FE-2F07-40BE-AFE0-470AE74E4696}" | In - Public - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\javaw.exe
O87 - FAEL: "{AF6CC0E6-8ADB-452D-9EC5-E8F17FD913FC}" |In - Private - P6 - TRUE | .(...) -- D:\Steam\SteamApps\nanoztag\garrysmod\hl2.exe (.not file.)
O87 - FAEL: "{3CB1CDCA-4BF0-43EC-BE66-08FA4ED78D34}" |In - Private - P17 - TRUE | .(...) -- D:\Steam\SteamApps\nanoztag\garrysmod\hl2.exe (.not file.)
O87 - FAEL: "TCP Query User{F43D3B1A-F63C-41AF-AEA4-32537ABB5033}C:\users\jeff\desktop\mtsp.exe" |In - Public - P6 - TRUE | .(...) -- C:\users\jeff\desktop\mtsp.exe (.not file.)
O87 - FAEL: "UDP Query User{F5D7C025-9599-424E-BE9B-6224BF6C5FB3}C:\users\jeff\desktop\mtsp.exe" |In - Public - P17 - TRUE | .(...) -- C:\users\jeff\desktop\mtsp.exe (.not file.)
O87 - FAEL: "{0823559E-BBD1-4B79-8FF0-55F857D50810}" |In - Public - P17 - TRUE | .(...) -- C:\users\jeff\desktop\mtsp.exe (.not file.)
O87 - FAEL: "{1767C34C-8C7B-4825-9B24-927AABCAABB0}" |In - Public - P6 - TRUE | .(...) -- C:\users\jeff\desktop\mtsp.exe (.not file.)
O87 - FAEL: "TCP Query User{F63D65A8-7239-492F-AE8D-0EFCE7C72EDB}C:\users\jeff\desktop\mlp fighting is magic\mtsp.exe" |In - Public - P6 - TRUE | .(...) -- C:\users\jeff\desktop\mlp fighting is magic\mtsp.exe (.not file.)
O87 - FAEL: "UDP Query User{B850B914-C1A5-405F-AC5E-563265D11EA6}C:\users\jeff\desktop\mlp fighting is magic\mtsp.exe" |In - Public - P17 - TRUE | .(...) -- C:\users\jeff\desktop\mlp fighting is magic\mtsp.exe (.not file.)
O87 - FAEL: "{BE7B46FD-2DF5-4CC1-ADC4-B1142D779C00}" |In - Public - P17 - TRUE | .(...) -- C:\users\jeff\desktop\mlp fighting is magic\mtsp.exe (.not file.)
O87 - FAEL: "{682ABE04-0AD5-4018-9C3A-F79883FE60D0}" |In - Public - P6 - TRUE | .(...) -- C:\users\jeff\desktop\mlp fighting is magic\mtsp.exe (.not file.)
O87 - FAEL: "TCP Query User{97A5AD3B-7DC2-4D13-8EC8-1ECDC0C621DB}C:\users\jeff\desktop\server mlp fim\mtsp.exe" | In - Public - P6 - TRUE | .(...) -- C:\users\jeff\desktop\server mlp fim\mtsp.exe
O87 - FAEL: "UDP Query User{9AE0A89E-E5F8-4414-8153-33480CA69198}C:\users\jeff\desktop\server mlp fim\mtsp.exe" | In - Public - P17 - TRUE | .(...) -- C:\users\jeff\desktop\server mlp fim\mtsp.exe
O87 - FAEL: "{C35234ED-6439-445A-866F-8C06B026AF45}" | In - Public - P17 - TRUE | .(...) -- C:\users\jeff\desktop\server mlp fim\mtsp.exe
O87 - FAEL: "{B7309060-01DB-44D8-9402-755F310C700F}" | In - Public - P6 - TRUE | .(...) -- C:\users\jeff\desktop\server mlp fim\mtsp.exe
O87 - FAEL: "{965F3826-34DA-495D-BD38-F2BAC741A714}" |In - Public - P6 - TRUE | .(...) -- C:\Users\Jeff\Desktop\Minecraft server\Minecraft_Server.exe (.not file.)
O87 - FAEL: "{9536DA43-D02B-4052-B9A2-371CA5001FAC}" |In - Public - P17 - TRUE | .(...) -- C:\Users\Jeff\Desktop\Minecraft server\Minecraft_Server.exe (.not file.)
O87 - FAEL: "TCP Query User{06645325-7DB2-42BF-92AE-7800502ED8A9}D:\udk\binaries\win32\udk.exe" |In - Private - P6 - TRUE | .(...) -- D:\udk\binaries\win32\udk.exe (.not file.)
O87 - FAEL: "UDP Query User{BA3FDF7E-80F1-447F-B717-E5C6544EE48A}D:\udk\binaries\win32\udk.exe" |In - Private - P17 - TRUE | .(...) -- D:\udk\binaries\win32\udk.exe (.not file.)
O87 - FAEL: "{8D69CE19-BF05-4C91-BFD8-DC2F618404A8}" |In - Public - P17 - TRUE | .(...) -- D:\udk\binaries\win32\udk.exe (.not file.)
O87 - FAEL: "{18770887-1B20-4039-AA01-9D0C0C6545C6}" |In - Public - P6 - TRUE | .(...) -- D:\udk\binaries\win32\udk.exe (.not file.)
O87 - FAEL: "{359BA9C3-C89F-4637-985A-F136E745F782}" | In - Public - P6 - TRUE | .(.Pas de propri�taire - Cryptic Game Launcher.) -- D:\Steam\SteamApps\common\champions online\Champions Online.exe
O87 - FAEL: "{713BA8FF-2679-4165-BADE-B782E3C308B7}" | In - Public - P17 - TRUE | .(.Pas de propri�taire - Cryptic Game Launcher.) -- D:\Steam\SteamApps\common\champions online\Champions Online.exe
O87 - FAEL: "{6ED6C82B-97D6-45D9-A884-AEF2C895C23A}" |In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\nanoztag\garrysmod\hl2.exe (.not file.)
O87 - FAEL: "{23FAB087-FAD7-4D63-B134-AEC031871F03}" |In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\nanoztag\garrysmod\hl2.exe (.not file.)
O87 - FAEL: "{F01D16D6-DBFF-44A8-97EB-E30A8E2B298E}" | In - Public - P6 - TRUE | .(.EA Digital Illusions CE AB - Mirror's Edge�.) -- D:\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
O87 - FAEL: "{0CA52561-A033-4650-9968-0892104664F4}" | In - Public - P17 - TRUE | .(.EA Digital Illusions CE AB - Mirror's Edge�.) -- D:\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
O87 - FAEL: "{C0A038DE-C719-4608-998D-B7B226645938}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\mirrors edge\Support\EA Help\Electronic_Arts_Technical_Support.htm
O87 - FAEL: "{88847C9C-D8B8-4911-B7E6-EECF977F7963}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\mirrors edge\Support\EA Help\Electronic_Arts_Technical_Support.htm
O87 - FAEL: "{E1391615-8800-4600-A216-2BDD3E904903}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\supercratebox\supercratebox.exe
O87 - FAEL: "{10DD0334-F281-480B-B80F-41D840D4B57C}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\supercratebox\supercratebox.exe
O87 - FAEL: "{434087EC-AB2D-4549-80E9-97B13A01F98C}" | In - Public - P6 - TRUE | .(.Monolith Productions, Inc. - Gotham City Impostors.) -- D:\Steam\SteamApps\common\Gotham City Impostors F2P\Impostors.exe
O87 - FAEL: "{0ACC9578-3A38-453B-A430-FBEC52995D28}" | In - Public - P17 - TRUE | .(.Monolith Productions, Inc. - Gotham City Impostors.) -- D:\Steam\SteamApps\common\Gotham City Impostors F2P\Impostors.exe
O87 - FAEL: "TCP Query User{2C37B0D9-01D3-4144-A84A-2CFB059AA472}C:\program files (x86)\google\chrome\application\chrome.exe" | In - Private - P6 - TRUE | .(.Google Inc..) -- C:\program files (x86)\google\chrome\application\chrome.exe
O87 - FAEL: "UDP Query User{A8B0887D-EB3E-477F-BC55-FF89A04EC1B6}C:\program files (x86)\google\chrome\application\chrome.exe" | In - Private - P17 - TRUE | .(.Google Inc..) -- C:\program files (x86)\google\chrome\application\chrome.exe
O87 - FAEL: "{87878A41-04AB-464A-A84F-904CA5C5387F}" | In - Public - P17 - TRUE | .(.Google Inc. - Google Chrome.) -- C:\program files (x86)\google\chrome\application\chrome.exe
O87 - FAEL: "{5D6C1AA9-E439-4593-B102-8DB4E784B226}" | In - Public - P6 - TRUE | .(.Google Inc. - Google Chrome.) -- C:\program files (x86)\google\chrome\application\chrome.exe
O87 - FAEL: "{6C126FDB-29AD-484B-AD86-FC50DF679090}" | In - Private - P6 - TRUE | .(.Monolith Productions, Inc. - Gotham City Impostors.) -- D:\Steam\SteamApps\common\Gotham City Impostors F2P\Engine.exe
O87 - FAEL: "{616ECA01-8B95-44FC-9CC3-FBD4160AE308}" | In - Private - P17 - TRUE | .(.Monolith Productions, Inc. - Gotham City Impostors.) -- D:\Steam\SteamApps\common\Gotham City Impostors F2P\Engine.exe
O87 - FAEL: "{C1AA9BD3-0818-4067-9D8E-4D81077FCD21}" | In - Public - P6 - TRUE | .(.Monolith Productions, Inc. - Gotham City Impostors.) -- D:\Steam\SteamApps\common\Gotham City Impostors F2P\Engine.exe
O87 - FAEL: "{281FFBDC-B80A-401D-BDFD-47C30DFFCEEE}" | In - Public - P17 - TRUE | .(.Monolith Productions, Inc. - Gotham City Impostors.) -- D:\Steam\SteamApps\common\Gotham City Impostors F2P\Engine.exe
O87 - FAEL: "{10ECF9D4-3768-4495-9023-084D0582BDE6}" | In - Public - P6 - TRUE | .(.Edmund Mcmillen & Florian Himsl - The Binding of Isaac.) -- D:\Steam\SteamApps\common\the binding of isaac\Isaac.exe
O87 - FAEL: "{7A7F25A4-C202-4D11-A774-142C5C13F5AF}" | In - Public - P17 - TRUE | .(.Edmund Mcmillen & Florian Himsl - The Binding of Isaac.) -- D:\Steam\SteamApps\common\the binding of isaac\Isaac.exe
O87 - FAEL: "TCP Query User{6338242A-952D-4F66-A617-E3505F412C3F}D:\jeux\lolreplay\lolreplay.exe" | In - Private - P6 - TRUE | .(.Pas de propri�taire - LOLReplay.) -- D:\jeux\lolreplay\lolreplay.exe
O87 - FAEL: "UDP Query User{1B51B512-0052-41F7-9629-F84455F3244A}D:\jeux\lolreplay\lolreplay.exe" | In - Private - P17 - TRUE | .(.Pas de propri�taire - LOLReplay.) -- D:\jeux\lolreplay\lolreplay.exe
O87 - FAEL: "{26578878-6879-4655-99B7-2DBFCA031AB0}" | In - Public - P17 - TRUE | .(.Pas de propri�taire - LOLReplay.) -- D:\jeux\lolreplay\lolreplay.exe
O87 - FAEL: "{D3E5A7D4-BCE8-4FAE-8206-3C948F5A9C1A}" | In - Public - P6 - TRUE | .(.Pas de propri�taire - LOLReplay.) -- D:\jeux\lolreplay\lolreplay.exe
O87 - FAEL: "{E462A361-5653-4EED-99B8-9DBE8EC1DC2C}" | In - Public - P6 - TRUE | .(.Vigil Games - DarksidersPC.) -- D:\Steam\SteamApps\common\darksiders\DarksidersPC.exe
O87 - FAEL: "{6412A5D3-51F5-4C82-9B84-B63C46EA937F}" | In - Public - P17 - TRUE | .(.Vigil Games - DarksidersPC.) -- D:\Steam\SteamApps\common\darksiders\DarksidersPC.exe
O87 - FAEL: "{D655A95B-337A-4289-9DA8-4FA27CE18942}" | In - Public - P6 - TRUE | .(.THQ Inc. - Saints Row�: The Third�.) -- D:\Steam\SteamApps\common\saints row the third\game_launcher.exe
O87 - FAEL: "{E6010311-B0FB-4327-AE17-40E48DE908E3}" | In - Public - P17 - TRUE | .(.THQ Inc. - Saints Row�: The Third�.) -- D:\Steam\SteamApps\common\saints row the third\game_launcher.exe
O87 - FAEL: "{0B7A44AC-1C8F-486E-8A37-4E5826A82497}" | In - Public - P6 - TRUE | .(.THQ Inc. - Saints Row: the Third.) -- D:\Steam\SteamApps\common\saints row the third\saintsrowthethird.exe
O87 - FAEL: "{CC203A59-05A7-4C80-8130-8EDEDDD83E14}" | In - Public - P17 - TRUE | .(.THQ Inc. - Saints Row: the Third.) -- D:\Steam\SteamApps\common\saints row the third\saintsrowthethird.exe
O87 - FAEL: "{2BAAACCF-68A1-43B3-950A-D96060E668C5}" | In - Public - P6 - TRUE | .(.THQ Inc. - Saints Row: the Third.) -- D:\Steam\SteamApps\common\saints row the third\saintsrowthethird_dx11.exe
O87 - FAEL: "{5276EFD9-CCDC-4127-BA79-7CCE3070649C}" | In - Public - P17 - TRUE | .(.THQ Inc. - Saints Row: the Third.) -- D:\Steam\SteamApps\common\saints row the third\saintsrowthethird_dx11.exe
O87 - FAEL: "{0D9CC542-BD3B-4376-85BA-36B0940A1C6E}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\realm of the mad god\Realm of the Mad God.exe
O87 - FAEL: "{3FF7418D-0A54-4C85-B032-AAD89A290D3B}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\realm of the mad god\Realm of the Mad God.exe
O87 - FAEL: "{34CF8874-84DC-42D3-AD6B-E0A32AFC1FFC}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\Blocks That Matter\BTM_launcher_win.exe
O87 - FAEL: "{BF03C165-CFFF-4C8D-97A6-8A73BC5ED377}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\Blocks That Matter\BTM_launcher_win.exe
O87 - FAEL: "{B61F2115-7FF0-44EF-B1E8-55BE50281D58}" | In - None - P17 - TRUE | .(.Skype Limited - Facebook Video Calling.) -- C:\Users\Jeff\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
O87 - FAEL: "{EA4F5106-D961-4680-AA64-D7D58780DD83}" | In - Public - P6 - TRUE | .(.Azureus Software, Inc - Pas de description.) -- C:\Program Files (x86)\Vuze\Azureus.exe
O87 - FAEL: "{019B7FCA-E032-4709-B1C2-0948746ADD27}" | In - Public - P17 - TRUE | .(.Azureus Software, Inc - Pas de description.) -- C:\Program Files (x86)\Vuze\Azureus.exe
O87 - FAEL: "{DF15FEF7-F671-47F5-BAC9-3B7119DEBE96}" | In - Public - P6 - TRUE | .(.Bethesda Softworks - Skyrim Launcher.) -- D:\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
O87 - FAEL: "{20EDA8B2-631B-474A-B4BD-36ABD7D91391}" | In - Public - P17 - TRUE | .(.Bethesda Softworks - Skyrim Launcher.) -- D:\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
O87 - FAEL: "{B8B7A73E-E8D3-4E21-85F4-243505399663}" | In - Domain - P6 - TRUE | .(.Pas de propri�taire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{41CC14B0-139E-4AAB-85EC-069F097DF03B}" | In - Domain - P17 - TRUE | .(.Pas de propri�taire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{D4A2CF0F-EA4E-4783-AD2C-BB7D0E4A5EEC}" | In - Private - P6 - TRUE | .(.Pas de propri�taire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{2CC7A346-234B-4483-962F-F28ECE204011}" | In - Private - P17 - TRUE | .(.Pas de propri�taire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{BBC429FC-CB72-48B9-B267-7375D840AA99}" | In - None - P17 - TRUE | .(.Pas de propri�taire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "TCP Query User{3AF4FFE4-5ED2-404F-9ACD-76AD5EEA975D}D:\steam\steam.exe" | In - Private - P6 - TRUE | .(.Valve Corporation - Steam Client Bootstrapper (buildbot_winslave04_steam_steam_rel_client_win.) -- D:\steam\steam.exe
O87 - FAEL: "UDP Query User{2A7E7A5F-AC32-46A2-9B36-9A3830A46990}D:\steam\steam.exe" | In - Private - P17 - TRUE | .(.Valve Corporation - Steam Client Bootstrapper (buildbot_winslave04_steam_steam_rel_client_win.) -- D:\steam\steam.exe
O87 - FAEL: "{496093FA-E5F4-4E96-8E19-95DFE4D7A073}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\audiosurf\engine\QuestViewer.exe
O87 - FAEL: "{41060D0D-4ECC-46E6-9D68-8057FF251198}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\audiosurf\engine\QuestViewer.exe
O87 - FAEL: "TCP Query User{BBACEDEF-91C7-4E02-AD79-560A11284E71}D:\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe" |In - Private - P6 - TRUE | .(...) -- D:\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.ex
O87 - FAEL: "UDP Query User{DE0030B4-E59F-4DEB-8684-D699D61DED00}D:\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe" |In - Private - P17 - TRUE | .(...) -- D:\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.e
O87 - FAEL: "{3D937E4D-75A8-4F0A-ADA5-708EDDD21BD8}" |In - Public - P17 - TRUE | .(...) -- D:\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe (.not file.)
O87 - FAEL: "{3F7F741B-CC4F-4A37-B94C-8CF572280903}" |In - Public - P6 - TRUE | .(...) -- D:\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe (.not file.)
O87 - FAEL: "{EDC599E6-CAAD-4194-AA29-DA99B6B96B1F}" | In - Public - P6 - TRUE | .(.Playdead - Limbo.) -- D:\Steam\SteamApps\common\Limbo\limbo.exe
O87 - FAEL: "{0C5D963A-D702-47AC-96EC-47CD0698974E}" | In - Public - P17 - TRUE | .(.Playdead - Limbo.) -- D:\Steam\SteamApps\common\Limbo\limbo.exe
O87 - FAEL: "{7A8A4345-1322-4EC1-B3EF-9E890EA750E2}" | In - Public - P6 - TRUE | .(.Two Tribes B.V. - Toki Tori.) -- D:\Steam\SteamApps\common\Toki Tori\tokitori.exe
O87 - FAEL: "{187D0726-2935-4EE4-BBBE-1AA08E8DFC60}" | In - Public - P17 - TRUE | .(.Two Tribes B.V. - Toki Tori.) -- D:\Steam\SteamApps\common\Toki Tori\tokitori.exe
O87 - FAEL: "{3E9DF30B-B13E-41B0-A0E9-D341E5E249A4}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\Amnesia The Dark Descent\Launcher.exe
O87 - FAEL: "{6D9EE9DD-BAE5-4100-9E25-67A92E4039F1}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\Amnesia The Dark Descent\Launcher.exe
O87 - FAEL: "{C8F5E56F-443D-4D38-B02D-EF2551A9F2E5}" | In - Public - P6 - TRUE | .(.Robot Entertainment, Inc. - Orcs Must Die 2.) -- D:\Steam\SteamApps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
O87 - FAEL: "{EA9B591C-9AA7-4FA7-8586-B09B9826B533}" | In - Public - P17 - TRUE | .(.Robot Entertainment, Inc. - Orcs Must Die 2.) -- D:\Steam\SteamApps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
O87 - FAEL: "{3F45DD2F-3CB2-48D1-8D16-62090C4C0DB1}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\Portal 2\portal2.exe
O87 - FAEL: "{EBBEAC1E-EAA2-4CC2-B5B8-539CC7848FD0}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\Portal 2\portal2.exe
O87 - FAEL: "{5FC7EB64-0A19-4295-8D5E-7EEEF0F72EB3}" | In - Public - P6 - TRUE | .(.Epic Games, Inc. - Pas de description.) -- D:\Steam\SteamApps\common\Waves\Binaries\Win32\Waves.exe
O87 - FAEL: "{43C00854-B410-4D21-8267-EDA54D24D9EC}" | In - Public - P17 - TRUE | .(.Epic Games, Inc. - Pas de description.) -- D:\Steam\SteamApps\common\Waves\Binaries\Win32\Waves.exe
O87 - FAEL: "{28E0264F-CF90-4C88-A452-E5FA05F11BB7}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\brawl busters\Launcher.exe
O87 - FAEL: "{4D19D1F3-A097-43DD-81C6-6D84F9676F8B}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\brawl busters\Launcher.exe
O87 - FAEL: "{EDF9576F-3B61-4045-A0FB-CA897EB713B9}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
O87 - FAEL: "{5DFA1A17-248F-4DC6-A31B-3EEFA1663932}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
O87 - FAEL: "{5A72EFED-3C08-40DF-912E-C6582F577196}" | In - Public - P6 - TRUE | .(.SEGA - Sonic Generations.) -- D:\Steam\SteamApps\common\Sonic Generations\SonicGenerations.exe
O87 - FAEL: "{E2322F76-C929-44E6-8E2B-A93FE03FB8D2}" | In - Public - P17 - TRUE | .(.SEGA - Sonic Generations.) -- D:\Steam\SteamApps\common\Sonic Generations\SonicGenerations.exe
O87 - FAEL: "{4C055831-76F2-429C-9947-C143A1CC3994}" | In - Public - P6 - TRUE | .(.SEGA - Sonic Generations Configuration Tool.) -- D:\Steam\SteamApps\common\Sonic Generations\ConfigurationTool.exe
O87 - FAEL: "{86A0E2D0-5A11-4C23-A1E8-A3689FB0C10B}" | In - Public - P17 - TRUE | .(.SEGA - Sonic Generations Configuration Tool.) -- D:\Steam\SteamApps\common\Sonic Generations\ConfigurationTool.exe
O87 - FAEL: "{539FCACF-D7CA-4620-AA9F-8BAAB5B27F32}" | In - Public - P6 - TRUE | .(.4A Games - Metro 2033 Executable.) -- D:\Steam\SteamApps\common\Metro 2033\metro2033.exe
O87 - FAEL: "{51460D8C-D8C5-42BC-8ECB-351A01E8C381}" | In - Public - P17 - TRUE | .(.4A Games - Metro 2033 Executable.) -- D:\Steam\SteamApps\common\Metro 2033\metro2033.exe
O87 - FAEL: "TCP Query User{79A9B9DA-A1CB-4BBA-8AA9-7353CD59EFEC}D:\jeux\kag\kag.exe" | In - Private - P6 - TRUE | .(...) -- D:\jeux\kag\kag.exe
O87 - FAEL: "UDP Query User{2B20C9D6-BE9D-4B98-A193-902906F7B5CA}D:\jeux\kag\kag.exe" | In - Private - P17 - TRUE | .(...) -- D:\jeux\kag\kag.exe
O87 - FAEL: "{C70B0BB1-396B-4E36-8021-6237CE4BAFC4}" | In - Public - P17 - TRUE | .(...) -- D:\jeux\kag\kag.exe
O87 - FAEL: "{CEADEC9A-6DC1-4AD5-962A-ED828E311631}" | In - Public - P6 - TRUE | .(...) -- D:\jeux\kag\kag.exe
O87 - FAEL: "{60408957-77B5-4579-89AD-6B0ACC9A6EC4}" | In - Public - P6 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe
O87 - FAEL: "{E26C0CE3-47B1-4777-ADD5-EF6285B89C94}" | In - Public - P17 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe
O87 - FAEL: "{F9FE5ACE-091F-4D9F-BBD3-0635CBF46CDE}" | In - Public - P6 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe
O87 - FAEL: "{0440601E-2F81-4457-BCF5-B0A56ECF8CD3}" | In - Public - P17 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe
O87 - FAEL: "TCP Query User{E9BBC2BD-D748-4C58-B1CF-03A1E54F0726}D:\jeux\bf heroes\bfheroes.exe" | In - Private - P6 - TRUE | .(.Easy - Battlefield Heroes.) -- D:\jeux\bf heroes\bfheroes.exe
O87 - FAEL: "UDP Query User{D2C8CC93-FA92-4AF4-9192-875EAB42D3E3}D:\jeux\bf heroes\bfheroes.exe" | In - Private - P17 - TRUE | .(.Easy - Battlefield Heroes.) -- D:\jeux\bf heroes\bfheroes.exe
O87 - FAEL: "{475B385E-B610-4E63-9F1E-BA989BEA21FB}" | In - Public - P17 - TRUE | .(.Easy - Battlefield Heroes.) -- D:\jeux\bf heroes\bfheroes.exe
O87 - FAEL: "{DAAFA2C8-4E8C-4CA1-95F8-FC18428EA157}" | In - Public - P6 - TRUE | .(.Easy - Battlefield Heroes.) -- D:\jeux\bf heroes\bfheroes.exe
O87 - FAEL: "{DA71F959-8CC8-4C7D-97D8-E934CEA8B4E9}" | In - None - P6 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files (x86)\iTunes\iTunes.exe
O87 - FAEL: "{778BD274-33E1-48BF-98CF-43147B559B90}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\Waveform\Waveform.exe
O87 - FAEL: "{F39CD95F-EA6F-46AA-BB78-DAF3945D9DC8}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\Waveform\Waveform.exe
O87 - FAEL: "{04FF779B-8118-4E2F-A636-F8AE5645BCB1}" | In - Public - P6 - TRUE | .(.Arrowhead Game Studios AB - Magicka.) -- D:\Steam\SteamApps\common\magicka\Magicka.exe
O87 - FAEL: "{F5A5AC11-2717-4361-9825-ADC88495B3CA}" | In - Public - P17 - TRUE | .(.Arrowhead Game Studios AB - Magicka.) -- D:\Steam\SteamApps\common\magicka\Magicka.exe
O87 - FAEL: "{9D6EC29D-182E-4DF5-BE44-26E9AB13F551}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\left 4 dead 2\left4dead2.exe
O87 - FAEL: "{2D043AE0-2D2F-4C77-ACAE-E9B30F5450DE}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\left 4 dead 2\left4dead2.exe
O87 - FAEL: "{AB3C795D-17B6-4FE2-B9D0-221550E82EA0}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
O87 - FAEL: "{EE415E2F-E819-412E-A13B-689EBD62E259}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
O87 - FAEL: "{EDF7BD25-D4AE-427A-BEE9-398CA67EC28E}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
O87 - FAEL: "{54DC505F-1576-453C-B055-6832428644A8}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
O87 - FAEL: "{7DC41E0F-A3BE-4585-BAB8-100493BA5A28}" | In - Public - P6 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.1267\Agent.exe
O87 - FAEL: "{E789390D-5D3B-4869-B9BB-568C3CDB9EC7}" | In - Public - P17 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.1267\Agent.exe
O87 - FAEL: "{E375B81F-C8B0-4FA9-96EA-BE69E9DEB585}" | In - Public - P6 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.1637\Agent.exe
O87 - FAEL: "{F5BEAD0D-8EAE-4FED-9F9F-66B2E0FB8C6E}" | In - Public - P17 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.1637\Agent.exe
O87 - FAEL: "{1E70137D-917D-4DA0-90CE-8D113004A1C2}" | In - Public - P6 - TRUE | .(.Blizzard Entertainment - StarCraft II Setup.) -- D:\Jeux\StarCraft II\StarCraft II.exe
O87 - FAEL: "{0448636C-3DD5-4C36-AFA3-F3930F656C35}" | In - Public - P17 - TRUE | .(.Blizzard Entertainment - StarCraft II Setup.) -- D:\Jeux\StarCraft II\StarCraft II.exe
O87 - FAEL: "{AC539CE3-CB34-4694-AB06-9375F83915E9}" | In - Public - P6 - TRUE | .(.Blizzard Entertainment - StarCraft II Setup.) -- D:\Jeux\StarCraft II\StarCraft II Public Test.exe
O87 - FAEL: "{534E0D4D-AD1D-4D61-A310-F6F44AC1FE0D}" | In - Public - P17 - TRUE | .(.Blizzard Entertainment - StarCraft II Setup.) -- D:\Jeux\StarCraft II\StarCraft II Public Test.exe
O87 - FAEL: "TCP Query User{A02D68C1-A312-44BA-9AF7-05FAE7C13AAF}D:\jeux\starcraft ii\versions\base23260\sc2.exe" | In - Private - P6 - TRUE | .(.Blizzard Entertainment, Inc. - StarCraft II.) -- D:\jeux\starcraft ii\versions\base23260\sc2.exe
O87 - FAEL: "UDP Query User{EED7B33C-74C4-421E-BFB4-6148D4EE5421}D:\jeux\starcraft ii\versions\base23260\sc2.exe" | In - Private - P17 - TRUE | .(.Blizzard Entertainment, Inc. - StarCraft II.) -- D:\jeux\starcraft ii\versions\base23260\sc2.exe
O87 - FAEL: "{21D320B0-9A50-4708-AA0A-6164CB2E8452}" | In - Public - P17 - TRUE | .(.Blizzard Entertainment, Inc. - StarCraft II.) -- D:\jeux\starcraft ii\versions\base23260\sc2.exe
O87 - FAEL: "{CD1052AF-E650-44A1-B0F8-FF14BA7D240C}" | In - Public - P6 - TRUE | .(.Blizzard Entertainment, Inc. - StarCraft II.) -- D:\jeux\starcraft ii\versions\base23260\sc2.exe
O87 - FAEL: "{04F39476-BD68-4F11-8382-F106F5266B48}" |In - None - P6 - TRUE | .(...) -- D:\uTorrent\uTorrent.exe (.not file.)
O87 - FAEL: "{A7232959-EA6B-403C-AF01-103D7C5C99E2}" |In - None - P17 - TRUE | .(...) -- D:\uTorrent\uTorrent.exe (.not file.)
O87 - FAEL: "{CE47BE4A-130D-4445-94E9-37814A646EE8}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\Awesomenauts\AwesomenautsLauncher.exe
O87 - FAEL: "{E50E41FD-22A8-4E7A-B12C-0722BE8C1FB9}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\Awesomenauts\AwesomenautsLauncher.exe
O87 - FAEL: "TCP Query User{B7226444-5956-404F-8E02-9A22F0856BF4}D:\jeux\maniaplanet\maniaplanet.exe" | In - Private - P6 - TRUE | .(.Nadeo - ManiaPlanet.) -- D:\jeux\maniaplanet\maniaplanet.exe
O87 - FAEL: "UDP Query User{8E1BBA9B-91CB-4A8F-8F3B-8EF5F5B62855}D:\jeux\maniaplanet\maniaplanet.exe" | In - Private - P17 - TRUE | .(.Nadeo - ManiaPlanet.) -- D:\jeux\maniaplanet\maniaplanet.exe
O87 - FAEL: "{FE0D1F94-D9BA-4513-945B-EE2BBFEA1F06}" | In - Public - P17 - TRUE | .(.Nadeo - ManiaPlanet.) -- D:\jeux\maniaplanet\maniaplanet.exe
O87 - FAEL: "{0622EB35-FD28-4569-B957-7EF5056B25BB}" | In - Public - P6 - TRUE | .(.Nadeo - ManiaPlanet.) -- D:\jeux\maniaplanet\maniaplanet.exe
O87 - FAEL: "{FFE22F7A-7AE4-4D3B-B38B-72E0C85C4297}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\Trine 2\trine2_launcher.exe
O87 - FAEL: "{26912FA6-02C3-424D-8D9E-4E94B7131A4C}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\Trine 2\trine2_launcher.exe
O87 - FAEL: "{B2665726-D465-4B0E-9781-391262869E17}" | In - Public - P6 - TRUE | .(.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- D:\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
O87 - FAEL: "{E32FF8C5-6E36-4128-B603-8C9910634987}" | In - Public - P17 - TRUE | .(.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- D:\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
O87 - FAEL: "{03A7D25B-7DDA-45CE-ACEF-973E3462D146}" | In - Public - P6 - TRUE | .(.Microsoft - HirezProxyLaunch.) -- D:\Steam\SteamApps\common\tribes\Binaries\Win32\HirezBridge.exe
O87 - FAEL: "{7EC77A90-BDE5-4607-91CA-FAF23C02D3C0}" | In - Public - P17 - TRUE | .(.Microsoft - HirezProxyLaunch.) -- D:\Steam\SteamApps\common\tribes\Binaries\Win32\HirezBridge.exe
O87 - FAEL: "{9B79E5C5-8E61-4C30-9636-92AE29EC2EBD}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\dota 2 test\dota.exe
O87 - FAEL: "{C79A57D4-21E5-487F-9D80-21DEA088EABD}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\dota 2 test\dota.exe
O87 - FAEL: "{375404B7-4CFE-4DC2-9D68-1471EFA0C04A}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\gamemaker_studio\GameMakerPlayer.exe
O87 - FAEL: "{29BF6FF7-550B-4BAA-9C03-82D9685EE33F}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\gamemaker_studio\GameMakerPlayer.exe
O87 - FAEL: "{B7C58E29-11BE-4385-9348-D87C5617012F}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\dota 2 beta\dota.exe
O87 - FAEL: "{730C000C-D3CE-45E6-BE2B-B01E62DEF2B7}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\dota 2 beta\dota.exe
O87 - FAEL: "{B527236B-22B1-4D49-96D8-B91C4F1FAF60}" | In - Public - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\AirMech\AirMech.exe
O87 - FAEL: "{DAAA1EE5-3237-44FE-B8D0-5C0184C8E9B1}" | In - Public - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\AirMech\AirMech.exe
~ Scan Firewall in 00mn 28s



---\\ Scan Additionnel (O88)
Database Version : v2.10682 - (12/02/2013)
Cl�s trouv�es (Keys found) : 126
Valeurs trouv�es (Values found) : 1
Dossiers trouv�s (Folders found) : 17
Fichiers trouv�s (Files found) : 0

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}] =>Adware.Bandoo
[HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}] =>Adware.Facemoods
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{5B1881D1-D9C7-46df-B041-1E593282C7D0}] =>Adware. BullseyeToolbar
[HKLM\Software\Wow6432Node\Classes\AppID\{5B1881D1-D9C7-46df-B041-1E593282C7D0}] =>Adware. BullseyeToolbar
[HKLM\Software\Classes\CLSID\{63E471BB-23F1-3A92-8D43-4079E7B7FA8E}] =>Toolbar.Agent
[HKLM\Software\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}] =>Adware.PriceGong
[HKLM\Software\Wow6432Node\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}] =>Adware.PriceGong
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Agent
[HKLM\Software\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Agent
[HKLM\Software\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4ccf-834A-2DDA4E29E39E}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49dd-99D7-DC866BE87DBC}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49dd-99D7-DC866BE87DBC}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}] =>Adware.Facemoods
[HKLM\Software\Wow6432Node\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}] =>Adware.Facemoods
[HKLM\Software\Classes\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Agent
[HKLM\Software\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}] =>Toolbar.Babylon
[HKLM\Software\Classes\CLSID\{B397BC55-576C-39E6-BF64-9E2A96317447}] =>Toolbar.Agent
[HKLM\Software\Classes\CLSID\{B973AB12-952F-31C4-A321-E8FA6FE4421E}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ba14329e-9550-4989-b3f2-9732e92d17cc}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ba14329e-9550-4989-b3f2-9732e92d17cc}] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA14329E-9550-4989-B3F2-9732E92D17CC}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA14329E-9550-4989-B3F2-9732E92D17CC}] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA14329E-9550-4989-B3F2-9732E92D17CC}] =>Toolbar.Conduit
[HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper
[HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper
[HKLM\Software\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}] =>Toolbar.Babylon
[HKLM\Software\Classes\CLSID\{EC5983DF-8DE2-31B5-989F-850F265E7F3C}] =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}] =>Adware.Facemoods
[HKLM\Software\Wow6432Node\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}] =>Adware.Facemoods
[HKLM\Software\Classes\AppID\escortapp.dll] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\escorteng.dll] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\PriceGongIE.DLL] =>Adware.PriceGong
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS] =>Toolbar.Agent
[HKLM\Software\Classes\b] =>Toolbar.Babylon
[HKLM\Software\Classes\Babylon.dskBnd] =>Toolbar.Babylon
[HKLM\Software\Classes\Babylon.dskBnd.1] =>Toolbar.Babylon
[HKLM\Software\Classes\bbylnApp.appCore] =>Toolbar.Babylon
[HKLM\Software\Classes\bbylnApp.appCore.1] =>Toolbar.Babylon
[HKLM\Software\Classes\esrv.BabylonESrvc] =>Toolbar.Babylon
[HKLM\Software\Classes\esrv.BabylonESrvc.1] =>Toolbar.Babylon
[HKLM\Software\Classes\LinkurySmartBar.DockingPanel] =>Toolbar.Agent
[HKLM\Software\Classes\LinkurySmartBar.LinkuryMenuForm] =>Toolbar.Agent
[HKLM\Software\Classes\LinkurySmartBar.LinkurySmartBar] =>Toolbar.Agent
[HKLM\Software\Classes\LinkurySmartBar.LinkurySmartBarBandObject] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok] =>Adware.PriceGong
[HKCU\Software\BabylonToolbar] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\BabylonToolbar] =>Toolbar.Babylon
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\SP Global] =>PUP.AdvancedSystemProtector
[HKCU\Software\AppDataLow\SProtector] =>PUP.AdvancedSystemProtector
[HKLM\Software\Wow6432Node\SProtector] =>PUP.AdvancedSystemProtector
[HKCU\Software\StartSearch] =>Hijacker.Agent
[HKCU\Software\SweetIM] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
[HKCU\Software\AppDataLow\Toolbar] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Vuze_Remote Toolbar] =>Toolbar.Agent
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416D-A838-AB665251703A}] =>Adware.Facemoods
[HKLM\Software\Classes\Prod.cap] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar.CT2504091] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT2504091] =>Toolbar.Conduit
[HKLM\Software\Classes\AppID\escortApp.DLL] =>PUP.Funmoods
[HKLM\Software\Classes\AppID\escortEng.DLL] =>PUP.Funmoods
[HKLM\Software\Classes\AppID\escorTlbr.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar]:{98889811-442D-49DD-99D7-DC866BE87DBC} =>Toolbar.Babylon
C:\Program Files (x86)\BabylonToolbar =>Toolbar.Babylon
C:\Program Files (x86)\Conduit =>Toolbar.Conduit
C:\Program Files (x86)\Vuze_Remote =>Toolbar.Conduit
C:\ProgramData\Babylon =>Toolbar.Babylon
C:\ProgramData\InstallMate =>Toolbar.Agent
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong =>Adware.PriceGong
C:\Users\Jeff\AppData\Roaming\Babylon =>Toolbar.Babylon
C:\Users\Jeff\AppData\Roaming\OpenCandy =>Adware.OpenCandy
C:\Users\Jeff\AppData\Local\Babylon =>Toolbar.Babylon
C:\Users\Jeff\AppData\Local\BrightBreezeSA =>Adware.SPointer
C:\Users\Jeff\AppData\Local\Conduit =>Toolbar.Conduit
C:\Users\Jeff\AppData\Local\Linkury =>Toolbar.Agent
C:\Users\Jeff\AppData\Local\Smartbar =>Toolbar.Agent
C:\Users\Jeff\AppData\LocalLow\Conduit =>Toolbar.Conduit
C:\Users\Jeff\AppData\LocalLow\PriceGong =>Adware.PriceGong
C:\Users\Jeff\AppData\LocalLow\Vuze_Remote =>Toolbar.Conduit
C:\Users\Jeff\AppData\Roaming\Mozilla\Firefox\Profiles\k81voj3o.default\Smartbar =>Toolbar.Agent
~ Scan Additionnel in 00mn 06s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "00005109F10090400000000000F01FEC" . (.Microsoft Office Proofing Tools 2013 - English.) -- C:\Windows\Installer\{90150000-001F-0409-0000-0000000FF1CE}\misc.exe,6
O90 - PUC: "00005109F100A0C00000000000F01FEC" . (.Microsoft Office Proofing Tools 2013 - Espa�ol.) -- C:\Windows\Installer\{90150000-001F-0C0A-0000-0000000FF1CE}\misc.exe,6
O90 - PUC: "00005109F100C0400000000000F01FEC" . (.Outils de v�rification linguistique 2013 de Microsoft Office�- Fran�ais.) -- C:\Windows\Installer\{90150000-001F-040C-0000-0000000FF1CE}\misc.exe,6
O90 - PUC: "015673174EC6E014E88B150517AFE061" . (.Logiciel de base du p�riph�rique HP Officejet Pro 8600.) -- C:\Windows\Installer\{71376510-6CE4-410E-8EB8-515071FA0E16}\ARP_Icon
O90 - PUC: "023B06FB3AA3BFD45B24DB6A4D1F6AE0" . (.Razer Mamba.) -- C:\Windows\Installer\{BF60B320-3AA3-4DFB-B542-BDA6D4F1A60E}\ARPPRODUCTICON.exe
O90 - PUC: "05EEE39BF8C9FD54594ED3586A2E243F" . (.DarksidersInstaller.) -- C:\Windows\Installer\{B93EEE50-9C8F-45DF-95E4-3D85A6E242F3}\ARPPRODUCTICON.exe
O90 - PUC: "076CFAAAB965F2A4284B2449E5D03EFE" . (.Windows Live Writer.) -- C:\Windows\Installer\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}\ApplicationIcon.ico
O90 - PUC: "0AA7CFB2C445A3E47869763FEB56B59E" . (.Microsoft XNA Framework Redistributable 4.0.) -- C:\Windows\Installer\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}\ProductIcon
O90 - PUC: "0ED9D238CFA898648991D4BBEDDBE3F4" . (.Microsoft Games for Windows - LIVE Redistributable.) -- C:\Windows\Installer\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}\GameForWindowsLiveRedist.exe
O90 - PUC: "11328E8261681E11EB0B8BCAF6798BE8" . (.Google�Earth.) -- C:\Windows\Installer\{28E82311-8616-11E1-BEB0-B8AC6F97B88E}\ARPPRODUCTICON.exe
O90 - PUC: "121E2D80A6F7BE3479DF26B944094330" . (.Microsoft_VC90_CRT_x86.) -- C:\Windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe
O90 - PUC: "1459101E2A01F4642AE34A2FD36A1506" . (.Mumble 1.2.3.) -- C:\Windows\Installer\{E1019541-10A2-464F-A23E-A4F23DA65160}\mumble.ico
O90 - PUC: "1483E79FD9AC4694D946626026142DF6" . (.Microsoft Games for Windows - LIVE.) -- C:\Windows\Installer\{F97E3841-CA9D-4964-9D64-26066241D26F}\GameForWindowsLiveDash.exe
O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon
O90 - PUC: "2B0163E6D0340BE4183EB2758E9BEDD8" . (.Bonjour.) -- C:\Windows\Installer\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}\Bonjour.ico
O90 - PUC: "2EEB87D0FF8F8944FAA1F38FC1DEA86C" . (.Razer Synapse 2.0.) -- C:\Windows\Installer\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}\ARPPRODUCTICON.exe
O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico
O90 - PUC: "474764EE8A405D84D8FDF0D8A3C3BC5E" . (.VirginMega.Fr Premium.) -- C:\Windows\Installer\{EE467474-04A8-48D5-8DDF-0F8D3A3CCBE5}\ARPPRODUCTICON.exe
O90 - PUC: "485DE6C657F953247881F1535B89418E" . (.Mamba Firmware Updater 1.13.) -- C:\Windows\Installer\{6C6ED584-9F75-4235-8718-1F35B59814E8}\ARPPRODUCTICON.exe
O90 - PUC: "5DAE30666B4BEAE44A1C9E62EEA20548" . (.HP Officejet Pro 8600 - Enqu�te sur l'am�lioration du produit.) -- C:\Windows\Installer\{6603EAD5-B4B6-4EAE-A4C1-E926EE2A5084}\ARP_Icon
O90 - PUC: "6242953CE135011419D1FBCE2EEC82C4" . (.osu!.) -- C:\Windows\Installer\{C3592426-531E-4110-911D-BFECE2CE284C}\osunew_0001.ico
O90 - PUC: "68AB67CA7DA7FFFFB744AA0000000010" . (.Adobe Reader X (10.1.5) MUI.) -- C:\Windows\Installer\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\SC_Reader.ico
O90 - PUC: "7692FC6BE18C0C0489510C7547EF1F02" . (.Skype Click to Call.) -- C:\Windows\Installer\{B6CF2967-C81E-40C0-9815-C05774FEF120}\IconUninstallIco
O90 - PUC: "76EA78D0BE4101C4885AADC61318BE81" . (.Windows Live Family Safety.) -- C:\Windows\Installer\{0D87AE67-14EB-4C10-88A5-DA6C3181EB18}\fssicon.ico
O90 - PUC: "7C43C21609E58D74B9C5F017D78D7262" . (.swMSM.) -- C:\Windows\Installer\{612C34C7-5E90-47D8-9B5C-0F717DD82726}\ARPPRODUCTICON.exe
O90 - PUC: "8D6C5F6B344C55B439F2EA115B47F34C" . (.HP Officejet Pro 8600 Aide.) -- C:\Windows\Installer\{B6F5C6D8-C443-4B55-932F-AE11B5743FC4}\ARP_Icon
O90 - PUC: "91785D291CBB3CC40AB8659C8E48CCC2" . (.Microsoft_VC80_CRT_x86.) -- C:\Windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe
O90 - PUC: "93B0BF4E199C7EE459DDA1A187753DD3" . (.Asmedia ASM104x USB 3.0 Host Controller Driver.) -- C:\Windows\Installer\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}\ARPPRODUCTICON.exe
O90 - PUC: "9AAE5152F9EAA0F438104B004338B8A8" . (.Livestream Procaster.) -- C:\Windows\Installer\{2515EAA9-AE9F-4F0A-8301-B40034838B8A}\procaster256.exe
O90 - PUC: "AE48807DEC2E935419BD7466CCE1F5F5" . (.Apple Mobile Device Support.) -- C:\Windows\Installer\{D70884EA-E2CE-4539-91DB-4766CC1E5F5F}\Installer.ico
O90 - PUC: "BD528ECCA74340041A68F5A4F6DD5874" . (.Apple Application Support.) -- C:\Windows\Installer\{CCE825DB-347A-4004-A186-5F4A6FDD8547}\WinInstall.ico
O90 - PUC: "C4E4AFE2F5B77F841A0CA18A287B9A3C" . (.HP Update.) -- C:\Windows\Installer\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}\ARPPRODUCTICON.exe
O90 - PUC: "D5ADFB912EF152F4799FA197DD40EE02" . (.Microsoft XNA Framework Redistributable 3.1.) -- C:\Windows\Installer\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}\ProductIcon
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "DA67D5E0BF3A5D84480098301B30713D" . (.iTunes.) -- C:\Windows\Installer\{0E5D76AD-A3FB-48D5-8400-8903B10317D3}\Installer.ico
O90 - PUC: "E7FF67E4ABEA78C47B88DC745E24B5D9" . (.Skype� 6.1.) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
O90 - PUC: "F2B0754273930F741AA68EB284A06799" . (.XSplit.) -- C:\Windows\Installer\{24570B2F-3937-47F0-A16A-E82B480A7699}\XSplit.Core.exe
O90 - PUC: "F6071111A6667304777712318267D401" . (.JavaFX 2.1.1.) -- C:\Windows\Installer\{1111706F-666A-4037-7777-211328764D10}\javaIcon.ico
O90 - PUC: "F650B3461C1698447979D448D601A1A7" . (.King Arthur's Gold.) -- C:\Windows\Installer\{643B056F-61C1-4489-9797-4D846D101A7A}\irrlicht.ico
O90 - PUC: "FC2B535FBB9C26140BA3206D79F123CC" . (.Microsoft Flight Simulator X.) -- C:\Windows\Installer\{F535B2CF-C9BB-4162-B03A-02D6971F32CC}\ARPPRODUCTICON.exe
~ Scan Files in 00mn 00s



---\\ MyComputer Name Space (O92)
O92 - MNS: ASUS WebStorage Drive - {d6044399-0b9e-4084-a9ac-c4b7c7800fcf}
~ Scan MNS in 00mn 00s



---\\ Etat g�n�ral des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 18/12/2012 65192 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 09/02/2013 251248 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 11/08/2012 55184 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 922240 | (asComSvc) . (...) - C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe
SR - | Auto 915584 | (asHmComSvc) . (...) - C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe
SR - | Auto 586880 | (AsSysCtrlService) . (...) - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 23/12/2009 203392 | (Device Handle Service) . (.ASUSTeK Computer Inc..) - C:\Windows\SysWOW64\AsHookDevice.exe
SS - | Auto 19/01/2012 136176 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 19/01/2012 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SR - | Auto 10/12/2012 2465712 | (Hamachi2Svc) . (.LogMeIn Inc..) - D:\hamachi-2.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\HFGService.dll (HFGService) . (.CSR, plc.) - C:\Windows\System32\svchost.exe
SR - | Auto 08/02/2013 8704 | (HiPatchService) . (.Hi-Rez Studios.) - D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
SS - | Demand 04/04/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
SR - | Demand 12/12/2012 641504 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 21/12/2010 325656 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 14/12/2012 398184 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
SR - | Auto 14/12/2012 682344 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
SS - | Demand 14/07/2012 113120 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SS - | Demand 30/12/1899 0 | (npggsvc) . (.INCA Internet Co., Ltd..) - C:\Windows\system32\GameMon.des
SR - | Auto 29/02/2012 889664 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SS - | Auto 01/03/2012 2348352 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SR - | Auto 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
SR - | Auto 02/10/2012 3064000 | (Skype C2C Service) . (.Skype Technologies S.A..) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
SS - | Auto 08/01/2013 161536 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SR - | Demand 15/02/2013 543144 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
SR - | Auto 16/07/2012 2673064 | (TeamViewer7) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
SR - | Auto 21/12/2010 2656280 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Scan Services in 00mn 13s



---\\ Liste des �mulateurs de CD/DVD (Hook du MBR)
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
~ Scan Emulateurs in 00mn 13s



End of the scan (2141 lines in 01mn 15s)(0)