cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 4/9/2013 5:42:42 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Olivier\Downloads
Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: France | Language: FRA | Date Format: dd/MM/yyyy

1013.30 Mb Total Physical Memory | 331.22 Mb Available Physical Memory | 32.69% Memory free
1.99 Gb Paging File | 1.06 Gb Available in Paging File | 53.16% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 108.89 Gb Total Space | 4.29 Gb Free Space | 3.94% Space Free | Partition Type: NTFS
Drive D: | 108.89 Gb Total Space | 84.33 Gb Free Space | 77.44% Space Free | Partition Type: NTFS

Computer Name: OLIVIER-PC | User Name: Olivier | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - C:\Users\Olivier\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe (Adobe Systems, Inc.)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe (SEC)
PRC - C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe (SAMSUNG Electronics)
PRC - C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe (Broadcom Corporation.)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
PRC - C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe ()
PRC - C:\Windows\System32\Rezip.exe ()


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - C:\Windows\System32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
MOD - C:\Program Files\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll ()


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV - (McAfee SiteAdvisor Service) -- c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe File not found
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (NisSrv) -- C:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation)
SRV - (MsMpSvc) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SRV - (SkypeUpdate) -- C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (BBSvc) -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (BBUpdate) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (btwdins) -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
SRV - (OberonGameConsoleService) -- C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe ()
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (Rezip) -- C:\Windows\System32\Rezip.exe ()


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - (RimUsb) -- System32\Drivers\RimUsb.sys File not found
DRV - (MpKsl50f5c136) -- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4C39D4F7-DBD4-4ED0-B3A6-E4AC7C5A09D2}\MpKsl50f5c136.sys File not found
DRV - (NisDrv) -- C:\Windows\System32\drivers\NisDrvWFP.sys (Microsoft Corporation)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (yukonw7) -- C:\Windows\System32\drivers\yk62x86.sys ()
DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation)
DRV - (btusbflt) -- C:\Windows\System32\drivers\btusbflt.sys (Broadcom Corporation.)
DRV - (Ltn_hyd7700pc) -- C:\Windows\System32\drivers\Ltn_hyd7700pc.sys (Liteon)
DRV - (Ltn_rc) -- C:\Windows\System32\drivers\Ltn_rc.sys (Liteon)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN_fr
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:19.0.2
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/03/08 01:57:26 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/03/08 01:55:34 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/03/08 01:57:26 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/03/08 01:55:34 | 000,000,000 | ---D | M]

[2013/04/08 17:57:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Olivier\AppData\Roaming\mozilla\Extensions
[2013/04/09 17:05:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Olivier\AppData\Roaming\mozilla\Firefox\Profiles\d7nn2sfi.default-1364406677322\extensions
[2013/04/08 17:57:26 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2013/03/08 01:57:26 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2013/01/11 19:06:44 | 000,001,609 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2012/09/16 21:42:11 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/12/12 18:52:23 | 000,002,035 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml
[2013/02/27 11:11:48 | 000,001,472 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2013/01/11 19:06:44 | 000,001,399 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2012/12/12 18:52:23 | 000,001,169 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml

[color=#E56717]========== Chrome ==========[/color]

CHR - homepage: http://www.google.com/

O1 HOSTS File: ([2009/06/10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll File not found
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKLM..\Run: [APLangApp] C:\Program Files\AnyPC Client\APLangApp.exe (DoctorSoft)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{77C58B9E-D393-44D3-8A48-45A335284D3B}: DhcpNameServer = 212.27.40.240 212.27.40.241
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{6871c96d-94f8-11df-9ca3-506313adc46c}\Shell - "" = AutoRun
O33 - MountPoints2\{6871c96d-94f8-11df-9ca3-506313adc46c}\Shell\AutoRun\command - "" = "E:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found


ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\windows\System32\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2013/04/08 18:30:13 | 000,000,000 | ---D | C] -- C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
[2013/04/08 18:28:57 | 000,000,000 | ---D | C] -- C:\Program Files\FreeTime
[2013/04/08 17:56:20 | 000,000,000 | ---D | C] -- C:\Program Files\Searchqu Toolbar
[2013/04/08 17:55:28 | 000,000,000 | ---D | C] -- C:\Users\Olivier\AppData\Roaming\FreeVideoConverter
[2013/04/08 17:55:28 | 000,000,000 | ---D | C] -- C:\Program Files\Free Video Converter
[2013/04/07 19:31:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013/04/07 19:30:34 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013/04/07 19:30:30 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2013/04/07 19:30:30 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2013/04/07 19:23:39 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2013/04/05 20:41:53 | 000,000,000 | ---D | C] -- C:\Users\Olivier\Desktop\PRET
[2013/03/30 11:11:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2013/03/23 18:25:53 | 000,000,000 | ---D | C] -- C:\Users\Olivier\Documents\Dossier Echanges Bluetooth
[2013/03/22 23:47:02 | 000,000,000 | ---D | C] -- C:\Users\Olivier\Documents\MODE D'EMPLOI
[2013/03/21 01:43:59 | 000,000,000 | ---D | C] -- C:\Users\Olivier\AppData\Roaming\Malwarebytes
[2013/03/21 01:43:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013/03/21 01:42:36 | 000,000,000 | ---D | C] -- C:\Users\Olivier\AppData\Local\Programs
[2013/03/20 23:46:35 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group
[2013/03/20 23:43:54 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2013/03/20 21:48:02 | 000,000,000 | ---D | C] -- C:\Users\Olivier\Desktop\MUSIQUE MP3
[2013/03/20 16:37:08 | 000,000,000 | ---D | C] -- C:\Users\Olivier\AppData\Roaming\uTorrent
[2013/03/20 16:15:10 | 000,000,000 | ---D | C] -- C:\ProgramData\SEarch-NNewiTeaub
[2013/03/20 16:11:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Breowsse2isavee
[2013/03/18 20:33:54 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\usb8023.sys
[2013/03/15 00:56:04 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtml.tlb
[2013/03/15 00:56:02 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jsproxy.dll
[2013/03/15 00:56:01 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieui.dll
[2013/03/15 00:56:00 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieUnatt.exe
[2013/03/15 00:55:59 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeeds.dll
[2013/03/15 00:55:56 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript9.dll
[2013/03/15 00:55:56 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\url.dll
[2013/03/15 00:55:52 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\inetcpl.cpl
[2013/03/11 13:51:11 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\windows\System32\javaws.exe
[2013/03/11 13:50:37 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\windows\System32\javaw.exe
[2013/03/11 13:50:37 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\windows\System32\WindowsAccessBridge.dll
[2013/03/11 13:50:36 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\windows\System32\java.exe
[2013/03/11 13:50:01 | 000,000,000 | ---D | C] -- C:\Program Files\Java

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2013/04/09 17:48:23 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013/04/09 17:15:01 | 000,702,884 | ---- | M] () -- C:\windows\System32\perfh00C.dat
[2013/04/09 17:15:01 | 000,614,394 | ---- | M] () -- C:\windows\System32\perfh009.dat
[2013/04/09 17:15:01 | 000,129,982 | ---- | M] () -- C:\windows\System32\perfc00C.dat
[2013/04/09 17:15:01 | 000,105,636 | ---- | M] () -- C:\windows\System32\perfc009.dat
[2013/04/09 17:14:47 | 000,010,272 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/04/09 17:14:47 | 000,010,272 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/04/09 17:07:16 | 000,001,054 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/04/09 17:06:55 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2013/04/09 17:06:50 | 796,889,088 | -HS- | M] () -- C:\hiberfil.sys
[2013/04/09 17:06:02 | 000,001,058 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/04/09 17:05:29 | 000,000,255 | ---- | M] () -- C:\windows\DeleteOnReboot.bat
[2013/04/09 17:01:06 | 000,001,002 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
[2013/04/08 18:30:13 | 000,001,160 | ---- | M] () -- C:\Users\Olivier\Desktop\Format Factory.lnk
[2013/04/08 18:28:35 | 053,466,540 | ---- | M] () -- C:\Users\Olivier\Desktop\Format Factory 3.0.exe
[2013/04/07 19:31:54 | 000,001,753 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013/04/02 12:33:22 | 000,237,088 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\MpSigStub.exe
[2013/03/30 11:11:30 | 000,002,170 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2013/03/29 20:23:22 | 001,420,920 | R--- | M] () -- C:\Users\Olivier\Desktop\ecussonNBbbr.bmp
[2013/03/29 20:23:03 | 000,011,462 | R--- | M] () -- C:\Users\Olivier\Desktop\Marianne.jpg
[2013/03/27 19:51:43 | 000,001,994 | ---- | M] () -- C:\Users\Olivier\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2013/03/27 17:57:44 | 260,498,888 | ---- | M] () -- C:\Users\Olivier\Documents\BACKUP.reg
[2013/03/25 16:10:01 | 000,000,017 | ---- | M] () -- C:\Users\Olivier\AppData\Local\resmon.resmoncfg
[2013/03/20 16:42:04 | 000,000,837 | ---- | M] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2013/03/12 23:29:15 | 000,693,976 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerApp.exe
[2013/03/12 23:29:15 | 000,073,432 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerCPLApp.cpl
[2013/03/11 14:19:52 | 000,046,475 | ---- | M] () -- C:\Users\Olivier\Desktop\mon-rapport-SNM.pdf
[2013/03/11 13:50:18 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\windows\System32\WindowsAccessBridge.dll
[2013/03/11 13:50:13 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\windows\System32\javaws.exe
[2013/03/11 13:50:12 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\windows\System32\javaw.exe
[2013/03/11 13:50:12 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\windows\System32\java.exe
[2013/03/11 13:50:10 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\windows\System32\npDeployJava1.dll
[2013/03/11 13:50:10 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\windows\System32\deployJava1.dll

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2013/04/09 17:05:05 | 000,000,255 | ---- | C] () -- C:\windows\DeleteOnReboot.bat
[2013/04/08 18:30:13 | 000,001,160 | ---- | C] () -- C:\Users\Olivier\Desktop\Format Factory.lnk
[2013/04/08 18:28:36 | 053,466,540 | ---- | C] () -- C:\Users\Olivier\Desktop\Format Factory 3.0.exe
[2013/04/07 19:31:54 | 000,001,753 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013/03/30 11:11:30 | 000,002,170 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2013/03/29 20:24:12 | 000,011,462 | R--- | C] () -- C:\Users\Olivier\Desktop\Marianne.jpg
[2013/03/29 20:23:57 | 001,420,920 | R--- | C] () -- C:\Users\Olivier\Desktop\ecussonNBbbr.bmp
[2013/03/27 17:55:31 | 260,498,888 | ---- | C] () -- C:\Users\Olivier\Documents\BACKUP.reg
[2013/03/25 16:10:01 | 000,000,017 | ---- | C] () -- C:\Users\Olivier\AppData\Local\resmon.resmoncfg
[2013/03/21 13:45:15 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013/03/20 16:42:04 | 000,000,837 | ---- | C] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2013/03/11 14:19:52 | 000,046,475 | ---- | C] () -- C:\Users\Olivier\Desktop\mon-rapport-SNM.pdf
[2013/01/21 18:01:40 | 000,007,632 | ---- | C] () -- C:\Users\Olivier\passeport olivier darcel.jpg
[2010/08/17 02:26:07 | 000,025,088 | ---- | C] () -- C:\Users\Olivier\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/07/17 12:26:47 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2009/07/14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
Invalid Environment Variable: alluserprofile
Invalid Environment Variable: alluserprofile

[color=#A23BEC]< %appdata%\*. >[/color]
[2010/09/06 15:55:33 | 000,000,000 | -HSD | M] -- C:\Users\Olivier\AppData\Roaming\.#
[2010/07/17 16:44:38 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\Adobe
[2012/09/20 22:37:27 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\Apple Computer
[2012/12/12 20:44:54 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\AVG2013
[2012/04/06 16:06:29 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\dvdcss
[2013/04/08 17:58:15 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\FreeVideoConverter
[2010/09/06 15:54:35 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\GameConsole
[2010/07/17 15:33:44 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\Google
[2010/07/17 13:18:21 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\Identities
[2011/01/28 21:47:56 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\LiteOn
[2010/07/17 15:39:57 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\Macromedia
[2013/03/21 01:43:59 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\Malwarebytes
[2013/03/21 01:41:12 | 000,000,000 | --SD | M] -- C:\Users\Olivier\AppData\Roaming\Microsoft
[2010/12/01 19:52:00 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\Mozilla
[2010/09/06 00:19:07 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\PlayFirst
[2012/12/09 00:51:05 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\Skype
[2012/12/12 20:38:47 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\TuneUp Software
[2013/04/07 22:13:03 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\uTorrent
[2012/03/26 23:00:55 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\vlc
[2011/03/11 19:59:40 | 000,000,000 | ---D | M] -- C:\Users\Olivier\AppData\Roaming\Windows Live Writer

[color=#A23BEC]< %appdata%\*.exe /s >[/color]
[2013/03/20 16:42:04 | 001,037,648 | ---- | M] (BitTorrent Inc.) -- C:\Users\Olivier\AppData\Roaming\uTorrent\uTorrent.exe

[color=#A23BEC]< %systemdrive%\*. >[/color]
[2010/07/17 13:18:10 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2013/04/07 19:34:13 | 000,000,000 | -HSD | M] -- C:\Config.Msi
[2009/07/14 06:53:55 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2009/12/10 03:25:19 | 000,000,000 | ---D | M] -- C:\Intel
[2010/07/17 12:38:30 | 000,000,000 | RH-D | M] -- C:\MSOCache
[2009/07/14 04:37:05 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2013/04/08 18:28:57 | 000,000,000 | R--D | M] -- C:\Program Files
[2013/04/09 17:05:02 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2010/07/17 12:11:54 | 000,000,000 | -HSD | M] -- C:\Recovery
[2013/04/09 17:49:22 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2010/07/17 12:13:10 | 000,000,000 | R--D | M] -- C:\Users
[2013/04/09 17:05:05 | 000,000,000 | ---D | M] -- C:\Windows

[color=#A23BEC]< %systemdrive%\*.exe >[/color]

[color=#A23BEC]< %programfiles%\*. >[/color]
[2012/01/13 21:02:59 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2009/12/10 03:36:28 | 000,000,000 | ---D | M] -- C:\Program Files\AnyPC Client
[2011/08/14 23:49:43 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update
[2009/12/10 03:32:04 | 000,000,000 | ---D | M] -- C:\Program Files\Atheros Client Installation Program
[2012/12/12 20:28:53 | 000,000,000 | ---D | M] -- C:\Program Files\AVG
[2011/10/13 19:06:34 | 000,000,000 | ---D | M] -- C:\Program Files\Bonjour
[2013/03/20 23:43:54 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2010/07/17 13:16:48 | 000,000,000 | ---D | M] -- C:\Program Files\CyberLink
[2010/07/17 12:14:23 | 000,000,000 | ---D | M] -- C:\Program Files\DIFX
[2011/08/20 10:09:50 | 000,000,000 | ---D | M] -- C:\Program Files\DVD Maker
[2013/03/20 23:46:35 | 000,000,000 | ---D | M] -- C:\Program Files\Enigma Software Group
[2013/04/08 18:16:58 | 000,000,000 | ---D | M] -- C:\Program Files\Free Video Converter
[2013/04/08 18:28:57 | 000,000,000 | ---D | M] -- C:\Program Files\FreeTime
[2013/03/30 11:10:40 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2009/12/11 01:39:07 | 000,000,000 | ---D | M] -- C:\Program Files\hsinstall
[2010/07/17 13:16:58 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2009/12/10 03:26:17 | 000,000,000 | ---D | M] -- C:\Program Files\Intel
[2013/03/15 10:33:58 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2013/04/07 19:30:34 | 000,000,000 | ---D | M] -- C:\Program Files\iPod
[2013/04/07 19:31:46 | 000,000,000 | ---D | M] -- C:\Program Files\iTunes
[2013/03/11 13:50:01 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2009/12/10 03:28:16 | 000,000,000 | ---D | M] -- C:\Program Files\Marvell
[2012/02/24 20:49:21 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft
[2009/07/14 06:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Games
[2011/07/20 09:55:19 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2010/07/17 12:59:22 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office Suite Activation Assistant
[2013/02/26 23:31:21 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Security Client
[2013/03/15 10:33:50 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2010/07/17 13:05:32 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2012/10/10 23:33:04 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Works
[2010/09/18 00:04:46 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2013/03/08 01:57:27 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2013/03/08 18:25:47 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Maintenance Service
[2009/07/14 06:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2009/12/10 04:02:57 | 000,000,000 | ---D | M] -- C:\Program Files\Phoenix Technologies Ltd
[2012/11/21 23:57:21 | 000,000,000 | ---D | M] -- C:\Program Files\QuickTime
[2009/12/10 03:27:24 | 000,000,000 | ---D | M] -- C:\Program Files\Realtek
[2009/12/10 03:30:27 | 000,000,000 | ---D | M] -- C:\Program Files\REALTEK Wireless LAN Software
[2009/07/14 06:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2012/07/04 15:25:58 | 000,000,000 | ---D | M] -- C:\Program Files\Safari
[2009/12/10 04:19:59 | 000,000,000 | ---D | M] -- C:\Program Files\Samsung
[2010/07/17 12:29:36 | 000,000,000 | ---D | M] -- C:\Program Files\Samsung Casual Games
[2013/04/09 17:05:04 | 000,000,000 | ---D | M] -- C:\Program Files\Searchqu Toolbar
[2012/12/09 00:45:11 | 000,000,000 | R--D | M] -- C:\Program Files\Skype
[2009/12/10 03:32:28 | 000,000,000 | ---D | M] -- C:\Program Files\Synaptics
[2010/09/25 00:29:23 | 000,000,000 | -H-D | M] -- C:\Program Files\Temp
[2009/07/14 06:53:23 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2010/07/17 12:14:33 | 000,000,000 | ---D | M] -- C:\Program Files\WIDCOMM
[2011/08/20 10:09:50 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Defender
[2012/07/29 15:44:25 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live
[2011/08/20 10:09:50 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Mail
[2011/08/20 10:09:50 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2009/07/14 06:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2011/08/20 10:09:50 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Viewer
[2011/07/20 14:29:12 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Portable Devices
[2011/08/20 10:09:54 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2009/10/06 08:06:36 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=00B0358734CAA32C39D181FE6916B178 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_523cdab8f40fe558\explorer.exe
[2011/02/26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009/07/14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011/02/26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009/10/31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011/02/26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010/11/20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2009/08/03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009/08/03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009/10/31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe
[2009/10/06 07:53:03 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=FC89FACA0473641CB625EDA9277D0885 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_51c00e6ddae85c4b\explorer.exe

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
[2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2009/10/28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009/10/28 07:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009/07/14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe

< End of report >

Publicité


Signaler le contenu de ce document

Publicité