cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ Report of ZHPDiag v2015.3.23.32 - Nicolas Coolman (23/03/2015)
~ Launched by ahmed (26/03/2015 15:05:20)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Web forum address : http://forum.nicolascoolman.fr
~ Translated by
~ Version State : Updated version.
~ White List : Deactivate by user
~ Elevation of privilege : OK
~ User Account Control : Not Found


---\\ Internet browsers
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox 36.0.4 (Defaut)

---\\ Windows product information
~ Langage: Anglais
Windows Automatic Updates : OK
Windows Genuine Advantage : OK
Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600)

---\\ System protection software
Avast Internet Security v10.2.2214
ESET Online Scanner v3

---\\ System optimization software

---\\ Sharing software PeerToPeer

---\\ Surveillance software
Adobe Flash Player 17 NPAPI

---\\ Information on the system
~ Processor: x86 Family 15 Model 6 Stepping 5, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2046 MB (44% free)
System Restore: Activé (Enable)
System drive C: has 129 GB (88%) free of 146 GB

---\\ Connection to the system mode
~ Computer Name: AHMED-0D4BC480F
~ User Name: ahmed
~ All Users Names: HelpAssistant, ASPNET, ahmed, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Environment variables
~ System Unit : C:\
~ %AppZHP% : C:\Documents and Settings\ahmed\Application Data\ZHP\
~ %AppData% : C:\Documents and Settings\ahmed\Application Data\
~ %Desktop% : C:\Documents and Settings\ahmed\Bureau\
~ %Favorites% : C:\Documents and Settings\ahmed\Favoris\
~ %LocalAppData% : C:\Documents and Settings\ahmed\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\ahmed\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ Enumeration of the disk units
A: Floppy drive, Flash card reader, USB Key (Not Inserted)
C: Hard drive, Flash drive, Thumb drive (Free 129 Go of 146 Go)
D: Hard drive, Flash drive, Thumb drive (Free 61 Go of 86 Go)
E: CD-ROM drive (Not Inserted)



---\\ State of the Windows Security Center
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 45 Scanned in 00mn 00s



---\\ Search Generic System Files
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.13/04/2008 - 18:34:04.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.E1948B1F45A176FB4A0251446A5AE86D] - (.Microsoft Corporation - Internet Extensions for Win32.) (.06/03/2014 - 18:58:52.) -- C:\WINDOWS\system32\wininet.dll [920064]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.13/04/2008 - 18:34:30.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 11:40:32.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 11:14:22.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 10:40:48.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.13/04/2008 - 17:57:40.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 08:36:06.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.13/04/2008 - 18:00:54.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 10:41:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 10:57:16.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 11:19:44.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 11:21:02.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 11:15:54.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.13/04/2008 - 18:47:24.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 11:19:44.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 11:32:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.13/04/2008 - 19:57:36.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.13/04/2008 - 17:56:06.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Generic Processes: Scanned in 00mn 00s



---\\ Hidden files state (Hidden/Total)
~ Mes images (My Pictures) : 1/2
~ Mes musiques (My Musics) : 1/2
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 1/9
~ Mes Documents (My Documents) : 1/17
~ Mon Bureau (My Desktop) : 0/45
~ Menu demarrer (Programs) : 1/31
~ Hidden Files: Scanned in 00mn 00s



---\\ Process running
[MD5.D0F5737FA2A52369199A78BCBCBF9CFE] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [643072] [PID.1124]
[MD5.35714DC1ADD995681D890D4382C75721] - (.Avast Software s.r.o. - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336] [PID.1692]
[MD5.9BCCEF665F197A5BBE86C679EFF608D0] - (.Avast Software s.r.o. - avast! firewall service.) -- C:\Program Files\AVAST Software\Avast\afwServ.exe [107448] [PID.1896]
[MD5.E7704CBF568815C1CAA6E513387BD3F2] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [65536] [PID.776]
[MD5.FB309A962EACD8D104225CA857614412] - (.DeviceVM, Inc. - Browser Configuration Utility.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe [375000] [PID.908]
[MD5.B13D5A0B23684A2B8930DA2D61AFBE1F] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe [19522592] [PID.1184]
[MD5.938FA6F63B210FB8EF5A7B2FC1229431] - (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [5511352] [PID.1544]
[MD5.382B151DAFFE4A9CE9DA9F564B66761E] - (.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [223464] [PID.1616]
[MD5.C5A75EB48E2344ABDC162BDA79E16841] - (.Microsoft Corporation - .NET Runtime Optimization Service.) -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [130384] [PID.1716]
[MD5.2C31DCAA88D269E13A935910DBB4CC61] - (...) -- C:\Program Files\Gigabyte\EasySaver\ESSVR.exe [68136] [PID.1780]
[MD5.22C118658BD1F4EEB8FD296A81D9F1C2] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe [3890768] [PID.1952]
[MD5.FEBD7218FA3616962F190AD5141DF29D] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [31346784] [PID.304]
[MD5.CEA8F7E45B7B098F5FB085BB6A6A4432] - (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\wscript.exe [155648] [PID.232]
[MD5.CCE5D71F19AB70D969F9819B5C88438D] - (.ATI Technologies Inc. - Catalyst Control Center: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe [65536] [PID.2588]
[MD5.E9C6EF9437ECB30911488F9313AD821A] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe [269848] [PID.2376]
[MD5.ACAD0683F183CA0FCD0621D7659E161C] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [376944] [PID.4820]
[MD5.45FCEA7B42DE8F4F48DD7E913376BF84] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [264816] [PID.1416]
[MD5.EF6B4B38332C4EB7B74C0A1CB7094E83] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8188928] [PID.6088]
~ Processes Running: Scanned in 00mn 01s



---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3)
C:\Documents and Settings\ahmed\Application Data\Mozilla\Firefox\Profiles\mevop1ji.default\prefs.js
M3 - MFPP: Plugins - [ahmed] -- C:\Documents and Settings\ahmed\Application Data\Mozilla\Firefox\Profiles\mevop1ji.default\searchplugins\google.xml
M3 - MFPP: Plugins - [ahmed] -- C:\Documents and Settings\ahmed\Application Data\Mozilla\Firefox\Profiles\mevop1ji.default\searchplugins\yahoo.xml
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.1.2] - (.VideoLAN - VLC media player Web Plugin.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.1.5] - (.VideoLAN - VLC media player Web Plugin.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.2.0] - (.VideoLAN - VLC media player Web Plugin.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN
~ Firefox Browser: 7 Scanned in 00mn 00s



---\\ Internet Explorer Extensions, Start, Search (R4,R3,R0,R1)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} . (.VideoLAN - VLC media player Web Plugin.) (No version) -- (.not file.) =>.VideoLAN
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.VideoLAN - VLC media player Web Plugin.) (No version) -- (.not file.) =>.VideoLAN
~ IE Browser: 11 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
~ Proxy management: Scanned in 00mn 00s



---\\ Line Analysis F0, F1, F2, F3 - IniFiles, Auto loading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\System32\userinit.exe,userinit.exe
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (24)
~ Hosts File: Scanned in 00mn 00s



---\\ Internet Explorer toolbars (O3)
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{01E04581-4EEE-11D0-BFE9-00AA005B4383} Orphan key
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{0E5CBF21-D15F-11D0-8301-00AA005B4383} Orphan key
~ Toolbar: Scanned in 00mn 00s



---\\ Auto loading programs from Registry and folders (O4)
O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [AvastUI.exe] . (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [BCU] . (.DeviceVM, Inc. - Browser Configuration Utility.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
O4 - HKCU\..\Run: [MicroUpdate] C:\Documents and Settings\ahmed\Application Data\MSDCSC\msdcsc.exe (.not file.)
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-57989841-1336601894-1606980848-1001\..\Run: [MicroUpdate] C:\Documents and Settings\ahmed\Application Data\MSDCSC\msdcsc.exe (.not file.)
~ Application: Scanned in 00mn 00s



---\\ Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu (O9)
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Orphan key
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
~ Winsock: 3 Scanned in 00mn 00s



---\\ Lop.com/Domain Hijackers (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{DF4BB333-43C5-4729-A28E-BE7BB0E81AD0}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{DF4BB333-43C5-4729-A28E-BE7BB0E81AD0}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{DF4BB333-43C5-4729-A28E-BE7BB0E81AD0}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
~ Domain: Scanned in 00mn 00s



---\\ Extra protocols (O18)
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ AppInit_DLLs Registry value Autorun (O20)
O20 - Winlogon Notify: AtiExtEvent . (.ATI Technologies Inc. - ATI External Event Utility DLL Module.) -- C:\WINDOWS\system32\Ati2evxx.dll
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: WgaLogon . (...) -- WgaLogon.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Winlogon: Scanned in 00mn 00s



---\\ ShellServiceObjectDelayLoad (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
~ SSODL: 5 Scanned in 00mn 00s



---\\ Non Microsoft non disabled Windows XP/NT/2000 Services (O23)
O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Avast Antivirus (avast! Antivirus) . (.Avast Software s.r.o. - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Firewall (avast! Firewall) . (.Avast Software s.r.o. - avast! firewall service.) - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Browser Configuration Utility Service (BCUService) . (.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: ES lite Service for program management. (ES lite Service) . (...) - C:\Program Files\Gigabyte\EasySaver\ESSVR.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
~ Services: 6 Scanned in 00mn 06s



---\\ Windows Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\ahmed\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\ahmed\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Task Planned Automatically (039)
[MD5.B0FE8D243A4EC6727D7EC5019C4B26B1] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [268464]
[MD5.6A786FF5FDEBD0DFAF71436543ACBF52] [APT] [avast! Emergency Update] (.Avast Software s.r.o..) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1131280]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: avast! Emergency Update - (.Avast Software s.r.o..) -- C:\WINDOWS\Tasks\avast! Emergency Update.job [362]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP - à la connexion.job [222]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP -mensuellement.job [216]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{A7F5DD3E-0AA9-454B-93DB-612D1E4EC6CD}.job [422]
~ Scheduled Task: 9 Scanned in 00mn 00s



---\\ ActiveSetup Installed Components (O40)
O40 - ASIC: Internet Explorer Version Update - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe =>.Microsoft Corporation
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe =>.Microsoft Corporation
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Contrôle ActiveX du Lecteur Windows Media.) -- C:\WINDOWS\system32\msdxm.ocx =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Contrôle ActiveX du Lecteur Windows Media.) -- C:\WINDOWS\system32\msdxm.ocx =>.Microsoft Corporation
O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} . (.Microsoft Corporation - DirectX Media -- DirectAnimation.) -- C:\WINDOWS\system32\danim.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp11.inf =>.Microsoft Corporation
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll
O40 - ASIC: Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Macromedia, Inc. - Macromedia Flash Player 6.0 r88.) -- C:\WINDOWS\system32\Macromed\Flash\Flash6.ocx
O40 - ASIC: Installed Component - S-1-5-21-57989841-1336601894-1606980848-1001 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexadécimal CLSID
O40 - ASIC: Installed Component - S-1-5-21-57989841-1336601894-1606980848-1001 - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS -- Not Hexadécimal CLSID
~ Active Setup: 21 Scanned in 00mn 00s



---\\ Drivers launched at startup (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (AppleCharger) . (...) - C:\WINDOWS\system32\DRIVERS\AppleCharger.sys
O41 - Driver: (aswKbd) . (.Avast Software s.r.o. - avast! Keyboard Filter Driver.) - C:\WINDOWS\system32\drivers\aswKbd.sys
O41 - Driver: (aswRdr) . (.Avast Software s.r.o. - avast! TDI Redirect Driver.) - C:\WINDOWS\system32\drivers\aswRdr.sys
O41 - Driver: (aswSnx) . (.Avast Software s.r.o. - avast! Virtualization Driver.) - C:\WINDOWS\system32\drivers\aswSnx.sys
O41 - Driver: (aswSP) . (.Avast Software s.r.o. - avast! self protection module.) - C:\WINDOWS\system32\drivers\aswSP.sys
O41 - Driver: (aswTdi) . (.Avast Software s.r.o. - avast! TDI Filter Driver.) - C:\WINDOWS\system32\drivers\aswTdi.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: (IDMTDI) . (.Tonec Inc. - Internet Download Manager TDI Driver.) - C:\WINDOWS\system32\DRIVERS\idmtdi.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: (iSafeKrnlMon) . (. - .) - C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys (.not file.) =>PUP.Elex
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
~ Drivers: 80 Scanned in 00mn 00s



---\\ Software installed (O42)
O42 - Logiciel: Add-Remove Master 6.0 Trial - (.MMH Soft.) [HKLM] -- Add-Remove Master 6.0_is1
O42 - Logiciel: Adobe Flash Player 17 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI
O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}
O42 - Logiciel: Avast Internet Security - (.AVAST Software.) [HKLM] -- Avast
O42 - Logiciel: Browser Configuration Utility - (.DeviceVM Inc..) [HKLM] -- {A2F991E7-DDCD-42B7-AFEC-47789A099FDC}
O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM] -- {88B2ABCF-9C00-47C1-8FC4-369B98845DD7}
O42 - Logiciel: ESET Online Scanner v3 - (...) [HKLM] -- ESET Online Scanner
O42 - Logiciel: EasySaver B9.0610.1 - (.Gigabyte.) [HKLM] -- {07300F01-89CA-4CF8-92BD-2A605EB83C95}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager
O42 - Logiciel: Lecteur Windows Media 11 - (...) [HKLM] -- Windows Media Player =>.Microsoft Corporation
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Mozilla Firefox 36.0.4 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 36.0.4 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: My Program version 1.5 - (...) [HKLM] -- My Program_is1
O42 - Logiciel: ON_OFF Charge B10.0422.2 - (.GIGABYTE.) [HKLM] -- {3DECD372-76A1-4483-BF10-B547790A3261}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Skype™ 7.2 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: WinRAR 5.21 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Media Format 11 runtime - (...) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11 =>.Microsoft Corporation
O42 - Logiciel: shamela library - (...) [HKLM] -- shamela library2.11
~ Logic: 43 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\4shared]
[HKCU\Software\ASProtect]
[HKCU\Software\ATI]
[HKCU\Software\AVAST Software]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\DC3_FEXEC] =>Trojan.Fynloski
[HKCU\Software\DeviceVM]
[HKCU\Software\DownloadCenter]
[HKCU\Software\DownloadManager]
[HKCU\Software\Dropbox]
[HKCU\Software\ESET]
[HKCU\Software\Google]
[HKCU\Software\Greatis]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Regrun]
[HKCU\Software\Skype]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\AVAST Software]
[HKLM\Software\Add-Remove Master 6.0]
[HKLM\Software\Atheros Communications Inc.]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Creative Tech]
[HKLM\Software\DeviceVM]
[HKLM\Software\Eset]
[HKLM\Software\Gemplus]
[HKLM\Software\Gigabyte]
[HKLM\Software\Google]
[HKLM\Software\Greatis]
[HKLM\Software\IM Providers]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Skype]
[HKLM\Software\VideoLAN]
[HKLM\Software\WinRAR]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Wow6432Node]
[HKLM\Software\mozilla.org]
~ Key Software: 136 Scanned in 00mn 00s



---\\ Contents of the Common Files folders (O43)
O43 - CFD: 17/03/2015 - 19:14:14 - [] ----D C:\Program Files\Add-Remove Master 6.0
O43 - CFD: 17/03/2015 - 17:33:16 - [] ----D C:\Program Files\ATI
O43 - CFD: 17/03/2015 - 17:36:28 - [] ----D C:\Program Files\ATI Technologies
O43 - CFD: 17/03/2015 - 20:12:56 - [] ----D C:\Program Files\AVAST Software
O43 - CFD: 17/03/2015 - 17:12:28 - [0] ----D C:\Program Files\ComPlus Applications
O43 - CFD: 17/03/2015 - 17:44:30 - [] --H-D C:\Program Files\DeviceVM
O43 - CFD: 26/03/2015 - 13:58:52 - [] ----D C:\Program Files\ESET
O43 - CFD: 22/03/2015 - 23:54:36 - [] ----D C:\Program Files\Fichiers communs
O43 - CFD: 17/03/2015 - 17:47:02 - [] ----D C:\Program Files\Gigabyte
O43 - CFD: 24/03/2015 - 09:37:12 - [] ----D C:\Program Files\Google
O43 - CFD: 17/03/2015 - 17:47:00 - [] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 17/03/2015 - 17:44:51 - [] ----D C:\Program Files\Intel
O43 - CFD: 25/03/2015 - 11:41:28 - [] ----D C:\Program Files\Internet Download Manager
O43 - CFD: 20/03/2015 - 11:22:58 - [] ----D C:\Program Files\Internet Explorer
O43 - CFD: 18/03/2015 - 03:44:01 - [] ----D C:\Program Files\Messenger
O43 - CFD: 17/03/2015 - 17:15:47 - [] ----D C:\Program Files\microsoft frontpage
O43 - CFD: 17/03/2015 - 17:58:14 - [] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 18/03/2015 - 03:07:38 - [] ----D C:\Program Files\Movie Maker
O43 - CFD: 26/03/2015 - 12:40:04 - [] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 24/03/2015 - 00:16:47 - [] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 20/03/2015 - 11:24:47 - [] ----D C:\Program Files\MSBuild
O43 - CFD: 17/03/2015 - 17:11:38 - [] ----D C:\Program Files\MSN
O43 - CFD: 17/03/2015 - 17:12:09 - [] ----D C:\Program Files\MSN Gaming Zone
O43 - CFD: 17/03/2015 - 17:13:48 - [] ----D C:\Program Files\NetMeeting
O43 - CFD: 17/03/2015 - 17:12:18 - [] ----D C:\Program Files\Online Services
O43 - CFD: 18/03/2015 - 03:08:10 - [] ----D C:\Program Files\Outlook Express =>.Microsoft Corporation
O43 - CFD: 17/03/2015 - 17:46:19 - [] ----D C:\Program Files\Realtek
O43 - CFD: 20/03/2015 - 11:24:40 - [] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 17/03/2015 - 17:14:15 - [] ----D C:\Program Files\Services en ligne
O43 - CFD: 17/03/2015 - 17:53:08 - [] ----D C:\Program Files\shamela library
O43 - CFD: 22/03/2015 - 23:54:36 - [] R---D C:\Program Files\Skype
O43 - CFD: 20/03/2015 - 15:57:23 - [] ----D C:\Program Files\Tweaking.com
O43 - CFD: 17/03/2015 - 17:30:37 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 25/03/2015 - 00:35:53 - [] ----D C:\Program Files\VideoLAN
O43 - CFD: 17/03/2015 - 18:03:46 - [] ----D C:\Program Files\Windows Media Connect 2
O43 - CFD: 17/03/2015 - 18:03:45 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 17/03/2015 - 17:12:01 - [] ----D C:\Program Files\Windows NT
O43 - CFD: 17/03/2015 - 17:14:18 - [0] --H-D C:\Program Files\WindowsUpdate
O43 - CFD: 21/03/2015 - 20:57:03 - [] ----D C:\Program Files\WinRAR
O43 - CFD: 17/03/2015 - 17:15:47 - [] ----D C:\Program Files\xerox
O43 - CFD: 26/03/2015 - 15:04:16 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 17/03/2015 - 17:47:00 - [] ----D C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 17/03/2015 - 17:33:29 - [] ----D C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 17/03/2015 - 17:13:44 - [] ----D C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 17/03/2015 - 18:08:06 - [] ----D C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 17/03/2015 - 17:13:47 - [] ----D C:\Program Files\Fichiers communs\Services
O43 - CFD: 22/03/2015 - 23:54:36 - [] ----D C:\Program Files\Fichiers communs\Skype
O43 - CFD: 17/03/2015 - 18:08:03 - [] ----D C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 17/03/2015 - 17:13:10 - [] ----D C:\Program Files\Fichiers communs\System
O43 - CFD: 17/03/2015 - 17:41:55 - [] ----D C:\Documents and Settings\All Users\Application Data\ATI
O43 - CFD: 17/03/2015 - 20:12:34 - [] ----D C:\Documents and Settings\All Users\Application Data\AVAST Software
O43 - CFD: 17/03/2015 - 18:13:50 - [0] ----D C:\Documents and Settings\All Users\Application Data\IDM
O43 - CFD: 17/03/2015 - 17:47:06 - [] ----D C:\Documents and Settings\All Users\Application Data\InstallShield
O43 - CFD: 17/03/2015 - 17:57:16 - [] -S--D C:\Documents and Settings\All Users\Application Data\Microsoft
O43 - CFD: 24/03/2015 - 00:16:46 - [] ----D C:\Documents and Settings\All Users\Application Data\Mozilla
O43 - CFD: 25/03/2015 - 23:29:21 - [0] ----D C:\Documents and Settings\All Users\Application Data\RegRun
O43 - CFD: 22/03/2015 - 23:54:45 - [] ----D C:\Documents and Settings\All Users\Application Data\Skype
O43 - CFD: 17/03/2015 - 18:01:59 - [] ----D C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
O43 - CFD: 17/03/2015 - 17:25:28 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 17/03/2015 - 19:12:41 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Add-Remove Master 6.0
O43 - CFD: 17/03/2015 - 20:16:02 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\AVAST Software
O43 - CFD: 17/03/2015 - 17:36:34 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Catalyst Control Center
O43 - CFD: 17/03/2015 - 18:21:07 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 17/03/2015 - 17:44:09 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\GIGABYTE
O43 - CFD: 17/03/2015 - 18:13:47 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Internet Download Manager
O43 - CFD: 17/03/2015 - 17:25:08 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux
O43 - CFD: 17/03/2015 - 17:26:53 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 22/03/2015 - 23:54:36 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Skype
O43 - CFD: 25/03/2015 - 00:36:11 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\VideoLAN
O43 - CFD: 21/03/2015 - 20:57:07 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinRAR
O43 - CFD: 26/03/2015 - 15:04:16 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP =>.Nicolas Coolman
O43 - CFD: 17/03/2015 - 17:53:04 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\المكتبة الشاملة
O43 - CFD: 24/03/2015 - 00:19:02 - [] ----D C:\Documents and Settings\ahmed\Application Data\Adobe
O43 - CFD: 17/03/2015 - 17:41:55 - [] ----D C:\Documents and Settings\ahmed\Application Data\ATI
O43 - CFD: 17/03/2015 - 20:16:27 - [] ----D C:\Documents and Settings\ahmed\Application Data\AVAST Software
O43 - CFD: 24/03/2015 - 00:21:32 - [] ----D C:\Documents and Settings\ahmed\Application Data\CrystalIdea Software
O43 - CFD: 26/03/2015 - 00:09:16 - [] ----D C:\Documents and Settings\ahmed\Application Data\dclogs
O43 - CFD: 26/03/2015 - 14:09:08 - [] ----D C:\Documents and Settings\ahmed\Application Data\DMCache
O43 - CFD: 17/03/2015 - 20:17:19 - [] ----D C:\Documents and Settings\ahmed\Application Data\Dropbox
O43 - CFD: 17/03/2015 - 17:30:39 - [] ----D C:\Documents and Settings\ahmed\Application Data\Identities
O43 - CFD: 24/03/2015 - 19:38:31 - [] ----D C:\Documents and Settings\ahmed\Application Data\IDM
O43 - CFD: 24/03/2015 - 00:19:02 - [] ----D C:\Documents and Settings\ahmed\Application Data\Macromedia
O43 - CFD: 24/03/2015 - 00:10:06 - [] -S--D C:\Documents and Settings\ahmed\Application Data\Microsoft
O43 - CFD: 24/03/2015 - 00:17:17 - [] ----D C:\Documents and Settings\ahmed\Application Data\Mozilla
O43 - CFD: 25/03/2015 - 21:18:18 - [] -SH-D C:\Documents and Settings\ahmed\Application Data\MSDCSC
O43 - CFD: 26/03/2015 - 15:02:13 - [] ----D C:\Documents and Settings\ahmed\Application Data\Skype
O43 - CFD: 26/03/2015 - 14:21:18 - [] ----D C:\Documents and Settings\ahmed\Application Data\vlc
O43 - CFD: 17/03/2015 - 17:32:37 - [] ----D C:\Documents and Settings\ahmed\Application Data\WinRAR
O43 - CFD: 26/03/2015 - 15:05:38 - [] ----D C:\Documents and Settings\ahmed\Application Data\ZHP =>.Nicolas Coolman
O43 - CFD: 17/03/2015 - 17:41:55 - [] ----D C:\Documents and Settings\ahmed\Local Settings\Application Data\ATI
O43 - CFD: 24/03/2015 - 09:36:44 - [] ----D C:\Documents and Settings\ahmed\Local Settings\Application Data\Google
O43 - CFD: 24/03/2015 - 00:10:06 - [] ----D C:\Documents and Settings\ahmed\Local Settings\Application Data\Identities
O43 - CFD: 26/03/2015 - 12:02:28 - [] ----D C:\Documents and Settings\ahmed\Local Settings\Application Data\Microsoft
O43 - CFD: 24/03/2015 - 00:16:57 - [] ----D C:\Documents and Settings\ahmed\Local Settings\Application Data\Mozilla
O43 - CFD: 22/03/2015 - 11:41:16 - [] ----D C:\Documents and Settings\ahmed\Local Settings\Application Data\PCHealth
O43 - CFD: 17/03/2015 - 17:56:51 - [] ----D C:\Documents and Settings\ahmed\Local Settings\Application Data\Skype
O43 - CFD: 17/03/2015 - 21:45:30 - [] ----D C:\Documents and Settings\ahmed\Local Settings\Application Data\Temp
O43 - CFD: 17/03/2015 - 17:30:41 - [] R---D C:\Documents and Settings\ahmed\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 26/03/2015 - 12:42:36 - [] R---D C:\Documents and Settings\ahmed\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 17/03/2015 - 18:13:47 - [] ----D C:\Documents and Settings\ahmed\Menu Démarrer\Programmes\Internet Download Manager
O43 - CFD: 21/03/2015 - 20:57:07 - [] ----D C:\Documents and Settings\ahmed\Menu Démarrer\Programmes\WinRAR
~ Program Folder: 101 Scanned in 00mn 00s



---\\ Last modified or created files under Windows and System32 (O44)
O44 - LFC:[MD5.15CABD0F7C00C47C70124907916AF3F1] - 17/03/2015 - 17:11:22 ---A- . (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
O44 - LFC:[MD5.88155247177638048422893737429D9E] - 17/03/2015 - 17:11:22 ---A- . (.Microsoft Corporation - Terminal Server Driver.) -- C:\WINDOWS\system32\Drivers\termdd.sys [40840]
O44 - LFC:[MD5.60101662853FA56F3F18F1DEA937FECB] - 17/03/2015 - 17:11:24 ---A- . (.Microsoft Corporation - Application d'assistance du composant de lo.) -- C:\WINDOWS\system32\mmfutil.dll [17920]
O44 - LFC:[MD5.0584A0A065B1FCA52B74FB65A7A19E09] - 17/03/2015 - 17:11:24 ---A- . (.Microsoft Corporation - Composant logiciel enfichable WMI.) -- C:\WINDOWS\system32\cmprops.dll [191488]
O44 - LFC:[MD5.86FC0740683709C5314722EF8CA64062] - 17/03/2015 - 17:11:24 ---A- . (.Microsoft Corporation - WMI Snapins.) -- C:\WINDOWS\system32\servdeps.dll [56320]
O44 - LFC:[MD5.8BC58C4B4471EA21D80FC28FF5788B3B] - 17/03/2015 - 17:11:24 ---A- . (.Microsoft Corporation - Windows Product Activation Configuration WM.) -- C:\WINDOWS\system32\licwmi.dll [58880]
O44 - LFC:[MD5.BD6C84E39CB7073BDA60A0B16B9298C2] - 17/03/2015 - 17:11:29 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\clbcatq.dll [498688]
O44 - LFC:[MD5.67217D3DF13594B3EE2A5F37ABA953B3] - 17/03/2015 - 17:11:29 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comsnap.dll [167424]
O44 - LFC:[MD5.4FC412747440950E8C0D24203ECCCD88] - 17/03/2015 - 17:11:29 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comsvcs.dll [1267200]
O44 - LFC:[MD5.D408E96DE7D1DCFC7D37A0C38B31EBF1] - 17/03/2015 - 17:11:29 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comuid.dll [539648]
O44 - LFC:[MD5.6B9D6177E2852C103114C07D62072851] - 17/03/2015 - 17:11:30 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\catsrv.dll [226304]
O44 - LFC:[MD5.32278ADD920546C94E035549D183A5C1] - 17/03/2015 - 17:11:30 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\catsrvps.dll [85504]
O44 - LFC:[MD5.BEB9AD8CD1E53495D4F584C9F7C1DB3E] - 17/03/2015 - 17:11:30 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\catsrvut.dll [625664]
O44 - LFC:[MD5.3E7E079AF9CFF7AFC4EDCC332E94F42E] - 17/03/2015 - 17:11:30 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\clbcatex.dll [110592]
O44 - LFC:[MD5.79D221D6ECCF243CA4560F4BE7BAD9F5] - 17/03/2015 - 17:11:30 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\stclient.dll [59392]
O44 - LFC:[MD5.8245A3D7C3C42DFA3536E7F38ACBA1FE] - 17/03/2015 - 17:11:31 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\colbact.dll [60416]
O44 - LFC:[MD5.84179A6F77F264A71651CE75DCDD7947] - 17/03/2015 - 17:11:31 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comaddin.dll [28160]
O44 - LFC:[MD5.C01BE55479D4323CFFE90C283C7E944D] - 17/03/2015 - 17:11:31 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comrepl.dll [97792]
O44 - LFC:[MD5.9D42C248D7C519147F1FA3111382A525] - 17/03/2015 - 17:11:31 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\dcomcnfg.exe [6144]
O44 - LFC:[MD5.DD421F87FD528E330088581E232431DB] - 17/03/2015 - 17:11:31 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\mtxdm.dll [30720]
O44 - LFC:[MD5.47E17AB71B070D0020D765753D3026AB] - 17/03/2015 - 17:11:31 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\mtxex.dll [4096]
O44 - LFC:[MD5.C725F25A2622BF21A761A609DAB360A9] - 17/03/2015 - 17:11:31 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\mtxlegih.dll [34304]
O44 - LFC:[MD5.84D05413E503D99A8502C3D52CA59501] - 17/03/2015 - 17:11:32 ---A- . (.Microsoft Corporation - MS DTC OLE Transactions interface proxy DLL.) -- C:\WINDOWS\system32\msdtcprx.dll [428032]
O44 - LFC:[MD5.8648D670AE0D95C95E7BBB5B80661796] - 17/03/2015 - 17:11:32 ---A- . (.Microsoft Corporation - MS DTC console program.) -- C:\WINDOWS\system32\msdtc.exe [6144]
O44 - LFC:[MD5.2275F850DFCE63C9BE9ADBF42664CFAD] - 17/03/2015 - 17:11:32 ---A- . (.Microsoft Corporation - MS DTC helper APIs DLL.) -- C:\WINDOWS\system32\xolehlp.dll [11776]
O44 - LFC:[MD5.DCC4CDFDD78E6EE72E268D62EF0B82DB] - 17/03/2015 - 17:11:32 ---A- . (.Microsoft Corporation - MS DTC log manager DLL.) -- C:\WINDOWS\system32\msdtclog.dll [58880]
O44 - LFC:[MD5.FA5B701F78F7C1B7C1387941FA6374F7] - 17/03/2015 - 17:11:32 ---A- . (.Microsoft Corporation - MS DTC transaction manager DLL.) -- C:\WINDOWS\system32\msdtctm.dll [956928]
O44 - LFC:[MD5.0B51B489692C0DD1890E674A122192D2] - 17/03/2015 - 17:11:32 ---A- . (.Microsoft Corporation - Microsoft database support DLL for Oracle.) -- C:\WINDOWS\system32\mtxoci.dll [91648]
O44 - LFC:[MD5.0B7B1CD44A4B7A8B0B3E122B529629BB] - 17/03/2015 - 17:11:33 ---A- . (.Microsoft Corporation - Configuration Backend Interface.) -- C:\WINDOWS\system32\cfgbkend.dll [39424]
O44 - LFC:[MD5.1BDA51C28FAAB97D8A88D59C8A221485] - 17/03/2015 - 17:11:33 ---A- . (.Microsoft Corporation - DLL Interface to TermDD Device Driver.) -- C:\WINDOWS\system32\icaapi.dll [11264]
O44 - LFC:[MD5.9F63D9C5B238ED1C375D417EFF3D5BE7] - 17/03/2015 - 17:11:33 ---A- . (.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) -- C:\WINDOWS\system32\sessmgr.exe [142848]
O44 - LFC:[MD5.2AC243531AA1DEEC9B6920ED1DF62CA4] - 17/03/2015 - 17:11:33 ---A- . (.Microsoft Corporation - MS DTC administrative component DLL.) -- C:\WINDOWS\system32\msdtcuiu.dll [161792]
O44 - LFC:[MD5.C3E6A7A4B35DD176B5D17C0EA485996B] - 17/03/2015 - 17:11:33 ---A- . (.Microsoft Corporation - Pilote multimédia du service Terminal Serve.) -- C:\WINDOWS\system32\rdpsnd.dll [19968]
O44 - LFC:[MD5.B46EF6930DDE7393FB4BD0150BCC786C] - 17/03/2015 - 17:11:33 ---A- . (.Microsoft Corporation - RDP Clip Monitor.) -- C:\WINDOWS\system32\rdpclip.exe [62976]
O44 - LFC:[MD5.70413FB509C8E5248C84F17767557F24] - 17/03/2015 - 17:11:33 ---A- . (.Microsoft Corporation - RDP Extension DLL.) -- C:\WINDOWS\system32\rdpwsx.dll [87176]
O44 - LFC:[MD5.7BC4641B6C54338593D19130EB674620] - 17/03/2015 - 17:11:33 ---A- . (.Microsoft Corporation - RDSHost Client Module.) -- C:\WINDOWS\system32\rdchost.dll [147968]
O44 - LFC:[MD5.710BC85A8C22626EE094439E3EA0D38C] - 17/03/2015 - 17:11:33 ---A- . (.Microsoft Corporation - Service Terminal Server.) -- C:\WINDOWS\system32\termsrv.dll [297984]
O44 - LFC:[MD5.F9DE7D28A9D584A6D1B22512E45631BC] - 17/03/2015 - 17:11:33 ---A- . (.Microsoft Corporation - Utilitaire d'interrogation de processus.) -- C:\WINDOWS\system32\qprocess.exe [20992]
O44 - LFC:[MD5.15F67931677258D482A93990F8B3F3AF] - 17/03/2015 - 17:11:34 ---A- . (.Microsoft Corporation - Extension du Panneau de configuration Sessi.) -- C:\WINDOWS\system32\remotepg.dll [61952]
O44 - LFC:[MD5.454F013E6F538FE66A0D567B939BF360] - 17/03/2015 - 17:11:34 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop TSRDP Session Add-.) -- C:\WINDOWS\system32\rdsaddin.exe [13824]
O44 - LFC:[MD5.81F64944CDC453A79EB482B99F1A4264] - 17/03/2015 - 17:11:34 ---A- . (.Microsoft Corporation - RDSHost Server Module.) -- C:\WINDOWS\system32\rdshost.exe [67072]
O44 - LFC:[MD5.DAEA57DAD53ABAD0F0BFB8E1EE46F422] - 17/03/2015 - 17:11:34 ---A- . (.Microsoft Corporation - Terminal Services ActiveX Client.) -- C:\WINDOWS\system32\mstscax.dll [2067456]
O44 - LFC:[MD5.A6A06A89A6ABC8964F7D147B3245F217] - 17/03/2015 - 17:11:35 ---A- . (.Microsoft Corporation - Anywhere access client.) -- C:\WINDOWS\system32\aaclient.dll [136192]
O44 - LFC:[MD5.3EFE86DBFD6B34FE2ADF6602D657342D] - 17/03/2015 - 17:11:35 ---A- . (.Microsoft Corporation - Fournisseur d'infrastructure WMI de configu.) -- C:\WINDOWS\system32\tscfgwmi.dll [94208]
O44 - LFC:[MD5.6471A66807F5E104E4885F5B67349397] - 17/03/2015 - 17:11:35 ---A- . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys [12040]
O44 - LFC:[MD5.43AF5212BD8FB5BA6EED9754358BD8F7] - 17/03/2015 - 17:11:35 ---A- . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only,.) -- C:\WINDOWS\system32\Drivers\rdpwd.sys [139784]
O44 - LFC:[MD5.87B6A9310687594F315798D532721F65] - 17/03/2015 - 17:11:35 ---A- . (.Microsoft Corporation - RPC/HTTP Downlevel Side-by-side Runtime.) -- C:\WINDOWS\system32\rhttpaa.dll [290304]
O44 - LFC:[MD5.C56B6D0402371CF3700EB322EF3AAF61] - 17/03/2015 - 17:11:35 ---A- . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys [21896]
O44 - LFC:[MD5.B7BD738EBA6E3C4C0744B4947CB54572] - 17/03/2015 - 17:11:35 ---A- . (.Microsoft Corporation - TSGateway QEC.) -- C:\WINDOWS\system32\tsgqec.dll [53248]
O44 - LFC:[MD5.F12E772F91FF7943AB1D8362E24E18C5] - 17/03/2015 - 17:11:36 ---A- . (.Microsoft Corporation - Afficheur de l'album Windows NT.) -- C:\WINDOWS\system32\clipbrd.exe [104448]
O44 - LFC:[MD5.D02A926D853A7B248CCDDE5007220543] - 17/03/2015 - 17:11:36 ---A- . (.Microsoft Corporation - Paint.) -- C:\WINDOWS\system32\mspaint.exe [347648]
O44 - LFC:[MD5.D8A768A65A549F07AE6329B8558A0FBB] - 17/03/2015 - 17:11:36 ---A- . (.Microsoft Corporation - Spider.) -- C:\WINDOWS\system32\spider.exe [539136]
O44 - LFC:[MD5.6A1D9675F87094A7FAB33A67A4C25F1C] - 17/03/2015 - 17:11:37 ---A- . (.Hilgraeve, Inc. - Bibliothèque d'applications HyperTerminal.) -- C:\WINDOWS\system32\hypertrm.dll [354304]
O44 - LFC:[MD5.247C9A4B86B395D847353D7169920D42] - 17/03/2015 - 17:11:37 ---A- . (.Microsoft Corporation - Accessoires du magnétophone.) -- C:\WINDOWS\system32\sndrec32.exe [133120]
O44 - LFC:[MD5.72153A1D6181A6C72C1427E782E3A367] - 17/03/2015 - 17:11:37 ---A- . (.Microsoft Corporation - Assistant Accessibilité Microsoft.) -- C:\WINDOWS\system32\accwiz.exe [190464]
O44 - LFC:[MD5.36718363842D69F6EB26AEBEECD72239] - 17/03/2015 - 17:11:37 ---A- . (.Microsoft Corporation - DLL du Panneau de configuration.) -- C:\WINDOWS\system32\access.cpl [71680]
O44 - LFC:[MD5.D0BB79521316E5926A5C3DB49E812428] - 17/03/2015 - 17:11:37 ---A- . (.Microsoft Corporation - Media Player.) -- C:\WINDOWS\system32\mplay32.exe [124928]
O44 - LFC:[MD5.2CE7B1EEB99C14032C0E2201B004F80E] - 17/03/2015 - 17:11:47 ---A- . (...) -- C:\WINDOWS\system32\wmimgmt.msc [63488]
O44 - LFC:[MD5.CDD932EDCB756FB5F7CE5E2F090BA838] - 17/03/2015 - 17:11:52 ---A- . (...) -- C:\WINDOWS\system32\msdtcprf.h [768]
O44 - LFC:[MD5.FDA18F513403E67CAE9BF0D2DD948B28] - 17/03/2015 - 17:11:52 ---A- . (...) -- C:\WINDOWS\system32\msdtcprf.ini [3914]
O44 - LFC:[MD5.4701BA735D535D9F46AB2A285610A04B] - 17/03/2015 - 17:11:52 ---A- . (.Microsoft Corporation - Extension de configuration de connexion Ter.) -- C:\WINDOWS\system32\rdpcfgex.dll [4608]
O44 - LFC:[MD5.2CA1060C5CF9C03B865977F12123C3F8] - 17/03/2015 - 17:11:52 ---A- . (.Microsoft Corporation - Modem Connection Driver.) -- C:\WINDOWS\system32\cdmodem.dll [15872]
O44 - LFC:[MD5.CEBA968375EE0B55094FFBA03EE69BAF] - 17/03/2015 - 17:11:52 ---A- . (.Microsoft Corporation - Utilitaire d'interrogation Terminal Server.) -- C:\WINDOWS\system32\qappsrv.exe [17408]
O44 - LFC:[MD5.8A6A5D2505D1BF424EAFD38D76D6C0E9] - 17/03/2015 - 17:11:52 ---A- . (.Microsoft Corporation - Utilitaire de déconnexion de session.) -- C:\WINDOWS\system32\logoff.exe [15872]
O44 - LFC:[MD5.25900127DAE605546899D80EA6AE61FB] - 17/03/2015 - 17:11:52 ---A- . (.Microsoft Corporation - Utilitaire de gestion des sessions de requê.) -- C:\WINDOWS\system32\qwinsta.exe [22528]
O44 - LFC:[MD5.31BF3B4C0D04EC84684F58D14F521426] - 17/03/2015 - 17:11:52 ---A- . (.Microsoft Corporation - Utilitaire de message.) -- C:\WINDOWS\system32\msg.exe [22528]
O44 - LFC:[MD5.4A547D74B435E78418BE06406250C1D3] - 17/03/2015 - 17:11:53 ---A- . (...) -- C:\WINDOWS\system32\tslabels.h [3286]
O44 - LFC:[MD5.F9A14C7B36E10052A1B0F071BC3C1C65] - 17/03/2015 - 17:11:53 ---A- . (...) -- C:\WINDOWS\system32\tslabels.ini [27768]
O44 - LFC:[MD5.9F27B27C8405FEAF7DFC4DA3751DEF22] - 17/03/2015 - 17:11:53 ---A- . (...) -- C:\WINDOWS\system32\usrlogon.cmd [1263]
O44 - LFC:[MD5.043D073DFF5E3AD85FDA67D8C30F4305] - 17/03/2015 - 17:11:53 ---A- . (.Microsoft Corporation - Jeu FreeCell du pack Entertainment.) -- C:\WINDOWS\system32\freecell.exe [55808]
O44 - LFC:[MD5.DDCA854934C0D4EF46E8E093F3446ABF] - 17/03/2015 - 17:11:53 ---A- . (.Microsoft Corporation - La Dame de Pique en réseau.) -- C:\WINDOWS\system32\mshearts.exe [128000]
O44 - LFC:[MD5.9C847DF5E1F783716032977AE4559CCC] - 17/03/2015 - 17:11:53 ---A- . (.Microsoft Corporation - Registry Initializer.) -- C:\WINDOWS\system32\regini.exe [33792]
O44 - LFC:[MD5.E167CEBDBADE82F4A6E30BBAF495800B] - 17/03/2015 - 17:11:53 ---A- . (.Microsoft Corporation - Utilitaire d'arrêt de processus des service.) -- C:\WINDOWS\system32\tskill.exe [16896]
O44 - LFC:[MD5.3861B0195ACDCD8F1187C37617C090C4] - 17/03/2015 - 17:11:53 ---A- . (.Microsoft Corporation - Utilitaire d'arrêt du système.) -- C:\WINDOWS\system32\tsshutdn.exe [17408]
O44 - LFC:[MD5.8F0514EF34C2A69036CC55F91F903168] - 17/03/2015 - 17:11:53 ---A- . (.Microsoft Corporation - Utilitaire de connexion de session.) -- C:\WINDOWS\system32\tscon.exe [15360]
O44 - LFC:[MD5.B1D3D78F35E85E7481A9651BB11394B0] - 17/03/2015 - 17:11:53 ---A- . (.Microsoft Corporation - Utilitaire de contrôle à distance de sessio.) -- C:\WINDOWS\system32\shadow.exe [15360]
O44 - LFC:[MD5.C2E457CCCC8691F3194D12E4F5E70EA4] - 17/03/2015 - 17:11:53 ---A- . (.Microsoft Corporation - Utilitaire de déconnexion de session.) -- C:\WINDOWS\system32\tsdiscon.exe [14848]
O44 - LFC:[MD5.946B7A66354D385D9242F9AFC1CAC7C0] - 17/03/2015 - 17:11:53 ---A- . (.Microsoft Corporation - Utilitaire de réinitialisation de session.) -- C:\WINDOWS\system32\rwinsta.exe [16384]
O44 - LFC:[MD5.C05B691CC2328DB5456AECD616E81970] - 17/03/2015 - 17:11:53 ---A- . (.Microsoft Corporation - Utilitaire de réinitialisation des services.) -- C:\WINDOWS\system32\reset.exe [10240]
O44 - LFC:[MD5.405E1EF8E3C88E9BCD2853382BB12430] - 17/03/2015 - 17:11:54 ---A- . (...) -- C:\WINDOWS\system32\bopomofo.uce [22984]
O44 - LFC:[MD5.4FDED87068052EEB9B72A97FDBC141DB] - 17/03/2015 - 17:11:54 ---A- . (...) -- C:\WINDOWS\system32\gb2312.uce [24006]
O44 - LFC:[MD5.CACA53644879416250C9BFA6A109E3D8] - 17/03/2015 - 17:11:54 ---A- . (.Microsoft Corporation - Applet du jeu Solitaire.) -- C:\WINDOWS\system32\sol.exe [57344]
O44 - LFC:[MD5.5911F4AE105C7469636F7ADCEA35349F] - 17/03/2015 - 17:11:54 ---A- . (.Microsoft Corporation - Application Calculatrice de Windows.) -- C:\WINDOWS\system32\calc.exe [115200]
O44 - LFC:[MD5.C525A8A367F9641ABB8FF32C96BD08A4] - 17/03/2015 - 17:11:54 ---A- . (.Microsoft Corporation - DLL des noms UNICODE pour UCE.) -- C:\WINDOWS\system32\getuname.dll [634880]
O44 - LFC:[MD5.EA682C022F7204CC8E8C9EF5DCE29356] - 17/03/2015 - 17:11:54 ---A- . (.Microsoft Corporation - Jeu Démineur du pack Entertainment.) -- C:\WINDOWS\system32\winmine.exe [119808]
O44 - LFC:[MD5.0DD55909896EF797C9E5E12662CD3BDF] - 17/03/2015 - 17:11:54 ---A- . (.Microsoft Corporation - Table des caractères.) -- C:\WINDOWS\system32\charmap.exe [80896]
O44 - LFC:[MD5.39F43DBCE366B2561DF073B4C0839299] - 17/03/2015 - 17:11:55 ---A- . (...) -- C:\WINDOWS\Bulles de savon.bmp [65978]
O44 - LFC:[MD5.DAC71A10A6A71CB6E3F427AE3283734B] - 17/03/2015 - 17:11:55 ---A- . (...) -- C:\WINDOWS\Rosace bleue 16.bmp [1272]
O44 - LFC:[MD5.73D70ED3EC3BBFD8FD35DF431C38F374] - 17/03/2015 - 17:11:55 ---A- . (...) -- C:\WINDOWS\Tasse à café.bmp [17062]
O44 - LFC:[MD5.038F6AD6CEE43585D814CDBC7CDFD3EC] - 17/03/2015 - 17:11:55 ---A- . (...) -- C:\WINDOWS\system32\ideograf.uce [60458]
O44 - LFC:[MD5.7C0C25F4BA1084C4ABBEEA2C74194C5F] - 17/03/2015 - 17:11:55 ---A- . (...) -- C:\WINDOWS\system32\kanji_1.uce [6948]
O44 - LFC:[MD5.529BBD63519BBD654EF328454019693F] - 17/03/2015 - 17:11:55 ---A- . (...) -- C:\WINDOWS\system32\kanji_2.uce [8484]
O44 - LFC:[MD5.7A7A04370A6030B9B0E8178DAD4A6E41] - 17/03/2015 - 17:11:55 ---A- . (...) -- C:\WINDOWS\system32\korean.uce [12876]
O44 - LFC:[MD5.8CA32E9D986FA76F60EFBCFCD9D80A58] - 17/03/2015 - 17:11:55 ---A- . (...) -- C:\WINDOWS\system32\shiftjis.uce [16740]
O44 - LFC:[MD5.30F5568679A54042F99CA9EC1102EBCD] - 17/03/2015 - 17:11:55 ---A- . (...) -- C:\WINDOWS\system32\subrange.uce [93702]
O44 - LFC:[MD5.1AC5E83598D4F2143B59A2D893C3279A] - 17/03/2015 - 17:11:56 ---A- . (...) -- C:\WINDOWS\Granit vert.bmp [26582]
O44 - LFC:[MD5.203EF178BF8B0A8EC34E27E4DEDB6349] - 17/03/2015 - 17:11:56 ---A- . (...) -- C:\WINDOWS\Jour de pêche.bmp [17336]
O44 - LFC:[MD5.EB3BFC14E41FBAA41B4FD4489AA82D39] - 17/03/2015 - 17:11:56 ---A- . (...) -- C:\WINDOWS\Mur de Santa Fe.bmp [65832]
O44 - LFC:[MD5.3A8B85AB7B415BF3F8AFE285DFE0CE29] - 17/03/2015 - 17:11:56 ---A- . (...) -- C:\WINDOWS\Plume.bmp [16730]
O44 - LFC:[MD5.927A66BD587E31CB12D3AB25381658DC] - 17/03/2015 - 17:11:56 ---A- . (...) -- C:\WINDOWS\Rhododendron.bmp [17362]
O44 - LFC:[MD5.5B4AC407E566076BB726BA91E067D313] - 17/03/2015 - 17:11:56 ---A- . (...) -- C:\WINDOWS\Rivière Sumida.bmp [26680]
O44 - LFC:[MD5.280920B6773C74C3649A934257112BE1] - 17/03/2015 - 17:11:56 ---A- . (...) -- C:\WINDOWS\Vent de prairie.bmp [65954]
O44 - LFC:[MD5.5290EA6951F4724259F423B12C8E1393] - 17/03/2015 - 17:11:56 ---A- . (...) -- C:\WINDOWS\Zapotec.bmp [9522]
O44 - LFC:[MD5.E7EF0C8FE4CAE6B9CA990D5B15A079CE] - 17/03/2015 - 17:12:00 ---A- . (.Microsoft Corporation - Contrôles de mesure.) -- C:\WINDOWS\system32\avmeter.dll [16384]
O44 - LFC:[MD5.2A99260794224489F29B628717B7947E] - 17/03/2015 - 17:12:00 ---A- . (.Microsoft Corporation - Conversation pour Windows NT.) -- C:\WINDOWS\system32\winchat.exe [35840]
O44 - LFC:[MD5.128CEA94B381C19C655AA18DA74ECA0A] - 17/03/2015 - 17:12:00 ---A- . (.Microsoft Corporation - Numéroteur TAPI 3.0 et Visualisateur de con.) -- C:\WINDOWS\system32\avtapi.dll [232960]
O44 - LFC:[MD5.F7B2FA971A70A335F92785DEF9478B62] - 17/03/2015 - 17:12:00 ---A- . (.Microsoft Corporation - Wave Manipulation Component.) -- C:\WINDOWS\system32\avwav.dll [73216]
O44 - LFC:[MD5.520A03D1F113D251EFBFA00C164F2087] - 17/03/2015 - 17:12:01 ---A- . (.Hilgraeve, Inc. - HyperTerminal Applet Library.) -- C:\WINDOWS\system32\hticons.dll [44544]
O44 - LFC:[MD5.831347571C0F5006CE3913D32F21AB69] - 17/03/2015 - 17:12:01 ---A- . (.Microsoft Corporation - Contrôle du volume.) -- C:\WINDOWS\system32\sndvol32.exe [139264]
O44 - LFC:[MD5.AF68D5BB112D56D00835252C76D2D871] - 17/03/2015 - 17:12:09 ---A- . (.Microsoft Corporation - Windows Write.) -- C:\WINDOWS\system32\write.exe [5632]
O44 - LFC:[MD5.487403459F0B2F1A3ADEEF02496BD80E] - 17/03/2015 - 17:12:27 ---A- . (...) -- C:\WINDOWS\vb.ini [36]
O44 - LFC:[MD5.6C2F0BA210C2B53EF07653ABAC6C2490] - 17/03/2015 - 17:12:27 ---A- . (...) -- C:\WINDOWS\vbaddin.ini [37]
O44 - LFC:[MD5.B3EB0AA0E194CD030C4A85BFA45F124B] - 17/03/2015 - 17:13:07 ---A- . (.Microsoft Corporation - Assistant Connexion Internet.) -- C:\WINDOWS\system32\icwphbk.dll [65536]
O44 - LFC:[MD5.23F4325A6AA7FA8EA951185CF8DC4D77] - 17/03/2015 - 17:13:07 ---A- . (.Microsoft Corporation - Bibliothèque de l'Assistant Connexion Inter.) -- C:\WINDOWS\system32\inetcfg.dll [282624]
O44 - LFC:[MD5.B4483DA59385014F20ADEE7075B631FE] - 17/03/2015 - 17:13:07 ---A- . (.Microsoft Corporation - Numéroteur automatique de l'Assistant Conne.) -- C:\WINDOWS\system32\icwdial.dll [73728]
O44 - LFC:[MD5.D37321C41EBEC52B26CC2DC11392B84E] - 17/03/2015 - 17:13:08 ---A- . (.Microsoft Corporation - Fichier DLL d'interface du Planificateur de.) -- C:\WINDOWS\system32\mstask.dll [281600]
O44 - LFC:[MD5.8BBDE02EA41851C2402C25B1490A20AE] - 17/03/2015 - 17:13:08 ---A- . (.Microsoft Corporation - Fichier d'installation du Planificateur de.) -- C:\WINDOWS\system32\mstinit.exe [12288]
O44 - LFC:[MD5.55F5C5C1BE1A78E285033E432BA01597] - 17/03/2015 - 17:13:08 ---A- . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560]
O44 - LFC:[MD5.17A7A371498E8F6A0B4D10FB5346AFC1] - 17/03/2015 - 17:13:09 ---A- . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll [692736]
O44 - LFC:[MD5.E538D7BC60D7CD67BDEA812F83AE092E] - 17/03/2015 - 17:13:10 ---A- . (.Microsoft Corporation - Ressources API de Microsoft Internet Messag.) -- C:\WINDOWS\system32\inetres.dll [50688]
O44 - LFC:[MD5.11FB4109191437CE765779F10EBBDFAB] - 17/03/2015 - 17:13:11 ---A- . (.Microsoft Corporation - Gestionnaire de comptes Internet.) -- C:\WINDOWS\system32\msoeacct.dll [252928]
O44 - LFC:[MD5.B150D1485996C0A40C8E397B141C3D8B] - 17/03/2015 - 17:13:11 ---A- . (.Microsoft Corporation - Microsoft Outlook Express RT Lib.) -- C:\WINDOWS\system32\msoert2.dll [105984]
O44 - LFC:[MD5.71ECBA795A063026843F70F31EF02689] - 17/03/2015 - 17:13:13 ---A- . (.Intel Corporation - ISR Debug 32-bit Engine.) -- C:\WINDOWS\system32\isrdbg32.dll [32768]
O44 - LFC:[MD5.B8D4B3C6E0E9746EF93CC988EB00F9E8] - 17/03/2015 - 17:13:13 ---A- . (.Microsoft Corporation - Application Sharing Display Driver.) -- C:\WINDOWS\system32\mnmdd.dll [34560]
O44 - LFC:[MD5.83CFBB693483E664CC12C8ED132BBDEA] - 17/03/2015 - 17:13:13 ---A- . (.Microsoft Corporation - Bibliothèque NMMKCERT.) -- C:\WINDOWS\system32\nmmkcert.dll [28672]
O44 - LFC:[MD5.681891FBFFB4F535F03C440D433B76C6] - 17/03/2015 - 17:13:13 ---A- . (.Microsoft Corporation - Dll de l'utilitaire de conférence.) -- C:\WINDOWS\system32\msconf.dll [69632]
O44 - LFC:[MD5.D3A2870CD96CDA7BCFF3DC54F64087AD] - 17/03/2015 - 17:13:13 ---A- . (.Microsoft Corporation - Partage de Bureau à distance NetMeeting.) -- C:\WINDOWS\system32\mnmsrvc.exe [32768]
O44 - LFC:[MD5.B4B61B3F41002E68D01A371C671B5F78] - 17/03/2015 - 17:13:13 ---A- . (.Microsoft Corporation - Pilote ICM Microsoft H.261.) -- C:\WINDOWS\system32\msh261.drv [188416]
O44 - LFC:[MD5.1B005DC4BC9B22CC1EF40D62C9F4F7BD] - 17/03/2015 - 17:13:14 ---A- . (.Microsoft Corporation - Bibliothèque d'opérations Restauration du s.) -- C:\WINDOWS\system32\srrstr.dll [241664]
O44 - LFC:[MD5.C8047DF7413568E549932BD725EBC65B] - 17/03/2015 - 17:13:14 ---A- . (.Microsoft Corporation - Dll du client SR.) -- C:\WINDOWS\system32\srclient.dll [67584]
O44 - LFC:[MD5.39626E6DC1FB39434EC40C42722B660A] - 17/03/2015 - 17:13:14 ---A- . (.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) -- C:\WINDOWS\system32\Drivers\sr.sys [73600]
O44 - LFC:[MD5.6ED29124A1C83BD0CF6B26BD01CA6F6F] - 17/03/2015 - 17:13:14 ---A- . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520]
O44 - LFC:[MD5.987A84CD549E6EFC653A9B4B3E2B24B2] - 17/03/2015 - 17:13:14 ---A- . (.Microsoft Corporation - User Location Services Component Module.) -- C:\WINDOWS\system32\ils.dll [81920]
O44 - LFC:[MD5.64A3919D5606CE42660247DB1CB9CB88] - 17/03/2015 - 17:13:15 ---A- . (.Microsoft Corporation - Filter Library.) -- C:\WINDOWS\system32\fltlib.dll [16896]
O44 - LFC:[MD5.62173E93A7AFF8B44158BE01E34C0FF7] - 17/03/2015 - 17:13:15 ---A- . (.Microsoft Corporation - Filter Manager Control Program.) -- C:\WINDOWS\system32\fltMc.exe [23040]
O44 - LFC:[MD5.B2CF4B0786F8212CB92ED2B50C6DB6B0] - 17/03/2015 - 17:13:15 ---A- . (.Microsoft Corporation - Microsoft Filesystem Filter Manager.) -- C:\WINDOWS\system32\Drivers\fltMgr.sys [129792]
O44 - LFC:[MD5.FF84939E5219562530EB627CC726E65C] - 17/03/2015 - 17:13:18 ---A- . (.Microsoft Corporation - Assistance à distance Microsoft.) -- C:\WINDOWS\system32\racpldlg.dll [43520]
O44 - LFC:[MD5.068E36F77A5BC2067927C17FF8A7B63E] - 17/03/2015 - 17:13:18 ---A- . (.Microsoft Corporation - Contrôles Fichier/Ouvrir et Enregistrer de.) -- C:\WINDOWS\system32\safrcdlg.dll [43520]
O44 - LFC:[MD5.E84A20DABF81C9A5D08E1DE8C49B0005] - 17/03/2015 - 17:13:18 ---A- . (.Microsoft Corporation - Gestionnaire du bureau du centre d'Aide Mic.) -- C:\WINDOWS\system32\safrdm.dll [29696]
O44 - LFC:[MD5.B94996F7C1B88942D6F95EFD93C236AA] - 17/03/2015 - 17:13:18 ---A- . (.Microsoft Corporation - Microsoft Help Center Session Resolver.) -- C:\WINDOWS\system32\safrslv.dll [45568]
O44 - LFC:[MD5.3D59806FB53B402C0583D35F96470D2F] - 17/03/2015 - 17:13:36 ---A- . (.Microsoft Corporation - API du client Windows Update.) -- C:\WINDOWS\system32\wuapi.dll.wusetup.114046.bak [432640]
O44 - LFC:[MD5.92A7AA8BBD4DDA38B012EDB223420FD4] - 17/03/2015 - 17:13:36 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service 2.0.) -- C:\WINDOWS\system32\bitsprx3.dll [7168]
O44 - LFC:[MD5.5C5D4A7893B3A0FD9AEBEAED1E45E3B2] - 17/03/2015 - 17:13:36 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service 2.5.) -- C:\WINDOWS\system32\bitsprx4.dll [7168]
O44 - LFC:[MD5.6B219C1EC5A6521332A41E7FA1DB07E9] - 17/03/2015 - 17:13:36 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service Pro.) -- C:\WINDOWS\system32\bitsprx2.dll [8192]
O44 - LFC:[MD5.8E012E8D84724CB521E3BE09741980FB] - 17/03/2015 - 17:13:36 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service Pro.) -- C:\WINDOWS\system32\qmgrprxy.dll [18944]
O44 - LFC:[MD5.BAA0B6E647C1AD593E9BAE5CC31BCFFB] - 17/03/2015 - 17:13:36 ---A- . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\system32\qmgr.dll [409088]
O44 - LFC:[MD5.1A617835452EEE5060976C9B9F5FE635] - 17/03/2015 - 17:13:36 ---A- . (.Microsoft Corporation - Windows Update Client API.) -- C:\WINDOWS\system32\wuapi.dll [577048]
O44 - LFC:[MD5.C31DD4CEC06D2908AE5F212A0B13805B] - 17/03/2015 - 17:13:37 ---A- . (.Microsoft Corporation - Automatic Updates Control Panel.) -- C:\WINDOWS\system32\wuaucpl.cpl [219160]
O44 - LFC:[MD5.20D03021936D649E6EDB9A8A26504CCD] - 17/03/2015 - 17:13:37 ---A- . (.Microsoft Corporation - Client Mise à jour automatique Windows Upda.) -- C:\WINDOWS\system32\wuauclt1.exe [168960]
O44 - LFC:[MD5.7E3DEFE771CB451B0FF630BFA435417E] - 17/03/2015 - 17:13:37 ---A- . (.Microsoft Corporation - Mises à jour automatiques.) -- C:\WINDOWS\system32\wuauclt.exe.wusetup.114156.bak [112640]
O44 - LFC:[MD5.367B5FB01100BEB42F160FF399A57C0D] - 17/03/2015 - 17:13:37 ---A- . (.Microsoft Corporation - Moteur de mises à jour automatique Windows.) -- C:\WINDOWS\system32\wuaueng1.dll [184320]
O44 - LFC:[MD5.1F092E10753022CCC6D2FC2D1941E96E] - 17/03/2015 - 17:13:37 ---A- . (.Microsoft Corporation - Panneau de configuration Mises à jour autom.) -- C:\WINDOWS\system32\wuaucpl.cpl.wusetup.114250.bak [163840]
O44 - LFC:[MD5.FC3EC24FCE372C89423E015A2AC1A31E] - 17/03/2015 - 17:13:37 ---A- . (.Microsoft Corporation - Windows Update Agent.) -- C:\WINDOWS\system32\wuaueng.dll [1933848]
O44 - LFC:[MD5.38ED85E9C93B9983C2065AA2266B6E1F] - 17/03/2015 - 17:13:37 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Engine.) -- C:\WINDOWS\system32\wuaueng.dll.wusetup.114421.bak [1135616]
O44 - LFC:[MD5.75D6C5C3D2C93B1F9931E5DFB693AE2A] - 17/03/2015 - 17:13:37 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O44 - LFC:[MD5.C88C65DF1ED4DFD34CFBD11CDFE519A3] - 17/03/2015 - 17:13:37 ---A- . (.Microsoft Corporation - Windows Update Client UI Plugin.) -- C:\WINDOWS\system32\wucltui.dll [329240]
O44 - LFC:[MD5.C31DCE575EE43CFE5EE1BD1B5FB29A8D] - 17/03/2015 - 17:13:37 ---A- . (.Microsoft Corporation - Windows Update Web Control.) -- C:\WINDOWS\system32\wuweb.dll [210968]
O44 - LFC:[MD5.3458EDA96E30FBD0477A2800D3FB1909] - 17/03/2015 - 17:13:37 ---A- . (.Microsoft Corporation - Windows Update client proxy stub.) -- C:\WINDOWS\system32\wups.dll [35864]
O44 - LFC:[MD5.2E0B0A051FFAA86E358465BB0880D453] - 17/03/2015 - 17:13:37 ---A- . (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53784]
O44 - LFC:[MD5.13D8419CD73E6D14FE093A0066E36F18] - 17/03/2015 - 17:13:45 ---A- . (.Microsoft Corporation - Internet Connection Wizard.) -- C:\WINDOWS\system32\icfgnt5.dll [16384]
O44 - LFC:[MD5.D1560FE3CB700340235BECDE227C271E] - 17/03/2015 - 17:13:47 ---A- . (.Microsoft Corporation - Ressources du gestionnaire de comptes Micro.) -- C:\WINDOWS\system32\acctres.dll [72192]
O44 - LFC:[MD5.34A92A72CC0E0653828344DB5378B1E0] - 17/03/2015 - 17:13:48 ---A- . (.Microsoft Corporation - Codec Microsoft G.723.1 pour MSACM.) -- C:\WINDOWS\system32\msg723.acm [118784]
O44 - LFC:[MD5.8014838B3025DDFF6C476FCC7C18CD82] - 17/03/2015 - 17:13:48 ---A- . (.Microsoft Corporation - DLL d'enregistrement d'événements NetMeetin.) -- C:\WINDOWS\system32\nmevtmsg.dll [12288]
O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 17/03/2015 - 17:13:54 ---A- . (...) -- C:\WINDOWS\desktop.ini [2]
O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 17/03/2015 - 17:13:54 ---A- . (...) -- C:\WINDOWS\system32\desktop.ini [2]
O44 - LFC:[MD5.8FBEC4D51D39DB985490F7C049AF488E] - 17/03/2015 - 17:13:54 -SH-- . (...) -- C:\WINDOWS\winnt.bmp [49102]
O44 - LFC:[MD5.8FBEC4D51D39DB985490F7C049AF488E] - 17/03/2015 - 17:13:54 -SH-- . (...) -- C:\WINDOWS\winnt256.bmp [49102]
O44 - LFC:[MD5.D935270C569D1E4F224F861AB0559E1E] - 17/03/2015 - 17:13:56 ---A- . (.Microsoft Corporation - Async Trace DLL.) -- C:\WINDOWS\system32\atrace.dll [11264]
O44 - LFC:[MD5.662BD5F1A693F710F066BAF92FED394A] - 17/03/2015 - 17:15:15 ---A- . (.Microsoft Corporation - Extended MAPI 1.0 for Windows NT.) -- C:\WINDOWS\system32\mapi32.dll [112128]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17/03/2015 - 17:15:27 ---A- . (...) -- C:\AUTOEXEC.BAT [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17/03/2015 - 17:15:27 ---A- . (...) -- C:\CONFIG.SYS [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17/03/2015 - 17:15:27 ---A- . (...) -- C:\WINDOWS\control.ini [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17/03/2015 - 17:15:27 RSHA- . (...) -- C:\IO.SYS [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17/03/2015 - 17:15:27 RSHA- . (...) -- C:\MSDOS.SYS [0]
O44 - LFC:[MD5.775E188DD15C9AC9E735A556FB95578E] - 17/03/2015 - 17:23:54 -SH-- . (...) -- C:\boot.ini [212]
O44 - LFC:[MD5.2F26C02011874C0FF1C497EB0B4BAA80] - 17/03/2015 - 17:24:15 ---A- . (...) -- C:\WINDOWS\cmsetacl.log [400]
O44 - LFC:[MD5.FFBFBC3A928F8260714682FA0DC74160] - 17/03/2015 - 17:24:53 ---A- . (...) -- C:\WINDOWS\DtcInstall.log [377]
O44 - LFC:[MD5.0D311F770C2F49AF63A38C414DF2E54A] - 17/03/2015 - 17:25:07 ---A- . (...) -- C:\WINDOWS\system32\emptyregdb.dat [21892]
O44 - LFC:[MD5.D69DDA657D13F10EEF22F4F64F2A8ADD] - 17/03/2015 - 17:25:30 ---A- . (...) -- C:\WINDOWS\sessmgr.setup.log [2044]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 17/03/2015 - 17:25:53 R-HA- . (...) -- C:\WINDOWS\WindowsShell.Manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 17/03/2015 - 17:25:53 R-HA- . (...) -- C:\WINDOWS\system32\cdplayer.exe.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 17/03/2015 - 17:25:53 R-HA- . (...) -- C:\WINDOWS\system32\ncpa.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 17/03/2015 - 17:25:53 R-HA- . (...) -- C:\WINDOWS\system32\nwc.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 17/03/2015 - 17:25:53 R-HA- . (...) -- C:\WINDOWS\system32\sapi.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 17/03/2015 - 17:25:53 R-HA- . (...) -- C:\WINDOWS\system32\wuaucpl.cpl.manifest [749]
O44 - LFC:[MD5.5D76C3FB736514E1D7C88791E7322784] - 17/03/2015 - 17:25:59 R-HA- . (...) -- C:\WINDOWS\system32\WindowsLogon.manifest [488]
O44 - LFC:[MD5.5D76C3FB736514E1D7C88791E7322784] - 17/03/2015 - 17:25:59 R-HA- . (...) -- C:\WINDOWS\system32\logonui.exe.manifest [488]
O44 - LFC:[MD5.2B9C717D21A1331BA3731886E3EE87BB] - 17/03/2015 - 17:26:35 ---A- . (...) -- C:\WINDOWS\ODBCINST.INI [4205]
O44 - LFC:[MD5.16DA22254810B3B9DA96B7E646661242] - 17/03/2015 - 17:28:49 ---A- . (...) -- C:\WINDOWS\setupact.log [238345]
O44 - LFC:[MD5.EF8B9DAB13E15E33A3E50342AF29AB94] - 17/03/2015 - 17:28:49 ---A- . (...) -- C:\WINDOWS\system32\$winnt$.inf [765]
O44 - LFC:[MD5.28A11FF95B0B15D7B59DCEAAF04E0E4E] - 17/03/2015 - 17:29:35 ---A- . (...) -- C:\WINDOWS\REGLOCS.OLD [8192]
O44 - LFC:[MD5.832031DA881FF0858C0AEB12ECA4F074] - 17/03/2015 - 17:30:19 ---A- . (...) -- C:\WINDOWS\setuplog.txt [542383]
O44 - LFC:[MD5.63227C9BD1353033D9CE2C0127EABE57] - 17/03/2015 - 17:30:41 ---A- . (...) -- C:\WINDOWS\OEWABLog.txt [1321]
O44 - LFC:[MD5.270C556F526088EC41A84759BFACCA24] - 17/03/2015 - 17:35:35 ---A- . (. ATI Technologies Inc. - atiddc.) -- C:\WINDOWS\system32\ATIDDC.DLL [53248]
O44 - LFC:[MD5.701E8F87F905722C6879EFC5EEFF6C08] - 17/03/2015 - 17:35:35 ---A- . (...) -- C:\WINDOWS\atiogl.xml [38445]
O44 - LFC:[MD5.A33D4ECC0D02C6BE9CAAD01664CBE4D0] - 17/03/2015 - 17:35:35 ---A- . (...) -- C:\WINDOWS\system32\atiapfxx.blb [296240]
O44 - LFC:[MD5.755665BEBE891B35372AA0590572C72B] - 17/03/2015 - 17:35:35 ---A- . (...) -- C:\WINDOWS\system32\atiicdxx.dat [710269]
O44 - LFC:[MD5.5B80AD4DB35CA901D721CFFD57C8FDFE] - 17/03/2015 - 17:35:35 ---A- . (...) -- C:\WINDOWS\system32\ativvaxx.cap [1610912]
O44 - LFC:[MD5.B889885D8BFEAAC5243871A3B69FB759] - 17/03/2015 - 17:35:35 ---A- . (.ATI Technologies Inc. - .INF file installer.) -- C:\WINDOWS\system32\atiiiexx.dll [307200]
O44 - LFC:[MD5.4619F4A111672A1BDA42E9E81B4D1184] - 17/03/2015 - 17:35:35 ---A- . (.ATI Technologies Inc. - ATI External Event Utility DLL Module.) -- C:\WINDOWS\system32\ati2evxx.dll [192512]
O44 - LFC:[MD5.D0F5737FA2A52369199A78BCBCBF9CFE] - 17/03/2015 - 17:35:35 ---A- . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\ati2evxx.exe [643072]
O44 - LFC:[MD5.8FA0090CC270856A3DE410D241550576] - 17/03/2015 - 17:35:35 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Display Driver.) -- C:\WINDOWS\system32\ati2dvag.dll [306176]
O44 - LFC:[MD5.ECECFB17F03E8C758C0F635D5EB9F5CB] - 17/03/2015 - 17:35:35 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\Drivers\ati2mtag.sys [6852096]
O44 - LFC:[MD5.626283683DB392452AA5D6C445658A56] - 17/03/2015 - 17:35:35 ---A- . (.ATI Technologies Inc. - ATI RageTheater/ImpacTV2 COM interface.) -- C:\WINDOWS\system32\atitvo32.dll [17408]
O44 - LFC:[MD5.75881F3FF11238AB72A819FB1F624579] - 17/03/2015 - 17:35:35 ---A- . (.ATI Technologies Inc. - Virtual Command And Memory Manager.) -- C:\WINDOWS\system32\atikvmag.dll [929792]
O44 - LFC:[MD5.9505C5D2F033614EF8725DCF6DE6013A] - 17/03/2015 - 17:35:35 ---A- . (.ATI Technologies, Inc. - 32-bit ATI VCO Driver.) -- C:\WINDOWS\system32\ativcoxx.dll [24064]
O44 - LFC:[MD5.2F42B183494BC7B1930BC3A7D3BECA53] - 17/03/2015 - 17:35:35 ---A- . (.ATI Technologies, Inc. - ATI Desktop CWDDEDI DLL.) -- C:\WINDOWS\system32\atipdlxx.dll [212992]
O44 - LFC:[MD5.1A34FBD43445D1E35F7DC859AC75067D] - 17/03/2015 - 17:35:35 ---A- . (.ATI Technologies, Inc. - ATI2MDXX.) -- C:\WINDOWS\system32\Ati2mdxx.exe [26112]
O44 - LFC:[MD5.E844978D682275DE151E7116F0295D3C] - 17/03/2015 - 17:35:35 ---A- . (.ATI Technologies, Inc. - ati2edxx.) -- C:\WINDOWS\system32\ati2edxx.dll [43520]
O44 - LFC:[MD5.B33EAE61F4F5662C85D3527953257653] - 17/03/2015 - 17:35:35 ---A- . (.Advanced Micro Devices, Inc. - ADL.) -- C:\WINDOWS\system32\atiadlxx.dll [245760]
O44 - LFC:[MD5.D066D8FAADAEC8CD2E993932444E3166] - 17/03/2015 - 17:35:35 ---A- . (.Advanced Micro Devices, Inc. - AMD OpenGL driver.) -- C:\WINDOWS\system32\atioglxx.dll [18964480]
O44 - LFC:[MD5.749584902AE80A53EFDA4F8FA03E1713] - 17/03/2015 - 17:35:35 ---A- . (.Advanced Micro Devices, Inc. - ATIBRTMON.) -- C:\WINDOWS\system32\atibtmon.exe [118784]
O44 - LFC:[MD5.F1D4AE214C5A7F3B830BBE7C6076F835] - 17/03/2015 - 17:35:35 ---A- . (.Advanced Micro Devices, Inc. - ATIODCLI Application.) -- C:\WINDOWS\system32\ATIODCLI.exe [45056]
O44 - LFC:[MD5.337E0565819A1A93D2A8AA37B5816EA2] - 17/03/2015 - 17:35:35 ---A- . (.Advanced Micro Devices, Inc. - ATIODE Application.) -- C:\WINDOWS\system32\ATIODE.exe [294912]
O44 - LFC:[MD5.1F6F804304BC15FE6DFB00124C11BCF3] - 17/03/2015 - 17:35:35 ---A- . (.Advanced Micro Devices, Inc. - Graphics DEM.) -- C:\WINDOWS\system32\ATIDEMGX.dll [442368]
O44 - LFC:[MD5.9D19D3BBA829BE077D324F14AB798EEA] - 17/03/2015 - 17:35:35 ---A- . (.Advanced Micro Devices, Inc. - Radeon PCOM Universal Driver.) -- C:\WINDOWS\system32\amdpcom32.dll [71192]
O44 - LFC:[MD5.9D19D3BBA829BE077D324F14AB798EEA] - 17/03/2015 - 17:35:35 ---A- . (.Advanced Micro Devices, Inc. - Radeon PCOM Universal Driver.) -- C:\WINDOWS\system32\atimpc32.dll [71192]
O44 - LFC:[MD5.F88CCE8B6784E4B9D843C46AB84C6EE6] - 17/03/2015 - 17:35:35 ---A- . (.Advanced Micro Devices, Inc. - Radeon Video Acceleration Universal Driver.) -- C:\WINDOWS\system32\ativvaxx.dll [2380800]
O44 - LFC:[MD5.5011CFA350DDEFA986DE1D830FCDD0FB] - 17/03/2015 - 17:35:35 ---A- . (.Advanced Micro Devices, Inc. - Ring 0 x2 component.) -- C:\WINDOWS\system32\atiok3x2.dll [495616]
O44 - LFC:[MD5.3CFBAE47DA12D19D450DD2A14034E060] - 17/03/2015 - 17:35:35 ---A- . (.Advanced Micro Devices, Inc. - ati3duag.dll.) -- C:\WINDOWS\system32\ati3duag.dll [4847424]
O44 - LFC:[MD5.99B947244CD7DFCA32B5F19E39575C5F] - 17/03/2015 - 17:35:35 ---A- . (.Advanced Micro Devices, Inc. - atiapfxx Application.) -- C:\WINDOWS\system32\atiapfxx.exe [163840]
O44 - LFC:[MD5.01CFBFC266D842F44936D758D92C0293] - 17/03/2015 - 17:35:35 ---A- . (.Advanced Micro Devices, Inc. - eRecord Message Resource File.) -- C:\WINDOWS\system32\Drivers\ati2erec.dll [53248]
O44 - LFC:[MD5.632A0EEE4D6A1F0B27E80FA3730E600E] - 17/03/2015 - 17:35:36 ---A- . (.ATI Technologies Inc. - Central Memory Manager / Queue Server Modul.) -- C:\WINDOWS\system32\ati2cqag.dll [663552]
O44 - LFC:[MD5.5B39C302C480FD9AFE80143FDB7E3FCB] - 17/03/2015 - 17:35:36 ---A- . (.ATI Technologies, Inc. - ATI Driver Interface DLL.) -- C:\WINDOWS\system32\Oemdspif.dll [163840]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17/03/2015 - 17:35:44 ---A- . (...) -- C:\WINDOWS\ativpsrm.bin [0]
O44 - LFC:[MD5.924971A182E07463765EF9FA8876F24F] - 17/03/2015 - 17:35:47 ---A- . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\WINDOWS\system32\Drivers\AtihdXP3.sys [103040]
O44 - LFC:[MD5.6CB08593487F5701D2D2254E693EAFCE] - 17/03/2015 - 17:35:49 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Descrambler Filter.) -- C:\WINDOWS\system32\Drivers\drmk.sys [60160]
O44 - LFC:[MD5.E82A496C3961EFC6828B508C310CE98F] - 17/03/2015 - 17:35:49 ---A- . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\WINDOWS\system32\Drivers\portcls.sys [146048]
O44 - LFC:[MD5.C8B7941F9824E9F4D3D7B9B9BAE14FEE] - 17/03/2015 - 17:35:49 ---A- . (.Microsoft Corporation - User CSA Library.) -- C:\WINDOWS\system32\ksuser.dll [4096]
O44 - LFC:[MD5.CB02AED45257FEB8D3B294DCFC0CE7C7] - 17/03/2015 - 17:35:49 ---A- . (.Microsoft Corporation - WDM Streaming ActiveMovie Proxy.) -- C:\WINDOWS\system32\ksproxy.ax [129536]
O44 - LFC:[MD5.325BB26842FC7CCC1FCCE2C457317F3E] - 17/03/2015 - 17:35:52 ---A- . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\system32\Drivers\MSPCLOCK.sys [5376]
O44 - LFC:[MD5.BAD59648BA099DA4A17680B39730CB3D] - 17/03/2015 - 17:35:54 ---A- . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\system32\Drivers\MSPQM.sys [4992]
O44 - LFC:[MD5.D1575E71568F4D9E14CA56B7B0453BF1] - 17/03/2015 - 17:35:55 ---A- . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\system32\Drivers\MSKSSRV.sys [7552]
O44 - LFC:[MD5.8B83F3ED0F1688B4958F77CD6D2BF290] - 17/03/2015 - 17:35:57 ---A- . (.Microsoft Corporation - System Audio WDM Filter.) -- C:\WINDOWS\system32\Drivers\sysaudio.sys [60800]
O44 - LFC:[MD5.8F5FCFF8E8848AFAC920905FBD9D33C8] - 17/03/2015 - 17:35:58 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Audio Descrambler Filt.) -- C:\WINDOWS\system32\Drivers\drmkaud.sys [2944]
O44 - LFC:[MD5.692BCF44383D056AED41B045A323D378] - 17/03/2015 - 17:35:59 ---A- . (.Microsoft Corporation - Kernel Mode Audio Mixer.) -- C:\WINDOWS\system32\Drivers\kmixer.sys [172416]
O44 - LFC:[MD5.8BED39E3C35D6A489438B8141717A557] - 17/03/2015 - 17:36:00 ---A- . (.Microsoft Corporation - Microsoft Acoustic Echo Canceller.) -- C:\WINDOWS\system32\Drivers\aec.sys [142592]
O44 - LFC:[MD5.8CE882BCC6CF8A62F2B2323D95CB3D01] - 17/03/2015 - 17:36:01 ---A- . (.Microsoft Corporation - Microsoft GS Wavetable Synthesizer.) -- C:\WINDOWS\system32\Drivers\swmidi.sys [56576]
O44 - LFC:[MD5.8A208DFCF89792A484E76C40E5F50B45] - 17/03/2015 - 17:36:02 ---A- . (.Microsoft Corporation - Microsoft Kernel DLS Synthesizer.) -- C:\WINDOWS\system32\Drivers\DMusic.sys [52864]
O44 - LFC:[MD5.6768ACF64B18196494413695F0C3A00F] - 17/03/2015 - 17:36:04 ---A- . (.Microsoft Corporation - MMSYSTEM Wave/Midi API mapper.) -- C:\WINDOWS\system32\Drivers\wdmaud.sys [83072]
O44 - LFC:[MD5.AB8B92451ECB048A4D1DE7C3FFCB4A9F] - 17/03/2015 - 17:36:05 ---A- . (.Microsoft Corporation - Microsoft Kernel Audio Splitter.) -- C:\WINDOWS\system32\Drivers\splitter.sys [6272]
O44 - LFC:[MD5.9C78D8BC06315FE97936167F5063F924] - 17/03/2015 - 17:38:41 ---A- . (...) -- C:\WINDOWS\system32\c_20005.nls [187938]
O44 - LFC:[MD5.3FEF4EEFC8827A03B19124575B17205E] - 17/03/2015 - 17:38:41 ---A- . (...) -- C:\WINDOWS\system32\c_20932.nls [180770]
O44 - LFC:[MD5.32919D0DA9A834E8197203C4858ABCF6] - 17/03/2015 - 17:38:41 ---A- . (...) -- C:\WINDOWS\system32\c_20936.nls [173602]
O44 - LFC:[MD5.07CD5D103AEB4AD2B624EE1ADBFAA456] - 17/03/2015 - 17:38:41 ---A- . (...) -- C:\WINDOWS\system32\c_21027.nls [66082]
O44 - LFC:[MD5.77F127766D758EB2C6451E221A0C7F7D] - 17/03/2015 - 17:38:41 ---A- . (...) -- C:\WINDOWS\system32\c_708.nls [66082]
O44 - LFC:[MD5.62F7532931EFAB61619DC5F6DFFC2C4D] - 17/03/2015 - 17:38:41 ---A- . (.Microsoft Corporation - GB18030 DBCS-Unicode Conversion DLL.) -- C:\WINDOWS\system32\c_g18030.dll [218112]
O44 - LFC:[MD5.AAB0740BCBDCE107E0BABEE466905EB4] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20000.nls [180258]
O44 - LFC:[MD5.48699E0B2F0B56E132D8200BA23E7176] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20001.nls [186402]
O44 - LFC:[MD5.A5D79E78E4412AC3C79DED42CD95C3EA] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20002.nls [173602]
O44 - LFC:[MD5.971E382CB790C07536F380C172848C92] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20003.nls [185378]
O44 - LFC:[MD5.A47DBDBAEA690F4713185EBB5790BBFF] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20004.nls [180258]
O44 - LFC:[MD5.1F55C295A71290992C95CF1F41CDB0E4] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20105.nls [66082]
O44 - LFC:[MD5.00E11B5E8C252190DEC893FD84D3B06D] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20106.nls [66082]
O44 - LFC:[MD5.EB7AD61171B280F1CA90CF3AC0F43717] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20107.nls [66082]
O44 - LFC:[MD5.C8FBDF3805D2F229DE3CA2EF5A248CCC] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20108.nls [66082]
O44 - LFC:[MD5.BA660D994876755C9E90871B919BB5EC] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20269.nls [66082]
O44 - LFC:[MD5.E37E1766C1D7C21C5EFAD0F20D923039] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20284.nls [66082]
O44 - LFC:[MD5.BCD8AC4CE06E227A2FBA81862B5F0D42] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20285.nls [66082]
O44 - LFC:[MD5.B2B3B6A63D9A1837673A2B2C44455A20] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20290.nls [66082]
O44 - LFC:[MD5.C3581190325F812CB7F5F928E722F132] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20297.nls [66082]
O44 - LFC:[MD5.4FEA99284FA34D8E69C8D865D9426D2B] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20420.nls [66082]
O44 - LFC:[MD5.E3AAE11859C598FB936017816567FD96] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20423.nls [66082]
O44 - LFC:[MD5.3A0FA5F25C5FF909766347627B446511] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20424.nls [66082]
O44 - LFC:[MD5.E27DCCEEFABD04FC7D81BE65B233C653] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20833.nls [66082]
O44 - LFC:[MD5.A124CAA7470CCF0354A57AB30808293F] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20838.nls [66082]
O44 - LFC:[MD5.61FBE3736279973CBA71EE0CDEAAAA6C] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20871.nls [66082]
O44 - LFC:[MD5.8464E9CAB0DA3F209320D782631DD5A2] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20880.nls [66082]
O44 - LFC:[MD5.E4642396D2098F65C7E88C0AC1EE7379] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_20924.nls [66082]
O44 - LFC:[MD5.85D74656F26B33F21B5129252B1578D0] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_21025.nls [66082]
O44 - LFC:[MD5.4D4C7CED88E5621F21A4911A44CADACC] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_28596.nls [66082]
O44 - LFC:[MD5.48841546AC3B8698C93991E99851F0CF] - 17/03/2015 - 17:38:42 ---A- . (...) -- C:\WINDOWS\system32\c_870.nls [66082]
O44 - LFC:[MD5.157A2706E78D7B581642F6F787EC37E5] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_10001.nls [162850]
O44 - LFC:[MD5.05C0B7F8FA403E6DA75671685A58A940] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_10002.nls [195618]
O44 - LFC:[MD5.1855E6398A2E937E47809FD8B83647E4] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_10003.nls [177698]
O44 - LFC:[MD5.1DBBCC1B712C2674BDF29A05A5DD366E] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_10004.nls [66082]
O44 - LFC:[MD5.72233F1A1D788A84D4687A258CC97CBF] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_10005.nls [66082]
O44 - LFC:[MD5.23C1E8F026FB81824388E8EC457CF75E] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_10008.nls [173602]
O44 - LFC:[MD5.F3C139AD492C4F73353057442E6995CE] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_10021.nls [66082]
O44 - LFC:[MD5.7CB90B3604A45355218E6A20BD7B7A0B] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_1047.nls [66082]
O44 - LFC:[MD5.27E1CBE7F0DF21CA0892D16FD1961F29] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_1140.nls [66082]
O44 - LFC:[MD5.F0C0509A9A633332B99F009D1DAA7612] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_1141.nls [66082]
O44 - LFC:[MD5.69316F1B309BA5AC371EFD09267BD670] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_1142.nls [66082]
O44 - LFC:[MD5.3EA8E21340AF59C80CB35A6A53FE52D7] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_1143.nls [66082]
O44 - LFC:[MD5.FD2D28063FB4FD12BC6EF18A6D10769E] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_1144.nls [66082]
O44 - LFC:[MD5.123B711FF0BF69B4462C279D342380AF] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_1145.nls [66082]
O44 - LFC:[MD5.D288777605A2F4E12A9C6E360CE44987] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_1146.nls [66082]
O44 - LFC:[MD5.7623492F4FCB5E317578F897A7476E16] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_1147.nls [66082]
O44 - LFC:[MD5.32CA3320D8C8F37770764BDFF1C2FE15] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_1148.nls [66082]
O44 - LFC:[MD5.484A1C398A16DD464E8468046526985C] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_1149.nls [66082]
O44 - LFC:[MD5.947813F75A56A20EF65DC9E479EBEA4D] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_20273.nls [66082]
O44 - LFC:[MD5.947B06BC793BFF9A4808C8CF57B0E273] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_20277.nls [66082]
O44 - LFC:[MD5.AF4F8AEC071515D6FC6E8203A0DBF655] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_20278.nls [66082]
O44 - LFC:[MD5.2AB1DF9DFBD49E343AF5D5FA7D17024E] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_20280.nls [66082]
O44 - LFC:[MD5.42518F84AA761C84B4F5F366C6E424F1] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_858.nls [66594]
O44 - LFC:[MD5.C58563DF50115E935BC811FFBCE1FC89] - 17/03/2015 - 17:38:43 ---A- . (...) -- C:\WINDOWS\system32\c_864.nls [66594]
O44 - LFC:[MD5.DCE6C200965B21A6A1F3AF9BDB0ECA0C] - 17/03/2015 - 17:39:03 ---A- . (.Microsoft Corporation - Thai Wordbreaker.) -- C:\WINDOWS\system32\ftlx041e.dll [6144]
O44 - LFC:[MD5.7D352AB808790C2E9E9DB6C105CF612F] - 17/03/2015 - 17:39:03 R--A- . (.Microsoft Corporation - Thai Kedmanee (non-ShiftLock) Keyboard Layo.) -- C:\WINDOWS\system32\kbdth2.dll [6144]
O44 - LFC:[MD5.117165FB781152E40C2180F66CBAC891] - 17/03/2015 - 17:39:03 R--A- . (.Microsoft Corporation - Thai Kedmanee Keyboard Layout.) -- C:\WINDOWS\system32\kbdth0.dll [5632]
O44 - LFC:[MD5.D99EC6E644373B10B4C84048CEBCAF21] - 17/03/2015 - 17:39:03 R--A- . (.Microsoft Corporation - Thai Pattachote (non-ShiftLock) Keyboard La.) -- C:\WINDOWS\system32\kbdth3.dll [6144]
O44 - LFC:[MD5.095B7A282AEF532A31CD5AB5DB2B9A49] - 17/03/2015 - 17:39:03 R--A- . (.Microsoft Corporation - Thai Pattachote Keyboard Layout.) -- C:\WINDOWS\system32\kbdth1.dll [5632]
O44 - LFC:[MD5.A99203A3397A9DB352C5D8DFBDA230A8] - 17/03/2015 - 17:39:06 ---A- . (...) -- C:\WINDOWS\system32\c_862.nls [66594]
O44 - LFC:[MD5.42F5D1376CA979E956A86964FA0D358F] - 17/03/2015 - 17:39:06 R--A- . (.Microsoft Corporation - KBDHEB Keyboard Layout.) -- C:\WINDOWS\system32\kbdheb.dll [5632]
O44 - LFC:[MD5.C050215D8D21DF5658E94187973FB89C] - 17/03/2015 - 17:39:08 ---A- . (...) -- C:\WINDOWS\system32\c_720.nls [66594]
O44 - LFC:[MD5.465E698788EC46B5E59A755CB0DE850A] - 17/03/2015 - 17:39:08 ---A- . (.Microsoft Corporation - US IBM Arabic 238_L Keyboard Layout.) -- C:\WINDOWS\system32\kbdusa.dll [5632]
O44 - LFC:[MD5.BDAAC25FA476984ED44719BEBE908A08] - 17/03/2015 - 17:39:08 R--A- . (.Microsoft Corporation - Arabic_2 Keyboard Layout.) -- C:\WINDOWS\system32\kbda2.dll [5632]
O44 - LFC:[MD5.D3C4347C5BEC57226ACA73BFFDC22E40] - 17/03/2015 - 17:39:08 R--A- . (.Microsoft Corporation - Arabic_English_101 Keyboard Layout.) -- C:\WINDOWS\system32\kbda1.dll [5632]
O44 - LFC:[MD5.187351E6E2EA64DE1F179D1C79909E74] - 17/03/2015 - 17:39:08 R--A- . (.Microsoft Corporation - Arabic_French_102 Keyboard Layout.) -- C:\WINDOWS\system32\kbda3.dll [5632]
O44 - LFC:[MD5.D69D0521B115D3E859183283754B5DF2] - 17/03/2015 - 17:39:08 R--A- . (.Microsoft Corporation - Divehi Phonetic Keyboard Layout.) -- C:\WINDOWS\system32\kbddiv1.dll [5632]
O44 - LFC:[MD5.96BE5DEF930D2F8BA4DCB98B3B4DB47E] - 17/03/2015 - 17:39:08 R--A- . (.Microsoft Corporation - Divehi Typewriter Keyboard Layout.) -- C:\WINDOWS\system32\kbddiv2.dll [5632]
O44 - LFC:[MD5.6A3F192C65B05AAD670570A184204FA0] - 17/03/2015 - 17:39:08 R--A- . (.Microsoft Corporation - Farsi Keyboard Layout.) -- C:\WINDOWS\system32\kbdfa.dll [5632]
O44 - LFC:[MD5.22C2AF66D10FB47153706E1EA3B21AC8] - 17/03/2015 - 17:39:08 R--A- . (.Microsoft Corporation - Syriac Phoenetic Keyboard Layout.) -- C:\WINDOWS\system32\kbdsyr2.dll [5632]
O44 - LFC:[MD5.402870DEF2B91ABA38DF8BFCA129BCA1] - 17/03/2015 - 17:39:08 R--A- . (.Microsoft Corporation - Syriac Standard Keyboard Layout.) -- C:\WINDOWS\system32\kbdsyr1.dll [5632]
O44 - LFC:[MD5.FD72905E46F0250D7C1C4E1FD38B77F4] - 17/03/2015 - 17:39:08 R--A- . (.Microsoft Corporation - Urdu Keyboard Layout.) -- C:\WINDOWS\system32\kbdurdu.dll [5632]
O44 - LFC:[MD5.CF6F4A013A9B41E0321E3A0DDDDCA9B9] - 17/03/2015 - 17:39:10 ---A- . (.Microsoft Corporation - ISCII Code Page Translation DLL.) -- C:\WINDOWS\system32\c_iscii.dll [10752]
O44 - LFC:[MD5.1BC1AE513105BD2AEE27583A5DB650D6] - 17/03/2015 - 17:39:10 ---A- . (.Microsoft Corporation - Thai Word Breaker.) -- C:\WINDOWS\system32\Thawbrkr.dll [185344]
O44 - LFC:[MD5.94CEB7ACA994968685E18F6155EA86E8] - 17/03/2015 - 17:39:10 R--A- . (.Microsoft Corporation - Devanagari Keyboard Layout.) -- C:\WINDOWS\system32\kbdindev.dll [5632]
O44 - LFC:[MD5.0EC03162E932B49E635A79445CCE1E4C] - 17/03/2015 - 17:39:10 R--A- . (.Microsoft Corporation - Eastern Armenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdarme.dll [5120]
O44 - LFC:[MD5.E98DC261A6D62610293FF0CBDA8CAF65] - 17/03/2015 - 17:39:10 R--A- . (.Microsoft Corporation - Georgian Keyboard Layout.) -- C:\WINDOWS\system32\kbdgeo.dll [5120]
O44 - LFC:[MD5.F514F89F4903C7FC56BE62A4BDE20C60] - 17/03/2015 - 17:39:10 R--A- . (.Microsoft Corporation - Gujarati Keyboard Layout.) -- C:\WINDOWS\system32\kbdinguj.dll [5632]
O44 - LFC:[MD5.0E445D2CEE6F1454973D84E1FFAA6140] - 17/03/2015 - 17:39:10 R--A- . (.Microsoft Corporation - Hindi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinhin.dll [5632]
O44 - LFC:[MD5.38709AC2F9012F620DD1043DF0BF86DE] - 17/03/2015 - 17:39:10 R--A- . (.Microsoft Corporation - Kannada Keyboard Layout.) -- C:\WINDOWS\system32\kbdinkan.dll [5632]
O44 - LFC:[MD5.5174B929760629FEE0450F821F836CBA] - 17/03/2015 - 17:39:10 R--A- . (.Microsoft Corporation - Marathi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinmar.dll [5632]
O44 - LFC:[MD5.76B29E1C9AEF011AFCE0F591234933BE] - 17/03/2015 - 17:39:10 R--A- . (.Microsoft Corporation - Punjabi/Gurmukhi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinpun.dll [6144]
O44 - LFC:[MD5.DCC32B8533FA6C84D64620BE49E110E3] - 17/03/2015 - 17:39:10 R--A- . (.Microsoft Corporation - Tamil Keyboard Layout.) -- C:\WINDOWS\system32\kbdintam.dll [5632]
O44 - LFC:[MD5.4DA25F026970A630B0F5FE5002BA7ECA] - 17/03/2015 - 17:39:10 R--A- . (.Microsoft Corporation - Telugu Keyboard Layout.) -- C:\WINDOWS\system32\kbdintel.dll [5632]
O44 - LFC:[MD5.89FD6D6E233393794FB75CF79DDC1E06] - 17/03/2015 - 17:39:10 R--A- . (.Microsoft Corporation - Vietnamese Keyboard Layout.) -- C:\WINDOWS\system32\kbdvntc.dll [5632]
O44 - LFC:[MD5.1004B259E77BEF2033CAF435760D95A6] - 17/03/2015 - 17:39:10 R--A- . (.Microsoft Corporation - Western Armenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdarmw.dll [5120]
O44 - LFC:[MD5.F6B8D77B57DF76EDCC157296124FDEAA] - 17/03/2015 - 17:39:14 ---A- . (.Microsoft Corporation - JP Japanese Keyboard Layout for 106.) -- C:\WINDOWS\system32\kbd106.dll [6144]
O44 - LFC:[MD5.15CC5E30A8CFFFAC6056EC7CF2070187] - 17/03/2015 - 17:39:15 ---A- . (.Microsoft Corporation - KO Hangeul Keyboard Layout for 101(Type B).) -- C:\WINDOWS\system32\kbd101b.dll [6144]
O44 - LFC:[MD5.7EC1E78DED45863F8100DE4248BFCAC1] - 17/03/2015 - 17:39:16 ---A- . (.Microsoft Corporation - JP Japanese Keyboard Layout Stub driver.) -- C:\WINDOWS\system32\kbdjpn.dll [8704]
O44 - LFC:[MD5.D496BA4B92B3E7B6C9D9A70137765523] - 17/03/2015 - 17:39:16 ---A- . (.Microsoft Corporation - KO Hangeul Keyboard Layout Stub driver.) -- C:\WINDOWS\system32\kbdkor.dll [8192]
O44 - LFC:[MD5.E1CB8EE6C0DC70E0DBCFA8D32C849E91] - 17/03/2015 - 17:39:16 ---A- . (.Microsoft Corporation - KO Hangeul Keyboard Layout for 101(Type C).) -- C:\WINDOWS\system32\kbd101c.dll [6144]
O44 - LFC:[MD5.1AB5B6C627EBC61883EA311367F51130] - 17/03/2015 - 17:39:16 ---A- . (.Microsoft Corporation - KO Hangeul Keyboard Layout for 103.) -- C:\WINDOWS\system32\kbd103.dll [5632]
O44 - LFC:[MD5.C82117E3D8BB31E5D663E5130453AEA0] - 17/03/2015 - 17:39:19 ---A- . (.Microsoft Corporation - Microsoft IME Standard.) -- C:\WINDOWS\system32\imjp81.ime [340023]
O44 - LFC:[MD5.1DFB59B3EA5DDDB87F6A5D19CC72C2C1] - 17/03/2015 - 17:39:20 ---A- . (.Microsoft Corporation - DEC LK411-AJ Keyboard Layout.) -- C:\WINDOWS\system32\kbdlk41a.dll [6656]
O44 - LFC:[MD5.FD7B1BFF0D85CAEB7FA1F91F9F2736A8] - 17/03/2015 - 17:39:20 ---A- . (.Microsoft Corporation - DEC LK411-JJ Keyboard Layout.) -- C:\WINDOWS\system32\kbdlk41j.dll [6144]
O44 - LFC:[MD5.F7EAF04EC91A7EE4613F04E4FE4EA522] - 17/03/2015 - 17:39:20 ---A- . (.Microsoft Corporation - JP Japanese Keyboard Layout for 101.) -- C:\WINDOWS\system32\kbd101.dll [6144]
O44 - LFC:[MD5.2155B0B79E19765A0A19F8E48DEC5FB1] - 17/03/2015 - 17:39:20 ---A- . (.Microsoft Corporation - JP Japanese Keyboard Layout for 106.) -- C:\WINDOWS\system32\kbd106n.dll [6144]
O44 - LFC:[MD5.2A52FD8ECF7C8AAFEB614D18DA8B6869] - 17/03/2015 - 17:39:20 ---A- . (.Microsoft Corporation - JP Japanese Keyboard Layout for AX2.) -- C:\WINDOWS\system32\kbdax2.dll [6144]
O44 - LFC:[MD5.A7766CC128FD832C0A510862309E429A] - 17/03/2015 - 17:39:20 ---A- . (.Microsoft Corporation - JP Japanese Keyboard Layout for Fujitsu FMV.) -- C:\WINDOWS\system32\f3ahvoas.dll [7168]
O44 - LFC:[MD5.BF8AFF969F478E5945AF48421EE5BB9F] - 17/03/2015 - 17:39:20 ---A- . (.Microsoft Corporation - JP Japanese Keyboard Layout for IBM 5576-00.) -- C:\WINDOWS\system32\kbdibm02.dll [7168]
O44 - LFC:[MD5.8C95C271374A3784890430538EB3EAC3] - 17/03/2015 - 17:39:20 ---A- . (.Microsoft Corporation - Microsoft IME.) -- C:\WINDOWS\system32\imjp81k.dll [811064]
O44 - LFC:[MD5.DDB816614FC940DB688DEAB9A9260A96] - 17/03/2015 - 17:39:21 ---A- . (.Microsoft Corporation - Microsoft Korean IME 2002.) -- C:\WINDOWS\system32\imekr61.ime [94720]
O44 - LFC:[MD5.FC1A66821AAF471900392947203062AC] - 17/03/2015 - 17:39:21 ---A- . (.Microsoft Corporation - 全拼输入法 5.0 版.) -- C:\WINDOWS\system32\WINPY.IME [156672]
O44 - LFC:[MD5.72EAFD3A7E9359BE4DCE6D275FD33CFE] - 17/03/2015 - 17:39:21 ---A- . (.Microsoft Corporation - 区位输入法 5.0 版.) -- C:\WINDOWS\system32\WINGB.IME [72704]
O44 - LFC:[MD5.D7A8B92D457F02118DC36B26B5792F3C] - 17/03/2015 - 17:39:21 ---A- . (.Microsoft Corporation - 双拼输入法 5.0 版.) -- C:\WINDOWS\system32\WINSP.IME [156672]
O44 - LFC:[MD5.2ADED35C1C9F219EE4293FC114A305DD] - 17/03/2015 - 17:39:21 ---A- . (.Microsoft Corporation - 郑码输入法 5.0 版.) -- C:\WINDOWS\system32\WINZM.IME [156672]
O44 - LFC:[MD5.28945873DFD303658CF9EB2DC8C6DBC3] - 17/03/2015 - 17:39:22 ---A- . (.Microsoft Corporation - 微软拼音输入法 3.0.) -- C:\WINDOWS\system32\PINTLGNT.IME [482304]
O44 - LFC:[MD5.69682C1A36E5C591EFDD0FD19DC4AAC7] - 17/03/2015 - 17:39:25 ---A- . (.Microsoft Corporation - 倉頡輸入法 5.0 版.) -- C:\WINDOWS\system32\chajei.ime [78336]
O44 - LFC:[MD5.6F3B7A6EBD933738915963D292818B9D] - 17/03/2015 - 17:39:26 ---A- . (.Microsoft Corporation - Generic IME 5.0 version.) -- C:\WINDOWS\system32\uniime.dll [76288]
O44 - LFC:[MD5.55CACBA5C963F16B46B9FE03A5638709] - 17/03/2015 - 17:39:26 ---A- . (.Microsoft Corporation - 內碼輸入法 5.0 版.) -- C:\WINDOWS\system32\winime.ime [65536]
O44 - LFC:[MD5.6D78A7826A8D57FC2DF8B4536B20FE5D] - 17/03/2015 - 17:39:26 ---A- . (.Microsoft Corporation - 單碼輸入法 5.0 版.) -- C:\WINDOWS\system32\unicdime.ime [65024]
O44 - LFC:[MD5.645B55CEAC455A4C8F3B63E9D8775115] - 17/03/2015 - 17:39:26 ---A- . (.Microsoft Corporation - 大易輸入法 5.0 版.) -- C:\WINDOWS\system32\dayi.ime [78848]
O44 - LFC:[MD5.EBA1F4CD698123177B5D71A5D0135549] - 17/03/2015 - 17:39:26 ---A- . (.Microsoft Corporation - 微軟新注音輸入法 2002a.) -- C:\WINDOWS\system32\TINTLGNT.IME [571392]
O44 - LFC:[MD5.A90F74C54D2D4A301C55AD48ED59C0E6] - 17/03/2015 - 17:39:26 ---A- . (.Microsoft Corporation - 注音輸入法 5.0 版.) -- C:\WINDOWS\system32\phon.ime [79360]
O44 - LFC:[MD5.973358A8E97DF3B2D16EC62052D90A90] - 17/03/2015 - 17:39:26 ---A- . (.Microsoft Corporation - 英數輸入法 5.0 版.) -- C:\WINDOWS\system32\romanime.ime [26112]
O44 - LFC:[MD5.A5F28CD5091F4D211A4279D6AB115868] - 17/03/2015 - 17:39:26 ---A- . (.Microsoft Corporation - 行列輸入法 5.0 版.) -- C:\WINDOWS\system32\winar30.ime [79360]
O44 - LFC:[MD5.C40CF89D7E855DE1FCDA27DB5F3CE424] - 17/03/2015 - 17:39:26 ---A- . (.Microsoft Corporation - 通用輸入法 5.0 版.) -- C:\WINDOWS\system32\miniime.tpl [11776]
O44 - LFC:[MD5.D83546845D96A5CA26133ED3945D4E91] - 17/03/2015 - 17:39:26 ---A- . (.Microsoft Corporation - 速成輸入法 5.0 版.) -- C:\WINDOWS\system32\quick.ime [77824]
O44 - LFC:[MD5.09E420F90A329BDA68477FA4AF43CB28] - 17/03/2015 - 17:39:27 ---A- . (...) -- C:\WINDOWS\system32\xjis.nls [28288]
O44 - LFC:[MD5.2F46E8D51384E594857AA61617549FA3] - 17/03/2015 - 17:39:27 ---A- . (.Microsoft Corporation - 微軟新倉頡輸入法 98b.) -- C:\WINDOWS\system32\CINTLGNT.IME [21504]
O44 - LFC:[MD5.232094E602642181A5A508975665D11B] - 17/03/2015 - 17:39:28 ---A- . (...) -- C:\WINDOWS\system32\c_20949.nls [177698]
O44 - LFC:[MD5.DBE8C6C58DE48CEB43B079C9EF6F86C7] - 17/03/2015 - 17:39:28 ---A- . (.Microsoft Corporation - ISO-2022 Code Page Translation DLL.) -- C:\WINDOWS\system32\c_is2022.dll [6656]
O44 - LFC:[MD5.C4674F556D1C0B797DD5BADB7A64F7E6] - 17/03/2015 - 17:39:38 ---A- . (.Microsoft Corporation - JP Japanese Keyboard Layout for (NEC PC-980.) -- C:\WINDOWS\system32\kbdnec95.dll [7168]
O44 - LFC:[MD5.33356389C4760487E71D24D4F3083D18] - 17/03/2015 - 17:39:38 ---A- . (.Microsoft Corporation - JP Japanese Keyboard Layout for (NEC PC-980.) -- C:\WINDOWS\system32\kbdnecAT.dll [9216]
O44 - LFC:[MD5.664285630FD21995F24A2551E34A7237] - 17/03/2015 - 17:39:38 ---A- . (.Microsoft Corporation - JP Japanese Keyboard Layout for (NEC PC-980.) -- C:\WINDOWS\system32\kbdnecNT.dll [7680]
O44 - LFC:[MD5.A337491EA01F4BE0779A981CB7ACB999] - 17/03/2015 - 17:39:39 ---A- . (...) -- C:\WINDOWS\system32\c_1361.nls [189986]
O44 - LFC:[MD5.DB4F8D50EDA4C0C51BDD0753880FA20B] - 17/03/2015 - 17:39:39 ---A- . (...) -- C:\WINDOWS\system32\ksc.nls [47066]
O44 - LFC:[MD5.54144F43EDF5AA8F504A30E7C1D1A7B5] - 17/03/2015 - 17:39:44 ---A- . (...) -- C:\WINDOWS\system32\prc.nls [83748]
O44 - LFC:[MD5.901863C68E6523336CAC602FE9320ABC] - 17/03/2015 - 17:39:44 ---A- . (...) -- C:\WINDOWS\system32\prcp.nls [83748]
O44 - LFC:[MD5.22757DEB6FC0968F5B10270DBBA7DB05] - 17/03/2015 - 17:39:44 ---A- . (.Microsoft Corporation - KO Hangeul Keyboard Layout for 101 (Type A).) -- C:\WINDOWS\system32\kbd101a.dll [6144]
O44 - LFC:[MD5.AAF2CFDFCEAE84151060465A4C4506DA] - 17/03/2015 - 17:39:45 ---A- . (...) -- C:\WINDOWS\system32\WINPY.MB [1783864]
O44 - LFC:[MD5.FBA8EDF2418C8754D7199B7DCAD9F159] - 17/03/2015 - 17:39:45 ---A- . (...) -- C:\WINDOWS\system32\WINSP.MB [1564868]
O44 - LFC:[MD5.5A651B76C819817A2B992F34C3A8BC8D] - 17/03/2015 - 17:39:45 ---A- . (...) -- C:\WINDOWS\system32\WINZM.MB [1223500]
O44 - LFC:[MD5.EA2A501A6EE240361FA42FBA90E93611] - 17/03/2015 - 17:39:47 ---A- . (...) -- C:\WINDOWS\system32\PINTLPAD.HLP [14821]
O44 - LFC:[MD5.6D62961C6936709C4FE55CE5F7BE4AC1] - 17/03/2015 - 17:39:47 ---A- . (...) -- C:\WINDOWS\system32\PINTLPAE.HLP [16254]
O44 - LFC:[MD5.6556B40EBEB0879DB90B7AC32B41379B] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\a15.tbl [1460]
O44 - LFC:[MD5.9CF1E26D5CFC4747AF8BA76297353523] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\a234.tbl [44370]
O44 - LFC:[MD5.FF0ABF80940C1A6A9E0DB36EB431EB8E] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\acode.tbl [44370]
O44 - LFC:[MD5.217BC5677C19491A22846324300A363C] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\arphr.tbl [110566]
O44 - LFC:[MD5.BB30616600212D6EA337441AAC516F22] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\arptr.tbl [16312]
O44 - LFC:[MD5.2D37D46049C16DEDCF89BF76EC734877] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\array30.tab [146126]
O44 - LFC:[MD5.C01B81BB10AD14DBC5C4ECD350638096] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\big5.nls [66728]
O44 - LFC:[MD5.EE1F60F8774D74BED8B13498F3FE737A] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\bopomofo.nls [82172]
O44 - LFC:[MD5.2511B0F32128156F4C7F9F1164D5A108] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\dayiphr.tbl [520]
O44 - LFC:[MD5.F649C69497F99AA0E87EE81A1E140D0A] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\dayiptr.tbl [700]
O44 - LFC:[MD5.531FE5A2634D87A078017259F21D9736] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\lcphrase.tbl [211938]
O44 - LFC:[MD5.D3C85593F8C4576FCF9B42AC48CA4368] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\lcptr.tbl [24114]
O44 - LFC:[MD5.805EE17EB45B370D75BD8DE1986EE0D5] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\msdayi.tbl [116285]
O44 - LFC:[MD5.87027AC38E50D8185F83F27F92C41330] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\phon.tbl [4071]
O44 - LFC:[MD5.84E0FC05489B2E05B1F7CD41B3E7FD3B] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\phoncode.tbl [43242]
O44 - LFC:[MD5.1C47CF06E760E1865C9AAF04710D517C] - 17/03/2015 - 17:39:48 ---A- . (...) -- C:\WINDOWS\system32\phonptr.tbl [2714]
O44 - LFC:[MD5.1924C588038F922AAB8CB66DF42EA4D6] - 17/03/2015 - 17:39:49 ---A- . (...) -- C:\WINDOWS\system32\arrayhw.tab [18600]
O44 - LFC:[MD5.ECC48F386F8B79D809AEDA327ACA7B0B] - 17/03/2015 - 17:39:53 ---A- . (.Microsoft Corporation - Japanese Word Breaker.) -- C:\WINDOWS\system32\msir3jp.lex [1875968]
O44 - LFC:[MD5.A4F56712788B631F9291D7179571744E] - 17/03/2015 - 17:39:53 ---A- . (.Microsoft Corporation - Japanese Wordbreaker and Stemmer.) -- C:\WINDOWS\system32\msir3jp.dll [98304]
O44 - LFC:[MD5.55DCED5F0946C03E70B255A3AFC932B1] - 17/03/2015 - 17:39:54 ---A- . (...) -- C:\WINDOWS\system32\korwbrkr.lex [1158818]
O44 - LFC:[MD5.C04D36BBEF5B9BAA8D8DA0B57F22BE20] - 17/03/2015 - 17:39:54 ---A- . (...) -- C:\WINDOWS\system32\noise.jpn [2060]
O44 - LFC:[MD5.1C96B3DA6ABE5E18B63C64DF75884F6A] - 17/03/2015 - 17:39:54 ---A- . (...) -- C:\WINDOWS\system32\noise.kor [1486]
O44 - LFC:[MD5.FFF61527F4CC62056DF92E4897C2590E] - 17/03/2015 - 17:39:54 ---A- . (.Microsoft Corporation - Korean WordBreaker.) -- C:\WINDOWS\system32\korwbrkr.dll [70656]
O44 - LFC:[MD5.74DB8D22B25C414851E919D0296F6973] - 17/03/2015 - 17:39:54 ---A- . (.Microsoft Corporation - Microsoft Chinese_Simplified Word Breaker C.) -- C:\WINDOWS\system32\chsbrkr.dll [1677824]
O44 - LFC:[MD5.9B384A73AE6349799602A4E1D81C5C7E] - 17/03/2015 - 17:39:54 ---A- . (.Microsoft Corporation - Microsoft Traditional Chinese Word Breaker.) -- C:\WINDOWS\system32\chtbrkr.dll [838144]
O44 - LFC:[MD5.1D13436E6E07CC475031FB9CAF9C49D0] - 17/03/2015 - 17:40:10 ---A- . (...) -- C:\WINDOWS\system.ini [231]
O44 - LFC:[MD5.46E77AB5E91094D6C1EE518CA4626972] - 17/03/2015 - 17:42:14 R--A- . (.No owner - GSetup MFC Application.) -- C:\WINDOWS\GSetup.exe [207400]
O44 - LFC:[MD5.F3FBFA0A0E3374A50A5C27E15AABE097] - 17/03/2015 - 17:44:51 R--A- . (.Windows XP Bundled build C-Centric Single U - CSVer.) -- C:\WINDOWS\system32\CSVer.dll [53248]
O44 - LFC:[MD5.2451E41C6F45E905FB92A2AC46BD33B1] - 17/03/2015 - 17:46:04 ---A- . (...) -- C:\WINDOWS\KB888111.log [677]
O44 - LFC:[MD5.2E03C9437355CA8F499037F896380F53] - 17/03/2015 - 17:46:12 R---- . (.Realtek Semiconductor Corp. - RtlExUpd DLL for setup utility function.) -- C:\WINDOWS\RtlExUpd.dll [1247776]
O44 - LFC:[MD5.267FC636801EDC5AB28E14036349E3BE] - 17/03/2015 - 17:46:19 ---A- . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\system32\Drivers\Ambfilt.sys [1691480]
O44 - LFC:[MD5.8D288779AB9F13F5F9476C96B47B85B8] - 17/03/2015 - 17:46:19 ---A- . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\system32\ALSNDMGR.CPL [285216]
O44 - LFC:[MD5.5A2375420D91E68DBD1420D741181F39] - 17/03/2015 - 17:46:20 ---A- . (.RealTek Semicoductor Corp. - RealTek AlcWzrd Application.) -- C:\WINDOWS\ALCWZRD.EXE [2815520]
O44 - LFC:[MD5.4DB642FDFCA589BDB00C51030F1A44E5] - 17/03/2015 - 17:46:21 ---A- . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\ALCMTR.EXE [64032]
O44 - LFC:[MD5.2253B5F6189EE1EBA4BCC4014648767E] - 17/03/2015 - 17:46:26 ---A- . (.Realtek Semiconductor Corp. - Realtek Audio Microphone Calibration.) -- C:\WINDOWS\MicCal.exe [2177568]
O44 - LFC:[MD5.C7D9F9717916B34C1B00DD4834AF485C] - 17/03/2015 - 17:46:27 ---A- . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\system32\Drivers\Monfilt.sys [1395800]
O44 - LFC:[MD5.B13D5A0B23684A2B8930DA2D61AFBE1F] - 17/03/2015 - 17:46:28 ---A- . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [19522592]
O44 - LFC:[MD5.DB01625D8E286CD17B94DCF088713D7F] - 17/03/2015 - 17:46:34 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\system32\Drivers\RtkHDAud.sys [5883936]
O44 - LFC:[MD5.B4CEDBBDE42A697BBF52327AD19C29BD] - 17/03/2015 - 17:46:36 ---A- . (.Realtek Semiconductor Corp. - Realtek Audio Control Panel.) -- C:\WINDOWS\RTLCPL.EXE [9721888]
O44 - LFC:[MD5.CDEAD017E6FBDE20C02DA4ED3A2F1517] - 17/03/2015 - 17:46:38 ---A- . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\system32\RTSndMgr.CPL [887328]
O44 - LFC:[MD5.00BD1FAC9A0B6186745BC366773ECA1C] - 17/03/2015 - 17:46:39 ---A- . (.Realtek Semiconductor - Realtek Audio Service.) -- C:\WINDOWS\RtkAudioService.exe [129568]
O44 - LFC:[MD5.AC510B74BE7CC9C0BBC72B7212873D77] - 17/03/2015 - 17:46:39 ---A- . (.Realtek Semiconductor Corp. - Driver Update and remove for Windows x64 or.) -- C:\WINDOWS\RtlUpd.exe [1489440]
O44 - LFC:[MD5.F14A9D93619BFF45358643D60DDB7CD8] - 17/03/2015 - 17:46:39 ---A- . (.Realtek Semiconductor Corp. - Realtek HD Audio Coinstaller.) -- C:\WINDOWS\system32\RtkCoInstXP.dll [51232]
O44 - LFC:[MD5.5DE04B33D3FCACDB5F99E9ED367CBF7D] - 17/03/2015 - 17:46:40 ---A- . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\SOUNDMAN.EXE [84512]
O44 - LFC:[MD5.A4BF78F9FC256FBBFC5DD81379E6F2F4] - 17/03/2015 - 17:46:40 ---A- . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\WINDOWS\SkyTel.exe [1833504]
O44 - LFC:[MD5.E3D0DB600F9E461F760842666D328D92] - 17/03/2015 - 17:46:40 ---A- . (.Realtek Semiconductor Crop. - Noise Canceling Program.) -- C:\WINDOWS\vncutil.exe [358944]
O44 - LFC:[MD5.7B1DE0647CED400FAB968A051742D11E] - 17/03/2015 - 17:47:01 ---A- . (.InstallShield Software Corporation - InstallShield Update Service Update Manager.) -- C:\WINDOWS\system32\ISUSPM.cpl [73728]
O44 - LFC:[MD5.95EF7247C50C7241FDAE39A9B3AFF4AE] - 17/03/2015 - 17:47:02 ---A- . (...) -- C:\WINDOWS\system32\AppleChargerSrv.exe [31272]
O44 - LFC:[MD5.F0A48CE44D3F368990CA8954340BD9A0] - 17/03/2015 - 17:47:02 ---A- . (...) -- C:\WINDOWS\system32\Drivers\AppleCharger.sys [19496]
O44 - LFC:[MD5.96478FE91C5A37C673EBE3DA87C1A115] - 17/03/2015 - 17:47:03 R--A- . (.Atheros Communications, Inc. - Atheros AR813x/AR815x PCI-E Ethernet Contro.) -- C:\WINDOWS\system32\Drivers\l1c51x86.sys [44032]
O44 - LFC:[MD5.A8ED0188CA6580088F760D25D83E557E] - 17/03/2015 - 17:47:28 ---A- . (...) -- C:\WINDOWS\GSetup.ini [10]
O44 - LFC:[MD5.6D0634CEBBFF7F428DD816706F5AA1FB] - 17/03/2015 - 17:49:18 ---A- . (...) -- C:\WINDOWS\system32\BuzzingBee.wav [146650]
O44 - LFC:[MD5.E2FA75ADE398C9A44815B11CC141105C] - 17/03/2015 - 17:49:18 ---A- . (...) -- C:\WINDOWS\system32\LoopyMusic.wav [940794]
O44 - LFC:[MD5.456462905091DB042141487FE030E3C9] - 17/03/2015 - 17:52:56 ---A- . (.Indigo Rose Corporation - SUF60Runtime.) -- C:\WINDOWS\iun6002.exe [737280]
O44 - LFC:[MD5.03D7AD16AC204C48640CBE6ED8281A65] - 17/03/2015 - 17:54:50 ---A- . (.Microsoft Corporation - Update RunOnce Service.) -- C:\WINDOWS\system32\spupdsvc.exe [26144]
O44 - LFC:[MD5.5A082EF406A018419EF8D6000AE7B352] - 17/03/2015 - 18:02:34 ---A- . (...) -- C:\WINDOWS\Wudf01000Inst.log [58045]
O44 - LFC:[MD5.DC17DD0189B0C36D863B4DD0A036C10F] - 17/03/2015 - 18:03:06 ---A- . (...) -- C:\WINDOWS\WMSysPr9.prx [316640]
O44 - LFC:[MD5.541DB7C51647ADED2063557564F469E7] - 17/03/2015 - 18:03:11 ---A- . (...) -- C:\WINDOWS\WMFDist11.log [72852]
O44 - LFC:[MD5.C558CB6BEDA81C50EACB0CD69FAD6D33] - 17/03/2015 - 18:03:51 ---A- . (...) -- C:\WINDOWS\win.ini [507]
O44 - LFC:[MD5.BCC190C90947B03B28547E970CD72883] - 17/03/2015 - 18:03:54 ---A- . (...) -- C:\WINDOWS\wmp11.log [64806]
O44 - LFC:[MD5.87BBF015ADDE24DBAFF1FE5A114EDB9C] - 17/03/2015 - 18:04:01 ----- . (.Microsoft Corporation - Service Pack Messages.) -- C:\WINDOWS\system32\spmsg.dll [16928]
O44 - LFC:[MD5.C494CE9C2B88A65C9614EAB33768B571] - 17/03/2015 - 18:04:03 ---A- . (...) -- C:\WINDOWS\MSCompPackV1.log [52289]
O44 - LFC:[MD5.0CF8534C1EDA9F85C3DF8994FEAA5C8D] - 17/03/2015 - 18:04:25 ---A- . (...) -- C:\WINDOWS\wmsetup10.log [2204]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17/03/2015 - 18:05:27 ---A- . (...) -- C:\WINDOWS\setuperr.log [0]
O44 - LFC:[MD5.A799EA2E17F8C6747801E37F25FE078F] - 17/03/2015 - 18:05:53 R--A- . (...) -- C:\WINDOWS\SET3.tmp [1246130]
O44 - LFC:[MD5.7DEBF83AF61B07063EF0CEEADD4B4E59] - 17/03/2015 - 18:05:54 R--A- . (...) -- C:\WINDOWS\SET4.tmp [1088840]
O44 - LFC:[MD5.619D9DD12A0BFDB080A86CE19F09CA10] - 17/03/2015 - 18:05:56 R--A- . (...) -- C:\WINDOWS\SET8.tmp [16825]
O44 - LFC:[MD5.F297AF7D5C0A1BE3047345894430DD1D] - 17/03/2015 - 18:07:46 ---A- . (.Microsoft Corporation - Pages de propriétés pour les périphériques.) -- C:\WINDOWS\system32\storprop.dll [76800]
O44 - LFC:[MD5.486E0B1BC94C346E5C352C295388C803] - 17/03/2015 - 18:07:48 ----- . (...) -- C:\WINDOWS\system32\CONFIG.TMP [3072]
O44 - LFC:[MD5.5908A51993B7175271987C07CBE06950] - 17/03/2015 - 18:07:48 ---A- . (.Microsoft Corporation - Battery Class Installer.) -- C:\WINDOWS\system32\batt.dll [8704]
O44 - LFC:[MD5.2DCC5C800F51D487178814CA9EADA181] - 17/03/2015 - 18:07:48 ---A- . (.Microsoft Corporation - Bloc-notes.) -- C:\WINDOWS\NOTEPAD.EXE [70656]
O44 - LFC:[MD5.C93C9FF7B04D772627A3646D89F7BF89] - 17/03/2015 - 18:07:48 ---A- . (.Microsoft Corporation - Infra-Red Bus Enumerator.) -- C:\WINDOWS\system32\Drivers\irenum.sys [11264]
O44 - LFC:[MD5.DA090A1AD995DB0716293E029E6198E5] - 17/03/2015 - 18:07:49 ---A- . (.Microsoft Corporation - Gestionnaire des tâches.) -- C:\WINDOWS\TASKMAN.EXE [15872]
O44 - LFC:[MD5.F899213C79DEE079DCE1EE730D82594F] - 17/03/2015 - 18:07:50 ---A- . (.Equinox Systems Inc. - Co-installeur série multiport Equinox.) -- C:\WINDOWS\system32\EqnClass.Dll [103424]
O44 - LFC:[MD5.FA511331A48B582A7D584FC2408E8C1A] - 17/03/2015 - 18:07:50 ---A- . (.Perle Systems Ltd. - Specialix MPS NT Upgrade CoInstaller.) -- C:\WINDOWS\system32\spxcoins.dll [24661]
O44 - LFC:[MD5.6CB26848BCDAA361B6EE21264FB362C3] - 17/03/2015 - 18:07:51 ---A- . (...) -- C:\WINDOWS\system32\c_20127.nls [66082]
O44 - LFC:[MD5.1E9B88D340481EDA7A9BF53A949E1F42] - 17/03/2015 - 18:07:51 ---A- . (.Digi International - DGSETUP DLL.) -- C:\WINDOWS\system32\dgsetup.dll [86044]
O44 - LFC:[MD5.7AE4CDB4AD25A08B711ECC5BE12EF3D7] - 17/03/2015 - 18:07:51 ---A- . (.Digi International, Inc. - Digi RealPort® Driver Upgrade.) -- C:\WINDOWS\system32\dgrpsetu.dll [176157]
O44 - LFC:[MD5.A6011889A0F23EA2BFC9CCDEC11DF553] - 17/03/2015 - 18:07:51 ---A- . (.Microsoft Corporation - Co-installateur de classe Infrarouge.) -- C:\WINDOWS\system32\irclass.dll [13312]
O44 - LFC:[MD5.6F8A509550FE8C92D07EE0143BF29BA1] - 17/03/2015 - 18:07:53 ---A- . (...) -- C:\WINDOWS\system32\c_10010.nls [66082]
O44 - LFC:[MD5.D2CA471D36A69D17F82D5C1B64FAEE39] - 17/03/2015 - 18:07:53 ---A- . (...) -- C:\WINDOWS\system32\c_10029.nls [66082]
O44 - LFC:[MD5.9CA501D2A8E6909C5B2E8C9274682BF1] - 17/03/2015 - 18:07:53 ---A- . (...) -- C:\WINDOWS\system32\c_10082.nls [66082]
O44 - LFC:[MD5.21E928C8E6ED8EEAB0D1AAEE82ACDD76] - 17/03/2015 - 18:07:53 ---A- . (...) -- C:\WINDOWS\system32\c_852.nls [66594]
O44 - LFC:[MD5.615DDBB5CBBAE8301C1E7FA95F1E66A3] - 17/03/2015 - 18:07:53 R--A- . (.Microsoft Corporation - Albania Keyboard Layout.) -- C:\WINDOWS\system32\KBDAL.DLL [6656]
O44 - LFC:[MD5.5B46568257EE49714564511D58E0DE53] - 17/03/2015 - 18:07:53 R--A- . (.Microsoft Corporation - Croatian/Slovenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdcr.dll [6656]
O44 - LFC:[MD5.36E68E02AF2206FC4A8C73CAEABE1FB0] - 17/03/2015 - 18:07:53 R--A- . (.Microsoft Corporation - Czech Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz.dll [7168]
O44 - LFC:[MD5.AFA30A44ED11A5F9A059A2767AB6A81A] - 17/03/2015 - 18:07:53 R--A- . (.Microsoft Corporation - Czech_101 Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz1.dll [6656]
O44 - LFC:[MD5.90535C13EB54E1F2C95478F1B99DCCEB] - 17/03/2015 - 18:07:53 R--A- . (.Microsoft Corporation - Czech_Programmer's Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz2.dll [6656]
O44 - LFC:[MD5.F3D1EEC756847C70E65335E8CA1AE64B] - 17/03/2015 - 18:07:53 R--A- . (.Microsoft Corporation - Hungarian 101-key Keyboard Layout.) -- C:\WINDOWS\system32\kbdhu1.dll [5632]
O44 - LFC:[MD5.CF92D95B5CB6649CB9D7E8D7616487A7] - 17/03/2015 - 18:07:53 R--A- . (.Microsoft Corporation - Hungarian Keyboard Layout.) -- C:\WINDOWS\system32\kbdhu.dll [6656]
O44 - LFC:[MD5.D199B05901C2407FC0F87444A24A4F3C] - 17/03/2015 - 18:07:53 R--A- . (.Microsoft Corporation - Polish Keyboard Layout.) -- C:\WINDOWS\system32\kbdpl.dll [6656]
O44 - LFC:[MD5.897663C8606357A8E86E57CDEA8EE219] - 17/03/2015 - 18:07:53 R--A- . (.Microsoft Corporation - Polish Programmer's Keyboard Layout.) -- C:\WINDOWS\system32\kbdpl1.dll [5632]
O44 - LFC:[MD5.C2E62748C875A310A6D5B10498238A68] - 17/03/2015 - 18:07:53 R--A- . (.Microsoft Corporation - Romanian Keyboard Layout.) -- C:\WINDOWS\system32\kbdro.dll [5632]
O44 - LFC:[MD5.552221E92D6BF55F8358B927F00696C3] - 17/03/2015 - 18:07:53 R--A- . (.Microsoft Corporation - Serbian_Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdycl.dll [6656]
O44 - LFC:[MD5.DCCE231E5BDF1401AC0F770EE16902AA] - 17/03/2015 - 18:07:53 R--A- . (.Microsoft Corporation - Slovak Keyboard Layout.) -- C:\WINDOWS\system32\kbdsl.dll [6656]
O44 - LFC:[MD5.93033C3EA80FB24B198B24DDECA07D4A] - 17/03/2015 - 18:07:53 R--A- . (.Microsoft Corporation - Slovak(QWERTY) Keyboard Layout.) -- C:\WINDOWS\system32\kbdsl1.dll [6656]
O44 - LFC:[MD5.5D038EEABA8EA438F6B5ABD5E91BC851] - 17/03/2015 - 18:07:55 ---A- . (...) -- C:\WINDOWS\system32\C_28594.NLS [66082]
O44 - LFC:[MD5.3E969213F35127D83DAB48FF1283E8E4] - 17/03/2015 - 18:07:55 ---A- . (...) -- C:\WINDOWS\system32\c_855.nls [66594]
O44 - LFC:[MD5.5CD475CA7B87844DE1E0483B536F9AAE] - 17/03/2015 - 18:07:55 ---A- . (...) -- C:\WINDOWS\system32\c_866.nls [66594]
O44 - LFC:[MD5.BBB6C3346064C6AECEE6AD9F144B1AEA] - 17/03/2015 - 18:07:55 R--A- . (.Microsoft Corporation - Estonia Keyboard Layout.) -- C:\WINDOWS\system32\kbdest.dll [6144]
O44 - LFC:[MD5.C047165ED75FF85DB5A89EFEE3DA1133] - 17/03/2015 - 18:07:55 R--A- . (.Microsoft Corporation - Latvia Keyboard Layout.) -- C:\WINDOWS\system32\kbdlv.dll [6144]
O44 - LFC:[MD5.27D72BCF2B495FCDA073DBA5F189D7A1] - 17/03/2015 - 18:07:55 R--A- . (.Microsoft Corporation - Latvia-QWERTY Keyboard Layout.) -- C:\WINDOWS\system32\kbdlv1.dll [6144]
O44 - LFC:[MD5.F5B3B152A1D2752BC88928EB1E031B7E] - 17/03/2015 - 18:07:55 R--A- . (.Microsoft Corporation - Lithuania Keyboard Layout.) -- C:\WINDOWS\system32\kbdlt.dll [5632]
O44 - LFC:[MD5.AF05A41DBD1B0424B5CB47092152C7F6] - 17/03/2015 - 18:07:55 R--A- . (.Microsoft Corporation - Lithuanian Keyboard Layout.) -- C:\WINDOWS\system32\kbdlt1.dll [5632]
O44 - LFC:[MD5.B537ACFAB9E70F0EF48DB696A08ADC81] - 17/03/2015 - 18:07:56 ---A- . (...) -- C:\WINDOWS\system32\C_28597.NLS [66082]
O44 - LFC:[MD5.0A206B5CACD3CA70D2044DA691304765] - 17/03/2015 - 18:07:56 ---A- . (...) -- C:\WINDOWS\system32\c_10006.nls [66082]
O44 - LFC:[MD5.BAC7072B365F9648CA318154BA7E03EC] - 17/03/2015 - 18:07:56 ---A- . (...) -- C:\WINDOWS\system32\c_737.nls [66594]
O44 - LFC:[MD5.780C444EB16B65E6DE96F794A732DA12] - 17/03/2015 - 18:07:56 ---A- . (...) -- C:\WINDOWS\system32\c_869.nls [66594]
O44 - LFC:[MD5.8BE0D77A873730B4EB1DAB7C6622CD46] - 17/03/2015 - 18:07:56 ---A- . (...) -- C:\WINDOWS\system32\c_875.nls [66082]
O44 - LFC:[MD5.1E81E1F3D5ACB3371CF73C1DE8F800BF] - 17/03/2015 - 18:07:56 R--A- . (.Microsoft Corporation - Greek IBM 220 Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe220.dll [5632]
O44 - LFC:[MD5.D26533FDF72381947F823882BBA4A196] - 17/03/2015 - 18:07:56 R--A- . (.Microsoft Corporation - Greek IBM 220 Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdhela2.dll [6144]
O44 - LFC:[MD5.AC81A176BA35D1D7A5CD53137F3160FE] - 17/03/2015 - 18:07:56 R--A- . (.Microsoft Corporation - Greek IBM 319 Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe319.dll [5632]
O44 - LFC:[MD5.F2312B8A76FD584ACD1D956688BEB6F8] - 17/03/2015 - 18:07:56 R--A- . (.Microsoft Corporation - Greek IBM 319 Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdhela3.dll [6656]
O44 - LFC:[MD5.83C99B438B3D6DBE7B838DA783E173AC] - 17/03/2015 - 18:07:56 R--A- . (.Microsoft Corporation - Greek Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe.dll [5632]
O44 - LFC:[MD5.A93447C87DDB6B1945F1F5F87EAB68DC] - 17/03/2015 - 18:07:56 R--A- . (.Microsoft Corporation - Greek_Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdgkl.dll [6144]
O44 - LFC:[MD5.90CC52E8B52F0EC3A41D14FFBE789324] - 17/03/2015 - 18:07:56 R--A- . (.Microsoft Corporation - Greek_Polytonic Keyboard Layout.) -- C:\WINDOWS\system32\kbdhept.dll [8192]
O44 - LFC:[MD5.AF4A866226BD04ACF06135088D75BB63] - 17/03/2015 - 18:07:57 ---A- . (...) -- C:\WINDOWS\system32\c_10007.nls [66082]
O44 - LFC:[MD5.314E85390BEBDAE5D1E11DB2D8CBC6E9] - 17/03/2015 - 18:07:57 ---A- . (...) -- C:\WINDOWS\system32\c_10017.nls [66082]
O44 - LFC:[MD5.E22D1B9AC7854C0A654E4C4232074E49] - 17/03/2015 - 18:07:58 ---A- . (...) -- C:\WINDOWS\system32\C_28595.NLS [66082]
O44 - LFC:[MD5.0304318F189E3CC4A99FCCCB0A68147F] - 17/03/2015 - 18:07:58 R--A- . (.Microsoft Corporation - Azerbaijan_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdaze.dll [5632]
O44 - LFC:[MD5.A1FA7A83F9D98D84419A8E64286284F4] - 17/03/2015 - 18:07:58 R--A- . (.Microsoft Corporation - Belarusian Keyboard Layout.) -- C:\WINDOWS\system32\kbdblr.dll [5632]
O44 - LFC:[MD5.1DF6E4758611E1328567BFE4D1B28E27] - 17/03/2015 - 18:07:58 R--A- . (.Microsoft Corporation - Bulgarian Keyboard Layout.) -- C:\WINDOWS\system32\kbdbu.dll [5632]
O44 - LFC:[MD5.95D9106D39AB410A7F7EE513F181F84C] - 17/03/2015 - 18:07:58 R--A- . (.Microsoft Corporation - Kazak_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdkaz.dll [5632]
O44 - LFC:[MD5.1696413C242327A0AF8AF8E5CBD8AE04] - 17/03/2015 - 18:07:58 R--A- . (.Microsoft Corporation - Kyrgyz Keyboard Layout.) -- C:\WINDOWS\system32\kbdkyr.dll [5632]
O44 - LFC:[MD5.6AEDBCEE8C0475B10A5C244A35572737] - 17/03/2015 - 18:07:58 R--A- . (.Microsoft Corporation - Mongolian Keyboard Layout.) -- C:\WINDOWS\system32\kbdmon.dll [5632]
O44 - LFC:[MD5.B6E962B7AC1CB4A78876953D369BE6DD] - 17/03/2015 - 18:07:58 R--A- . (.Microsoft Corporation - Russia(Typewriter) Keyboard Layout.) -- C:\WINDOWS\system32\kbdru1.dll [5632]
O44 - LFC:[MD5.C6F23BC1411E91C179B0635893BB40A1] - 17/03/2015 - 18:07:58 R--A- . (.Microsoft Corporation - Russian Keyboard Layout.) -- C:\WINDOWS\system32\kbdru.dll [5632]
O44 - LFC:[MD5.E5D4673C83271FEEE1ED73E1E281A42B] - 17/03/2015 - 18:07:58 R--A- . (.Microsoft Corporation - Serbian_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdycc.dll [5632]
O44 - LFC:[MD5.F2D1EEF5ADCD5995C015AB3CB15C9415] - 17/03/2015 - 18:07:58 R--A- . (.Microsoft Corporation - Tatar_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdtat.dll [5632]
O44 - LFC:[MD5.3DDE3DC57C54452A313DC20F3019F8E3] - 17/03/2015 - 18:07:58 R--A- . (.Microsoft Corporation - Ukrainian Keyboard Layout.) -- C:\WINDOWS\system32\kbdur.dll [5632]
O44 - LFC:[MD5.4F9CFFBF05831BB81833FC64A5329C36] - 17/03/2015 - 18:07:58 R--A- . (.Microsoft Corporation - Uzbek_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbduzb.dll [5632]
O44 - LFC:[MD5.EFFDFF60A38CF648811BBCDD722ECF5E] - 17/03/2015 - 18:07:59 ---A- . (...) -- C:\WINDOWS\system32\c_10081.nls [66082]
O44 - LFC:[MD5.C37A21EE1ADFDC13FC707D97073148ED] - 17/03/2015 - 18:07:59 ---A- . (...) -- C:\WINDOWS\system32\c_28599.nls [66082]
O44 - LFC:[MD5.A8764750B22B528D85A691A52CB21856] - 17/03/2015 - 18:07:59 ---A- . (...) -- C:\WINDOWS\system32\c_857.nls [66594]
O44 - LFC:[MD5.712A218557F99D136735E0545E5AE223] - 17/03/2015 - 18:07:59 R--A- . (.Microsoft Corporation - Azeri-Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdazel.dll [5632]
O44 - LFC:[MD5.188E56B70419D8353B8D4F3E381D9E52] - 17/03/2015 - 18:07:59 R--A- . (.Microsoft Corporation - Turkish F Keyboard Layout.) -- C:\WINDOWS\system32\kbdtuf.dll [6144]
O44 - LFC:[MD5.5D569F2951F878EF01D7723DC08682E9] - 17/03/2015 - 18:07:59 R--A- . (.Microsoft Corporation - Turkish Q Keyboard Layout.) -- C:\WINDOWS\system32\kbdtuq.dll [6144]
O44 - LFC:[MD5.35448F3A71EBBECF8E997FAD3A99327D] - 17/03/2015 - 18:08:01 ---A- . (...) -- C:\WINDOWS\system32\c_28603.nls [66082]
O44 - LFC:[MD5.C92981C0B4DC522EA800DCBB3BBF2D82] - 17/03/2015 - 18:08:11 ---A- . (...) -- C:\WINDOWS\system32\pid.PNF [4444]
O44 - LFC:[MD5.18B1B6FE90BC5CD3F96F47D419CD1E8B] - 17/03/2015 - 18:09:13 ---A- . (.Microsoft Corporation - DLL de l'interface utilisateur USB.) -- C:\WINDOWS\system32\usbui.dll [77312]
O44 - LFC:[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - 17/03/2015 - 18:09:51 ---A- . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17/03/2015 - 18:10:17 ---A- . (...) -- C:\WINDOWS\Sti_Trace.log [0]
O44 - LFC:[MD5.D9F724AA26C010A217C97606B160ED68] - 17/03/2015 - 18:10:21 ---A- . (.Microsoft Corporation - AudStub Driver.) -- C:\WINDOWS\system32\Drivers\audstub.sys [3072]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17/03/2015 - 18:10:44 ---A- . (...) -- C:\WINDOWS\system32\h323log.txt [0]
O44 - LFC:[MD5.28F985204DCA5EEA42D97797627FC7C9] - 17/03/2015 - 18:15:10 ---A- . (...) -- C:\WINDOWS\KB898461.log [70547]
O44 - LFC:[MD5.A799EA2E17F8C6747801E37F25FE078F] - 17/03/2015 - 18:19:18 R--A- . (...) -- C:\WINDOWS\SET1C.tmp [1246130]
O44 - LFC:[MD5.7DEBF83AF61B07063EF0CEEADD4B4E59] - 17/03/2015 - 18:19:20 R--A- . (...) -- C:\WINDOWS\SET1F.tmp [1088840]
O44 - LFC:[MD5.619D9DD12A0BFDB080A86CE19F09CA10] - 17/03/2015 - 18:19:22 R--A- . (...) -- C:\WINDOWS\SET2B.tmp [16825]
O44 - LFC:[MD5.02EE76DBE4DA31AD39E9DCC04A611765] - 17/03/2015 - 18:21:16 ---A- . (...) -- C:\WINDOWS\regopt.log [2766]
O44 - LFC:[MD5.1377C84C1A0741F328068E95C5D881D7] - 17/03/2015 - 18:23:09 ---A- . (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\WINDOWS\system32\FlashPlayerInstaller.exe [18129584]
O44 - LFC:[MD5.DC7A3BC0FC185CD68848DC6F7D7B026B] - 17/03/2015 - 19:12:41 ---A- . (.vbAccelerator - Subclassing and Timer Assistant, modified f.) -- C:\WINDOWS\system32\SSubTmr6.dll [40960]
O44 - LFC:[MD5.C2CE8DA8E394DDFE113DF3DB357F02A7] - 17/03/2015 - 19:12:41 ---A- . (.vbAccelerator - vbAccelerator Image List Control.) -- C:\WINDOWS\system32\vbalIml6.ocx [94208]
O44 - LFC:[MD5.0A096566E80EAB85C466A3F260D0D2FE] - 17/03/2015 - 19:12:41 ---A- . (.vbAccelerator - vbAccelerator PopupMenu Active X DLL.) -- C:\WINDOWS\system32\cNewMenu6.dll [159744]
O44 - LFC:[MD5.CF4BD9341717CFF3C2303FE5F08DE6EE] - 17/03/2015 - 19:12:41 ---A- . (.vbAccelerator - vbAccelerator Toolbar/Rebar control.) -- C:\WINDOWS\system32\vbalTbar6.ocx [233472]
O44 - LFC:[MD5.94987DA09B3789870E7FBAF00A06CD40] - 17/03/2015 - 19:12:41 ---A- . (.vbAccelerator - vbAccelerator VB6 ListView Control.) -- C:\WINDOWS\system32\vbaListView6.ocx [262144]
O44 - LFC:[MD5.F2A60642C8C2F180DA8EBEAC3E089334] - 17/03/2015 - 19:12:41 ---A- . (.vbAccelerator - vbAccelerator VB6 Status Bar Control.) -- C:\WINDOWS\system32\vbalSbar6.ocx [57344]
O44 - LFC:[MD5.9A75776AA3A932B1682BE46C0E40D9F0] - 17/03/2015 - 19:12:41 ---A- . (.vbAccelerator - vbAccelerator VB6 TreeView Control.) -- C:\WINDOWS\system32\vbalTreeView6.ocx [266240]
O44 - LFC:[MD5.BD3E6B6E714A0AF9CFB92788E92B884E] - 17/03/2015 - 19:12:41 ---A- . (.vbaccelerator - vbAccelerator TabStrip Control.) -- C:\WINDOWS\system32\vbalTab6.ocx [61440]
O44 - LFC:[MD5.A7363797D1706F1C1D8AFC78FFC59DC9] - 17/03/2015 - 19:12:46 ---A- . (...) -- C:\WINDOWS\7aed8f9b-7a59-4abd-bdbe-973bf97bf59a.ocx [3120]
O44 - LFC:[MD5.A7363797D1706F1C1D8AFC78FFC59DC9] - 17/03/2015 - 19:12:46 ---A- . (...) -- C:\WINDOWS\system32\ade3a3b7-efaa-4bb6-a44e-1be50229e465.dll [3120]
O44 - LFC:[MD5.7B948E3657BEA62E437BC46CA6EF6012] - 17/03/2015 - 20:13:54 ---A- . (.ALWIL Software - avast! Filtering NDIS driver.) -- C:\WINDOWS\system32\Drivers\aswNdis.sys [12112]
O44 - LFC:[MD5.FB6893167C18D9C6372BDFE9FB02B4C5] - 17/03/2015 - 20:13:54 ---A- . (.Avast Software s.r.o. - avast! Filtering NDIS driver.) -- C:\WINDOWS\system32\Drivers\aswNdis2.sys [253728]
O44 - LFC:[MD5.C62E0261EC93B66151E5BAE83B61EE30] - 17/03/2015 - 20:13:55 ---A- . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\WINDOWS\system32\Drivers\aswTap.sys [35144]
O44 - LFC:[MD5.75A8F8A312FBB4C3D7003BACAB2BFEB1] - 17/03/2015 - 20:14:04 ---A- . (.Avast Software s.r.o. - avast! Keyboard Filter Driver.) -- C:\WINDOWS\system32\Drivers\aswKbd.sys [26096]
O44 - LFC:[MD5.C3A047ABB97AEB805E07A30EFDACD0B9] - 17/03/2015 - 20:14:04 ---A- . (.Avast Software s.r.o. - avast! Virtualization Driver.) -- C:\WINDOWS\system32\Drivers\aswSnx.sys [788272]
O44 - LFC:[MD5.C4B680AA8A352611D0C70E680A87E367] - 17/03/2015 - 20:14:11 ---A- . (.Avast Software s.r.o. - avast! Screen Saver stub.) -- C:\WINDOWS\avastSS.scr [43112]
O44 - LFC:[MD5.46E863AB492069BD049CA71BC21C0474] - 17/03/2015 - 20:14:11 ---A- . (.Avast Software s.r.o. - avast! start-up scanner.) -- C:\WINDOWS\system32\aswBoot.exe [291312]
O44 - LFC:[MD5.AA69ED00EE72BFEE003C864DCFBC5038] - 17/03/2015 - 20:14:17 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswHwid.sys [24144]
O44 - LFC:[MD5.6FB92505DAA300DA62A1C374B949B574] - 17/03/2015 - 20:14:17 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904]
O44 - LFC:[MD5.2EBD0ACCAFC67088D4B9EBDF7428F6AD] - 17/03/2015 - 20:14:17 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswVmm.sys [206976]
O44 - LFC:[MD5.6FDAE6458E0FAC369005EEFE55E1190A] - 17/03/2015 - 20:14:17 ---A- . (.Avast Software s.r.o. - avast! File System Minifilter for Windows 2.) -- C:\WINDOWS\system32\Drivers\aswMonFlt.sys [73440]
O44 - LFC:[MD5.279BE64DC533AB4E3F70279BDC432B4C] - 17/03/2015 - 20:14:17 ---A- . (.Avast Software s.r.o. - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\Drivers\aswTdi.sys [57888]
O44 - LFC:[MD5.06ADE0B8900AA63322172011F49BAAA7] - 17/03/2015 - 20:14:17 ---A- . (.Avast Software s.r.o. - avast! TDI Redirect Driver.) -- C:\WINDOWS\system32\Drivers\aswRdr.sys [55200]
O44 - LFC:[MD5.E5F230B70F1A9764EB7AC4A76445F79F] - 17/03/2015 - 20:14:17 ---A- . (.Avast Software s.r.o. - avast! self protection module.) -- C:\WINDOWS\system32\Drivers\aswSP.sys [427480]
O44 - LFC:[MD5.10CEF72328D6A59A6D211C8BCF9D9C7D] - 17/03/2015 - 20:19:25 ---A- . (...) -- C:\WINDOWS\ie8.log [200665]
O44 - LFC:[MD5.19CE14AE4F5121311863328293863555] - 17/03/2015 - 20:19:31 ---A- . (...) -- C:\WINDOWS\ie8_main.log [62069]
O44 - LFC:[MD5.2E1FED863E84B1C60DDDBA4A250B1634] - 17/03/2015 - 23:29:56 ----- . (.Microsoft Corporation - Notification de fin de service de Windows X.) -- C:\WINDOWS\system32\xp_eos.exe [13312]
O44 - LFC:[MD5.8699BC5CF7FDE1292E7F9B56DD043D82] - 17/03/2015 - 23:32:18 ---A- . (.Microsoft Corporation - MFCDLL Shared Library - Retail Version.) -- C:\WINDOWS\system32\mfc40u.dll [953856]
O44 - LFC:[MD5.EF26202FEE56F7607C6B794059DF347A] - 17/03/2015 - 23:34:25 ----- . (.Microsoft Corporation - Pilote de bus Bluetooth.) -- C:\WINDOWS\system32\Drivers\bthport.sys [272768]
O44 - LFC:[MD5.AC4005738A0C81EDD7E1BFF8623026D6] - 17/03/2015 - 23:34:53 ----- . (.No owner - Microsoft Audio Codec Placeholder.) -- C:\WINDOWS\system32\iacenc.dll [3072]
O44 - LFC:[MD5.22530C3D0CFCBCFD866944B1906CDE19] - 18/03/2015 - 03:00:24 ---A- . (...) -- C:\WINDOWS\KB2423089.log [13555]
O44 - LFC:[MD5.580801B0370E1EA27493FC4594F78E7C] - 18/03/2015 - 03:00:38 ---A- . (...) -- C:\WINDOWS\KB975467.log [62990]
O44 - LFC:[MD5.29EFCB2B5D84344F39C144EF5D858D27] - 18/03/2015 - 03:00:43 ---A- . (...) -- C:\WINDOWS\KB2584146.log [62183]
O44 - LFC:[MD5.4AA559E9FED905BAEACACD6A8C31C2B0] - 18/03/2015 - 03:00:48 ---A- . (...) -- C:\WINDOWS\KB2914368.log [14104]
O44 - LFC:[MD5.08FC1926789A71DCA473867C7C649B14] - 18/03/2015 - 03:00:54 ---A- . (...) -- C:\WINDOWS\KB2661637.log [16296]
O44 - LFC:[MD5.352AA5F0DE56F05AAEC9AD45DC5EA858] - 18/03/2015 - 03:00:59 ---A- . (...) -- C:\WINDOWS\KB2566454.log [16507]
O44 - LFC:[MD5.3C47F0DFB26134B6FFC1BC511AE9C705] - 18/03/2015 - 03:01:05 ---A- . (...) -- C:\WINDOWS\KB2620712.log [22565]
O44 - LFC:[MD5.E6FF71024145A1D9BAB3AC3FDAAE9137] - 18/03/2015 - 03:01:12 ---A- . (...) -- C:\WINDOWS\KB923561.log [18265]
O44 - LFC:[MD5.6B49652DE65C2F949F4170A1B0E3C3F0] - 18/03/2015 - 03:01:21 ---A- . (...) -- C:\WINDOWS\KB2393802.log [19896]
O44 - LFC:[MD5.8C36863FC942A495C9F9B43B981F9AC1] - 18/03/2015 - 03:01:27 ---A- . (...) -- C:\WINDOWS\KB2478960.log [24242]
O44 - LFC:[MD5.7A33A170F00D644A30ADB817A802CEAC] - 18/03/2015 - 03:03:39 ---A- . (...) -- C:\WINDOWS\KB954154.log [8925]
O44 - LFC:[MD5.27B7C339B2B180DFD4AA267AD845A49E] - 18/03/2015 - 03:03:45 ---A- . (...) -- C:\WINDOWS\KB982665.log [63647]
O44 - LFC:[MD5.72F0D790832453055561F3F24A4B941B] - 18/03/2015 - 03:06:49 ---A- . (...) -- C:\WINDOWS\KB2676562.log [32904]
O44 - LFC:[MD5.DD06B69F73C194B13C5DCEED832F65F5] - 18/03/2015 - 03:07:04 ---A- . (...) -- C:\WINDOWS\KB2813345.log [67287]
O44 - LFC:[MD5.FF72BB13FEF9478780F1CA67794D6BF1] - 18/03/2015 - 03:07:12 ---A- . (...) -- C:\WINDOWS\KB2862330.log [19581]
O44 - LFC:[MD5.BB19B886B839CFDF27EF0148B8BF9753] - 18/03/2015 - 03:07:18 ---A- . (...) -- C:\WINDOWS\KB973815.log [30672]
O44 - LFC:[MD5.87DD36267FD6C30B7E512D3153C8C545] - 18/03/2015 - 03:07:32 ---A- . (...) -- C:\WINDOWS\KB2723135-v2.log [20559]
O44 - LFC:[MD5.AB13087D2459E4213D8850154E719D55] - 18/03/2015 - 03:07:40 ---A- . (...) -- C:\WINDOWS\KB981997.log [19948]
O44 - LFC:[MD5.B55CF33ED09C68F560BAD78D50D3E3B2] - 18/03/2015 - 03:07:46 ---A- . (...) -- C:\WINDOWS\KB978706.log [26052]
O44 - LFC:[MD5.1820422EED5496CC8BFAAFA4C3498AE7] - 18/03/2015 - 03:07:59 ---A- . (...) -- C:\WINDOWS\KB2727528.log [26667]
O44 - LFC:[MD5.4056D2B052168341387E8D22C5E4901A] - 18/03/2015 - 03:08:05 ---A- . (...) -- C:\WINDOWS\KB979309.log [101574]
O44 - LFC:[MD5.838B8A5B6F8235F9E9B372FA8061495F] - 18/03/2015 - 03:08:12 ---A- . (...) -- C:\WINDOWS\KB978542.log [66460]
O44 - LFC:[MD5.6C1B52185E6914C4A24FEB734CFCB526] - 18/03/2015 - 03:10:36 ---A- . (...) -- C:\WINDOWS\KB2705219-v2.log [68011]
O44 - LFC:[MD5.ED478B3CD0DE7FB9B46F74D0A4A62D4B] - 18/03/2015 - 03:10:42 ---A- . (...) -- C:\WINDOWS\KB2619339.log [27365]
O44 - LFC:[MD5.07DEA7FF91CB02E539D58EFCC7C88586] - 18/03/2015 - 03:10:49 ---A- . (...) -- C:\WINDOWS\KB2698365.log [22576]
O44 - LFC:[MD5.259EEFC1E07D5D1A027CC73D5A8DACB7] - 18/03/2015 - 03:10:55 ---A- . (...) -- C:\WINDOWS\KB2892075.log [25786]
O44 - LFC:[MD5.B6B8309FD55E432853360CA9616827C5] - 18/03/2015 - 03:11:08 ---A- . (...) -- C:\WINDOWS\KB977914.log [69900]
O44 - LFC:[MD5.07AEC7AEF92342CE16643E5657334199] - 18/03/2015 - 03:11:14 ---A- . (...) -- C:\WINDOWS\KB952069.log [21055]
O44 - LFC:[MD5.F4DA018DAB083C79B9DFB0E57F7FB8C9] - 18/03/2015 - 03:11:22 ---A- . (...) -- C:\WINDOWS\KB2506212.log [68958]
O44 - LFC:[MD5.2C685CD7734FCD260FF31D6F3138B68A] - 18/03/2015 - 03:11:31 ---A- . (...) -- C:\WINDOWS\KB971029.log [69822]
O44 - LFC:[MD5.4953F84CA73476C0C5453D380E882066] - 18/03/2015 - 03:11:39 ---A- . (...) -- C:\WINDOWS\KB2749655.log [70316]
O44 - LFC:[MD5.B7694B39A00A49A7AB4BC5B5011BD018] - 18/03/2015 - 03:11:45 ---A- . (...) -- C:\WINDOWS\KB974392.log [70761]
O44 - LFC:[MD5.C7F4343748959F0B2A2CD6849C31DC21] - 18/03/2015 - 03:11:52 ---A- . (...) -- C:\WINDOWS\KB2653956.log [71237]
O44 - LFC:[MD5.BB797436552D13BACA1396B003470D5E] - 18/03/2015 - 03:11:59 ---A- . (...) -- C:\WINDOWS\KB2508429.log [71972]
O44 - LFC:[MD5.696BEECC582A5EB180A2A14038531842] - 18/03/2015 - 03:12:22 ---A- . (...) -- C:\WINDOWS\KB929399.log [20669]
O44 - LFC:[MD5.9E906EF817C668E8927DF504C40DF375] - 18/03/2015 - 03:12:32 ---A- . (...) -- C:\WINDOWS\KB2419632.log [79415]
O44 - LFC:[MD5.5C56172694B64DD9A8D7DFAB0AE72622] - 18/03/2015 - 03:12:39 ---A- . (...) -- C:\WINDOWS\KB2757638.log [41345]
O44 - LFC:[MD5.EFE64777F00493BE7A1161E0F51C0A24] - 18/03/2015 - 03:12:45 ---A- . (...) -- C:\WINDOWS\KB2893294.log [34671]
O44 - LFC:[MD5.25D193BDBD5CA92EB32915227FBCED61] - 18/03/2015 - 03:12:54 ---A- . (...) -- C:\WINDOWS\KB973904.log [31080]
O44 - LFC:[MD5.E57A15F96D8744B7C2B466CC81C454C2] - 18/03/2015 - 03:13:00 ---A- . (...) -- C:\WINDOWS\KB2603381.log [29998]
O44 - LFC:[MD5.8139E1D1B499D05EAD1BE777CB3D1472] - 18/03/2015 - 03:16:57 ---A- . (...) -- C:\WINDOWS\KB2820917.log [37448]
O44 - LFC:[MD5.ED710D275B3271D588E47C4E6B7DEDF7] - 18/03/2015 - 03:17:02 ---A- . (...) -- C:\WINDOWS\KB978695.log [26145]
O44 - LFC:[MD5.7D05DCD9285D387D9FA3140A8695C3AB] - 18/03/2015 - 03:17:08 ---A- . (...) -- C:\WINDOWS\KB952287.log [30402]
O44 - LFC:[MD5.0FA34F37A2A1FC07C00DEC7234DD8331] - 18/03/2015 - 03:17:15 ---A- . (...) -- C:\WINDOWS\KB2570947.log [30449]
O44 - LFC:[MD5.7D71DA1F16C061AD08F641DB23B261AD] - 18/03/2015 - 03:17:21 ---A- . (...) -- C:\WINDOWS\KB2807986.log [31051]
O44 - LFC:[MD5.DCB7A6849746410D037ADA6203022891] - 18/03/2015 - 03:17:30 ---A- . (...) -- C:\WINDOWS\KB2859537.log [36611]
O44 - LFC:[MD5.37245FA0B41C250BDB253458C3684735] - 18/03/2015 - 03:17:36 ---A- . (...) -- C:\WINDOWS\KB2876331.log [35675]
O44 - LFC:[MD5.CF77409F0739FA87A548BA6240B9517B] - 18/03/2015 - 03:17:43 ---A- . (...) -- C:\WINDOWS\KB950762.log [31225]
O44 - LFC:[MD5.41906A47E1638B94D773218FD65AE3AA] - 18/03/2015 - 03:17:49 ---A- . (...) -- C:\WINDOWS\KB2850869.log [36193]
O44 - LFC:[MD5.D2B205BE3060EE282560C78C96BA05A2] - 18/03/2015 - 03:17:56 ---A- . (...) -- C:\WINDOWS\KB977816.log [38172]
O44 - LFC:[MD5.DB592C386B1F03FA3CE5ED742D69172B] - 18/03/2015 - 03:18:03 ---A- . (...) -- C:\WINDOWS\KB2535512.log [31682]
O44 - LFC:[MD5.B1430ED18073C0061868326ADDC9600C] - 18/03/2015 - 03:18:22 ---A- . (...) -- C:\WINDOWS\KB941569.log [30001]
O44 - LFC:[MD5.0AD6EDA156BF42E6B7BEE093C4A984B5] - 18/03/2015 - 03:18:30 ---A- . (...) -- C:\WINDOWS\KB2770660.log [38408]
O44 - LFC:[MD5.087FD86C47B03DE02C6E78C3EB67162A] - 18/03/2015 - 03:18:38 ---A- . (...) -- C:\WINDOWS\KB973507.log [39137]
O44 - LFC:[MD5.D0E20249683D7BDA8F7F2AEE85F73533] - 18/03/2015 - 03:22:47 ---A- . (...) -- C:\WINDOWS\KB975560.log [39981]
O44 - LFC:[MD5.E5509B7CCCBD950BFEEE73C9884254A4] - 18/03/2015 - 03:22:54 ---A- . (...) -- C:\WINDOWS\KB2592799.log [31817]
O44 - LFC:[MD5.39C1637D57D071C78D3EA69AAA0226B7] - 18/03/2015 - 03:23:01 ---A- . (...) -- C:\WINDOWS\KB2862152.log [37276]
O44 - LFC:[MD5.56B5EFD92A8021871C05A19DB3BB3A1C] - 18/03/2015 - 03:23:09 ---A- . (...) -- C:\WINDOWS\KB974571.log [39659]
O44 - LFC:[MD5.D9C586F5C2D46A9A810E1A1262EDA19A] - 18/03/2015 - 03:23:19 ---A- . (...) -- C:\WINDOWS\KB952004.log [40927]
O44 - LFC:[MD5.E5DB6D933D920C894A4278CCBC01EBF9] - 18/03/2015 - 03:23:26 ---A- . (...) -- C:\WINDOWS\KB2719985.log [40613]
O44 - LFC:[MD5.3655C43DD1FB601DC47F8C8495F39E93] - 18/03/2015 - 03:23:33 ---A- . (...) -- C:\WINDOWS\KB975025.log [40145]
O44 - LFC:[MD5.469F81376639D2F328C81DD302C93A84] - 18/03/2015 - 03:23:40 ---A- . (...) -- C:\WINDOWS\KB973869.log [32585]
O44 - LFC:[MD5.BF081098DCDC76011C2FA7BF99333787] - 18/03/2015 - 03:23:47 ---A- . (...) -- C:\WINDOWS\KB2864063.log [38767]
O44 - LFC:[MD5.1078D2BBBAA544DCCC0AC7FB879DE577] - 18/03/2015 - 03:23:54 ---A- . (...) -- C:\WINDOWS\KB2930275.log [39556]
O44 - LFC:[MD5.E08B50E1CAAD2C904DF9446DFDE5FDD3] - 18/03/2015 - 03:24:03 ---A- . (...) -- C:\WINDOWS\KB979687.log [42804]
O44 - LFC:[MD5.CC950CC4E8D1F88D6B4B4E1B4B650F43] - 18/03/2015 - 03:27:53 ---A- . (...) -- C:\WINDOWS\KB2483185.log [42796]
O44 - LFC:[MD5.10A5E7236796EA547007ED1AB5A30E90] - 18/03/2015 - 03:28:01 ---A- . (...) -- C:\WINDOWS\KB956844.log [33909]
O44 - LFC:[MD5.1167BA33055B86EC1CAEACAD9359035F] - 18/03/2015 - 03:28:09 ---A- . (...) -- C:\WINDOWS\KB2876217.log [40640]
O44 - LFC:[MD5.1A3435AE87B2D7F61C32401B2C66B5BF] - 18/03/2015 - 03:28:17 ---A- . (...) -- C:\WINDOWS\KB2347290.log [42860]
O44 - LFC:[MD5.9E77F114295E498D681722FBEE513AE2] - 18/03/2015 - 03:28:26 ---A- . (...) -- C:\WINDOWS\KB2904266.log [32231]
O44 - LFC:[MD5.8EAD8E12D96CEEFF85985F6FCB768567] - 18/03/2015 - 03:28:26 ---A- . (...) -- C:\WINDOWS\system32\TZLog.log [6690]
O44 - LFC:[MD5.982BE1E14597F99CDFDBC1AD8E01743D] - 18/03/2015 - 03:28:34 ---A- . (...) -- C:\WINDOWS\KB974112.log [42450]
O44 - LFC:[MD5.920E9E02C186F72ECCC5F836DD3A1EAA] - 18/03/2015 - 03:30:32 ---A- . (...) -- C:\WINDOWS\KB972270.log [35190]
O44 - LFC:[MD5.F1076376F8FF72771F2BA2AD898C1CAC] - 18/03/2015 - 03:30:39 ---A- . (...) -- C:\WINDOWS\KB2780091.log [46242]
O44 - LFC:[MD5.2300DA8CFF540A469C1341792986E86E] - 18/03/2015 - 03:30:45 ---A- . (...) -- C:\WINDOWS\KB2834904-v2.log [29789]
O44 - LFC:[MD5.5D6A04E787CFE543C5C7ED80A980C535] - 18/03/2015 - 03:30:52 ---A- . (...) -- C:\WINDOWS\KB2507938.log [42777]
O44 - LFC:[MD5.3D298BB289ECE2F36CF533E83C01138E] - 18/03/2015 - 03:30:57 ---A- . (...) -- C:\WINDOWS\KB954155.log [31855]
O44 - LFC:[MD5.1140ED683402C10E77CB0AC53A64D74C] - 18/03/2015 - 03:31:04 ---A- . (...) -- C:\WINDOWS\KB978338.log [43158]
O44 - LFC:[MD5.F868623019B057147F0D1D4B6DEA2D2F] - 18/03/2015 - 03:32:16 ---A- . (...) -- C:\WINDOWS\KB971657.log [43124]
O44 - LFC:[MD5.1C5934A934734EB1D4F8D178D6D7EBBB] - 18/03/2015 - 03:32:27 ---A- . (...) -- C:\WINDOWS\KB2862335.log [33101]
O44 - LFC:[MD5.9A3ED8F1F0928C99DC2BFC4E151FA2B6] - 18/03/2015 - 03:32:35 ---A- . (...) -- C:\WINDOWS\KB982132.log [43893]
O44 - LFC:[MD5.2708A2DEB43A2BAFBADFBEFDCF95818D] - 18/03/2015 - 03:32:46 ---A- . (...) -- C:\WINDOWS\KB2686509.log [34974]
O44 - LFC:[MD5.7F9BF5DDBC5EBBF6413CD0B7229642BC] - 18/03/2015 - 03:32:53 ---A- . (...) -- C:\WINDOWS\KB2929961.log [40780]
O44 - LFC:[MD5.3DB2D82115C9D9B8167F74A796BA8A2B] - 18/03/2015 - 03:33:01 ---A- . (...) -- C:\WINDOWS\KB2598479.log [44077]
O44 - LFC:[MD5.38DB4A08B2CCFA1CADFD86D5AFADEF04] - 18/03/2015 - 03:33:08 ---A- . (...) -- C:\WINDOWS\KB2485663.log [34869]
O44 - LFC:[MD5.2C78494F6A3006E618D3EF6B28A24E56] - 18/03/2015 - 03:33:17 ---A- . (...) -- C:\WINDOWS\KB2898715.log [42956]
O44 - LFC:[MD5.23B78EBCCFD8FBF60C3A6A7EE24C07AD] - 18/03/2015 - 03:33:27 ---A- . (...) -- C:\WINDOWS\KB2481109.log [45849]
O44 - LFC:[MD5.D7E4FF2CF9EF96C17FAD72FB5DB43C67] - 18/03/2015 - 03:33:36 ---A- . (...) -- C:\WINDOWS\KB950974.log [45084]
O44 - LFC:[MD5.CE2CAC2F16FBAE086E36F11DC686A1F7] - 18/03/2015 - 03:33:45 ---A- . (...) -- C:\WINDOWS\KB2229593.log [36045]
O44 - LFC:[MD5.46D78293DB6ACF0FD50488BECEC8B667] - 18/03/2015 - 03:33:52 ---A- . (...) -- C:\WINDOWS\KB2802968.log [45140]
O44 - LFC:[MD5.DCDD0D087ECD16BDA4A24E68E94712C5] - 18/03/2015 - 03:34:01 ---A- . (...) -- C:\WINDOWS\KB2655992.log [46172]
O44 - LFC:[MD5.4D2916513572ACBEE9C426A881307925] - 18/03/2015 - 03:34:10 ---A- . (...) -- C:\WINDOWS\KB2443105.log [45233]
O44 - LFC:[MD5.DD4C441837BE3A0D0076CB21AA32BD81] - 18/03/2015 - 03:34:18 ---A- . (...) -- C:\WINDOWS\KB969059.log [45141]
O44 - LFC:[MD5.E601E664041EE2D2E9F89B88516B20D0] - 18/03/2015 - 03:34:28 ---A- . (...) -- C:\WINDOWS\KB951978.log [46155]
O44 - LFC:[MD5.10A41B2B5E75CE0BC092FD3676C2F649] - 18/03/2015 - 03:34:37 ---A- . (...) -- C:\WINDOWS\KB974318.log [46369]
O44 - LFC:[MD5.7D882F05C54DB87FD04299467382159C] - 18/03/2015 - 03:34:55 ---A- . (...) -- C:\WINDOWS\KB2847311.log [43756]
O44 - LFC:[MD5.D07BCA5D9B82F09CE8B71418D1E63959] - 18/03/2015 - 03:35:04 ---A- . (...) -- C:\WINDOWS\KB955759.log [38308]
O44 - LFC:[MD5.77D28663ED24C822049E4B92F421D316] - 18/03/2015 - 03:35:10 ---A- . (...) -- C:\WINDOWS\KB975558.log [36038]
O44 - LFC:[MD5.64564CD9C4A2E1E033B113E04133293E] - 18/03/2015 - 03:39:01 ---A- . (...) -- C:\WINDOWS\KB2115168.log [46508]
O44 - LFC:[MD5.177BF9FF0389D6FAF29D5935C2063CCA] - 18/03/2015 - 03:39:08 ---A- . (...) -- C:\WINDOWS\KB2900986.log [34353]
O44 - LFC:[MD5.11094BA685BEDC7114D7754E7126A42F] - 18/03/2015 - 03:39:17 ---A- . (...) -- C:\WINDOWS\KB2691442.log [47488]
O44 - LFC:[MD5.A8C1A2FA33C5C92307FD6EF5BB364939] - 18/03/2015 - 03:39:24 ---A- . (...) -- C:\WINDOWS\KB2296011.log [34973]
O44 - LFC:[MD5.DA10778897B45C09861C8C44AA900FF6] - 18/03/2015 - 03:39:33 ---A- . (...) -- C:\WINDOWS\KB2631813.log [47239]
O44 - LFC:[MD5.A218DDDFFE4DCA00B6DFAD02B302571F] - 18/03/2015 - 03:39:48 ---A- . (...) -- C:\WINDOWS\KB2536276-v2.log [37379]
O44 - LFC:[MD5.CA3B91D3C6C6DA4A72C99E3689278CF8] - 18/03/2015 - 03:39:55 ---A- . (...) -- C:\WINDOWS\KB2834886.log [34592]
O44 - LFC:[MD5.CCA47241E797812C8246447B2310FD3A] - 18/03/2015 - 03:40:03 ---A- . (...) -- C:\WINDOWS\KB2544893-v2.log [47191]
O44 - LFC:[MD5.49ABEF9F0B524A6884A36847AFAAAA77] - 18/03/2015 - 03:40:11 ---A- . (...) -- C:\WINDOWS\KB2478971.log [48123]
O44 - LFC:[MD5.5B5233B53BD0977DB2D87DD9709E2842] - 18/03/2015 - 03:40:19 ---A- . (...) -- C:\WINDOWS\KB2934207.log [34483]
O44 - LFC:[MD5.897D445016C35E8026453890D4DDC85E] - 18/03/2015 - 03:40:27 ---A- . (...) -- C:\WINDOWS\KB2916036.log [45568]
O44 - LFC:[MD5.B4CFB861DF1E31265F9A7430A05817F6] - 18/03/2015 - 03:40:34 ---A- . (...) -- C:\WINDOWS\KB2564958.log [36194]
O44 - LFC:[MD5.237E5A6A3374EB8E0954EA0D1D24DC12] - 18/03/2015 - 03:40:41 ---A- . (...) -- C:\WINDOWS\KB2659262.log [37127]
O44 - LFC:[MD5.3E67A1C3455273FBC0A95B62B4E62510] - 18/03/2015 - 03:40:48 ---A- . (...) -- C:\WINDOWS\KB2479943.log [49773]
O44 - LFC:[MD5.691ECCB9390717B7CDA5D15E0C0C61CA] - 18/03/2015 - 03:40:56 ---A- . (...) -- C:\WINDOWS\KB960859.log [49827]
O44 - LFC:[MD5.C3FED3B91C4838E8C165C215AD4CB081] - 18/03/2015 - 03:41:04 ---A- . (...) -- C:\WINDOWS\KB2712808.log [50218]
O44 - LFC:[MD5.800D7B3724BA53021410FFF211A12909] - 18/03/2015 - 03:41:14 ---A- . (...) -- C:\WINDOWS\KB2387149.log [40136]
O44 - LFC:[MD5.9DF32F4AF5FB43139CCE06CD9286DC88] - 18/03/2015 - 03:44:03 ---A- . (...) -- C:\WINDOWS\KB946648.log [39688]
O44 - LFC:[MD5.2A041EB4AA67A911847861D4709BB69F] - 18/03/2015 - 03:44:28 ---A- . (...) -- C:\WINDOWS\KB952954.log [50345]
O44 - LFC:[MD5.4685A68E45FC5E9F593D7EDBFBDE7D35] - 18/03/2015 - 03:44:37 ---A- . (...) -- C:\WINDOWS\KB951376-v2.log [39695]
O44 - LFC:[MD5.02AE18D0EA3B7718B2D98B925D66BB92] - 18/03/2015 - 03:44:46 ---A- . (...) -- C:\WINDOWS\KB2922229.log [48472]
O44 - LFC:[MD5.8B2BB0A62791CABBCDFA70DDD1A601B0] - 18/03/2015 - 03:44:54 ---A- . (...) -- C:\WINDOWS\KB2868626.log [49372]
O44 - LFC:[MD5.D34D361CF6E8B1865D6D4F1FB625BE1A] - 18/03/2015 - 12:21:28 ---A- . (...) -- C:\WINDOWS\WgaNotify.log [6744]
O44 - LFC:[MD5.D2FCF8BCA17AFDB44AC6BFF6755DB40C] - 18/03/2015 - 12:33:52 ---A- . (...) -- C:\WINDOWS\KB968389.log [34391]
O44 - LFC:[MD5.39D46E2D6CCB90FA8A51DA7F28677A30] - 18/03/2015 - 12:34:06 ---A- . (...) -- C:\WINDOWS\KB2509553.log [44598]
O44 - LFC:[MD5.AECF1828024AE4D92BAE2150C2BF3F3B] - 18/03/2015 - 12:34:13 ---A- . (...) -- C:\WINDOWS\KB960803.log [29754]
O44 - LFC:[MD5.A2B5C6A0CD3E5DC9B60A3C5AABBEA055] - 18/03/2015 - 12:34:19 ---A- . (...) -- C:\WINDOWS\KB979482.log [39316]
O44 - LFC:[MD5.543F55D99C490CC917AC5D786AE4C7DE] - 18/03/2015 - 12:34:30 ---A- . (...) -- C:\WINDOWS\KB973540.log [10503]
O44 - LFC:[MD5.4415C1E611884D79C01AD96B597F77AF] - 18/03/2015 - 12:39:04 ---A- . (...) -- C:\WINDOWS\KB956572.log [14886]
O44 - LFC:[MD5.123C8B15C0A3A4D7F9B2B771AE807C02] - 18/03/2015 - 12:39:11 ---A- . (...) -- C:\WINDOWS\KB2585542.log [64329]
O44 - LFC:[MD5.C95C80FF74F6A89A6D845AB395D17322] - 18/03/2015 - 12:39:17 ---A- . (...) -- C:\WINDOWS\KB959426.log [66368]
O44 - LFC:[MD5.A8A7ED1D6962EE0B2A423C49CCE2D6B0] - 19/03/2015 - 03:27:06 ---A- . (.Tonec Inc. - Internet Download Manager TDI Driver.) -- C:\WINDOWS\system32\Drivers\idmtdi.sys [126968]
O44 - LFC:[MD5.437DF8A5C6CB8255A9D2C72194088916] - 19/03/2015 - 16:45:52 ---A- . (...) -- C:\WINDOWS\KB2510531-IE8.log [8725]
O44 - LFC:[MD5.9EF2A6757DE1701691DB49739EE3ACA4] - 19/03/2015 - 16:46:29 ---A- . (...) -- C:\WINDOWS\KB2936068-IE8.log [12916]
O44 - LFC:[MD5.2DC0A28BA08197620AD111083BAA986D] - 19/03/2015 - 16:46:42 ---A- . (...) -- C:\WINDOWS\KB2909210-IE8.log [11114]
O44 - LFC:[MD5.1268F0BAA08D967033B6ABA4D30A274A] - 19/03/2015 - 16:47:11 ---A- . (...) -- C:\WINDOWS\KB939683.log [12964]
O44 - LFC:[MD5.51862C9BAAED7E5540DF58819EAF3E9E] - 19/03/2015 - 16:47:21 ---A- . (...) -- C:\WINDOWS\KB975713.log [17788]
O44 - LFC:[MD5.03639C14B54183ADA435EEE74F077ABC] - 19/03/2015 - 16:47:36 ---A- . (...) -- C:\WINDOWS\KB2964358-IE8.log [12057]
O44 - LFC:[MD5.FA0CF0890E9A07FD38BCE8EDD01A3479] - 19/03/2015 - 16:47:44 ---A- . (...) -- C:\WINDOWS\updspapi.log [88599]
O44 - LFC:[MD5.CF8C7E302CE03AC5A1101959FF7E84BB] - 19/03/2015 - 16:47:46 ---A- . (...) -- C:\WINDOWS\KB970430.log [18965]
O44 - LFC:[MD5.CB48A075150654C9CCED95977E7A3E01] - 19/03/2015 - 16:47:55 ---A- . (...) -- C:\WINDOWS\KB2345886.log [18558]
O44 - LFC:[MD5.C59521AC81EC3F558F9736015C0A00B4] - 19/03/2015 - 17:37:37 ---A- . (...) -- C:\WINDOWS\KB2378111.log [5826]
O44 - LFC:[MD5.F6CB1A9FA6CB9C14F0D94F30DE01E794] - 19/03/2015 - 17:37:37 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1374]
O44 - LFC:[MD5.A6F53F4CE5C6137AF5481276AF905D24] - 19/03/2015 - 17:37:37 ---A- . (...) -- C:\WINDOWS\wmsetup.log [20050]
O44 - LFC:[MD5.EE590149D0A7683CAAA0F8E4F1A3E276] - 20/03/2015 - 07:02:53 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\WINDOWS\system32\MRT.exe [119837696]
O44 - LFC:[MD5.89B23B4BE691942072E0E3F7EDEB33B6] - 20/03/2015 - 11:24:13 ----- . (.Microsoft Corporation - Native Code Xps Services Library.) -- C:\WINDOWS\system32\xpssvcs.dll [1676288]
O44 - LFC:[MD5.81C4B0077427391D582FBB1B6B9578CB] - 20/03/2015 - 11:24:13 ----- . (.Microsoft Corporation - Package Document Shell Extension Handler.) -- C:\WINDOWS\system32\xpsshhdr.dll [575488]
O44 - LFC:[MD5.180E1D44727EB72CB11EC5953C5E4C52] - 20/03/2015 - 11:24:13 ----- . (.Microsoft Corporation - Print Ticket Services Module.) -- C:\WINDOWS\system32\prntvpt.dll [117760]
O44 - LFC:[MD5.9B87D7E274A918F97666EC550DFE464F] - 20/03/2015 - 13:55:49 ---A- . (...) -- C:\WINDOWS\spupdsvc.log [67446]
O44 - LFC:[MD5.A32426D9B14A089EAA1D922E0C5801A9] - 20/03/2015 - 13:56:17 ---A- . (.Microsoft Corporation - USB Mass Storage Class Driver.) -- C:\WINDOWS\system32\Drivers\USBSTOR.SYS [26368]
O44 - LFC:[MD5.33DA6BDEFF7FCA3CC9FB19CB00764F53] - 20/03/2015 - 15:57:44 ---A- . (...) -- C:\WINDOWS\Tweaking.com - Windows Repair (All in One) Setup Log.txt [142069]
O44 - LFC:[MD5.82C9B0465CAC4426F88DD9928C27C917] - 20/03/2015 - 16:04:46 ---A- . (...) -- C:\WINDOWS\Windows Update.log [558]
O44 - LFC:[MD5.6D6F4B1886E91EB37ABCCAD19C561EE0] - 20/03/2015 - 16:07:24 ---A- . (...) -- C:\WINDOWS\system32\amcompat.tlb [16832]
O44 - LFC:[MD5.A32B14BE5EDAE794FCE1A9E970827509] - 20/03/2015 - 16:07:24 ---A- . (...) -- C:\WINDOWS\system32\nscompat.tlb [23392]
O44 - LFC:[MD5.6689FD14AEF0C585CDAC9EFD463CC029] - 20/03/2015 - 16:09:41 ---A- . (...) -- C:\WINDOWS\bitssetup.log [5636]
O44 - LFC:[MD5.44DEB8F2DA7AF45B4C9B60760DD3E05E] - 20/03/2015 - 16:13:57 ---A- . (...) -- C:\WINDOWS\COM+.log [1544]
O44 - LFC:[MD5.5EC803BDEE931631C57D9ED78961C1FF] - 20/03/2015 - 16:14:38 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [172280]
O44 - LFC:[MD5.D020C401B6BAC495DEF1A470A59E93E3] - 20/03/2015 - 17:04:15 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [2206]
O44 - LFC:[MD5.A3E1014B11C7A9750FBECEF57EFC1E4D] - 22/03/2015 - 00:39:38 ---A- . (...) -- C:\WINDOWS\msmqinst.log [292672]
O44 - LFC:[MD5.A408AAD54F28FE6ECA1C28C50FD1707C] - 22/03/2015 - 00:39:40 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [913442]
O44 - LFC:[MD5.4671D4E0904A16D358A6A077DA255C60] - 22/03/2015 - 00:39:40 ---A- . (...) -- C:\WINDOWS\KB961118.log [5638]
O44 - LFC:[MD5.8C0969EB4FBA87263474B28BC598DF42] - 22/03/2015 - 00:39:40 ---A- . (...) -- C:\WINDOWS\MedCtrOC.log [64174]
O44 - LFC:[MD5.85DFFB0087BD6C2CD57082386A9DEE6F] - 22/03/2015 - 00:39:40 ---A- . (...) -- C:\WINDOWS\comsetup.log [330837]
O44 - LFC:[MD5.8E08DB2CD1F4DF8FC1C36138093D2969] - 22/03/2015 - 00:39:40 ---A- . (...) -- C:\WINDOWS\iis6.log [1050131]
O44 - LFC:[MD5.4C88E8230A071E4FB962996EDC72BA3B] - 22/03/2015 - 00:39:40 ---A- . (...) -- C:\WINDOWS\imsins.log [1374]
O44 - LFC:[MD5.17030EF7F97C48E3DBCD5C99318C79AD] - 22/03/2015 - 00:39:40 ---A- . (...) -- C:\WINDOWS\msgsocm.log [46238]
O44 - LFC:[MD5.8540056D5A915B77E2027DB7DA367046] - 22/03/2015 - 00:39:40 ---A- . (...) -- C:\WINDOWS\netfxocm.log [161532]
O44 - LFC:[MD5.D03009826D50576F6AB0AF8A7CAC260F] - 22/03/2015 - 00:39:40 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [197711]
O44 - LFC:[MD5.B4E04960F55FAA31AC9622960AFAAB0D] - 22/03/2015 - 00:39:40 ---A- . (...) -- C:\WINDOWS\ocgen.log [455208]
O44 - LFC:[MD5.BBF04D898A6143EB88D0BCF4BFEC24D4] - 22/03/2015 - 00:39:40 ---A- . (...) -- C:\WINDOWS\ocmsn.log [50929]
O44 - LFC:[MD5.235F4310691BA8B7BB98E4295F1358AF] - 22/03/2015 - 00:39:40 ---A- . (...) -- C:\WINDOWS\tabletoc.log [47249]
O44 - LFC:[MD5.5F32145707B45ABC0956611FEC1D960B] - 22/03/2015 - 00:39:40 ---A- . (...) -- C:\WINDOWS\tsoc.log [427953]
O44 - LFC:[MD5.9638B75B0D14599F270CDA8955D2B865] - 24/03/2015 - 19:38:42 ---A- . (...) -- C:\WINDOWS\setupapi.log [639472]
O44 - LFC:[MD5.C71282987142D2F93C4CF81730F9E731] - 25/03/2015 - 18:00:34 ---A- . (.No owner - Setup/Uninstall.) -- C:\WINDOWS\unins000.exe [718497]
O44 - LFC:[MD5.DFE1302A3FD0D1BCC6611E2181A3F6B4] - 25/03/2015 - 18:02:04 ---A- . (...) -- C:\WINDOWS\unins000.dat [236094]
O44 - LFC:[MD5.6E949AEE540BB35FAB72DF84B2171A03] - 25/03/2015 - 22:31:12 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl [142512]
O44 - LFC:[MD5.C1C7EFE18FAF1D77AC87D30A27895532] - 25/03/2015 - 22:31:13 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerApp.exe [778928]
O44 - LFC:[MD5.F08DBD8C48A168818A3DFC28929EE6B5] - 25/03/2015 - 23:09:34 ---A- . (...) -- C:\WINDOWS\system32\AUTOEXEC.NT [1896]
O44 - LFC:[MD5.486E0B1BC94C346E5C352C295388C803] - 25/03/2015 - 23:09:34 ---A- . (...) -- C:\WINDOWS\system32\CONFIG.NT [3072]
O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 25/03/2015 - 23:09:34 RSHA- . (...) -- C:\WINDOWS\winstart.bat [2]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 26/03/2015 - 11:48:36 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.D556CB79967E92B5CC69686D16C1D846] - 26/03/2015 - 11:49:05 ---A- . (.Windows (R) 2000 DDK provider - GIGABYTE Tools.) -- C:\WINDOWS\gdrv.sys [17488]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 26/03/2015 - 11:49:09 ---A- . (...) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.DA191E4A157AC49B0916C5D8E059EEA6] - 26/03/2015 - 11:49:09 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]
O44 - LFC:[MD5.2852A3B4678AE03D3B8F73D1AA9C38C5] - 26/03/2015 - 11:49:11 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.ED2CAA4F711C6E7AB85E53ED1898FBB5] - 26/03/2015 - 11:51:14 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1873990]
O44 - LFC:[MD5.22EE560C760CBEF44661A8E7AD45B128] - 26/03/2015 - 11:53:36 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [1371638]
O44 - LFC:[MD5.8733B5DC9353E291B755173984791D6B] - 26/03/2015 - 11:53:37 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [95100]
O44 - LFC:[MD5.0B1D85B1E6F6F95E2607F16FD074ED4A] - 26/03/2015 - 11:53:37 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [114386]
O44 - LFC:[MD5.07A671E5D7D20F00DD9B461183E74E18] - 26/03/2015 - 11:53:37 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [532666]
O44 - LFC:[MD5.11573179190080D7B8CDCAAAF1308F1A] - 26/03/2015 - 11:53:37 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [610260]
O44 - LFC:[MD5.10CEEA88D4D118DBBE5505C8A0F28C78] - 26/03/2015 - 13:48:49 ---A- . (...) -- C:\service.log [640]
O44 - LFC:[MD5.5C2F2186D78898F7C120FC381536A2A8] - 26/03/2015 - 14:38:05 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32456]
~ Files: 749 Scanned in 00mn 37s



---\\ Latest files created in Windows Prefetcher (O45)
O45 - LFCP:[MD5.B15DF9D7E605AF1E32A9B8FBC22F30B9] - 26/03/2015 - 12:41:01 ---A- - C:\WINDOWS\Prefetch\ISAFE.EXE-0129335A.pf =>Trojan.Staser
O45 - LFCP:[MD5.4B3BBFF415C274A86CDAA38C912826CF] - 26/03/2015 - 12:33:47 ---A- - C:\WINDOWS\Prefetch\ISAFEDOWNLOADER.EXE-1E6775B4.pf =>PUP.SoftwareEngine
O45 - LFCP:[MD5.6E99FDAE07F7C346FB19FFEC34DB8F81] - 26/03/2015 - 13:53:15 ---A- - C:\WINDOWS\Prefetch\ISAFESVC.EXE-18B30EE3.pf =>Trojan.Staser
O45 - LFCP:[MD5.0B31AC77B1BE9F71F98D2C3CE1B020EC] - 26/03/2015 - 12:39:43 ---A- - C:\WINDOWS\Prefetch\ISAFESVC2.EXE-030BE048.pf =>Trojan.Staser
O45 - LFCP:[MD5.6F080D929EFFC186D945AC8C8623E9E0] - 26/03/2015 - 12:41:08 ---A- - C:\WINDOWS\Prefetch\ISAFETHLP.EXE-016A5D20.pf =>Trojan.Staser
O45 - LFCP:[MD5.A2F465409B59F663EE75ECDE083F9451] - 26/03/2015 - 12:40:02 ---A- - C:\WINDOWS\Prefetch\ISAFETRAY.EXE-1526CF8E.pf =>Trojan.Staser
O45 - LFCP:[MD5.2BC6BE9386C8188339551281F00FD434] - 26/03/2015 - 12:40:09 ---A- - C:\WINDOWS\Prefetch\ISTART.EXE-01823E5F.pf =>PUP.Istart
O45 - LFCP:[MD5.8EF11FEF56FAB57D5280AA8F396E35EC] - 26/03/2015 - 12:33:46 ---A- - C:\WINDOWS\Prefetch\YET_ANOTHER_CLEANER_SK_718511-25612DB3.pf =>PUP.YetAnotherCleaner
~ Prefetcher: 8 Scanned in 00mn 00s



---\\ Operations and functions at Windows Explorer startup (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
~ ShellExecuteHooks: Scanned in 00mn 00s



---\\ Export authorized application key (O47)
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Disabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Mozilla Firefox\firefox.exe" [Enabled] .(.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
~ Keys Export: 6 Scanned in 00mn 00s



---\\ Local Security Authority-LSA Deny (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll
~ LSA: 6 Scanned in 00mn 00s



---\\ Safe Boot Control (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
~ CSB: 21 Scanned in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ IFEO: Scanned in 00mn 00s



---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
~ TDSD: 12 Scanned in 00mn 00s



---\\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
~ MSCP: 6 Scanned in 00mn 00s



---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "SoftwareSASGeneration"=1
~ MWPS: 6 Scanned in 00mn 00s



---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=221
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1
~ MWPE Keys: 2 Scanned in 00mn 00s



---\\ System Drivers List (SDL) (O58)
O58 - SDL:18/11/2009 - 00:16:00 ---A- . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\system32\Drivers\Ambfilt.sys [1691480]
O58 - SDL:22/04/2010 - 15:08:26 ---A- . (...) -- C:\WINDOWS\system32\Drivers\AppleCharger.sys [19496]
O58 - SDL:17/03/2015 - 20:14:17 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswHwid.sys [24144] =>.ALWIL Software
O58 - SDL:17/03/2015 - 20:14:04 ---A- . (.Avast Software s.r.o. - avast! Keyboard Filter Driver.) -- C:\WINDOWS\system32\Drivers\aswKbd.sys [26096]
O58 - SDL:17/03/2015 - 20:14:17 ---A- . (.Avast Software s.r.o. - avast! File System Minifilter for Windows 2003/Vista.) -- C:\WINDOWS\system32\Drivers\aswMonFlt.sys [73440]
O58 - SDL:17/03/2015 - 20:13:54 ---A- . (.ALWIL Software - avast! Filtering NDIS driver.) -- C:\WINDOWS\system32\Drivers\aswNdis.sys [12112]
O58 - SDL:17/03/2015 - 20:13:54 ---A- . (.Avast Software s.r.o. - avast! Filtering NDIS driver.) -- C:\WINDOWS\system32\Drivers\aswNdis2.sys [253728]
O58 - SDL:17/03/2015 - 20:14:17 ---A- . (.Avast Software s.r.o. - avast! TDI Redirect Driver.) -- C:\WINDOWS\system32\Drivers\aswRdr.sys [55200]
O58 - SDL:17/03/2015 - 20:14:17 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904] =>.ALWIL Software
O58 - SDL:17/03/2015 - 20:14:04 ---A- . (.Avast Software s.r.o. - avast! Virtualization Driver.) -- C:\WINDOWS\system32\Drivers\aswSnx.sys [788272]
O58 - SDL:17/03/2015 - 20:14:17 ---A- . (.Avast Software s.r.o. - avast! self protection module.) -- C:\WINDOWS\system32\Drivers\aswSP.sys [427480]
O58 - SDL:17/03/2015 - 20:13:55 ---A- . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\WINDOWS\system32\Drivers\aswTap.sys [35144]
O58 - SDL:17/03/2015 - 20:14:17 ---A- . (.Avast Software s.r.o. - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\Drivers\aswTdi.sys [57888]
O58 - SDL:17/03/2015 - 20:14:17 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswVmm.sys [206976] =>.ALWIL Software
O58 - SDL:30/08/2013 - 16:41:40 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\Drivers\ati2mtag.sys [6852096]
O58 - SDL:14/05/2012 - 14:12:12 ---A- . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\WINDOWS\system32\Drivers\AtihdXP3.sys [103040]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\Drivers\cinemst2.sys [262528]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\Drivers\cpqdap01.sys [11776]
O58 - SDL:13/04/2008 - 18:05:08 ---A- . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys [800256]
O58 - SDL:13/04/2008 - 18:05:14 ---A- . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys [154496]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys [5888]
O58 - SDL:13/04/2008 - 08:36:06 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\hdaudbus.sys [144384]
O58 - SDL:19/03/2015 - 03:27:06 ---A- . (.Tonec Inc. - Internet Download Manager TDI Driver.) -- C:\WINDOWS\system32\Drivers\idmtdi.sys [126968]
O58 - SDL:27/07/2009 - 08:09:52 R--A- . (.Atheros Communications, Inc. - Atheros AR813x/AR815x PCI-E Ethernet Controller ndis miniport d.) -- C:\WINDOWS\system32\Drivers\l1c51x86.sys [44032]
O58 - SDL:18/11/2009 - 00:17:00 ---A- . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\system32\Drivers\Monfilt.sys [1395800]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\nikedrv.sys [12032]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\Drivers\ptilink.sys [17792]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\Drivers\rio8drv.sys [12032]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\riodrv.sys [12032]
O58 - SDL:26/03/2010 - 11:21:26 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\WINDOWS\system32\Drivers\RtkHDAud.sys [5883936]
O58 - SDL:13/04/2008 - 08:39:16 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\Drivers\secdrv.sys [20480]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\Drivers\tsbvcap.sys [21376]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\Drivers\vdmindvd.sys [58112]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]
O58 - SDL:13/04/2008 - 08:50:56 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]
O58 - SDL:28/08/2001 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]
O58 - SDL:13/04/2008 - 08:49:52 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]
O58 - SDL:13/04/2008 - 08:49:44 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]
O58 - SDL:13/04/2008 - 08:49:40 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]
O58 - SDL:13/04/2008 - 08:49:44 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]
O58 - SDL:13/04/2008 - 08:49:42 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]
~ Drivers: 48 Scanned in 00mn 02s



---\\ Last modified or created user files (O61)
O61 - LFC: 20/03/2015 - 15:06:26 ---A- . (...) -- C:\Documents and Settings\ahmed\Bureau\ \tweaking.com_windows_repair_aio_setup.exe [12840520]
O61 - LFC: 23/03/2015 - 15:06:26 ---A- . (...) -- C:\Documents and Settings\ahmed\Bureau\Firefox Setup Stub 36.0.4.exe [243592]
O61 - LFC: 24/03/2015 - 15:06:25 ---A- . (...) -- C:\Documents and Settings\ahmed\Application Data\IDM\DwnlData\ahmed\flashplayer17_install_win_pi.e_28\flashplayer17_install_win_pi.e.exe [1019862]
O61 - LFC: 24/03/2015 - 15:06:25 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\ahmed\Application Data\IDM\idmmzcc5\components11\idmmzcc.dll [26136]
O61 - LFC: 24/03/2015 - 15:06:25 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\ahmed\Application Data\IDM\idmmzcc5\components11\idmmzcc64.dll [31256]
O61 - LFC: 24/03/2015 - 15:06:25 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\ahmed\Application Data\IDM\idmmzcc5\components2\idmcchandler2.dll [332824]
O61 - LFC: 24/03/2015 - 15:06:25 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\ahmed\Application Data\IDM\idmmzcc5\components2\idmcchandler2_64.dll [460824]
O61 - LFC: 24/03/2015 - 15:06:25 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\ahmed\Application Data\IDM\idmmzcc5\components2\idmmzcc.dll [34216]
O61 - LFC: 24/03/2015 - 15:06:25 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\ahmed\Application Data\IDM\idmmzcc5\components2\idmmzcc64.dll [28512]
O61 - LFC: 24/03/2015 - 15:06:25 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\ahmed\Application Data\IDM\idmmzcc5\components\idmmzcc.dll [34216]
O61 - LFC: 24/03/2015 - 15:06:25 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\ahmed\Application Data\IDM\idmupdt.exe [6221024]
O61 - LFC: 25/03/2015 - 15:06:25 ---A- . (...) -- C:\Documents and Settings\ahmed\Application Data\IDM\DwnlData\ahmed\flashplayer17_install_win_pi.e_57\flashplayer17_install_win_pi.e.exe [0]
O61 - LFC: 25/03/2015 - 15:06:25 ---A- . (.C Vital.) -- C:\Documents and Settings\ahmed\Application Data\IDM\DwnlData\ahmed\Skype-20Password-20Cracker-20v_43\Skype-20Password-20Cracker-20v.exe [121621]
O61 - LFC: 26/03/2015 - 15:06:26 ---A- . (...) -- C:\Documents and Settings\ahmed\Bureau\yet_another_cleaner_sk_718511.exe [868688] =>PUP.YetAnotherCleaner
O61 - LFC: 26/03/2015 - 15:06:26 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Arabic.bin [21188]
O61 - LFC: 26/03/2015 - 15:06:26 ---A- . (.ESET.) -- C:\Documents and Settings\ahmed\Bureau\esetsmartinstaller_fra.exe [2347384]
O61 - LFC: 26/03/2015 - 15:06:26 ---A- . (.Nicolas Coolman.) -- C:\Documents and Settings\ahmed\Bureau\ZHPDiag2.exe [6877279] =>.Nicolas Coolman
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Czech.bin [24557]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Danish.bin [23011]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Dutch.bin [25986]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\English.bin [22339]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Finnish.bin [23087]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\French.bin [27669]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\German.bin [26184]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Greek.bin [25402]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Hebrew.bin [19737]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Hungarian.bin [26324]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Italian.bin [27724]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Japanese.bin [24735]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Korean.bin [20339]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Lithuanian.bin [25766]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Norwegian.bin [22179]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Polish.bin [24543]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Portuguese(Brazil).bin [25515]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Portuguese.bin [26509]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Russian.bin [26355]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\SWEDISH.bin [24305]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\SimChin.bin [16698]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Slovak.bin [25776]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Slovenian.bin [24100]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Spanish.bin [28230]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Thai.bin [22186]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\TradChin.bin [17253]
O61 - LFC: 26/03/2015 - 15:06:27 ---A- . (...) -- C:\Documents and Settings\ahmed\Local Settings\Temp\Turkish.bin [22473]
~ 260 Fichiers temporaires (Temporary files)
~ 8 Fichiers cookies (Cookies files)
~ Files: 44 Scanned in 00mn 02s



---\\ List all tools cleaner (LATC) (O63)
O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ List all legacy services(LALS) (O64)
O64 - Services: CurCS - 22/04/2010 - C:\WINDOWS\system32\DRIVERS\AppleCharger.sys (AppleCharger) .(...) - LEGACY_APPLECHARGER
O64 - Services: CurCS - 17/03/2015 - C:\WINDOWS\system32\drivers\aswHwid.sys (aswHwid) .(...) - LEGACY_ASWHWID
O64 - Services: CurCS - 17/03/2015 - C:\WINDOWS\system32\drivers\aswMonFlt.sys (aswMonFlt) .(.Avast Software s.r.o. - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - 17/03/2015 - C:\WINDOWS\system32\Drivers\aswNdis2.sys (aswNdis2) .(.Avast Software s.r.o. - avast! Filtering NDIS driver.) - LEGACY_ASWNDIS2
O64 - Services: CurCS - 17/03/2015 - C:\WINDOWS\system32\drivers\aswRdr.sys (aswRdr) .(.Avast Software s.r.o. - avast! TDI Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - 17/03/2015 - C:\WINDOWS\system32\Drivers\aswRvrt.sys (aswRvrt) .(...) - LEGACY_ASWRVRT
O64 - Services: CurCS - 17/03/2015 - C:\WINDOWS\system32\drivers\aswSnx.sys (aswSnx) .(.Avast Software s.r.o. - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - 17/03/2015 - C:\WINDOWS\system32\drivers\aswSP.sys (aswSP) .(.Avast Software s.r.o. - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - 17/03/2015 - C:\WINDOWS\system32\drivers\aswTdi.sys (aswTdi) .(.Avast Software s.r.o. - avast! TDI Filter Driver.) - LEGACY_ASWTDI
O64 - Services: CurCS - 17/03/2015 - C:\WINDOWS\system32\Drivers\aswVmm.sys (aswVmm) .(...) - LEGACY_ASWVMM
O64 - Services: CurCS - 30/08/2013 - C:\WINDOWS\system32\Ati2evxx.exe (Ati HotKey Poller) .(.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - LEGACY_ATI_HOTKEY_POLLER
O64 - Services: CurCS - 17/03/2015 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (avast! Antivirus) .(.Avast Software s.r.o. - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS
O64 - Services: CurCS - 17/03/2015 - C:\Program Files\AVAST Software\Avast\afwServ.exe (avast! Firewall) .(.Avast Software s.r.o. - avast! firewall service.) - LEGACY_AVAST!_FIREWALL
O64 - Services: CurCS - 15/10/2009 - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe (BCUService) .(.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) - LEGACY_BCUSERVICE
O64 - Services: CurCS - 28/08/2001 - C:\WINDOWS\system32\drivers\dmload.sys (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - 02/03/2009 - C:\Program Files\Gigabyte\EasySaver\ESSVR.exe (ES lite Service) .(...) - LEGACY_ES_LITE_SERVICE
O64 - Services: CurCS - 26/03/2015 - C:\WINDOWS\gdrv.sys (gdrv) .(.Windows (R) 2000 DDK provider - GIGABYTE Tools.) - LEGACY_GDRV
O64 - Services: CurCS - 19/03/2015 - C:\WINDOWS\system32\DRIVERS\idmtdi.sys (IDMTDI) .(.Tonec Inc. - Internet Download Manager TDI Driver.) - LEGACY_IDMTDI
~ Legacy: 121 Scanned in 00mn 01s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
~ FASS Keys: 10 Scanned in 00mn 00s



---\\ Start Menu Internet (SMI) (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Search Browser Infection (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {7CBE25F6-FF8D-4da4-8C4D-5CF3319B9ACE} - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {91980135-BFC8-4ca1-A40A-3C039CAE5E8A} [DefaultScope] - (Yahoo) - http://fr.search.yahoo.com
~ Keys: Scanned in 00mn 00s



---\\ Crack & Keygen Files (CKF) (O82)
C:\Documents and Settings\ahmed\Application Data\IDM\DwnlData\ahmed\Skype-20Password-20Cracker-20v_43\Skype-20Password-20Cracker-20v.exe =>.Crack,Keygen
C:\Documents and Settings\ahmed\Application Data\IDM\DwnlData\ahmed\Skype-20Password-20Cracker-20v_43\Skype-20Password-20Cracker-20v.exe =>.Crack,Keygen
~ Files: Scanned in 00mn 16s



---\\ Search Svchost Services (SSS) (O83)
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\system32\appmgmts.dll [176640]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496]
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [78336]
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464]
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576]
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [127488]
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040]
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\es.dll [253952]
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: HidServ (HidServ) . (...) -- C:\WINDOWS\system32\hidserv.dll [0]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840]
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096]
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792]
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [198144]
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248]
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560]
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll [18944]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\system32\ipnathlp.dll [332800]
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\system32\tapisrv.dll [249856]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112]
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176]
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [483840]
O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\system32\advapi32.dll [685568]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408]
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896]
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024]
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll [293376]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [61440]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400]
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll [27136]
~ Services: 40 Scanned in 00mn 00s



---\\ Search Particular Root Folder (SPRF) (O84)
[MD5.90DE3C5496BEFDC47B05E1721C3B5E0A] [SPRF][26/03/2015] (.ESET - ESET Smart Installer.) -- C:\Documents and Settings\ahmed\Bureau\esetsmartinstaller_fra.exe [2347384]
[MD5.47151EC1679E8A888FCFA4EFEF68408A] [SPRF][23/03/2015] (...) -- C:\Documents and Settings\ahmed\Bureau\Firefox Setup Stub 36.0.4.exe [243592]
[MD5.7223700112D3DF3FD619D84D3C94C242] [SPRF][04/03/2015] (.Greatis Software, LLC. - UnHackMe Setup.) -- C:\Documents and Settings\ahmed\Bureau\unhackme_setup.exe [16760400]
[MD5.8886E0697B0A93C521F99099EF643450] [SPRF][13/07/2009] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Documents and Settings\ahmed\Bureau\wscript.exe [168960]
[MD5.B7620A17C7172D5BDCC77362AC84A4B2] [SPRF][26/03/2015] (.No owner - Setup.) -- C:\Documents and Settings\ahmed\Bureau\yet_another_cleaner_sk_718511.exe [868688] =>PUP.YetAnotherCleaner
[MD5.07368C9133736A235D7CA1B3033A312F] [SPRF][26/03/2015] (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Documents and Settings\ahmed\Bureau\ZHPDiag2.exe [6877279]
[MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][26/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\WINDOWS\Downloaded Program Files\dwusplay.dll [24576]
[MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][26/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\WINDOWS\Downloaded Program Files\dwusplay.exe [196608]
[MD5.3F4413DCD8D3BBABF08F68F25E6D60E1] [SPRF][17/02/2005] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\WINDOWS\Downloaded Program Files\isusweb.dll [401408]
~ Files: 9 Scanned in 00mn 00s



---\\ General States of Services not Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 25/03/2015 268464 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 06/04/2010 31272 | (AppleChargerSrv) . (...) - C:\WINDOWS\system32\AppleChargerSrv.exe
SS - | Demand 13/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SS - | Demand 21/03/2015 148080 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Auto 02/01/2015 315488 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
SR - | Auto 30/08/2013 643072 | (Ati HotKey Poller) . (.ATI Technologies Inc..) - C:\WINDOWS\system32\Ati2evxx.exe
SR - | Auto 17/03/2015 343336 | (avast! Antivirus) . (.Avast Software s.r.o..) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 17/03/2015 107448 | (avast! Firewall) . (.Avast Software s.r.o..) - C:\Program Files\AVAST Software\Avast\afwServ.exe
SR - | Auto 15/10/2009 223464 | (BCUService) . (.DeviceVM, Inc..) - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
SR - | Auto 02/03/2009 68136 | (ES lite Service) . (...) - C:\Program Files\Gigabyte\EasySaver\ESSVR.exe
~ Services: Scanned in 00mn 12s



---\\ Search Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by ahmed at 26/03/2015 15:07:08
device: opened successfully
user: MBR read successfully
Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
1 ntkrnlpa!IofCallDriver[0x804EF200] >> \Device\Harddisk0\DR0[0x89DD3AB8]
3 CLASSPNP[0xBA0E8FD7] >> ntkrnlpa!IofCallDriver[0x804EF200] >> \Device\00000067[0x89DD8F18]
5 ACPI[0xB9F7E620] >> ntkrnlpa!IofCallDriver[0x804EF200] >> \Device\Ide\IdeDeviceP0T0L0-3[0x89DE3940]
kernel: MBR read successfully
user & kernel MBR OK
~ MBR: 13 Scanned in 00mn 02s



---\\ Search Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by ahmed at 26/03/2015 15:07:10
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s



---\\ Scan Additionnel (O88)
Database Version : 13008 - (23/03/2015)
Clés trouvées (Keys found) : 1
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 1

[HKCU\Software\DC3_FEXEC] =>Trojan.Fynloski
C:\Documents and Settings\ahmed\Bureau\yet_another_cleaner_sk_718511.exe =>PUP.YetAnotherCleaner^
~ Additionnel Scan: 119890 Items scanned in 00mn 31s



---\\ Additional information about modules
~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5)
~ http://nicolascoolman.fr/o3-internet-explorer-toolbars/ =>.Internet Explorer toolbars (O3)
~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Auto loading programs from Registry and folders (O4)
~ http://nicolascoolman.fr/o50-image-file-execution-options-zhpdiag/ =>.Image File Execution Options (IFEO) (O50)
~ AMI: 4 Scanned in 00mn 00s



---\\ Summary of the detections found on your workstation
http://nicolascoolman.fr/pup-elex =>PUP.Elex
http://nicolascoolman.fr/trojan-fynloski =>Trojan.Fynloski
http://nicolascoolman.fr/trojan-staser =>Trojan.Staser
http://nicolascoolman.fr/pup-softwareengine =>PUP.SoftwareEngine
http://www.nicolascoolman.fr/blog/ =>PUP.Istart
http://www.nicolascoolman.fr/blog/ =>PUP.YetAnotherCleaner
~ MSI: 6 link(s) detected in 00mn 00s



End of the scan (1750 lines in 02mn 32s)(2.4)

Publicité


Signaler le contenu de ce document

Publicité