~ Rapport de ZHPDiag v2015.3.19.31 - Nicolas Coolman (19/03/2015)
~ Lancé par Annie (20/03/2015 21:47:18)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Version à jour.
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Not Found


---\\ Navigateurs Internet
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox 36.0.1 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Windows Automatic Updates : OK
Windows Genuine Advantage : KO
Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600)

---\\ Logiciels de protection du système
Avast Internet Security v10.2.2214
Malwarebytes Anti-Malware version 2.0.4.1028

---\\ Logiciels d'optimisation du système

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels

---\\ Informations sur le système
~ Processor: x86 Family 15 Model 4 Stepping 3, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1015 MB (13% free)
System Restore: Activé (Enable)
System drive C: has 88 GB (90%) free of 98 GB

---\\ Mode de connexion au système
~ Computer Name: TOUR-MAISON
~ User Name: Annie
~ All Users Names: SUPPORT_388945a0, HelpAssistant, Annie, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Documents and Settings\Annie\Application Data\ZHP\
~ %AppData% : C:\Documents and Settings\Annie\Application Data\
~ %Desktop% : C:\Documents and Settings\Annie\Bureau\
~ %Favorites% : C:\Documents and Settings\Annie\Favoris\
~ %LocalAppData% : C:\Documents and Settings\Annie\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\Annie\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ Enumération des unités disques
A: Floppy drive, Flash card reader, USB Key (Not Inserted)
C: Hard drive, Flash drive, Thumb drive (Free 88 Go of 98 Go)
D: Hard drive, Flash drive, Thumb drive (Free 366 Go of 368 Go)
E: Floppy drive, Flash card reader, USB Key (Not Inserted)
F: Floppy drive, Flash card reader, USB Key (Not Inserted)
G: Floppy drive, Flash card reader, USB Key (Not Inserted)
H: Floppy drive, Flash card reader, USB Key (Not Inserted)
I: CD-ROM drive (Not Inserted)
J: CD-ROM drive (Not Inserted)
K: Hard drive, Flash drive, Thumb drive (Free 411 Go of 466 Go)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
~ Security Center: 37 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.6CE32F7778061CCC5814D5E0F282D369] - (.Microsoft Corporation - Internet Extensions for Win32.) (.08/03/2009 - 04:34:58.) -- C:\WINDOWS\system32\wininet.dll [914944]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.322D0E36693D6E24A2398BEE62A268CD] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138112]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 11:40:32.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.68755F0FF16070178B54674FE5B847B0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456576]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 11:32:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.13/04/2008 - 19:57:36.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Generic Processes: Scanned in 00mn 01s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/2
~ Mes musiques (My Musics) : 1/2
~ Mes Favoris (My Favorites) : 1/8
~ Mes Documents (My Documents) : 1/26
~ Mon Bureau (My Desktop) : 0/12
~ Menu demarrer (Programs) : 1/23
~ Hidden Files: Scanned in 00mn 00s



---\\ Processus lancés
[MD5.35714DC1ADD995681D890D4382C75721] - (.Avast Software s.r.o. - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336] [PID.1564]
[MD5.9BCCEF665F197A5BBE86C679EFF608D0] - (.Avast Software s.r.o. - avast! firewall service.) -- C:\Program Files\AVAST Software\Avast\afwServ.exe [107448] [PID.1692]
[MD5.938FA6F63B210FB8EF5A7B2FC1229431] - (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [5511352] [PID.3312]
[MD5.9F87EE428CF6FF75ABA3ABDDE12C9083] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [118784] [PID.3420]
[MD5.72334F906C2E2B002CDD2FF9022FD957] - (.PixArt Imaging Incorporation - Registry Monitor.) -- C:\WINDOWS\PixArt\PAC7302\Monitor.exe [319488] [PID.3480]
[MD5.FEBD7218FA3616962F190AD5141DF29D] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [31346784] [PID.3760]
[MD5.7E3DEFE771CB451B0FF630BFA435417E] - (.Microsoft Corporation - Mises à jour automatiques.) -- C:\WINDOWS\system32\wuauclt.exe [112640] [PID.2400]
[MD5.F51D682701B303ED6CC5474CE5FA5AAA] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [376944] [PID.1208]
[MD5.6577E0208F612DAF5DE5AD4081BE7696] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8187904] [PID.3940]
~ Processes Running: Scanned in 00mn 02s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Documents and Settings\Annie\Application Data\Mozilla\Firefox\Profiles\hjla8xqf.default\prefs.js
M0 - MFSP: prefs.js [Annie - hjla8xqf.default] http://www.orange.fr
M2 - MFEP: Extension [Annie - hjla8xqf.default] {2fbd7dfe-a573-4ffa-a5f6-c8e79be0e000}.xpi
~ Firefox Browser: 2 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Nicolas Coolman - ZHPDiag.) (No version) -- (.not file.) =>.Nicolas Coolman
~ IE Browser: 12 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (20)
~ Hosts File: Scanned in 00mn 00s



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - GrooveShellExtensions Module.) -- C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
~ BHO: 2 Scanned in 00mn 00s



---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [AvastUI.exe] . (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [PAC7302_Monitor] . (.PixArt Imaging Incorporation - Registry Monitor.) -- C:\WINDOWS\PixArt\PAC7302\Monitor.exe
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-1644491937-1965331169-1606980848-1004\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1644491937-1965331169-1606980848-1004\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
~ Application: Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
~ Winsock: 3 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{C44DC94C-5A6E-4F02-9F04-8BE35E6A5704}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{C44DC94C-5A6E-4F02-9F04-8BE35E6A5704}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{C44DC94C-5A6E-4F02-9F04-8BE35E6A5704}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
~ SSODL: 4 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Avast Antivirus (avast! Antivirus) . (.Avast Software s.r.o. - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Firewall (avast! Firewall) . (.Avast Software s.r.o. - avast! firewall service.) - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Record Memory Key (berogupe) . (...) - C:\Documents and Settings\Annie\Application Data\D536BEE8-1426867047-11D9-9C8C-8A18ABC3536B\jnsm7A.tmp
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
~ Services: 4 Scanned in 00mn 07s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT: - (..) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\At1.job [410]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\avast! Emergency Update.job [364]
~ Scheduled Task: 3 Scanned in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Mise à jour de la version d’Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe =>.Microsoft Corporation
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe =>.Microsoft Corporation
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf =>.Microsoft Corporation
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Macromedia, Inc. - Macromedia Flash Player 6.0 r79.) -- C:\WINDOWS\system32\macromed\flash\flash.ocx
O40 - ASIC: Installed Component - S-1-5-21-1644491937-1965331169-1606980848-1004 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexadécimal CLSID
O40 - ASIC: Installed Component - S-1-5-21-1644491937-1965331169-1606980848-1004 - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS -- Not Hexadécimal CLSID
~ Active Setup: 19 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (aswKbd) . (.Avast Software s.r.o. - avast! Keyboard Filter Driver.) - C:\WINDOWS\system32\drivers\aswKbd.sys
O41 - Driver: (aswRdr) . (.Avast Software s.r.o. - avast! TDI Redirect Driver.) - C:\WINDOWS\system32\drivers\aswRdr.sys
O41 - Driver: (aswSnx) . (.Avast Software s.r.o. - avast! Virtualization Driver.) - C:\WINDOWS\system32\drivers\aswSnx.sys
O41 - Driver: (aswSP) . (.Avast Software s.r.o. - avast! self protection module.) - C:\WINDOWS\system32\drivers\aswSP.sys
O41 - Driver: (aswTdi) . (.Avast Software s.r.o. - avast! TDI Filter Driver.) - C:\WINDOWS\system32\drivers\aswTdi.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
~ Drivers: 72 Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: ArcSoft WebCam Companion 2 - (.ArcSoft.) [HKLM] -- {7814358B-1284-4305-AE5A-6667DBDF4771}
O42 - Logiciel: Avast Internet Security - (.AVAST Software.) [HKLM] -- Avast
O42 - Logiciel: EPSON Copy Utility 3 - (...) [HKLM] -- {67EDD823-135A-4D59-87BD-950616D6E857}
O42 - Logiciel: EPSON Easy Photo Print - (...) [HKLM] -- {5DA7BC15-18D3-41A0-9F59-838DA3EAEF17}
O42 - Logiciel: EPSON Logiciel imprimante - (...) [HKLM] -- EPSON Printer and Utilities
O42 - Logiciel: EPSON Scan - (...) [HKLM] -- EPSON Scanner
O42 - Logiciel: ESDX4800_4200 Guide util. - (...) [HKLM] -- ESDX4800_4200 Guide util.
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (...) [HKLM] -- {8A708DD8-A5E6-11D4-A706-000629E95E20}
O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.4.1028 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Marvell Miniport Driver - (.Marvell.) [HKLM] -- {C950420B-4182-49EA-850A-A6A2ABF06C6B}
O42 - Logiciel: Mozilla Firefox 36.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 36.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: Realtek AC'97 Audio - (...) [HKLM] -- {FB08F381-6533-4108-B7DD-039E11FBC27E}
O42 - Logiciel: Skype™ 7.2 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: Special Box - (.Special Box.) [HKLM] -- Special Box
O42 - Logiciel: Virtual Cable Tester - (.Marvell.) [HKLM] -- {3D654496-9C3D-4565-858C-3E551ECDA4E2}
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
~ Logic: 34 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\AOL]
[HKCU\Software\AVAST Software]
[HKCU\Software\ArcSoft]
[HKCU\Software\Chromium]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Clubic]
[HKCU\Software\EPSON]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\Kromtech]
[HKCU\Software\Logitech]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\OB]
[HKCU\Software\ODBC]
[HKCU\Software\Policies]
[HKCU\Software\SEIKO EPSON]
[HKCU\Software\Skype]
[HKCU\Software\Softwrap]
[HKCU\Software\Special Box]
[HKCU\Software\Trolltech]
[HKCU\Software\ZebHelpProcess Helper]
[HKLM\Software\685D6D1C-D73A-4F37-B7E5E53660311DDB]
[HKLM\Software\AVAST Software]
[HKLM\Software\AdwCleaner]
[HKLM\Software\America Online]
[HKLM\Software\ArcSoft]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\EPSON]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\IM Providers]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\Logitech]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\Marvell]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\PixArt]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Skype]
[HKLM\Software\Software]
[HKLM\Software\SpeedBit]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\mozilla.org]
~ Key Software: 109 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 19/03/2015 - 21:08:25 - [] ----D C:\Program Files\ArcSoft
O43 - CFD: 19/03/2015 - 17:17:10 - [] ----D C:\Program Files\AVAST Software
O43 - CFD: 19/03/2015 - 16:56:37 - [] ----D C:\Program Files\AvRack
O43 - CFD: 19/03/2015 - 16:38:51 - [0] ----D C:\Program Files\ComPlus Applications
O43 - CFD: 19/03/2015 - 18:41:13 - [] ----D C:\Program Files\epson
O43 - CFD: 20/03/2015 - 17:08:50 - [] ----D C:\Program Files\Fichiers communs
O43 - CFD: 19/03/2015 - 21:15:59 - [] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 19/03/2015 - 16:53:31 - [] ----D C:\Program Files\Intel
O43 - CFD: 20/03/2015 - 20:58:16 - [] ----D C:\Program Files\Internet Explorer
O43 - CFD: 19/03/2015 - 20:59:57 - [] ----D C:\Program Files\Labtec
O43 - CFD: 19/03/2015 - 21:15:59 - [] ----D C:\Program Files\Logitech
O43 - CFD: 20/03/2015 - 13:40:36 - [] ----D C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 19/03/2015 - 16:58:25 - [] ----D C:\Program Files\Marvell
O43 - CFD: 19/03/2015 - 16:37:19 - [] ----D C:\Program Files\Messenger
O43 - CFD: 19/03/2015 - 16:43:52 - [] ----D C:\Program Files\microsoft frontpage
O43 - CFD: 19/03/2015 - 19:07:16 - [] ----D C:\Program Files\Microsoft Office
O43 - CFD: 19/03/2015 - 19:06:54 - [] ----D C:\Program Files\Microsoft Visual Studio
O43 - CFD: 19/03/2015 - 19:07:57 - [] ----D C:\Program Files\Microsoft Works
O43 - CFD: 19/03/2015 - 16:40:03 - [] ----D C:\Program Files\Movie Maker
O43 - CFD: 19/03/2015 - 17:09:52 - [] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 19/03/2015 - 17:09:52 - [] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 19/03/2015 - 19:07:35 - [] ----D C:\Program Files\MSBuild
O43 - CFD: 19/03/2015 - 16:36:44 - [] ----D C:\Program Files\MSN
O43 - CFD: 19/03/2015 - 16:37:13 - [] ----D C:\Program Files\MSN Gaming Zone
O43 - CFD: 19/03/2015 - 16:40:16 - [] ----D C:\Program Files\NetMeeting
O43 - CFD: 19/03/2015 - 16:37:31 - [] ----D C:\Program Files\Online Services
O43 - CFD: 20/03/2015 - 13:18:36 - [] ----D C:\Program Files\Outlook Express =>.Microsoft Corporation
O43 - CFD: 19/03/2015 - 16:56:37 - [0] ----D C:\Program Files\Realtek Sound Manager
O43 - CFD: 19/03/2015 - 16:40:57 - [] ----D C:\Program Files\Services en ligne
O43 - CFD: 20/03/2015 - 17:08:52 - [] R---D C:\Program Files\Skype
O43 - CFD: 19/03/2015 - 16:49:18 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 19/03/2015 - 16:43:23 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 19/03/2015 - 16:37:06 - [] ----D C:\Program Files\Windows NT
O43 - CFD: 19/03/2015 - 16:41:11 - [0] --H-D C:\Program Files\WindowsUpdate
O43 - CFD: 19/03/2015 - 16:43:53 - [] ----D C:\Program Files\xerox
O43 - CFD: 20/03/2015 - 21:15:34 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 19/03/2015 - 21:08:33 - [] ----D C:\Program Files\Fichiers communs\ArcSoft
O43 - CFD: 19/03/2015 - 19:06:54 - [] ----D C:\Program Files\Fichiers communs\DESIGNER
O43 - CFD: 19/03/2015 - 18:37:54 - [] ----D C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 19/03/2015 - 21:14:01 - [0] ----D C:\Program Files\Fichiers communs\Labtec
O43 - CFD: 19/03/2015 - 19:16:23 - [] ----D C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 19/03/2015 - 16:40:12 - [] ----D C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 19/03/2015 - 17:24:17 - [] ----D C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 19/03/2015 - 16:40:16 - [] ----D C:\Program Files\Fichiers communs\Services
O43 - CFD: 20/03/2015 - 17:08:52 - [] ----D C:\Program Files\Fichiers communs\Skype
O43 - CFD: 19/03/2015 - 17:24:13 - [] ----D C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 19/03/2015 - 18:58:38 - [] ----D C:\Program Files\Fichiers communs\System
O43 - CFD: 20/03/2015 - 20:25:49 - [] ----D C:\Documents and Settings\All Users\Application Data\AppMgr4.69.828090
O43 - CFD: 19/03/2015 - 17:15:52 - [] ----D C:\Documents and Settings\All Users\Application Data\AVAST Software
O43 - CFD: 20/03/2015 - 13:40:29 - [] ----D C:\Documents and Settings\All Users\Application Data\Malwarebytes
O43 - CFD: 19/03/2015 - 21:22:22 - [] -S--D C:\Documents and Settings\All Users\Application Data\Microsoft
O43 - CFD: 19/03/2015 - 19:21:50 - [] ----D C:\Documents and Settings\All Users\Application Data\Microsoft Help
O43 - CFD: 19/03/2015 - 17:09:50 - [] ----D C:\Documents and Settings\All Users\Application Data\Mozilla
O43 - CFD: 20/03/2015 - 18:02:39 - [] ----D C:\Documents and Settings\All Users\Application Data\RogueKiller
O43 - CFD: 20/03/2015 - 17:09:01 - [] ----D C:\Documents and Settings\All Users\Application Data\Skype
O43 - CFD: 19/03/2015 - 18:46:56 - [] ----D C:\Documents and Settings\All Users\Application Data\UDL
O43 - CFD: 19/03/2015 - 18:31:46 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 19/03/2015 - 21:08:34 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ArcSoft Connect
O43 - CFD: 19/03/2015 - 21:08:31 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ArcSoft WebCam Companion 2
O43 - CFD: 19/03/2015 - 17:20:43 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\AVAST Software
O43 - CFD: 19/03/2015 - 17:23:39 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 19/03/2015 - 18:36:06 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\EPSON
O43 - CFD: 19/03/2015 - 18:50:51 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\EPSON Creativity Suite
O43 - CFD: 19/03/2015 - 18:29:01 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\EPSON Scan
O43 - CFD: 19/03/2015 - 16:37:31 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux
O43 - CFD: 20/03/2015 - 13:40:38 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malwarebytes Anti-Malware
O43 - CFD: 19/03/2015 - 16:58:25 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Marvell
O43 - CFD: 19/03/2015 - 20:02:19 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Office
O43 - CFD: 19/03/2015 - 16:43:46 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 19/03/2015 - 16:56:37 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Realtek Sound Manager
O43 - CFD: 20/03/2015 - 17:08:52 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Skype
O43 - CFD: 20/03/2015 - 17:13:22 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Webcam 2200
O43 - CFD: 20/03/2015 - 19:03:00 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP =>.Nicolas Coolman
O43 - CFD: 19/03/2015 - 21:10:06 - [] ----D C:\Documents and Settings\Annie\Application Data\ArcSoft
O43 - CFD: 19/03/2015 - 17:21:01 - [] ----D C:\Documents and Settings\Annie\Application Data\AVAST Software
O43 - CFD: 20/03/2015 - 20:05:38 - [] ----D C:\Documents and Settings\Annie\Application Data\D536BEE8-1426867047-11D9-9C8C-8A18ABC3536B
O43 - CFD: 19/03/2015 - 16:49:20 - [] ----D C:\Documents and Settings\Annie\Application Data\Identities
O43 - CFD: 19/03/2015 - 21:15:24 - [] ----D C:\Documents and Settings\Annie\Application Data\InstallShield
O43 - CFD: 20/03/2015 - 08:14:43 - [] ----D C:\Documents and Settings\Annie\Application Data\Macromedia
O43 - CFD: 20/03/2015 - 18:32:54 - [] -S--D C:\Documents and Settings\Annie\Application Data\Microsoft
O43 - CFD: 19/03/2015 - 17:10:09 - [] ----D C:\Documents and Settings\Annie\Application Data\Mozilla
O43 - CFD: 20/03/2015 - 21:39:27 - [] ----D C:\Documents and Settings\Annie\Application Data\Skype
O43 - CFD: 20/03/2015 - 21:47:24 - [] ----D C:\Documents and Settings\Annie\Application Data\ZHP =>.Nicolas Coolman
O43 - CFD: 19/03/2015 - 21:09:35 - [] ----D C:\Documents and Settings\Annie\Local Settings\Application Data\ArcSoft
O43 - CFD: 20/03/2015 - 20:08:36 - [] ----D C:\Documents and Settings\Annie\Local Settings\Application Data\D536BEE8-1426870927-11D9-9C8C-8A18ABC3536B
O43 - CFD: 20/03/2015 - 20:59:04 - [] ----D C:\Documents and Settings\Annie\Local Settings\Application Data\Microsoft
O43 - CFD: 19/03/2015 - 18:57:58 - [0] ----D C:\Documents and Settings\Annie\Local Settings\Application Data\Microsoft Help
O43 - CFD: 19/03/2015 - 17:09:59 - [] ----D C:\Documents and Settings\Annie\Local Settings\Application Data\Mozilla
O43 - CFD: 19/03/2015 - 20:05:12 - [] ----D C:\Documents and Settings\Annie\Local Settings\Application Data\Skype
O43 - CFD: 19/03/2015 - 19:03:04 - [] ----D C:\Documents and Settings\Annie\Local Settings\Application Data\Temp
O43 - CFD: 20/03/2015 - 20:59:01 - [] R---D C:\Documents and Settings\Annie\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 19/03/2015 - 17:23:39 - [] R---D C:\Documents and Settings\Annie\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 20/03/2015 - 14:30:27 - [] R---D C:\Documents and Settings\Annie\Menu Démarrer\Programmes\Outils d'administration
~ Program Folder: 93 Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.327F447CC4BC2F1D543C5E6ADD61D6F2] - 19/03/2015 - 16:35:01 ---A- . (...) -- C:\WINDOWS\cmsetacl.log [200]
O44 - LFC:[MD5.15CABD0F7C00C47C70124907916AF3F1] - 19/03/2015 - 16:36:26 ---A- . (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
O44 - LFC:[MD5.88155247177638048422893737429D9E] - 19/03/2015 - 16:36:26 ---A- . (.Microsoft Corporation - Terminal Server Driver.) -- C:\WINDOWS\system32\Drivers\termdd.sys [40840]
O44 - LFC:[MD5.60101662853FA56F3F18F1DEA937FECB] - 19/03/2015 - 16:36:29 ---A- . (.Microsoft Corporation - Application d'assistance du composant de lo.) -- C:\WINDOWS\system32\mmfutil.dll [17920]
O44 - LFC:[MD5.0584A0A065B1FCA52B74FB65A7A19E09] - 19/03/2015 - 16:36:29 ---A- . (.Microsoft Corporation - Composant logiciel enfichable WMI.) -- C:\WINDOWS\system32\cmprops.dll [191488]
O44 - LFC:[MD5.8BC58C4B4471EA21D80FC28FF5788B3B] - 19/03/2015 - 16:36:29 ---A- . (.Microsoft Corporation - Windows Product Activation Configuration WM.) -- C:\WINDOWS\system32\licwmi.dll [58880]
O44 - LFC:[MD5.86FC0740683709C5314722EF8CA64062] - 19/03/2015 - 16:36:30 ---A- . (.Microsoft Corporation - WMI Snapins.) -- C:\WINDOWS\system32\servdeps.dll [56320]
O44 - LFC:[MD5.BD6C84E39CB7073BDA60A0B16B9298C2] - 19/03/2015 - 16:36:34 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\clbcatq.dll [498688]
O44 - LFC:[MD5.67217D3DF13594B3EE2A5F37ABA953B3] - 19/03/2015 - 16:36:34 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comsnap.dll [167424]
O44 - LFC:[MD5.4FC412747440950E8C0D24203ECCCD88] - 19/03/2015 - 16:36:34 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comsvcs.dll [1267200]
O44 - LFC:[MD5.D408E96DE7D1DCFC7D37A0C38B31EBF1] - 19/03/2015 - 16:36:34 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comuid.dll [539648]
O44 - LFC:[MD5.6B9D6177E2852C103114C07D62072851] - 19/03/2015 - 16:36:35 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\catsrv.dll [226304]
O44 - LFC:[MD5.32278ADD920546C94E035549D183A5C1] - 19/03/2015 - 16:36:35 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\catsrvps.dll [85504]
O44 - LFC:[MD5.BEB9AD8CD1E53495D4F584C9F7C1DB3E] - 19/03/2015 - 16:36:35 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\catsrvut.dll [625664]
O44 - LFC:[MD5.3E7E079AF9CFF7AFC4EDCC332E94F42E] - 19/03/2015 - 16:36:35 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\clbcatex.dll [110592]
O44 - LFC:[MD5.79D221D6ECCF243CA4560F4BE7BAD9F5] - 19/03/2015 - 16:36:35 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\stclient.dll [59392]
O44 - LFC:[MD5.8245A3D7C3C42DFA3536E7F38ACBA1FE] - 19/03/2015 - 16:36:36 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\colbact.dll [60416]
O44 - LFC:[MD5.84179A6F77F264A71651CE75DCDD7947] - 19/03/2015 - 16:36:36 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comaddin.dll [28160]
O44 - LFC:[MD5.C01BE55479D4323CFFE90C283C7E944D] - 19/03/2015 - 16:36:36 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comrepl.dll [97792]
O44 - LFC:[MD5.9D42C248D7C519147F1FA3111382A525] - 19/03/2015 - 16:36:36 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\dcomcnfg.exe [6144]
O44 - LFC:[MD5.DD421F87FD528E330088581E232431DB] - 19/03/2015 - 16:36:36 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\mtxdm.dll [30720]
O44 - LFC:[MD5.47E17AB71B070D0020D765753D3026AB] - 19/03/2015 - 16:36:36 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\mtxex.dll [4096]
O44 - LFC:[MD5.C725F25A2622BF21A761A609DAB360A9] - 19/03/2015 - 16:36:36 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\mtxlegih.dll [34304]
O44 - LFC:[MD5.BB0175779746E7DF14182EC461D55CDD] - 19/03/2015 - 16:36:37 ---A- . (.Microsoft Corporation - MS DTC OLE Transactions interface proxy DLL.) -- C:\WINDOWS\system32\msdtcprx.dll [427008]
O44 - LFC:[MD5.8648D670AE0D95C95E7BBB5B80661796] - 19/03/2015 - 16:36:37 ---A- . (.Microsoft Corporation - MS DTC console program.) -- C:\WINDOWS\system32\msdtc.exe [6144]
O44 - LFC:[MD5.2275F850DFCE63C9BE9ADBF42664CFAD] - 19/03/2015 - 16:36:37 ---A- . (.Microsoft Corporation - MS DTC helper APIs DLL.) -- C:\WINDOWS\system32\xolehlp.dll [11776]
O44 - LFC:[MD5.02675B394D2078A72A7E1F04EF2EC481] - 19/03/2015 - 16:36:37 ---A- . (.Microsoft Corporation - MS DTC log manager DLL.) -- C:\WINDOWS\system32\msdtclog.dll [58880]
O44 - LFC:[MD5.912797ACCD9C4361593F23BBDC01EE71] - 19/03/2015 - 16:36:37 ---A- . (.Microsoft Corporation - MS DTC transaction manager DLL.) -- C:\WINDOWS\system32\msdtctm.dll [956928]
O44 - LFC:[MD5.0B7B1CD44A4B7A8B0B3E122B529629BB] - 19/03/2015 - 16:36:38 ---A- . (.Microsoft Corporation - Configuration Backend Interface.) -- C:\WINDOWS\system32\cfgbkend.dll [39424]
O44 - LFC:[MD5.1BDA51C28FAAB97D8A88D59C8A221485] - 19/03/2015 - 16:36:38 ---A- . (.Microsoft Corporation - DLL Interface to TermDD Device Driver.) -- C:\WINDOWS\system32\icaapi.dll [11264]
O44 - LFC:[MD5.D926AEC879EE607570EE97CE48388CA6] - 19/03/2015 - 16:36:38 ---A- . (.Microsoft Corporation - MS DTC administrative component DLL.) -- C:\WINDOWS\system32\msdtcuiu.dll [161792]
O44 - LFC:[MD5.69AB25E73007E9A527A55754820D2D8A] - 19/03/2015 - 16:36:38 ---A- . (.Microsoft Corporation - Microsoft database support DLL for Oracle.) -- C:\WINDOWS\system32\mtxoci.dll [91648]
O44 - LFC:[MD5.C3E6A7A4B35DD176B5D17C0EA485996B] - 19/03/2015 - 16:36:38 ---A- . (.Microsoft Corporation - Pilote multimédia du service Terminal Serve.) -- C:\WINDOWS\system32\rdpsnd.dll [19968]
O44 - LFC:[MD5.B46EF6930DDE7393FB4BD0150BCC786C] - 19/03/2015 - 16:36:38 ---A- . (.Microsoft Corporation - RDP Clip Monitor.) -- C:\WINDOWS\system32\rdpclip.exe [62976]
O44 - LFC:[MD5.70413FB509C8E5248C84F17767557F24] - 19/03/2015 - 16:36:38 ---A- . (.Microsoft Corporation - RDP Extension DLL.) -- C:\WINDOWS\system32\rdpwsx.dll [87176]
O44 - LFC:[MD5.710BC85A8C22626EE094439E3EA0D38C] - 19/03/2015 - 16:36:38 ---A- . (.Microsoft Corporation - Service Terminal Server.) -- C:\WINDOWS\system32\termsrv.dll [297984]
O44 - LFC:[MD5.F9DE7D28A9D584A6D1B22512E45631BC] - 19/03/2015 - 16:36:38 ---A- . (.Microsoft Corporation - Utilitaire d'interrogation de processus.) -- C:\WINDOWS\system32\qprocess.exe [20992]
O44 - LFC:[MD5.15F67931677258D482A93990F8B3F3AF] - 19/03/2015 - 16:36:39 ---A- . (.Microsoft Corporation - Extension du Panneau de configuration Sessi.) -- C:\WINDOWS\system32\remotepg.dll [61952]
O44 - LFC:[MD5.9F63D9C5B238ED1C375D417EFF3D5BE7] - 19/03/2015 - 16:36:39 ---A- . (.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) -- C:\WINDOWS\system32\sessmgr.exe [142848]
O44 - LFC:[MD5.454F013E6F538FE66A0D567B939BF360] - 19/03/2015 - 16:36:39 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop TSRDP Session Add-.) -- C:\WINDOWS\system32\rdsaddin.exe [13824]
O44 - LFC:[MD5.7BC4641B6C54338593D19130EB674620] - 19/03/2015 - 16:36:39 ---A- . (.Microsoft Corporation - RDSHost Client Module.) -- C:\WINDOWS\system32\rdchost.dll [147968]
O44 - LFC:[MD5.81F64944CDC453A79EB482B99F1A4264] - 19/03/2015 - 16:36:39 ---A- . (.Microsoft Corporation - RDSHost Server Module.) -- C:\WINDOWS\system32\rdshost.exe [67072]
O44 - LFC:[MD5.A42EAADFADEC1D879928CE056EBA1E2A] - 19/03/2015 - 16:36:39 ---A- . (.Microsoft Corporation - Remote Desktop Connection.) -- C:\WINDOWS\system32\mstsc.exe [677888]
O44 - LFC:[MD5.F31CC69F407BEEA05C4440BEA3FEDDE9] - 19/03/2015 - 16:36:39 ---A- . (.Microsoft Corporation - Terminal Services ActiveX Client.) -- C:\WINDOWS\system32\mstscax.dll [2061824]
O44 - LFC:[MD5.A6A06A89A6ABC8964F7D147B3245F217] - 19/03/2015 - 16:36:40 ---A- . (.Microsoft Corporation - Anywhere access client.) -- C:\WINDOWS\system32\aaclient.dll [136192]
O44 - LFC:[MD5.3EFE86DBFD6B34FE2ADF6602D657342D] - 19/03/2015 - 16:36:40 ---A- . (.Microsoft Corporation - Fournisseur d'infrastructure WMI de configu.) -- C:\WINDOWS\system32\tscfgwmi.dll [94208]
O44 - LFC:[MD5.6728E45B66F93C08F11DE2E316FC70DD] - 19/03/2015 - 16:36:40 ---A- . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only,.) -- C:\WINDOWS\system32\Drivers\rdpwd.sys [139656]
O44 - LFC:[MD5.87B6A9310687594F315798D532721F65] - 19/03/2015 - 16:36:40 ---A- . (.Microsoft Corporation - RPC/HTTP Downlevel Side-by-side Runtime.) -- C:\WINDOWS\system32\rhttpaa.dll [290304]
O44 - LFC:[MD5.B7BD738EBA6E3C4C0744B4947CB54572] - 19/03/2015 - 16:36:40 ---A- . (.Microsoft Corporation - TSGateway QEC.) -- C:\WINDOWS\system32\tsgqec.dll [53248]
O44 - LFC:[MD5.F12E772F91FF7943AB1D8362E24E18C5] - 19/03/2015 - 16:36:41 ---A- . (.Microsoft Corporation - Afficheur de l'album Windows NT.) -- C:\WINDOWS\system32\clipbrd.exe [104448]
O44 - LFC:[MD5.6471A66807F5E104E4885F5B67349397] - 19/03/2015 - 16:36:41 ---A- . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys [12040]
O44 - LFC:[MD5.D8A768A65A549F07AE6329B8558A0FBB] - 19/03/2015 - 16:36:41 ---A- . (.Microsoft Corporation - Spider.) -- C:\WINDOWS\system32\spider.exe [539136]
O44 - LFC:[MD5.C56B6D0402371CF3700EB322EF3AAF61] - 19/03/2015 - 16:36:41 ---A- . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys [21896]
O44 - LFC:[MD5.6A1D9675F87094A7FAB33A67A4C25F1C] - 19/03/2015 - 16:36:42 ---A- . (.Hilgraeve, Inc. - Bibliothèque d'applications HyperTerminal.) -- C:\WINDOWS\system32\hypertrm.dll [354304]
O44 - LFC:[MD5.D0BB79521316E5926A5C3DB49E812428] - 19/03/2015 - 16:36:42 ---A- . (.Microsoft Corporation - Media Player.) -- C:\WINDOWS\system32\mplay32.exe [124928]
O44 - LFC:[MD5.1263B2123DED522D5398980D6FD36358] - 19/03/2015 - 16:36:42 ---A- . (.Microsoft Corporation - Paint.) -- C:\WINDOWS\system32\mspaint.exe [347648]
O44 - LFC:[MD5.247C9A4B86B395D847353D7169920D42] - 19/03/2015 - 16:36:43 ---A- . (.Microsoft Corporation - Accessoires du magnétophone.) -- C:\WINDOWS\system32\sndrec32.exe [133120]
O44 - LFC:[MD5.72153A1D6181A6C72C1427E782E3A367] - 19/03/2015 - 16:36:43 ---A- . (.Microsoft Corporation - Assistant Accessibilité Microsoft.) -- C:\WINDOWS\system32\accwiz.exe [190464]
O44 - LFC:[MD5.36718363842D69F6EB26AEBEECD72239] - 19/03/2015 - 16:36:43 ---A- . (.Microsoft Corporation - DLL du Panneau de configuration.) -- C:\WINDOWS\system32\access.cpl [71680]
O44 - LFC:[MD5.2CE7B1EEB99C14032C0E2201B004F80E] - 19/03/2015 - 16:36:53 ---A- . (...) -- C:\WINDOWS\system32\wmimgmt.msc [63488]
O44 - LFC:[MD5.CDD932EDCB756FB5F7CE5E2F090BA838] - 19/03/2015 - 16:36:57 ---A- . (...) -- C:\WINDOWS\system32\msdtcprf.h [768]
O44 - LFC:[MD5.FDA18F513403E67CAE9BF0D2DD948B28] - 19/03/2015 - 16:36:57 ---A- . (...) -- C:\WINDOWS\system32\msdtcprf.ini [3914]
O44 - LFC:[MD5.4701BA735D535D9F46AB2A285610A04B] - 19/03/2015 - 16:36:57 ---A- . (.Microsoft Corporation - Extension de configuration de connexion Ter.) -- C:\WINDOWS\system32\rdpcfgex.dll [4608]
O44 - LFC:[MD5.2CA1060C5CF9C03B865977F12123C3F8] - 19/03/2015 - 16:36:57 ---A- . (.Microsoft Corporation - Modem Connection Driver.) -- C:\WINDOWS\system32\cdmodem.dll [15872]
O44 - LFC:[MD5.9C847DF5E1F783716032977AE4559CCC] - 19/03/2015 - 16:36:57 ---A- . (.Microsoft Corporation - Registry Initializer.) -- C:\WINDOWS\system32\regini.exe [33792]
O44 - LFC:[MD5.CEBA968375EE0B55094FFBA03EE69BAF] - 19/03/2015 - 16:36:57 ---A- . (.Microsoft Corporation - Utilitaire d'interrogation Terminal Server.) -- C:\WINDOWS\system32\qappsrv.exe [17408]
O44 - LFC:[MD5.B1D3D78F35E85E7481A9651BB11394B0] - 19/03/2015 - 16:36:57 ---A- . (.Microsoft Corporation - Utilitaire de contrôle à distance de sessio.) -- C:\WINDOWS\system32\shadow.exe [15360]
O44 - LFC:[MD5.8A6A5D2505D1BF424EAFD38D76D6C0E9] - 19/03/2015 - 16:36:57 ---A- . (.Microsoft Corporation - Utilitaire de déconnexion de session.) -- C:\WINDOWS\system32\logoff.exe [15872]
O44 - LFC:[MD5.25900127DAE605546899D80EA6AE61FB] - 19/03/2015 - 16:36:57 ---A- . (.Microsoft Corporation - Utilitaire de gestion des sessions de requê.) -- C:\WINDOWS\system32\qwinsta.exe [22528]
O44 - LFC:[MD5.31BF3B4C0D04EC84684F58D14F521426] - 19/03/2015 - 16:36:57 ---A- . (.Microsoft Corporation - Utilitaire de message.) -- C:\WINDOWS\system32\msg.exe [22528]
O44 - LFC:[MD5.946B7A66354D385D9242F9AFC1CAC7C0] - 19/03/2015 - 16:36:57 ---A- . (.Microsoft Corporation - Utilitaire de réinitialisation de session.) -- C:\WINDOWS\system32\rwinsta.exe [16384]
O44 - LFC:[MD5.4A547D74B435E78418BE06406250C1D3] - 19/03/2015 - 16:36:58 ---A- . (...) -- C:\WINDOWS\system32\tslabels.h [3286]
O44 - LFC:[MD5.F9A14C7B36E10052A1B0F071BC3C1C65] - 19/03/2015 - 16:36:58 ---A- . (...) -- C:\WINDOWS\system32\tslabels.ini [27768]
O44 - LFC:[MD5.9F27B27C8405FEAF7DFC4DA3751DEF22] - 19/03/2015 - 16:36:58 ---A- . (...) -- C:\WINDOWS\system32\usrlogon.cmd [1263]
O44 - LFC:[MD5.EA682C022F7204CC8E8C9EF5DCE29356] - 19/03/2015 - 16:36:58 ---A- . (.Microsoft Corporation - Jeu Démineur du pack Entertainment.) -- C:\WINDOWS\system32\winmine.exe [119808]
O44 - LFC:[MD5.043D073DFF5E3AD85FDA67D8C30F4305] - 19/03/2015 - 16:36:58 ---A- . (.Microsoft Corporation - Jeu FreeCell du pack Entertainment.) -- C:\WINDOWS\system32\freecell.exe [55808]
O44 - LFC:[MD5.DDCA854934C0D4EF46E8E093F3446ABF] - 19/03/2015 - 16:36:58 ---A- . (.Microsoft Corporation - La Dame de Pique en réseau.) -- C:\WINDOWS\system32\mshearts.exe [128000]
O44 - LFC:[MD5.E167CEBDBADE82F4A6E30BBAF495800B] - 19/03/2015 - 16:36:58 ---A- . (.Microsoft Corporation - Utilitaire d'arrêt de processus des service.) -- C:\WINDOWS\system32\tskill.exe [16896]
O44 - LFC:[MD5.3861B0195ACDCD8F1187C37617C090C4] - 19/03/2015 - 16:36:58 ---A- . (.Microsoft Corporation - Utilitaire d'arrêt du système.) -- C:\WINDOWS\system32\tsshutdn.exe [17408]
O44 - LFC:[MD5.8F0514EF34C2A69036CC55F91F903168] - 19/03/2015 - 16:36:58 ---A- . (.Microsoft Corporation - Utilitaire de connexion de session.) -- C:\WINDOWS\system32\tscon.exe [15360]
O44 - LFC:[MD5.C2E457CCCC8691F3194D12E4F5E70EA4] - 19/03/2015 - 16:36:58 ---A- . (.Microsoft Corporation - Utilitaire de déconnexion de session.) -- C:\WINDOWS\system32\tsdiscon.exe [14848]
O44 - LFC:[MD5.C05B691CC2328DB5456AECD616E81970] - 19/03/2015 - 16:36:58 ---A- . (.Microsoft Corporation - Utilitaire de réinitialisation des services.) -- C:\WINDOWS\system32\reset.exe [10240]
O44 - LFC:[MD5.405E1EF8E3C88E9BCD2853382BB12430] - 19/03/2015 - 16:36:59 ---A- . (...) -- C:\WINDOWS\system32\bopomofo.uce [22984]
O44 - LFC:[MD5.4FDED87068052EEB9B72A97FDBC141DB] - 19/03/2015 - 16:36:59 ---A- . (...) -- C:\WINDOWS\system32\gb2312.uce [24006]
O44 - LFC:[MD5.CACA53644879416250C9BFA6A109E3D8] - 19/03/2015 - 16:36:59 ---A- . (.Microsoft Corporation - Applet du jeu Solitaire.) -- C:\WINDOWS\system32\sol.exe [57344]
O44 - LFC:[MD5.5911F4AE105C7469636F7ADCEA35349F] - 19/03/2015 - 16:36:59 ---A- . (.Microsoft Corporation - Application Calculatrice de Windows.) -- C:\WINDOWS\system32\calc.exe [115200]
O44 - LFC:[MD5.C525A8A367F9641ABB8FF32C96BD08A4] - 19/03/2015 - 16:36:59 ---A- . (.Microsoft Corporation - DLL des noms UNICODE pour UCE.) -- C:\WINDOWS\system32\getuname.dll [634880]
O44 - LFC:[MD5.0DD55909896EF797C9E5E12662CD3BDF] - 19/03/2015 - 16:36:59 ---A- . (.Microsoft Corporation - Table des caractères.) -- C:\WINDOWS\system32\charmap.exe [80896]
O44 - LFC:[MD5.39F43DBCE366B2561DF073B4C0839299] - 19/03/2015 - 16:37:00 ---A- . (...) -- C:\WINDOWS\Bulles de savon.bmp [65978]
O44 - LFC:[MD5.203EF178BF8B0A8EC34E27E4DEDB6349] - 19/03/2015 - 16:37:00 ---A- . (...) -- C:\WINDOWS\Jour de pêche.bmp [17336]
O44 - LFC:[MD5.3A8B85AB7B415BF3F8AFE285DFE0CE29] - 19/03/2015 - 16:37:00 ---A- . (...) -- C:\WINDOWS\Plume.bmp [16730]
O44 - LFC:[MD5.DAC71A10A6A71CB6E3F427AE3283734B] - 19/03/2015 - 16:37:00 ---A- . (...) -- C:\WINDOWS\Rosace bleue 16.bmp [1272]
O44 - LFC:[MD5.73D70ED3EC3BBFD8FD35DF431C38F374] - 19/03/2015 - 16:37:00 ---A- . (...) -- C:\WINDOWS\Tasse à café.bmp [17062]
O44 - LFC:[MD5.038F6AD6CEE43585D814CDBC7CDFD3EC] - 19/03/2015 - 16:37:00 ---A- . (...) -- C:\WINDOWS\system32\ideograf.uce [60458]
O44 - LFC:[MD5.7C0C25F4BA1084C4ABBEEA2C74194C5F] - 19/03/2015 - 16:37:00 ---A- . (...) -- C:\WINDOWS\system32\kanji_1.uce [6948]
O44 - LFC:[MD5.529BBD63519BBD654EF328454019693F] - 19/03/2015 - 16:37:00 ---A- . (...) -- C:\WINDOWS\system32\kanji_2.uce [8484]
O44 - LFC:[MD5.7A7A04370A6030B9B0E8178DAD4A6E41] - 19/03/2015 - 16:37:00 ---A- . (...) -- C:\WINDOWS\system32\korean.uce [12876]
O44 - LFC:[MD5.8CA32E9D986FA76F60EFBCFCD9D80A58] - 19/03/2015 - 16:37:00 ---A- . (...) -- C:\WINDOWS\system32\shiftjis.uce [16740]
O44 - LFC:[MD5.30F5568679A54042F99CA9EC1102EBCD] - 19/03/2015 - 16:37:00 ---A- . (...) -- C:\WINDOWS\system32\subrange.uce [93702]
O44 - LFC:[MD5.1AC5E83598D4F2143B59A2D893C3279A] - 19/03/2015 - 16:37:01 ---A- . (...) -- C:\WINDOWS\Granit vert.bmp [26582]
O44 - LFC:[MD5.EB3BFC14E41FBAA41B4FD4489AA82D39] - 19/03/2015 - 16:37:01 ---A- . (...) -- C:\WINDOWS\Mur de Santa Fe.bmp [65832]
O44 - LFC:[MD5.927A66BD587E31CB12D3AB25381658DC] - 19/03/2015 - 16:37:01 ---A- . (...) -- C:\WINDOWS\Rhododendron.bmp [17362]
O44 - LFC:[MD5.5B4AC407E566076BB726BA91E067D313] - 19/03/2015 - 16:37:01 ---A- . (...) -- C:\WINDOWS\Rivière Sumida.bmp [26680]
O44 - LFC:[MD5.280920B6773C74C3649A934257112BE1] - 19/03/2015 - 16:37:01 ---A- . (...) -- C:\WINDOWS\Vent de prairie.bmp [65954]
O44 - LFC:[MD5.5290EA6951F4724259F423B12C8E1393] - 19/03/2015 - 16:37:01 ---A- . (...) -- C:\WINDOWS\Zapotec.bmp [9522]
O44 - LFC:[MD5.E7EF0C8FE4CAE6B9CA990D5B15A079CE] - 19/03/2015 - 16:37:05 ---A- . (.Microsoft Corporation - Contrôles de mesure.) -- C:\WINDOWS\system32\avmeter.dll [16384]
O44 - LFC:[MD5.2A99260794224489F29B628717B7947E] - 19/03/2015 - 16:37:05 ---A- . (.Microsoft Corporation - Conversation pour Windows NT.) -- C:\WINDOWS\system32\winchat.exe [35840]
O44 - LFC:[MD5.128CEA94B381C19C655AA18DA74ECA0A] - 19/03/2015 - 16:37:05 ---A- . (.Microsoft Corporation - Numéroteur TAPI 3.0 et Visualisateur de con.) -- C:\WINDOWS\system32\avtapi.dll [232960]
O44 - LFC:[MD5.F7B2FA971A70A335F92785DEF9478B62] - 19/03/2015 - 16:37:05 ---A- . (.Microsoft Corporation - Wave Manipulation Component.) -- C:\WINDOWS\system32\avwav.dll [73216]
O44 - LFC:[MD5.520A03D1F113D251EFBFA00C164F2087] - 19/03/2015 - 16:37:06 ---A- . (.Hilgraeve, Inc. - HyperTerminal Applet Library.) -- C:\WINDOWS\system32\hticons.dll [44544]
O44 - LFC:[MD5.831347571C0F5006CE3913D32F21AB69] - 19/03/2015 - 16:37:06 ---A- . (.Microsoft Corporation - Contrôle du volume.) -- C:\WINDOWS\system32\sndvol32.exe [139264]
O44 - LFC:[MD5.AF68D5BB112D56D00835252C76D2D871] - 19/03/2015 - 16:37:13 ---A- . (.Microsoft Corporation - Windows Write.) -- C:\WINDOWS\system32\write.exe [5632]
O44 - LFC:[MD5.DADB3267CF9AA47E7EF8BBF043FBC4B8] - 19/03/2015 - 16:38:14 ---A- . (...) -- C:\WINDOWS\sessmgr.setup.log [1022]
O44 - LFC:[MD5.1E3F08D058309ECA13D4186A0CB0AAAC] - 19/03/2015 - 16:38:28 ---A- . (...) -- C:\WINDOWS\DtcInstall.log [130]
O44 - LFC:[MD5.487403459F0B2F1A3ADEEF02496BD80E] - 19/03/2015 - 16:38:44 ---A- . (...) -- C:\WINDOWS\vb.ini [36]
O44 - LFC:[MD5.6C2F0BA210C2B53EF07653ABAC6C2490] - 19/03/2015 - 16:38:44 ---A- . (...) -- C:\WINDOWS\vbaddin.ini [37]
O44 - LFC:[MD5.EF42FA6DBEAC53256F4CAD2CBA8085D0] - 19/03/2015 - 16:39:19 ---A- . (...) -- C:\WINDOWS\system32\emptyregdb.dat [21892]
O44 - LFC:[MD5.23F4325A6AA7FA8EA951185CF8DC4D77] - 19/03/2015 - 16:39:30 ---A- . (.Microsoft Corporation - Bibliothèque de l'Assistant Connexion Inter.) -- C:\WINDOWS\system32\inetcfg.dll [282624]
O44 - LFC:[MD5.E2FAF5A98ED960B0F37E1644AEC6AE2D] - 19/03/2015 - 16:39:30 ---A- . (.Microsoft Corporation - Processus d'abonnement à Internet.) -- C:\WINDOWS\system32\isign32.dll [86016]
O44 - LFC:[MD5.B3EB0AA0E194CD030C4A85BFA45F124B] - 19/03/2015 - 16:39:31 ---A- . (.Microsoft Corporation - Assistant Connexion Internet.) -- C:\WINDOWS\system32\icwphbk.dll [65536]
O44 - LFC:[MD5.D37321C41EBEC52B26CC2DC11392B84E] - 19/03/2015 - 16:39:31 ---A- . (.Microsoft Corporation - Fichier DLL d'interface du Planificateur de.) -- C:\WINDOWS\system32\mstask.dll [281600]
O44 - LFC:[MD5.8BBDE02EA41851C2402C25B1490A20AE] - 19/03/2015 - 16:39:31 ---A- . (.Microsoft Corporation - Fichier d'installation du Planificateur de.) -- C:\WINDOWS\system32\mstinit.exe [12288]
O44 - LFC:[MD5.55F5C5C1BE1A78E285033E432BA01597] - 19/03/2015 - 16:39:31 ---A- . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560]
O44 - LFC:[MD5.B4483DA59385014F20ADEE7075B631FE] - 19/03/2015 - 16:39:31 ---A- . (.Microsoft Corporation - Numéroteur automatique de l'Assistant Conne.) -- C:\WINDOWS\system32\icwdial.dll [73728]
O44 - LFC:[MD5.CFCFE96EDD7E6FD246F160368B87A13F] - 19/03/2015 - 16:39:33 ---A- . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll [691712]
O44 - LFC:[MD5.E538D7BC60D7CD67BDEA812F83AE092E] - 19/03/2015 - 16:39:33 ---A- . (.Microsoft Corporation - Ressources API de Microsoft Internet Messag.) -- C:\WINDOWS\system32\inetres.dll [50688]
O44 - LFC:[MD5.11FB4109191437CE765779F10EBBDFAB] - 19/03/2015 - 16:39:34 ---A- . (.Microsoft Corporation - Gestionnaire de comptes Internet.) -- C:\WINDOWS\system32\msoeacct.dll [252928]
O44 - LFC:[MD5.B150D1485996C0A40C8E397B141C3D8B] - 19/03/2015 - 16:39:34 ---A- . (.Microsoft Corporation - Microsoft Outlook Express RT Lib.) -- C:\WINDOWS\system32\msoert2.dll [105984]
O44 - LFC:[MD5.71ECBA795A063026843F70F31EF02689] - 19/03/2015 - 16:39:37 ---A- . (.Intel Corporation - ISR Debug 32-bit Engine.) -- C:\WINDOWS\system32\isrdbg32.dll [32768]
O44 - LFC:[MD5.B8D4B3C6E0E9746EF93CC988EB00F9E8] - 19/03/2015 - 16:39:37 ---A- . (.Microsoft Corporation - Application Sharing Display Driver.) -- C:\WINDOWS\system32\mnmdd.dll [34560]
O44 - LFC:[MD5.83CFBB693483E664CC12C8ED132BBDEA] - 19/03/2015 - 16:39:37 ---A- . (.Microsoft Corporation - Bibliothèque NMMKCERT.) -- C:\WINDOWS\system32\nmmkcert.dll [28672]
O44 - LFC:[MD5.681891FBFFB4F535F03C440D433B76C6] - 19/03/2015 - 16:39:37 ---A- . (.Microsoft Corporation - Dll de l'utilitaire de conférence.) -- C:\WINDOWS\system32\msconf.dll [69632]
O44 - LFC:[MD5.D3A2870CD96CDA7BCFF3DC54F64087AD] - 19/03/2015 - 16:39:37 ---A- . (.Microsoft Corporation - Partage de Bureau à distance NetMeeting.) -- C:\WINDOWS\system32\mnmsrvc.exe [32768]
O44 - LFC:[MD5.B4B61B3F41002E68D01A371C671B5F78] - 19/03/2015 - 16:39:37 ---A- . (.Microsoft Corporation - Pilote ICM Microsoft H.261.) -- C:\WINDOWS\system32\msh261.drv [188416]
O44 - LFC:[MD5.987A84CD549E6EFC653A9B4B3E2B24B2] - 19/03/2015 - 16:39:37 ---A- . (.Microsoft Corporation - User Location Services Component Module.) -- C:\WINDOWS\system32\ils.dll [81920]
O44 - LFC:[MD5.1B005DC4BC9B22CC1EF40D62C9F4F7BD] - 19/03/2015 - 16:39:38 ---A- . (.Microsoft Corporation - Bibliothèque d'opérations Restauration du s.) -- C:\WINDOWS\system32\srrstr.dll [241664]
O44 - LFC:[MD5.C8047DF7413568E549932BD725EBC65B] - 19/03/2015 - 16:39:38 ---A- . (.Microsoft Corporation - Dll du client SR.) -- C:\WINDOWS\system32\srclient.dll [67584]
O44 - LFC:[MD5.39626E6DC1FB39434EC40C42722B660A] - 19/03/2015 - 16:39:38 ---A- . (.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) -- C:\WINDOWS\system32\Drivers\sr.sys [73600]
O44 - LFC:[MD5.6ED29124A1C83BD0CF6B26BD01CA6F6F] - 19/03/2015 - 16:39:38 ---A- . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520]
O44 - LFC:[MD5.64A3919D5606CE42660247DB1CB9CB88] - 19/03/2015 - 16:39:39 ---A- . (.Microsoft Corporation - Filter Library.) -- C:\WINDOWS\system32\fltlib.dll [16896]
O44 - LFC:[MD5.62173E93A7AFF8B44158BE01E34C0FF7] - 19/03/2015 - 16:39:39 ---A- . (.Microsoft Corporation - Filter Manager Control Program.) -- C:\WINDOWS\system32\fltMc.exe [23040]
O44 - LFC:[MD5.B2CF4B0786F8212CB92ED2B50C6DB6B0] - 19/03/2015 - 16:39:39 ---A- . (.Microsoft Corporation - Microsoft Filesystem Filter Manager.) -- C:\WINDOWS\system32\Drivers\fltMgr.sys [129792]
O44 - LFC:[MD5.FF84939E5219562530EB627CC726E65C] - 19/03/2015 - 16:39:42 ---A- . (.Microsoft Corporation - Assistance à distance Microsoft.) -- C:\WINDOWS\system32\racpldlg.dll [43520]
O44 - LFC:[MD5.068E36F77A5BC2067927C17FF8A7B63E] - 19/03/2015 - 16:39:42 ---A- . (.Microsoft Corporation - Contrôles Fichier/Ouvrir et Enregistrer de.) -- C:\WINDOWS\system32\safrcdlg.dll [43520]
O44 - LFC:[MD5.E84A20DABF81C9A5D08E1DE8C49B0005] - 19/03/2015 - 16:39:42 ---A- . (.Microsoft Corporation - Gestionnaire du bureau du centre d'Aide Mic.) -- C:\WINDOWS\system32\safrdm.dll [29696]
O44 - LFC:[MD5.B94996F7C1B88942D6F95EFD93C236AA] - 19/03/2015 - 16:39:42 ---A- . (.Microsoft Corporation - Microsoft Help Center Session Resolver.) -- C:\WINDOWS\system32\safrslv.dll [45568]
O44 - LFC:[MD5.3D59806FB53B402C0583D35F96470D2F] - 19/03/2015 - 16:40:04 ---A- . (.Microsoft Corporation - API du client Windows Update.) -- C:\WINDOWS\system32\wuapi.dll [432640]
O44 - LFC:[MD5.92A7AA8BBD4DDA38B012EDB223420FD4] - 19/03/2015 - 16:40:04 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service 2.0.) -- C:\WINDOWS\system32\bitsprx3.dll [7168]
O44 - LFC:[MD5.5C5D4A7893B3A0FD9AEBEAED1E45E3B2] - 19/03/2015 - 16:40:04 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service 2.5.) -- C:\WINDOWS\system32\bitsprx4.dll [7168]
O44 - LFC:[MD5.6B219C1EC5A6521332A41E7FA1DB07E9] - 19/03/2015 - 16:40:04 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service Pro.) -- C:\WINDOWS\system32\bitsprx2.dll [8192]
O44 - LFC:[MD5.8E012E8D84724CB521E3BE09741980FB] - 19/03/2015 - 16:40:04 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service Pro.) -- C:\WINDOWS\system32\qmgrprxy.dll [18944]
O44 - LFC:[MD5.BAA0B6E647C1AD593E9BAE5CC31BCFFB] - 19/03/2015 - 16:40:04 ---A- . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\system32\qmgr.dll [409088]
O44 - LFC:[MD5.20D03021936D649E6EDB9A8A26504CCD] - 19/03/2015 - 16:40:05 ---A- . (.Microsoft Corporation - Client Mise à jour automatique Windows Upda.) -- C:\WINDOWS\system32\wuauclt1.exe [168960]
O44 - LFC:[MD5.7E3DEFE771CB451B0FF630BFA435417E] - 19/03/2015 - 16:40:05 ---A- . (.Microsoft Corporation - Mises à jour automatiques.) -- C:\WINDOWS\system32\wuauclt.exe [112640]
O44 - LFC:[MD5.367B5FB01100BEB42F160FF399A57C0D] - 19/03/2015 - 16:40:05 ---A- . (.Microsoft Corporation - Moteur de mises à jour automatique Windows.) -- C:\WINDOWS\system32\wuaueng1.dll [184320]
O44 - LFC:[MD5.1F092E10753022CCC6D2FC2D1941E96E] - 19/03/2015 - 16:40:05 ---A- . (.Microsoft Corporation - Panneau de configuration Mises à jour autom.) -- C:\WINDOWS\system32\wuaucpl.cpl [163840]
O44 - LFC:[MD5.29F31C7DF413439C333DBAE82FE979D1] - 19/03/2015 - 16:40:05 ---A- . (.Microsoft Corporation - Plug-in Interface utilisateur du client Mis.) -- C:\WINDOWS\system32\wucltui.dll [114176]
O44 - LFC:[MD5.38ED85E9C93B9983C2065AA2266B6E1F] - 19/03/2015 - 16:40:05 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Engine.) -- C:\WINDOWS\system32\wuaueng.dll [1135616]
O44 - LFC:[MD5.75D6C5C3D2C93B1F9931E5DFB693AE2A] - 19/03/2015 - 16:40:05 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O44 - LFC:[MD5.C19B5764E05862AD82E4D2AB441FF34F] - 19/03/2015 - 16:40:05 ---A- . (.Microsoft Corporation - Windows Update Web Control.) -- C:\WINDOWS\system32\wuweb.dll [120320]
O44 - LFC:[MD5.596A1743CFB1B5E008275E5552295B83] - 19/03/2015 - 16:40:05 ---A- . (.Microsoft Corporation - Windows Update client proxy stub.) -- C:\WINDOWS\system32\wups.dll [32256]
O44 - LFC:[MD5.13D8419CD73E6D14FE093A0066E36F18] - 19/03/2015 - 16:40:13 ---A- . (.Microsoft Corporation - Internet Connection Wizard.) -- C:\WINDOWS\system32\icfgnt5.dll [16384]
O44 - LFC:[MD5.D1560FE3CB700340235BECDE227C271E] - 19/03/2015 - 16:40:16 ---A- . (.Microsoft Corporation - Ressources du gestionnaire de comptes Micro.) -- C:\WINDOWS\system32\acctres.dll [72192]
O44 - LFC:[MD5.34A92A72CC0E0653828344DB5378B1E0] - 19/03/2015 - 16:40:17 ---A- . (.Microsoft Corporation - Codec Microsoft G.723.1 pour MSACM.) -- C:\WINDOWS\system32\msg723.acm [118784]
O44 - LFC:[MD5.8014838B3025DDFF6C476FCC7C18CD82] - 19/03/2015 - 16:40:17 ---A- . (.Microsoft Corporation - DLL d'enregistrement d'événements NetMeetin.) -- C:\WINDOWS\system32\nmevtmsg.dll [12288]
O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 19/03/2015 - 16:40:23 ---A- . (...) -- C:\WINDOWS\desktop.ini [2]
O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 19/03/2015 - 16:40:23 ---A- . (...) -- C:\WINDOWS\system32\desktop.ini [2]
O44 - LFC:[MD5.CE45BE933AA8CF23B3469FE761C27A32] - 19/03/2015 - 16:40:23 -SH-- . (...) -- C:\WINDOWS\winnt.bmp [49102]
O44 - LFC:[MD5.CE45BE933AA8CF23B3469FE761C27A32] - 19/03/2015 - 16:40:23 -SH-- . (...) -- C:\WINDOWS\winnt256.bmp [49102]
O44 - LFC:[MD5.D935270C569D1E4F224F861AB0559E1E] - 19/03/2015 - 16:40:25 ---A- . (.Microsoft Corporation - Async Trace DLL.) -- C:\WINDOWS\system32\atrace.dll [11264]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 19/03/2015 - 16:41:18 R-HA- . (...) -- C:\WINDOWS\WindowsShell.Manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 19/03/2015 - 16:41:18 R-HA- . (...) -- C:\WINDOWS\system32\cdplayer.exe.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 19/03/2015 - 16:41:18 R-HA- . (...) -- C:\WINDOWS\system32\ncpa.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 19/03/2015 - 16:41:18 R-HA- . (...) -- C:\WINDOWS\system32\nwc.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 19/03/2015 - 16:41:18 R-HA- . (...) -- C:\WINDOWS\system32\sapi.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 19/03/2015 - 16:41:18 R-HA- . (...) -- C:\WINDOWS\system32\wuaucpl.cpl.manifest [749]
O44 - LFC:[MD5.5D76C3FB736514E1D7C88791E7322784] - 19/03/2015 - 16:41:27 R-HA- . (...) -- C:\WINDOWS\system32\WindowsLogon.manifest [488]
O44 - LFC:[MD5.5D76C3FB736514E1D7C88791E7322784] - 19/03/2015 - 16:41:27 R-HA- . (...) -- C:\WINDOWS\system32\logonui.exe.manifest [488]
O44 - LFC:[MD5.2B9C717D21A1331BA3731886E3EE87BB] - 19/03/2015 - 16:42:52 ---A- . (...) -- C:\WINDOWS\ODBCINST.INI [4205]
O44 - LFC:[MD5.662BD5F1A693F710F066BAF92FED394A] - 19/03/2015 - 16:42:52 ---A- . (.Microsoft Corporation - Extended MAPI 1.0 for Windows NT.) -- C:\WINDOWS\system32\mapi32.dll [112128]
O44 - LFC:[MD5.DC17DD0189B0C36D863B4DD0A036C10F] - 19/03/2015 - 16:43:17 ---A- . (...) -- C:\WINDOWS\WMSysPr9.prx [316640]
O44 - LFC:[MD5.6D6F4B1886E91EB37ABCCAD19C561EE0] - 19/03/2015 - 16:43:17 ---A- . (...) -- C:\WINDOWS\system32\amcompat.tlb [16832]
O44 - LFC:[MD5.A32B14BE5EDAE794FCE1A9E970827509] - 19/03/2015 - 16:43:17 ---A- . (...) -- C:\WINDOWS\system32\nscompat.tlb [23392]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/03/2015 - 16:43:24 ---A- . (...) -- C:\AUTOEXEC.BAT [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/03/2015 - 16:43:24 ---A- . (...) -- C:\CONFIG.SYS [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/03/2015 - 16:43:24 ---A- . (...) -- C:\WINDOWS\control.ini [0]
O44 - LFC:[MD5.486E0B1BC94C346E5C352C295388C803] - 19/03/2015 - 16:43:24 ---A- . (...) -- C:\WINDOWS\system32\CONFIG.NT [3072]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/03/2015 - 16:43:24 RSHA- . (...) -- C:\IO.SYS [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/03/2015 - 16:43:24 RSHA- . (...) -- C:\MSDOS.SYS [0]
O44 - LFC:[MD5.3CEF7C9B22579934AE46B5DB8D768115] - 19/03/2015 - 16:46:16 ---A- . (...) -- C:\WINDOWS\system32\$winnt$.inf [261]
O44 - LFC:[MD5.2EECEDFA08FE6138D7B993AED59F5284] - 19/03/2015 - 16:47:19 ---A- . (...) -- C:\WINDOWS\REGLOCS.OLD [8192]
O44 - LFC:[MD5.2B45DA553E87ED253E7079A35EADF5F9] - 19/03/2015 - 16:49:22 ---A- . (...) -- C:\WINDOWS\OEWABLog.txt [833]
O44 - LFC:[MD5.CA638B3CB26F5A95A86838739B303612] - 19/03/2015 - 16:49:39 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [775210]
O44 - LFC:[MD5.2354242A399D7A664DEA02267DA8B28D] - 19/03/2015 - 16:49:39 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [39992]
O44 - LFC:[MD5.BB94698046B45C85BBB55D4CEBB4D646] - 19/03/2015 - 16:49:39 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [48616]
O44 - LFC:[MD5.AA5085F5A12D751F56178245D4EBB999] - 19/03/2015 - 16:49:39 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [311604]
O44 - LFC:[MD5.EFEF33E9A18DC5F38EDAF25BEAE5AE99] - 19/03/2015 - 16:49:39 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [367658]
O44 - LFC:[MD5.DE91D0D73C3E61E6826D98FAC2FAC729] - 19/03/2015 - 16:52:32 ---A- . (...) -- C:\WINDOWS\system32\Drivers\ASUSHWIO.SYS [5824]
O44 - LFC:[MD5.BF96D9F47B477269AFC967C63A87EE46] - 19/03/2015 - 16:55:20 ---A- . (.Intel Corporation - Component GHAL Driver.) -- C:\WINDOWS\system32\ialmdev5.dll [151259]
O44 - LFC:[MD5.FB04F5F072C367AEF9205D7270734394] - 19/03/2015 - 16:55:20 ---A- . (.Intel Corporation - Controller Hub for Intel Graphics Driver.) -- C:\WINDOWS\system32\ialmdnt5.dll [99388]
O44 - LFC:[MD5.08D7531C31B639BD4DDC9B9413CBF4D3] - 19/03/2015 - 16:55:20 ---A- . (.Intel Corporation - Controller Hub for Intel Graphics Driver.) -- C:\WINDOWS\system32\ialmrnt5.dll [37951]
O44 - LFC:[MD5.D983623A9151A00474CC3295DBF88DD7] - 19/03/2015 - 16:55:20 ---A- . (.Intel Corporation - DirectDraw(R) Driver for Intel(R) Graphics.) -- C:\WINDOWS\system32\ialmdd5.dll [748091]
O44 - LFC:[MD5.168657FDC18D439CD1F5A18587B59169] - 19/03/2015 - 16:55:20 ---A- . (.Intel Corporation - hccutils Module.) -- C:\WINDOWS\system32\hccutils.dll [118784]
O44 - LFC:[MD5.BCFCF31A18A549C940C9555F8C659EA4] - 19/03/2015 - 16:55:20 ---A- . (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.dll [344064]
O44 - LFC:[MD5.16F8DE7A7F9023AAC04DEC6A8A264441] - 19/03/2015 - 16:55:20 R--A- . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\system32\Drivers\ialmnt5.sys [724221]
O44 - LFC:[MD5.439E4FBF4CAF4592D5C244F5825B9BF8] - 19/03/2015 - 16:55:21 ---A- . (.Intel Corporation - igfxdev Module.) -- C:\WINDOWS\system32\igfxdev.dll [139264]
O44 - LFC:[MD5.238BABA9ACC0370EA0C4ABB25DCDD736] - 19/03/2015 - 16:55:21 R--A- . (.Intel Corporation - igfxcfg Module.) -- C:\WINDOWS\system32\igfxcfg.exe [487424]
O44 - LFC:[MD5.52CCD435278DBB45DACB353AD90A9C40] - 19/03/2015 - 16:55:21 R--A- . (.Intel Corporation - igfxcpl Module.) -- C:\WINDOWS\system32\igfxcpl.cpl [94208]
O44 - LFC:[MD5.4685F66BF01D9E1446001C8031653EC6] - 19/03/2015 - 16:55:21 R--A- . (.Intel Corporation - igfxdiag Module.) -- C:\WINDOWS\system32\igfxdgps.dll [45056]
O44 - LFC:[MD5.04E080C56499946C4741C9800B7F9DB8] - 19/03/2015 - 16:55:21 R--A- . (.Intel Corporation - igfxdiag Module.) -- C:\WINDOWS\system32\igfxdiag.exe [151552]
O44 - LFC:[MD5.88324037E971185683247DFBC3344D9D] - 19/03/2015 - 16:55:21 R--A- . (.Intel Corporation - igfxeud Module.) -- C:\WINDOWS\system32\igfxeud.dll [221184]
O44 - LFC:[MD5.D71E203A5DE8661CABD972DCC296CABA] - 19/03/2015 - 16:55:21 R--A- . (.Intel Corporation - igfxpph Module.) -- C:\WINDOWS\system32\igfxpph.dll [225280]
O44 - LFC:[MD5.803B6EDD985AC707F0DF0727D93D9117] - 19/03/2015 - 16:55:22 ---A- . (.Intel Corporation - igfxress Module.) -- C:\WINDOWS\system32\igfxress.dll [1097728]
O44 - LFC:[MD5.15009FE83A82FB7225CD94480038379F] - 19/03/2015 - 16:55:22 R--A- . (...) -- C:\WINDOWS\system32\igfxhenu.lhp [56937]
O44 - LFC:[MD5.9F87EE428CF6FF75ABA3ABDDE12C9083] - 19/03/2015 - 16:55:22 R--A- . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [118784]
O44 - LFC:[MD5.1B3DEE1D33279F942944D12D539FDEA3] - 19/03/2015 - 16:55:22 R--A- . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe [155648]
O44 - LFC:[MD5.958E0C25A7ACCE9BAF654362F2AC38EE] - 19/03/2015 - 16:55:22 R--A- . (.Intel Corporation - igfxdo Module.) -- C:\WINDOWS\system32\igfxdo.dll [86016]
O44 - LFC:[MD5.1096CAC2C0808BEEC87F17C54BD1567C] - 19/03/2015 - 16:55:22 R--A- . (.Intel Corporation - igfxhk Module.) -- C:\WINDOWS\system32\igfxhk.dll [126976]
O44 - LFC:[MD5.A5724F85DBBF2708175C054202EB8E14] - 19/03/2015 - 16:55:22 R--A- . (.Intel Corporation - igfxzoom Module.) -- C:\WINDOWS\system32\igfxzoom.exe [114688]
O44 - LFC:[MD5.25510416CB9875F458C0FEE3543E4E55] - 19/03/2015 - 16:55:22 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrenu.lrc [159744]
O44 - LFC:[MD5.B2F8FA3FE3FA54FD6BF90BC4254E49F4] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhara.lhp [59753]
O44 - LFC:[MD5.F90E30C7A488EE733EB77D0404EDF9E9] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxharb.lhp [59861]
O44 - LFC:[MD5.B0557128AF0A70841AEEA7D0B9D2F3BD] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhchs.lhp [57430]
O44 - LFC:[MD5.5C7B4F1CB0EC6E994FDE28A70C0C058A] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhcht.lhp [58394]
O44 - LFC:[MD5.3C485F8FC91272F9EB4A6D7DBEED5BEE] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhcsy.lhp [59760]
O44 - LFC:[MD5.A821567074850734D402C317D2B91B69] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhdan.lhp [60476]
O44 - LFC:[MD5.27DEC42F363AFBD6802B50B01EF4DEC9] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhdeu.lhp [62509]
O44 - LFC:[MD5.F0BC434DF3B91AD8271A2994894BB782] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhell.lhp [60547]
O44 - LFC:[MD5.81A216FDADF9555D209D337DB0480FC7] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxheng.lhp [57559]
O44 - LFC:[MD5.29D4ECFC93AEAFB8E1FBC20E4FB53568] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhesp.lhp [60848]
O44 - LFC:[MD5.1ADFDFC622200E4A785A5144B6A08DAC] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhfin.lhp [61799]
O44 - LFC:[MD5.DFEE3EEB96886DF8819E74526A991EB4] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhfra.lhp [61511]
O44 - LFC:[MD5.58645798C600ACAEE286A8D7629CCC77] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhfrc.lhp [61950]
O44 - LFC:[MD5.3E7CCF7002957190E7C5EAD9DE104DFE] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhheb.lhp [59064]
O44 - LFC:[MD5.D7B9DC49D4E4A4B84868A4636FBA0296] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhhun.lhp [67380]
O44 - LFC:[MD5.87F5689857E0A1F035FD7541E095E91C] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhita.lhp [59095]
O44 - LFC:[MD5.4C2C5A15D41D83ED4AF497F4FD55B6E8] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhjpn.lhp [60758]
O44 - LFC:[MD5.58F6EE239EEB9C2EA23FA73BC938C91C] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhkor.lhp [65087]
O44 - LFC:[MD5.2A628AAA7F23B14E6BA936A666B523F7] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhnld.lhp [59448]
O44 - LFC:[MD5.2A0ADCE57B918D29AD3A262BA9FF82D3] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhnor.lhp [59350]
O44 - LFC:[MD5.F7C248CAAAE92AA43F6E1CEA4A9DABEA] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhplk.lhp [62815]
O44 - LFC:[MD5.A67D10A24B91CD92304F90F5D23581BE] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhptb.lhp [60436]
O44 - LFC:[MD5.37CB10C38046937AE83F8EAA2F2D704C] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhptg.lhp [61388]
O44 - LFC:[MD5.60C83B0E4D2072B63AC712A794156261] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhrus.lhp [60216]
O44 - LFC:[MD5.0B65600D9A00579E528CBDB6282A3FB7] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhsve.lhp [61984]
O44 - LFC:[MD5.03DE33E91B466E5B17506718524756E0] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhtha.lhp [61869]
O44 - LFC:[MD5.7E7974827439C92EF47A78F3093B5E76] - 19/03/2015 - 16:55:23 R--A- . (...) -- C:\WINDOWS\system32\igfxhtrk.lhp [63938]
O44 - LFC:[MD5.9E26BA9496CA563BFBF75EEC28F85EF5] - 19/03/2015 - 16:55:24 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrara.lrc [159744]
O44 - LFC:[MD5.8A2B7E417AC748E52D19A21BE8BB098B] - 19/03/2015 - 16:55:24 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrarb.lrc [159744]
O44 - LFC:[MD5.E327888A2ECB95588664DA3416D18871] - 19/03/2015 - 16:55:24 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrchs.lrc [159744]
O44 - LFC:[MD5.9C3B70ECAA7595472ADAF76C45765414] - 19/03/2015 - 16:55:24 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrcht.lrc [159744]
O44 - LFC:[MD5.1816B319B2A16937CC16081F03840DC3] - 19/03/2015 - 16:55:24 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrdan.lrc [163840]
O44 - LFC:[MD5.70FFBBFB6444839296F4E1ADD6BBCE28] - 19/03/2015 - 16:55:24 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrdeu.lrc [163840]
O44 - LFC:[MD5.B20DAA74A9A8D03A0959026C5AD41CCF] - 19/03/2015 - 16:55:24 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxreng.lrc [159744]
O44 - LFC:[MD5.F78DADA1FC2F5DE61F65CA4BB5A9F33F] - 19/03/2015 - 16:55:24 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxresp.lrc [172032]
O44 - LFC:[MD5.F097685303B43FC8E83172D60521B6C3] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrfin.lrc [163840]
O44 - LFC:[MD5.CB0DC0E639F198FD761546D3AB86AEE2] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrfra.lrc [167936]
O44 - LFC:[MD5.0981544CB062F903700E38E1CDD1311E] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrfrc.lrc [167936]
O44 - LFC:[MD5.CDF437F8CA1B0186E0C6CE91FC60D055] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrheb.lrc [159744]
O44 - LFC:[MD5.1A7BDFF3A24E54E6A3D65DDF091D952C] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrita.lrc [167936]
O44 - LFC:[MD5.13309D685003D3D62AA0B74180BC71CF] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrjpn.lrc [159744]
O44 - LFC:[MD5.A2599A6622BAF3FCCB2ADDED3524BF0E] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrkor.lrc [159744]
O44 - LFC:[MD5.6F59B19C7708219AFC2606BA91AB9975] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrnld.lrc [167936]
O44 - LFC:[MD5.3AC4B8729720C82B82451D52C3908DBE] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrnor.lrc [163840]
O44 - LFC:[MD5.4A857A95B9EF35D59F2A7E38CD538373] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrplk.lrc [167936]
O44 - LFC:[MD5.A984E81118085067A39DC6A540BF0BC0] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrptb.lrc [167936]
O44 - LFC:[MD5.84680899526203FD3A6EFC6653A0C731] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrptg.lrc [167936]
O44 - LFC:[MD5.26EAF79D13FA47A5D4B7B682CB5CD623] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrrus.lrc [167936]
O44 - LFC:[MD5.FD12CBE55835218D24EE6E087C21DEFB] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrsve.lrc [163840]
O44 - LFC:[MD5.AFDC4E5AD700474FE8E63F7267287BEC] - 19/03/2015 - 16:55:25 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrtha.lrc [163840]
O44 - LFC:[MD5.1E8BE50F5BA3A3F479D7F45876955D05] - 19/03/2015 - 16:55:26 R--A- . (.Intel Corporation - OpenGL(R) Driver for Intel(R) Graphics Acce.) -- C:\WINDOWS\system32\ialmgicd.dll [2285568]
O44 - LFC:[MD5.E5EA3D9593F020F21C15594A079198CA] - 19/03/2015 - 16:55:26 R--A- . (.Intel Corporation - Uninstall Utility for Intel(R) Graphics Tec.) -- C:\WINDOWS\system32\ialmrem.dll [49152]
O44 - LFC:[MD5.C87D0E3CD8A2581A0C6D538A60F5DF2F] - 19/03/2015 - 16:55:26 R--A- . (.Intel Corporation - igfxext Module.) -- C:\WINDOWS\system32\igfxexps.dll [36864]
O44 - LFC:[MD5.5597399DECCC0A9138C2993C277B8629] - 19/03/2015 - 16:55:26 R--A- . (.Intel Corporation - igfxext Module.) -- C:\WINDOWS\system32\igfxext.exe [106496]
O44 - LFC:[MD5.53DEC30085E2F8E781AA61E46A702953] - 19/03/2015 - 16:55:26 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrcsy.lrc [163840]
O44 - LFC:[MD5.47835ABEB7B97C8D51B37C67DFADCD87] - 19/03/2015 - 16:55:26 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrell.lrc [172032]
O44 - LFC:[MD5.1B4919F7D20AF48FD12350420B951FC7] - 19/03/2015 - 16:55:26 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrhun.lrc [167936]
O44 - LFC:[MD5.E3A1385BE4096028FF2B794E1B401087] - 19/03/2015 - 16:55:26 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxrtrk.lrc [163840]
O44 - LFC:[MD5.D55F8FA3042A69D60C433A42F5DED8ED] - 19/03/2015 - 16:55:27 R--A- . (.Intel Corporation - OpenGL(R) Device Driver for Intel(R) Graphi.) -- C:\WINDOWS\system32\ialmgdev.dll [495616]
O44 - LFC:[MD5.758AFE624CEE6E90056D7B1CEDC7F756] - 19/03/2015 - 16:55:28 R--A- . (.Intel Corporation - CoInstaller: Almador Second Function, AIM 3.) -- C:\WINDOWS\system32\iAlmCoIn_v3865.dll [61440]
O44 - LFC:[MD5.83A5B21630DD5FC39A7AA7AD21F702FB] - 19/03/2015 - 16:56:17 ----- . (.Realtek Semiconductor Corp. - Tool for Driver Update.) -- C:\WINDOWS\alcupd.exe [208896]
O44 - LFC:[MD5.44EBFF020ACE3FE4FB52FB9AF64233C6] - 19/03/2015 - 16:56:17 ----- . (.Realtek Semiconductor Corp. - Tool for Removing Drivers.) -- C:\WINDOWS\alcrmv.exe [139264]
O44 - LFC:[MD5.C0E680F3EF3CBCB877F1AB8D4CAD1723] - 19/03/2015 - 16:56:17 ---A- . (.Realtek Semiconductor Corp. - Realtek AC97 Audio Control Panel.) -- C:\WINDOWS\system32\ALSNDMGR.CPL [17592320]
O44 - LFC:[MD5.C99E22EFE74C8B3EFF93E227472FE247] - 19/03/2015 - 16:56:25 ---A- . (...) -- C:\WINDOWS\system32\ALSNDMGR.WAV [141016]
O44 - LFC:[MD5.DFBE812DF41A849CD1145027014F522D] - 19/03/2015 - 16:56:25 ---A- . (.Realtek Semiconductor Corp. - Realtek Audio Control Panel.) -- C:\WINDOWS\system32\RTLCPL.EXE [9294336]
O44 - LFC:[MD5.D08E5A736654EEADA712E12C0375751B] - 19/03/2015 - 16:56:29 ----- . (...) -- C:\WINDOWS\system32\ChCfg.exe [40960]
O44 - LFC:[MD5.118775F60B07291B63652762B1009216] - 19/03/2015 - 16:56:29 ---A- . (.Pas de propriétaire - RtlCPAPI Module.) -- C:\WINDOWS\system32\RTLCPAPI.dll [156672]
O44 - LFC:[MD5.9A8AA4DF3999BD7C60B90A4E799B1CD0] - 19/03/2015 - 16:56:29 ---A- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\system32\Drivers\ALCXWDM.SYS [2310272]
O44 - LFC:[MD5.63657C6E0DF49BBAABF6F5800BCB5479] - 19/03/2015 - 16:56:29 ---A- . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\SOUNDMAN.EXE [77824]
O44 - LFC:[MD5.B8252B042AB6DCE281D079253A404A38] - 19/03/2015 - 16:56:34 ----- . (...) -- C:\WINDOWS\avrack.ini [164]
O44 - LFC:[MD5.08843C474DC0DD93C16C2DA539333961] - 19/03/2015 - 16:57:51 ---A- . (...) -- C:\WINDOWS\ydi.log [18696]
O44 - LFC:[MD5.3873C9BD15CC6B7B88218414B3E67DDA] - 19/03/2015 - 16:58:57 ---A- . (...) -- C:\WINDOWS\KB822603.log [691]
O44 - LFC:[MD5.7B948E3657BEA62E437BC46CA6EF6012] - 19/03/2015 - 17:18:57 ---A- . (.ALWIL Software - avast! Filtering NDIS driver.) -- C:\WINDOWS\system32\Drivers\aswNdis.sys [12112]
O44 - LFC:[MD5.FB6893167C18D9C6372BDFE9FB02B4C5] - 19/03/2015 - 17:18:57 ---A- . (.Avast Software s.r.o. - avast! Filtering NDIS driver.) -- C:\WINDOWS\system32\Drivers\aswNdis2.sys [253728]
O44 - LFC:[MD5.75A8F8A312FBB4C3D7003BACAB2BFEB1] - 19/03/2015 - 17:19:05 ---A- . (.Avast Software s.r.o. - avast! Keyboard Filter Driver.) -- C:\WINDOWS\system32\Drivers\aswKbd.sys [26096]
O44 - LFC:[MD5.C3A047ABB97AEB805E07A30EFDACD0B9] - 19/03/2015 - 17:19:05 ---A- . (.Avast Software s.r.o. - avast! Virtualization Driver.) -- C:\WINDOWS\system32\Drivers\aswSnx.sys [788272]
O44 - LFC:[MD5.C4B680AA8A352611D0C70E680A87E367] - 19/03/2015 - 17:19:11 ---A- . (.Avast Software s.r.o. - avast! Screen Saver stub.) -- C:\WINDOWS\avastSS.scr [43112]
O44 - LFC:[MD5.46E863AB492069BD049CA71BC21C0474] - 19/03/2015 - 17:19:11 ---A- . (.Avast Software s.r.o. - avast! start-up scanner.) -- C:\WINDOWS\system32\aswBoot.exe [291312]
O44 - LFC:[MD5.AA69ED00EE72BFEE003C864DCFBC5038] - 19/03/2015 - 17:19:20 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswHwid.sys [24144]
O44 - LFC:[MD5.6FB92505DAA300DA62A1C374B949B574] - 19/03/2015 - 17:19:20 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904]
O44 - LFC:[MD5.2EBD0ACCAFC67088D4B9EBDF7428F6AD] - 19/03/2015 - 17:19:20 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswVmm.sys [206976]
O44 - LFC:[MD5.6FDAE6458E0FAC369005EEFE55E1190A] - 19/03/2015 - 17:19:20 ---A- . (.Avast Software s.r.o. - avast! File System Minifilter for Windows 2.) -- C:\WINDOWS\system32\Drivers\aswMonFlt.sys [73440]
O44 - LFC:[MD5.279BE64DC533AB4E3F70279BDC432B4C] - 19/03/2015 - 17:19:20 ---A- . (.Avast Software s.r.o. - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\Drivers\aswTdi.sys [57888]
O44 - LFC:[MD5.06ADE0B8900AA63322172011F49BAAA7] - 19/03/2015 - 17:19:20 ---A- . (.Avast Software s.r.o. - avast! TDI Redirect Driver.) -- C:\WINDOWS\system32\Drivers\aswRdr.sys [55200]
O44 - LFC:[MD5.E5F230B70F1A9764EB7AC4A76445F79F] - 19/03/2015 - 17:19:20 ---A- . (.Avast Software s.r.o. - avast! self protection module.) -- C:\WINDOWS\system32\Drivers\aswSP.sys [427480]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/03/2015 - 17:22:52 ---A- . (...) -- C:\WINDOWS\setuperr.log [0]
O44 - LFC:[MD5.A799EA2E17F8C6747801E37F25FE078F] - 19/03/2015 - 17:23:28 R--A- . (...) -- C:\WINDOWS\SET3.tmp [1246130]
O44 - LFC:[MD5.7DEBF83AF61B07063EF0CEEADD4B4E59] - 19/03/2015 - 17:23:30 R--A- . (...) -- C:\WINDOWS\SET4.tmp [1088840]
O44 - LFC:[MD5.619D9DD12A0BFDB080A86CE19F09CA10] - 19/03/2015 - 17:23:34 R--A- . (...) -- C:\WINDOWS\SET8.tmp [16825]
O44 - LFC:[MD5.F297AF7D5C0A1BE3047345894430DD1D] - 19/03/2015 - 17:23:54 ---A- . (.Microsoft Corporation - Pages de propriétés pour les périphériques.) -- C:\WINDOWS\system32\storprop.dll [76800]
O44 - LFC:[MD5.486E0B1BC94C346E5C352C295388C803] - 19/03/2015 - 17:23:55 ----- . (...) -- C:\WINDOWS\system32\CONFIG.TMP [3072]
O44 - LFC:[MD5.F08DBD8C48A168818A3DFC28929EE6B5] - 19/03/2015 - 17:23:55 ---A- . (...) -- C:\WINDOWS\system32\AUTOEXEC.NT [1896]
O44 - LFC:[MD5.5908A51993B7175271987C07CBE06950] - 19/03/2015 - 17:23:55 ---A- . (.Microsoft Corporation - Battery Class Installer.) -- C:\WINDOWS\system32\batt.dll [8704]
O44 - LFC:[MD5.2DCC5C800F51D487178814CA9EADA181] - 19/03/2015 - 17:23:55 ---A- . (.Microsoft Corporation - Bloc-notes.) -- C:\WINDOWS\NOTEPAD.EXE [70656]
O44 - LFC:[MD5.C93C9FF7B04D772627A3646D89F7BF89] - 19/03/2015 - 17:23:55 ---A- . (.Microsoft Corporation - Infra-Red Bus Enumerator.) -- C:\WINDOWS\system32\Drivers\irenum.sys [11264]
O44 - LFC:[MD5.DA090A1AD995DB0716293E029E6198E5] - 19/03/2015 - 17:23:56 ---A- . (.Microsoft Corporation - Gestionnaire des tâches.) -- C:\WINDOWS\TASKMAN.EXE [15872]
O44 - LFC:[MD5.F899213C79DEE079DCE1EE730D82594F] - 19/03/2015 - 17:23:57 ---A- . (.Equinox Systems Inc. - Co-installeur série multiport Equinox.) -- C:\WINDOWS\system32\EqnClass.Dll [103424]
O44 - LFC:[MD5.1E9B88D340481EDA7A9BF53A949E1F42] - 19/03/2015 - 17:23:58 ---A- . (.Digi International - DGSETUP DLL.) -- C:\WINDOWS\system32\dgsetup.dll [86044]
O44 - LFC:[MD5.7AE4CDB4AD25A08B711ECC5BE12EF3D7] - 19/03/2015 - 17:23:58 ---A- . (.Digi International, Inc. - Digi RealPort® Driver Upgrade.) -- C:\WINDOWS\system32\dgrpsetu.dll [176157]
O44 - LFC:[MD5.A6011889A0F23EA2BFC9CCDEC11DF553] - 19/03/2015 - 17:23:58 ---A- . (.Microsoft Corporation - Co-installateur de classe Infrarouge.) -- C:\WINDOWS\system32\irclass.dll [13312]
O44 - LFC:[MD5.FA511331A48B582A7D584FC2408E8C1A] - 19/03/2015 - 17:23:58 ---A- . (.Perle Systems Ltd. - Specialix MPS NT Upgrade CoInstaller.) -- C:\WINDOWS\system32\spxcoins.dll [24661]
O44 - LFC:[MD5.6CB26848BCDAA361B6EE21264FB362C3] - 19/03/2015 - 17:23:59 ---A- . (...) -- C:\WINDOWS\system32\c_20127.nls [66082]
O44 - LFC:[MD5.6F8A509550FE8C92D07EE0143BF29BA1] - 19/03/2015 - 17:24:00 ---A- . (...) -- C:\WINDOWS\system32\c_10010.nls [66082]
O44 - LFC:[MD5.D2CA471D36A69D17F82D5C1B64FAEE39] - 19/03/2015 - 17:24:00 ---A- . (...) -- C:\WINDOWS\system32\c_10029.nls [66082]
O44 - LFC:[MD5.9CA501D2A8E6909C5B2E8C9274682BF1] - 19/03/2015 - 17:24:00 ---A- . (...) -- C:\WINDOWS\system32\c_10082.nls [66082]
O44 - LFC:[MD5.21E928C8E6ED8EEAB0D1AAEE82ACDD76] - 19/03/2015 - 17:24:00 ---A- . (...) -- C:\WINDOWS\system32\c_852.nls [66594]
O44 - LFC:[MD5.552221E92D6BF55F8358B927F00696C3] - 19/03/2015 - 17:24:00 R--A- . (.Microsoft Corporation - Serbian_Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdycl.dll [6656]
O44 - LFC:[MD5.615DDBB5CBBAE8301C1E7FA95F1E66A3] - 19/03/2015 - 17:24:01 R--A- . (.Microsoft Corporation - Albania Keyboard Layout.) -- C:\WINDOWS\system32\KBDAL.DLL [6656]
O44 - LFC:[MD5.5B46568257EE49714564511D58E0DE53] - 19/03/2015 - 17:24:01 R--A- . (.Microsoft Corporation - Croatian/Slovenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdcr.dll [6656]
O44 - LFC:[MD5.36E68E02AF2206FC4A8C73CAEABE1FB0] - 19/03/2015 - 17:24:01 R--A- . (.Microsoft Corporation - Czech Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz.dll [7168]
O44 - LFC:[MD5.AFA30A44ED11A5F9A059A2767AB6A81A] - 19/03/2015 - 17:24:01 R--A- . (.Microsoft Corporation - Czech_101 Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz1.dll [6656]
O44 - LFC:[MD5.90535C13EB54E1F2C95478F1B99DCCEB] - 19/03/2015 - 17:24:01 R--A- . (.Microsoft Corporation - Czech_Programmer's Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz2.dll [6656]
O44 - LFC:[MD5.F3D1EEC756847C70E65335E8CA1AE64B] - 19/03/2015 - 17:24:01 R--A- . (.Microsoft Corporation - Hungarian 101-key Keyboard Layout.) -- C:\WINDOWS\system32\kbdhu1.dll [5632]
O44 - LFC:[MD5.CF92D95B5CB6649CB9D7E8D7616487A7] - 19/03/2015 - 17:24:01 R--A- . (.Microsoft Corporation - Hungarian Keyboard Layout.) -- C:\WINDOWS\system32\kbdhu.dll [6656]
O44 - LFC:[MD5.D199B05901C2407FC0F87444A24A4F3C] - 19/03/2015 - 17:24:01 R--A- . (.Microsoft Corporation - Polish Keyboard Layout.) -- C:\WINDOWS\system32\kbdpl.dll [6656]
O44 - LFC:[MD5.897663C8606357A8E86E57CDEA8EE219] - 19/03/2015 - 17:24:01 R--A- . (.Microsoft Corporation - Polish Programmer's Keyboard Layout.) -- C:\WINDOWS\system32\kbdpl1.dll [5632]
O44 - LFC:[MD5.C2E62748C875A310A6D5B10498238A68] - 19/03/2015 - 17:24:01 R--A- . (.Microsoft Corporation - Romanian Keyboard Layout.) -- C:\WINDOWS\system32\kbdro.dll [5632]
O44 - LFC:[MD5.DCCE231E5BDF1401AC0F770EE16902AA] - 19/03/2015 - 17:24:01 R--A- . (.Microsoft Corporation - Slovak Keyboard Layout.) -- C:\WINDOWS\system32\kbdsl.dll [6656]
O44 - LFC:[MD5.93033C3EA80FB24B198B24DDECA07D4A] - 19/03/2015 - 17:24:01 R--A- . (.Microsoft Corporation - Slovak(QWERTY) Keyboard Layout.) -- C:\WINDOWS\system32\kbdsl1.dll [6656]
O44 - LFC:[MD5.5D038EEABA8EA438F6B5ABD5E91BC851] - 19/03/2015 - 17:24:02 ---A- . (...) -- C:\WINDOWS\system32\C_28594.NLS [66082]
O44 - LFC:[MD5.3E969213F35127D83DAB48FF1283E8E4] - 19/03/2015 - 17:24:02 ---A- . (...) -- C:\WINDOWS\system32\c_855.nls [66594]
O44 - LFC:[MD5.5CD475CA7B87844DE1E0483B536F9AAE] - 19/03/2015 - 17:24:02 ---A- . (...) -- C:\WINDOWS\system32\c_866.nls [66594]
O44 - LFC:[MD5.BBB6C3346064C6AECEE6AD9F144B1AEA] - 19/03/2015 - 17:24:02 R--A- . (.Microsoft Corporation - Estonia Keyboard Layout.) -- C:\WINDOWS\system32\kbdest.dll [6144]
O44 - LFC:[MD5.C047165ED75FF85DB5A89EFEE3DA1133] - 19/03/2015 - 17:24:02 R--A- . (.Microsoft Corporation - Latvia Keyboard Layout.) -- C:\WINDOWS\system32\kbdlv.dll [6144]
O44 - LFC:[MD5.27D72BCF2B495FCDA073DBA5F189D7A1] - 19/03/2015 - 17:24:02 R--A- . (.Microsoft Corporation - Latvia-QWERTY Keyboard Layout.) -- C:\WINDOWS\system32\kbdlv1.dll [6144]
O44 - LFC:[MD5.F5B3B152A1D2752BC88928EB1E031B7E] - 19/03/2015 - 17:24:02 R--A- . (.Microsoft Corporation - Lithuania Keyboard Layout.) -- C:\WINDOWS\system32\kbdlt.dll [5632]
O44 - LFC:[MD5.AF05A41DBD1B0424B5CB47092152C7F6] - 19/03/2015 - 17:24:02 R--A- . (.Microsoft Corporation - Lithuanian Keyboard Layout.) -- C:\WINDOWS\system32\kbdlt1.dll [5632]
O44 - LFC:[MD5.B537ACFAB9E70F0EF48DB696A08ADC81] - 19/03/2015 - 17:24:03 ---A- . (...) -- C:\WINDOWS\system32\C_28597.NLS [66082]
O44 - LFC:[MD5.0A206B5CACD3CA70D2044DA691304765] - 19/03/2015 - 17:24:03 ---A- . (...) -- C:\WINDOWS\system32\c_10006.nls [66082]
O44 - LFC:[MD5.BAC7072B365F9648CA318154BA7E03EC] - 19/03/2015 - 17:24:03 ---A- . (...) -- C:\WINDOWS\system32\c_737.nls [66594]
O44 - LFC:[MD5.780C444EB16B65E6DE96F794A732DA12] - 19/03/2015 - 17:24:03 ---A- . (...) -- C:\WINDOWS\system32\c_869.nls [66594]
O44 - LFC:[MD5.8BE0D77A873730B4EB1DAB7C6622CD46] - 19/03/2015 - 17:24:03 ---A- . (...) -- C:\WINDOWS\system32\c_875.nls [66082]
O44 - LFC:[MD5.1E81E1F3D5ACB3371CF73C1DE8F800BF] - 19/03/2015 - 17:24:04 R--A- . (.Microsoft Corporation - Greek IBM 220 Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe220.dll [5632]
O44 - LFC:[MD5.D26533FDF72381947F823882BBA4A196] - 19/03/2015 - 17:24:04 R--A- . (.Microsoft Corporation - Greek IBM 220 Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdhela2.dll [6144]
O44 - LFC:[MD5.AC81A176BA35D1D7A5CD53137F3160FE] - 19/03/2015 - 17:24:04 R--A- . (.Microsoft Corporation - Greek IBM 319 Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe319.dll [5632]
O44 - LFC:[MD5.F2312B8A76FD584ACD1D956688BEB6F8] - 19/03/2015 - 17:24:04 R--A- . (.Microsoft Corporation - Greek IBM 319 Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdhela3.dll [6656]
O44 - LFC:[MD5.83C99B438B3D6DBE7B838DA783E173AC] - 19/03/2015 - 17:24:04 R--A- . (.Microsoft Corporation - Greek Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe.dll [5632]
O44 - LFC:[MD5.A93447C87DDB6B1945F1F5F87EAB68DC] - 19/03/2015 - 17:24:04 R--A- . (.Microsoft Corporation - Greek_Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdgkl.dll [6144]
O44 - LFC:[MD5.90CC52E8B52F0EC3A41D14FFBE789324] - 19/03/2015 - 17:24:04 R--A- . (.Microsoft Corporation - Greek_Polytonic Keyboard Layout.) -- C:\WINDOWS\system32\kbdhept.dll [8192]
O44 - LFC:[MD5.E22D1B9AC7854C0A654E4C4232074E49] - 19/03/2015 - 17:24:05 ---A- . (...) -- C:\WINDOWS\system32\C_28595.NLS [66082]
O44 - LFC:[MD5.AF4A866226BD04ACF06135088D75BB63] - 19/03/2015 - 17:24:05 ---A- . (...) -- C:\WINDOWS\system32\c_10007.nls [66082]
O44 - LFC:[MD5.314E85390BEBDAE5D1E11DB2D8CBC6E9] - 19/03/2015 - 17:24:05 ---A- . (...) -- C:\WINDOWS\system32\c_10017.nls [66082]
O44 - LFC:[MD5.A1FA7A83F9D98D84419A8E64286284F4] - 19/03/2015 - 17:24:05 R--A- . (.Microsoft Corporation - Belarusian Keyboard Layout.) -- C:\WINDOWS\system32\kbdblr.dll [5632]
O44 - LFC:[MD5.1DF6E4758611E1328567BFE4D1B28E27] - 19/03/2015 - 17:24:05 R--A- . (.Microsoft Corporation - Bulgarian Keyboard Layout.) -- C:\WINDOWS\system32\kbdbu.dll [5632]
O44 - LFC:[MD5.B6E962B7AC1CB4A78876953D369BE6DD] - 19/03/2015 - 17:24:05 R--A- . (.Microsoft Corporation - Russia(Typewriter) Keyboard Layout.) -- C:\WINDOWS\system32\kbdru1.dll [5632]
O44 - LFC:[MD5.C6F23BC1411E91C179B0635893BB40A1] - 19/03/2015 - 17:24:05 R--A- . (.Microsoft Corporation - Russian Keyboard Layout.) -- C:\WINDOWS\system32\kbdru.dll [5632]
O44 - LFC:[MD5.E5D4673C83271FEEE1ED73E1E281A42B] - 19/03/2015 - 17:24:05 R--A- . (.Microsoft Corporation - Serbian_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdycc.dll [5632]
O44 - LFC:[MD5.3DDE3DC57C54452A313DC20F3019F8E3] - 19/03/2015 - 17:24:05 R--A- . (.Microsoft Corporation - Ukrainian Keyboard Layout.) -- C:\WINDOWS\system32\kbdur.dll [5632]
O44 - LFC:[MD5.0304318F189E3CC4A99FCCCB0A68147F] - 19/03/2015 - 17:24:06 R--A- . (.Microsoft Corporation - Azerbaijan_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdaze.dll [5632]
O44 - LFC:[MD5.95D9106D39AB410A7F7EE513F181F84C] - 19/03/2015 - 17:24:06 R--A- . (.Microsoft Corporation - Kazak_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdkaz.dll [5632]
O44 - LFC:[MD5.1696413C242327A0AF8AF8E5CBD8AE04] - 19/03/2015 - 17:24:06 R--A- . (.Microsoft Corporation - Kyrgyz Keyboard Layout.) -- C:\WINDOWS\system32\kbdkyr.dll [5632]
O44 - LFC:[MD5.6AEDBCEE8C0475B10A5C244A35572737] - 19/03/2015 - 17:24:06 R--A- . (.Microsoft Corporation - Mongolian Keyboard Layout.) -- C:\WINDOWS\system32\kbdmon.dll [5632]
O44 - LFC:[MD5.F2D1EEF5ADCD5995C015AB3CB15C9415] - 19/03/2015 - 17:24:06 R--A- . (.Microsoft Corporation - Tatar_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdtat.dll [5632]
O44 - LFC:[MD5.4F9CFFBF05831BB81833FC64A5329C36] - 19/03/2015 - 17:24:06 R--A- . (.Microsoft Corporation - Uzbek_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbduzb.dll [5632]
O44 - LFC:[MD5.EFFDFF60A38CF648811BBCDD722ECF5E] - 19/03/2015 - 17:24:07 ---A- . (...) -- C:\WINDOWS\system32\c_10081.nls [66082]
O44 - LFC:[MD5.C37A21EE1ADFDC13FC707D97073148ED] - 19/03/2015 - 17:24:07 ---A- . (...) -- C:\WINDOWS\system32\c_28599.nls [66082]
O44 - LFC:[MD5.A8764750B22B528D85A691A52CB21856] - 19/03/2015 - 17:24:07 ---A- . (...) -- C:\WINDOWS\system32\c_857.nls [66594]
O44 - LFC:[MD5.712A218557F99D136735E0545E5AE223] - 19/03/2015 - 17:24:07 R--A- . (.Microsoft Corporation - Azeri-Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdazel.dll [5632]
O44 - LFC:[MD5.188E56B70419D8353B8D4F3E381D9E52] - 19/03/2015 - 17:24:07 R--A- . (.Microsoft Corporation - Turkish F Keyboard Layout.) -- C:\WINDOWS\system32\kbdtuf.dll [6144]
O44 - LFC:[MD5.5D569F2951F878EF01D7723DC08682E9] - 19/03/2015 - 17:24:07 R--A- . (.Microsoft Corporation - Turkish Q Keyboard Layout.) -- C:\WINDOWS\system32\kbdtuq.dll [6144]
O44 - LFC:[MD5.35448F3A71EBBECF8E997FAD3A99327D] - 19/03/2015 - 17:24:09 ---A- . (...) -- C:\WINDOWS\system32\c_28603.nls [66082]
O44 - LFC:[MD5.50674C10CAF8E1688A83483327CD4297] - 19/03/2015 - 17:24:12 ---A- . (...) -- C:\WINDOWS\regopt.log [1470]
O44 - LFC:[MD5.18B1B6FE90BC5CD3F96F47D419CD1E8B] - 19/03/2015 - 17:26:03 ---A- . (.Microsoft Corporation - DLL de l'interface utilisateur USB.) -- C:\WINDOWS\system32\usbui.dll [77312]
O44 - LFC:[MD5.4B6DA2F0A4095857A9E3F3697399D575] - 19/03/2015 - 17:26:20 ---A- . (.Microsoft Corporation - Pilote IDE Intel PCI.) -- C:\WINDOWS\system32\Drivers\intelide.sys [5504]
O44 - LFC:[MD5.80D1B490B60E74E002DC116EC5D41748] - 19/03/2015 - 17:27:30 ---A- . (.Microsoft Corporation - Ndis 1394 Enumerator.) -- C:\WINDOWS\system32\Drivers\enum1394.sys [6400]
O44 - LFC:[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - 19/03/2015 - 17:28:12 ---A- . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
O44 - LFC:[MD5.6CB08593487F5701D2D2254E693EAFCE] - 19/03/2015 - 17:29:39 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Descrambler Filter.) -- C:\WINDOWS\system32\Drivers\drmk.sys [60160]
O44 - LFC:[MD5.E82A496C3961EFC6828B508C310CE98F] - 19/03/2015 - 17:29:39 ---A- . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\WINDOWS\system32\Drivers\portcls.sys [146048]
O44 - LFC:[MD5.E919708DB44ED8543A7C017953148330] - 19/03/2015 - 17:29:39 ---A- . (.Microsoft Corporation - USB Audio Class Driver.) -- C:\WINDOWS\system32\Drivers\USBAUDIO.sys [60032]
O44 - LFC:[MD5.C8B7941F9824E9F4D3D7B9B9BAE14FEE] - 19/03/2015 - 17:29:39 ---A- . (.Microsoft Corporation - User CSA Library.) -- C:\WINDOWS\system32\ksuser.dll [4096]
O44 - LFC:[MD5.CB02AED45257FEB8D3B294DCFC0CE7C7] - 19/03/2015 - 17:29:39 ---A- . (.Microsoft Corporation - WDM Streaming ActiveMovie Proxy.) -- C:\WINDOWS\system32\ksproxy.ax [129536]
O44 - LFC:[MD5.A3B9B4A68BC839CE5A264D5908092261] - 19/03/2015 - 17:29:43 ---A- . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/03/2015 - 17:29:54 ---A- . (...) -- C:\WINDOWS\Sti_Trace.log [0]
O44 - LFC:[MD5.D9F724AA26C010A217C97606B160ED68] - 19/03/2015 - 17:30:04 ---A- . (.Microsoft Corporation - AudStub Driver.) -- C:\WINDOWS\system32\Drivers\audstub.sys [3072]
O44 - LFC:[MD5.8F5FCFF8E8848AFAC920905FBD9D33C8] - 19/03/2015 - 17:30:15 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Audio Descrambler Filt.) -- C:\WINDOWS\system32\Drivers\drmkaud.sys [2944]
O44 - LFC:[MD5.BAD59648BA099DA4A17680B39730CB3D] - 19/03/2015 - 17:30:19 ---A- . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\system32\Drivers\MSPQM.sys [4992]
O44 - LFC:[MD5.6768ACF64B18196494413695F0C3A00F] - 19/03/2015 - 17:30:22 ---A- . (.Microsoft Corporation - MMSYSTEM Wave/Midi API mapper.) -- C:\WINDOWS\system32\Drivers\wdmaud.sys [83072]
O44 - LFC:[MD5.692BCF44383D056AED41B045A323D378] - 19/03/2015 - 17:30:26 ---A- . (.Microsoft Corporation - Kernel Mode Audio Mixer.) -- C:\WINDOWS\system32\Drivers\kmixer.sys [172416]
O44 - LFC:[MD5.8B83F3ED0F1688B4958F77CD6D2BF290] - 19/03/2015 - 17:30:29 ---A- . (.Microsoft Corporation - System Audio WDM Filter.) -- C:\WINDOWS\system32\Drivers\sysaudio.sys [60800]
O44 - LFC:[MD5.325BB26842FC7CCC1FCCE2C457317F3E] - 19/03/2015 - 17:30:32 ---A- . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\system32\Drivers\MSPCLOCK.sys [5376]
O44 - LFC:[MD5.D1575E71568F4D9E14CA56B7B0453BF1] - 19/03/2015 - 17:30:36 ---A- . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\system32\Drivers\MSKSSRV.sys [7552]
O44 - LFC:[MD5.8A208DFCF89792A484E76C40E5F50B45] - 19/03/2015 - 17:30:39 ---A- . (.Microsoft Corporation - Microsoft Kernel DLS Synthesizer.) -- C:\WINDOWS\system32\Drivers\DMusic.sys [52864]
O44 - LFC:[MD5.8CE882BCC6CF8A62F2B2323D95CB3D01] - 19/03/2015 - 17:30:43 ---A- . (.Microsoft Corporation - Microsoft GS Wavetable Synthesizer.) -- C:\WINDOWS\system32\Drivers\swmidi.sys [56576]
O44 - LFC:[MD5.8BED39E3C35D6A489438B8141717A557] - 19/03/2015 - 17:30:46 ---A- . (.Microsoft Corporation - Microsoft Acoustic Echo Canceller.) -- C:\WINDOWS\system32\Drivers\aec.sys [142592]
O44 - LFC:[MD5.AB8B92451ECB048A4D1DE7C3FFCB4A9F] - 19/03/2015 - 17:30:50 ---A- . (.Microsoft Corporation - Microsoft Kernel Audio Splitter.) -- C:\WINDOWS\system32\Drivers\splitter.sys [6272]
O44 - LFC:[MD5.5EA750C15B63EDC54479EECADF21E349] - 19/03/2015 - 17:31:36 ---A- . (...) -- C:\WINDOWS\system32\pid.PNF [5208]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/03/2015 - 17:33:44 ---A- . (...) -- C:\WINDOWS\system32\h323log.txt [0]
O44 - LFC:[MD5.0CAE56748F4459C54C66D18B659EA014] - 19/03/2015 - 17:44:29 ---A- . (...) -- C:\WINDOWS\system32\wpa.bak [13038]
O44 - LFC:[MD5.0CAE56748F4459C54C66D18B659EA014] - 19/03/2015 - 17:44:29 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [13038]
O44 - LFC:[MD5.119E10C35C26B0A3249C60A1B2AB71A1] - 19/03/2015 - 17:44:39 ---A- . (...) -- C:\WINDOWS\setuplog.txt [879577]
O44 - LFC:[MD5.84404081A8A4DF9B664519204CB1CB5A] - 19/03/2015 - 18:28:06 ---A- . (...) -- C:\WINDOWS\epsswt_log.txt [2216]
O44 - LFC:[MD5.40FDF3546B2DD93413C2223169683979] - 19/03/2015 - 18:28:21 ---A- . (...) -- C:\WINDOWS\CDE DX4200EFGIPSD.ini [25]
O44 - LFC:[MD5.D42A37DF6B8C6E9675616A2E6E37645A] - 19/03/2015 - 18:28:59 ---A- . (.SEIKO EPSON CORP. - EPSON WIA Module.) -- C:\WINDOWS\system32\esccmd.dll [22016]
O44 - LFC:[MD5.B05248F01709B5D98816C582A63914CD] - 19/03/2015 - 18:28:59 ---A- . (.SEIKO EPSON CORP. - EPSON WIA Module.) -- C:\WINDOWS\system32\escimgd.dll [46080]
O44 - LFC:[MD5.C2B5108315471DEE086566BF04084BC9] - 19/03/2015 - 18:28:59 ---A- . (.SEIKO EPSON CORP. - EPSON WIA Module.) -- C:\WINDOWS\system32\escwiad.dll [29696]
O44 - LFC:[MD5.283BF4227D017F9B7474BEE09D53F8CD] - 19/03/2015 - 18:29:32 ---A- . (...) -- C:\WINDOWS\EPSMTL32.TXT [31]
O44 - LFC:[MD5.2CBE48B526CD2B7882AA9EF6BB351EF5] - 19/03/2015 - 18:30:09 ---A- . (...) -- C:\WINDOWS\EPSTPLOG.TXT [128481]
O44 - LFC:[MD5.A0B8CF9DEB1184FBDD20784A58FA75D4] - 19/03/2015 - 18:31:41 ---A- . (.Microsoft Corporation - USB Scanner Driver.) -- C:\WINDOWS\system32\Drivers\usbscan.sys [15104]
O44 - LFC:[MD5.A717C8721046828520C9EDF31288FC00] - 19/03/2015 - 18:34:02 ---A- . (.Microsoft Corporation - USB Printer driver.) -- C:\WINDOWS\system32\Drivers\usbprint.sys [25856]
O44 - LFC:[MD5.287D9CFC80A94E62437E7CAC7EB32979] - 19/03/2015 - 18:34:19 ---A- . (.SEIKO EPSON CORPORATION - ECBTEG.) -- C:\WINDOWS\system32\E_FBCBAEE.DLL [64000]
O44 - LFC:[MD5.7AEC176A5DE912D440E3B37120E2E38F] - 19/03/2015 - 18:34:19 ---A- . (.SEIKO EPSON CORPORATION - EPSON Bi-directional Monitor.) -- C:\WINDOWS\system32\E_FLMAEE.DLL [79679]
O44 - LFC:[MD5.3670675EEA8136995287DFB1B7650A5D] - 19/03/2015 - 18:34:19 ---A- . (.SEIKO EPSON CORPORATION - EPSON Bidirectional Printer Driver.) -- C:\WINDOWS\system32\E_FBCHAEE.DLL [34304]
O44 - LFC:[MD5.1129871724A26B1DD6678DE88B7FE941] - 19/03/2015 - 18:34:21 ---A- . (.SEIKO EPSON CORP. - E_DCINST.) -- C:\WINDOWS\system32\E_DCINST.DLL [49152]
O44 - LFC:[MD5.8C5D98825C4A3F840290D3000BCBD751] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICLocal_BP.cfg [6347]
O44 - LFC:[MD5.4522750EA97E574F092B463A5072F5D3] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICLocal_CF.cfg [6195]
O44 - LFC:[MD5.3B085599D53A8E49A02B42316167791D] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICLocal_DU.cfg [6122]
O44 - LFC:[MD5.87CC3262E60487AC2A7DF54E7A94405E] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICLocal_EN.cfg [13732]
O44 - LFC:[MD5.D74F30976FC27C4134AC650747E141F6] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICLocal_ES.cfg [6103]
O44 - LFC:[MD5.4522750EA97E574F092B463A5072F5D3] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICLocal_FR.cfg [6195]
O44 - LFC:[MD5.5AF012AA8CF511EBA96E1FB620800406] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICLocal_GE.cfg [6335]
O44 - LFC:[MD5.C97F01641F82529F811750CC8BA8F6BE] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICLocal_IT.cfg [6442]
O44 - LFC:[MD5.EFBB67A52E13B74D9504C72A7FFBAC66] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICLocal_KO.cfg [5817]
O44 - LFC:[MD5.8C5D98825C4A3F840290D3000BCBD751] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICLocal_PT.cfg [6347]
O44 - LFC:[MD5.3310F4A726ABF152C54C6AEF9FF6A73C] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICLocal_RU.cfg [2889]
O44 - LFC:[MD5.6CD8BBC5EFB7F458A8FE3AC3F566D48E] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICLocal_SC.cfg [5436]
O44 - LFC:[MD5.01BDBCEABF472323F62D879A7A2AACF9] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICLocal_TC.cfg [2426]
O44 - LFC:[MD5.11CEF97EC383B4A9268CEBCAFDA1C0BF] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPattern1.dat [26154]
O44 - LFC:[MD5.AED88E22D1F234668E0FF2F1C6D80AD1] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPattern2.dat [20148]
O44 - LFC:[MD5.EA23048F088AAC681C4FE4EC051A8663] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPattern3.dat [24903]
O44 - LFC:[MD5.DAEF4897E14EFB7050F7E0FC6887379F] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPattern4.dat [11811]
O44 - LFC:[MD5.7124C6AA586A840A5AE1F2972D4F6E12] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPattern5.dat [21390]
O44 - LFC:[MD5.E000BC718432CBB8F8AF9A2DD4EBCC59] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPattern6.dat [4943]
O44 - LFC:[MD5.17252792B6016C58F15C9A04AC834147] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPresetData_BP.dat [1139]
O44 - LFC:[MD5.EC10E010C637383D566C95CEA4307737] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPresetData_CF.dat [1129]
O44 - LFC:[MD5.7C52CC8596D832C902FD194EBBB2CB2E] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPresetData_DU.dat [1146]
O44 - LFC:[MD5.4843A0BA0A20A81373086ACCAD81725B] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPresetData_EN.dat [1104]
O44 - LFC:[MD5.A40E9AED5BB4DF99EEC5C973DA0C0B42] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPresetData_ES.dat [1136]
O44 - LFC:[MD5.EC10E010C637383D566C95CEA4307737] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPresetData_FR.dat [1129]
O44 - LFC:[MD5.968070015D107F9353471E2CCA8F432E] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPresetData_GE.dat [1107]
O44 - LFC:[MD5.1E58B11A525A5C324F4BCF86E62E1826] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPresetData_IT.dat [1120]
O44 - LFC:[MD5.17252792B6016C58F15C9A04AC834147] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPresetData_PT.dat [1139]
O44 - LFC:[MD5.0C4C5DFFDCFF75778075232E1B11AB1E] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\EPPICPrinterDB.dat [89430]
O44 - LFC:[MD5.44299BD98459800219A72843907B2F83] - 19/03/2015 - 18:38:07 ---A- . (...) -- C:\WINDOWS\system32\PICSDK.ini [99]
O44 - LFC:[MD5.53767884BF6FFD5734CD17FF8379950F] - 19/03/2015 - 18:38:07 ---A- . (.SEIKO EPSON CORPORATION - EPSON PIC SDK 1.10.) -- C:\WINDOWS\system32\EPPicMgr.dll [65536]
O44 - LFC:[MD5.8F2F5996DAD00AB884D97E3090681195] - 19/03/2015 - 18:38:07 ---A- . (.SEIKO EPSON CORPORATION - EPSON PIC SDK 1.10.) -- C:\WINDOWS\system32\EpPicPrt.dll [114688]
O44 - LFC:[MD5.B4ABD063A5DA9E0FF18C6F09A9C514C0] - 19/03/2015 - 18:38:07 ---A- . (.SEIKO EPSON CORPORATION - EPSON PIC SDK 2.3.) -- C:\WINDOWS\system32\PICSDK.dll [479232]
O44 - LFC:[MD5.B9B3F6D8B8F1E0029C58B304632A729B] - 19/03/2015 - 19:09:35 ---A- . (.Microsoft Corporation - Microsoft Office OneNote 2007 Printer Drive.) -- C:\WINDOWS\system32\msonpmon.dll [32592]
O44 - LFC:[MD5.34EB7F469172010938D344CF1C0D0F04] - 19/03/2015 - 20:32:46 ---A- . (.Microsoft Corporation - Capture Application (Sample).) -- C:\WINDOWS\amcap.exe [94208]
O44 - LFC:[MD5.871C903A90C45CA08A9D42803916C3F7] - 19/03/2015 - 21:08:21 ---A- . (.Microsoft Corporation - Microsoft GDI+.) -- C:\WINDOWS\system32\gdiplus.dll [1645320]
O44 - LFC:[MD5.E1102CEDF0C818984C2ACA2A666D4C5F] - 19/03/2015 - 21:08:21 ---A- . (.Microsoft Corporation - Microsoft Layer for Unicode on Win9x System.) -- C:\WINDOWS\system32\unicows.dll [245408]
O44 - LFC:[MD5.A5A5D0C4E27A72DE009B372B7BEB9BFB] - 19/03/2015 - 21:23:43 ---A- . (...) -- C:\PA7302.DAT [921632]
O44 - LFC:[MD5.52648430DE16C2F5AE03032329D9223E] - 20/03/2015 - 08:38:28 ---A- . (...) -- C:\WINDOWS\KB898461.log [8841]
O44 - LFC:[MD5.7A45F426003ED43DFFAAA750C95A5EFB] - 20/03/2015 - 08:44:57 ---A- . (...) -- C:\WINDOWS\KB2584146.log [3818]
O44 - LFC:[MD5.4BBC3C1F8D9050EF41F25F3D3428B3B3] - 20/03/2015 - 08:46:42 ---A- . (...) -- C:\WINDOWS\KB2620712.log [4049]
O44 - LFC:[MD5.3C277E7212D5760F435963911EFC6A8C] - 20/03/2015 - 08:47:24 ---A- . (...) -- C:\WINDOWS\KB2478960.log [4165]
O44 - LFC:[MD5.5259A9FAA04B2E0DA3103F2AB5A0D672] - 20/03/2015 - 08:48:43 ---A- . (...) -- C:\WINDOWS\KB982665.log [4267]
O44 - LFC:[MD5.7F7C0FE4D26DE78DF1E60B9C4B4B2793] - 20/03/2015 - 08:49:40 ---A- . (...) -- C:\WINDOWS\KB2676562.log [5379]
O44 - LFC:[MD5.7A5D6C3B52A3F060293DD24C7AB575CA] - 20/03/2015 - 08:50:45 ---A- . (...) -- C:\WINDOWS\KB2509553.log [4522]
O44 - LFC:[MD5.B89B8179E8B8DB856B059CFBB44167C9] - 20/03/2015 - 08:51:56 ---A- . (...) -- C:\WINDOWS\KB973815.log [4627]
O44 - LFC:[MD5.2DEF25B26E2906B17CE42593EE6783E5] - 20/03/2015 - 08:52:16 ---A- . (...) -- C:\WINDOWS\KB978542.log [4740]
O44 - LFC:[MD5.6192A6E600A8A416CA036BC1C2F40220] - 20/03/2015 - 08:53:11 ---A- . (...) -- C:\WINDOWS\KB2506212.log [4862]
O44 - LFC:[MD5.EB8098C5C73D3EE8F15C2FB916257D07] - 20/03/2015 - 08:54:50 ---A- . (...) -- C:\WINDOWS\KB974392.log [4959]
O44 - LFC:[MD5.CCF097C8856A627876B76B1EE70853FE] - 20/03/2015 - 08:56:42 ---A- . (...) -- C:\WINDOWS\KB2653956.log [5095]
O44 - LFC:[MD5.A9C37AE0284BF4CD39939D5A0B49422B] - 20/03/2015 - 08:58:05 ---A- . (...) -- C:\WINDOWS\KB2419632.log [5216]
O44 - LFC:[MD5.D2BCCE9079EFFEE497699470C0070292] - 20/03/2015 - 08:59:25 ---A- . (...) -- C:\WINDOWS\KB2619339.log [5319]
O44 - LFC:[MD5.7664EBCC6BDABC317025BE2568BC49FC] - 20/03/2015 - 09:00:33 ---A- . (...) -- C:\WINDOWS\KB978706.log [5418]
O44 - LFC:[MD5.778907174E3496AE4B624046B1522D94] - 20/03/2015 - 09:01:08 ---A- . (...) -- C:\WINDOWS\KB2423089.log [10156]
O44 - LFC:[MD5.E3AF1A4F7F3B47C093DAA5DA2E882277] - 20/03/2015 - 09:01:23 ---A- . (...) -- C:\WINDOWS\KB968389.log [20351]
O44 - LFC:[MD5.7B9EB77F49308C9AEDE04D01B268035A] - 20/03/2015 - 09:01:30 ---A- . (...) -- C:\WINDOWS\KB977914.log [5959]
O44 - LFC:[MD5.EF560420B5887DF829DDA95E98AEB8B6] - 20/03/2015 - 09:01:56 ---A- . (...) -- C:\WINDOWS\KB975467.log [19716]
O44 - LFC:[MD5.388A71F0005AB3B36107089E991E80EC] - 20/03/2015 - 09:02:19 ---A- . (...) -- C:\WINDOWS\KB2914368.log [10721]
O44 - LFC:[MD5.8EAB09A873AA2DF130594BEFC6FB0B97] - 20/03/2015 - 09:02:23 ---A- . (...) -- C:\WINDOWS\KB977816.log [6899]
O44 - LFC:[MD5.D2E73C09976CFF3672DD610F151FFF33] - 20/03/2015 - 09:02:54 ---A- . (...) -- C:\WINDOWS\KB971029.log [7018]
O44 - LFC:[MD5.E76AD10AD7D4158DEF3BD7BFBA5C5E27] - 20/03/2015 - 09:03:28 ---A- . (...) -- C:\WINDOWS\KB2508429.log [7151]
O44 - LFC:[MD5.A0FE102CA2860FFA84FD05B3AEC6840A] - 20/03/2015 - 09:04:00 ---A- . (...) -- C:\WINDOWS\KB979482.log [7235]
O44 - LFC:[MD5.A43FB5DF5B76E9FE533B40DDCD35B79F] - 20/03/2015 - 09:04:28 ---A- . (...) -- C:\WINDOWS\KB973507.log [7350]
O44 - LFC:[MD5.0BBDFB13DE40D23D4C5D5E436DD78796] - 20/03/2015 - 09:05:05 ---A- . (...) -- C:\WINDOWS\KB975560.log [7857]
O44 - LFC:[MD5.470328A2E910A1B1800FC41323854055] - 20/03/2015 - 09:05:25 ---A- . (...) -- C:\WINDOWS\Wdf01005Inst.log [13133]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 20/03/2015 - 09:05:30 --HA- . (...) -- C:\WINDOWS\system32\Drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 20/03/2015 - 09:05:40 --HA- . (...) -- C:\WINDOWS\system32\Drivers\Msft_Kernel_NuidFltr_01005.Wdf [0]
O44 - LFC:[MD5.B2CCB4594099295FC472CF112DCABF6A] - 20/03/2015 - 09:06:01 ---A- . (...) -- C:\WINDOWS\KB2661637.log [13617]
O44 - LFC:[MD5.55150DADA5DE47C5A948ECAB489EC45E] - 20/03/2015 - 09:06:01 ---A- . (...) -- C:\WINDOWS\KB2813345.log [8042]
O44 - LFC:[MD5.D71DE6393EED871643391F049A80FF11] - 20/03/2015 - 09:06:22 ---A- . (...) -- C:\WINDOWS\KB2749655.log [7832]
O44 - LFC:[MD5.DE53804AD3DA205922F92BFF5891C654] - 20/03/2015 - 09:06:42 ---A- . (...) -- C:\WINDOWS\KB2862152.log [8402]
O44 - LFC:[MD5.E9B06EB723380FA69AE3FBBAB1F7556B] - 20/03/2015 - 09:06:49 ---A- . (...) -- C:\WINDOWS\KB923561.log [15507]
O44 - LFC:[MD5.EF5441A7C85AF25DE9D58DA1B3895694] - 20/03/2015 - 09:07:06 ---A- . (...) -- C:\WINDOWS\KB2893294.log [8401]
O44 - LFC:[MD5.28FAB376BAA804BFEECAA5AD559F246E] - 20/03/2015 - 09:07:38 ---A- . (...) -- C:\WINDOWS\KB974571.log [8552]
O44 - LFC:[MD5.CD9EF3A2F94D21C7070E70E5131860AE] - 20/03/2015 - 09:07:59 ---A- . (...) -- C:\WINDOWS\KB2393802.log [17252]
O44 - LFC:[MD5.AE4A1C36970983AEB9DBF1B632BEE883] - 20/03/2015 - 09:08:02 ---A- . (...) -- C:\WINDOWS\KB2727528.log [8698]
O44 - LFC:[MD5.E0C8DEAF5498D8F847EB17E9E5E3E4F9] - 20/03/2015 - 09:08:24 ---A- . (...) -- C:\WINDOWS\KB2820917.log [8812]
O44 - LFC:[MD5.CFDBDDB95B3C7691C595CF9974DDA167] - 20/03/2015 - 09:08:43 ---A- . (...) -- C:\WINDOWS\KB2850869.log [8924]
O44 - LFC:[MD5.26FEB87F7CF3919242E11FBF36A9AB89] - 20/03/2015 - 09:09:10 ---A- . (...) -- C:\WINDOWS\KB2892075.log [9041]
O44 - LFC:[MD5.F90AF37C11FF2937DFDD379940DA4BA9] - 20/03/2015 - 09:09:32 ---A- . (...) -- C:\WINDOWS\KB960803.log [16351]
O44 - LFC:[MD5.2AD4E4E52E0AEA87A94FBD2E65098810] - 20/03/2015 - 09:09:36 ---A- . (...) -- C:\WINDOWS\KB952004.log [9165]
O44 - LFC:[MD5.EC194DB53AE2EAE318DB72F52628DD25] - 20/03/2015 - 09:10:02 ---A- . (...) -- C:\WINDOWS\KB979309.log [22337]
O44 - LFC:[MD5.8FA5F0B29BFDA0AB201488494105D8F9] - 20/03/2015 - 09:10:10 ---A- . (...) -- C:\WINDOWS\KB2719985.log [9189]
O44 - LFC:[MD5.D2F65519BE5D423519AB26C7A3B71BA5] - 20/03/2015 - 09:10:30 ---A- . (...) -- C:\WINDOWS\KB952069.log [14265]
O44 - LFC:[MD5.9A2FCA83B447DF6FD2FA8AD1E562A88E] - 20/03/2015 - 09:10:41 ---A- . (...) -- C:\WINDOWS\KB975025.log [9271]
O44 - LFC:[MD5.27D2E76FACD23468EA9B35ACBCBB6693] - 20/03/2015 - 09:11:08 ---A- . (...) -- C:\WINDOWS\KB2770660.log [9417]
O44 - LFC:[MD5.1D265F5399A45DB9D4D8FF25627F2EA4] - 20/03/2015 - 09:11:28 ---A- . (...) -- C:\WINDOWS\KB973540.log [13240]
O44 - LFC:[MD5.58AF34F66398D511906FC3EBBA552560] - 20/03/2015 - 09:11:28 ---A- . (...) -- C:\WINDOWS\wmsetup.log [1528]
O44 - LFC:[MD5.FD921160D6875817D9A675C9A17F4415] - 20/03/2015 - 09:11:52 ---A- . (...) -- C:\WINDOWS\KB2603381.log [16382]
O44 - LFC:[MD5.C454BF0D76289C10E312BD1433710D0D] - 20/03/2015 - 09:11:54 ---A- . (...) -- C:\WINDOWS\KB2705219-v2.log [9631]
O44 - LFC:[MD5.EAB2611CF8BEEF906913045760F1031A] - 20/03/2015 - 09:12:14 ---A- . (...) -- C:\WINDOWS\KB2570947.log [16576]
O44 - LFC:[MD5.1BA0AF20E730F9AD5B875D1BCE95E97A] - 20/03/2015 - 09:12:15 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1374]
O44 - LFC:[MD5.FB79A6679F945B0F141E47E798A90D23] - 20/03/2015 - 09:12:18 ---A- . (...) -- C:\WINDOWS\KB2859537.log [10040]
O44 - LFC:[MD5.5D64B9F62CCD40987DB2A20F9018F089] - 20/03/2015 - 12:28:26 ---A- . (...) -- C:\WINDOWS\KB2876331.log [6264]
O44 - LFC:[MD5.4B7885509855A597B03CE4895E6E1C03] - 20/03/2015 - 12:28:53 ---A- . (...) -- C:\WINDOWS\KB2936068.log [6460]
O44 - LFC:[MD5.6EF1427B9E3ADCB2F05EE8642A9321A7] - 20/03/2015 - 12:29:10 ---A- . (...) -- C:\WINDOWS\KB2930275.log [6494]
O44 - LFC:[MD5.C43451AA8B76A4758B0E630F0158A909] - 20/03/2015 - 12:29:38 ---A- . (...) -- C:\WINDOWS\KB979687.log [6241]
O44 - LFC:[MD5.8E1926D5D0ECC88BE720524FCC46AC2E] - 20/03/2015 - 12:30:14 ---A- . (...) -- C:\WINDOWS\KB2757638.log [6389]
O44 - LFC:[MD5.348353BCE12C03206256D0C4AC157EA8] - 20/03/2015 - 12:30:21 ---A- . (...) -- C:\WINDOWS\KB2864063.log [6494]
O44 - LFC:[MD5.CDDFD05D39C3D7C90EACFAE3C141D57A] - 20/03/2015 - 12:31:09 ---A- . (...) -- C:\WINDOWS\KB2483185.log [6500]
O44 - LFC:[MD5.7EED4D4DC052DEF7AE59F8D69447A24B] - 20/03/2015 - 12:31:42 ---A- . (...) -- C:\WINDOWS\KB2347290.log [6607]
O44 - LFC:[MD5.CE504735F7D2E3415A0D529BB6ADBCF7] - 20/03/2015 - 12:32:00 ---A- . (...) -- C:\WINDOWS\KB974112.log [6687]
O44 - LFC:[MD5.95619B1B7458B2023153B351787C39FF] - 20/03/2015 - 12:32:45 ---A- . (...) -- C:\WINDOWS\KB2780091.log [6842]
O44 - LFC:[MD5.F6E5B0DC36203BF4FBEA1806AC7FDCC8] - 20/03/2015 - 12:33:04 ---A- . (...) -- C:\WINDOWS\KB2507938.log [6954]
O44 - LFC:[MD5.3AAD44E480A8E4458ABF7F7F092AAC0E] - 20/03/2015 - 13:14:45 ---A- . (...) -- C:\WINDOWS\KB2876217.log [7516]
O44 - LFC:[MD5.4B7337C9970CA789FC4EA2B9A39AF7F4] - 20/03/2015 - 13:16:37 ---A- . (...) -- C:\WINDOWS\ntbtlog.txt [79650]
O44 - LFC:[MD5.731ED144C20E47E73E20DFBF45994EBB] - 20/03/2015 - 13:22:33 ---A- . (...) -- C:\WINDOWS\setupact.log [184240]
O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 20/03/2015 - 13:26:14 ---A- . (...) -- C:\WINDOWS\system.ini [227]
O44 - LFC:[MD5.D3BCEE679ED4285FFB025FC71C1F073B] - 20/03/2015 - 13:26:14 -SH-- . (...) -- C:\boot.ini [216]
O44 - LFC:[MD5.A3F4391DFDF2F9E9FE4EAD193265A5AD] - 20/03/2015 - 13:40:30 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\mbam.sys [23256]
O44 - LFC:[MD5.FFB32E70D735146F5630DC7A96B6E1A8] - 20/03/2015 - 13:40:30 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\WINDOWS\system32\Drivers\mbamchameleon.sys [54360]
O44 - LFC:[MD5.48004D40BFC90B1D5CD36EBFDE23CF39] - 20/03/2015 - 14:45:21 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [264616]
O44 - LFC:[MD5.896B5BB3F10AD009B6F3EC46D22020C9] - 20/03/2015 - 16:07:07 ---A- . (...) -- C:\WINDOWS\Ascd_tmp.ini [4413]
O44 - LFC:[MD5.CB0DC0E639F198FD761546D3AB86AEE2] - 20/03/2015 - 16:10:15 R--A- . (.Intel Corporation - xxxxres Module.) -- C:\WINDOWS\system32\igfxres.dll [167936]
O44 - LFC:[MD5.6E807A338D649D99A5C5C8E4F5310D2D] - 20/03/2015 - 17:13:20 ---A- . (...) -- C:\WINDOWS\system32\SP7302.INI [566]
O44 - LFC:[MD5.2358C57220C21CFB2C0C9B850B335112] - 20/03/2015 - 17:13:20 ---A- . (.PixArt Imaging Inc. - CoInstaller.) -- C:\WINDOWS\system32\CoInst.dll [6656]
O44 - LFC:[MD5.AFF9A1986555E4592DE8092F9A5FA2D2] - 20/03/2015 - 17:13:20 ---A- . (.PixArt Imaging Inc. - PAC7302.) -- C:\WINDOWS\system32\Drivers\PAC7302.SYS [457856]
O44 - LFC:[MD5.558A14A18A51E5E55A422E376CE064B5] - 20/03/2015 - 17:13:20 ---A- . (.PixArt Imaging Incorporation - Uniform Stream Property.) -- C:\WINDOWS\system32\SP7302.AX [129024]
O44 - LFC:[MD5.502285AFF5C927156A39BF01BAD1C213] - 20/03/2015 - 17:17:08 ---A- . (.Microsoft Corporation - Pilote VfW MM pour périphériques de capture.) -- C:\WINDOWS\system32\vfwwdm32.dll [54784]
O44 - LFC:[MD5.82B1F979997B522803721ADC18178045] - 20/03/2015 - 17:17:08 ---A- . (.Microsoft Corporation - WDM Streaming Crossbar.) -- C:\WINDOWS\system32\ksxbar.ax [43008]
O44 - LFC:[MD5.3C81C9C22A5717C257A8759053631661] - 20/03/2015 - 17:17:09 ---A- . (.Microsoft Corporation - Tuner TV sous flux WDM.) -- C:\WINDOWS\system32\kstvtune.ax [61952]
O44 - LFC:[MD5.80D1CCBFE03A8FB10C2B2E9F1AF508B4] - 20/03/2015 - 17:17:10 ---A- . (.Microsoft Corporation - Capture vidéo du flux WDM.) -- C:\WINDOWS\system32\kswdmcap.ax [92160]
O44 - LFC:[MD5.4578A815219876A456E2187C1B071E04] - 20/03/2015 - 17:17:10 ---A- . (.Microsoft Corporation - Video Capture Interface Server.) -- C:\WINDOWS\system32\vidcap.ax [28672]
O44 - LFC:[MD5.017782E18B4C8EF40DCE51131D11DDDC] - 20/03/2015 - 17:17:23 ---A- . (...) -- C:\WINDOWS\win.ini [728]
O44 - LFC:[MD5.5B50F1B2A2ED47D560577B221DA734DB] - 20/03/2015 - 17:17:44 ---A- . (.Microsoft Corporation - WDM NABTS/FEC VBI Codec.) -- C:\WINDOWS\system32\Drivers\NABTSFEC.sys [85248]
O44 - LFC:[MD5.C98B39829C2BBD34E454150633C62C78] - 20/03/2015 - 17:17:49 ---A- . (.Microsoft Corporation - WDM WST Codec Driver.) -- C:\WINDOWS\system32\Drivers\WSTCODEC.SYS [19200]
O44 - LFC:[MD5.866D538EBE33709A5C9F5C62B73B7D14] - 20/03/2015 - 17:17:54 ---A- . (.Microsoft Corporation - Microsoft Slip Deframing Filter Minidriver.) -- C:\WINDOWS\system32\Drivers\SLIP.sys [11136]
O44 - LFC:[MD5.77813007BA6265C4B6098187E6ED79D2] - 20/03/2015 - 17:17:58 ---A- . (.Microsoft Corporation - Microsoft IP Test Driver.) -- C:\WINDOWS\system32\Drivers\StreamIP.sys [15232]
O44 - LFC:[MD5.15DA8EA0717277FBBE450B0A8EBDBEBA] - 20/03/2015 - 17:17:58 ---A- . (.Microsoft Corporation - WDM Streaming IPSINK Property Set Interface.) -- C:\WINDOWS\system32\ipsink.ax [16384]
O44 - LFC:[MD5.7FF1F1FD8609C149AA432F95A8163D97] - 20/03/2015 - 17:18:01 ---A- . (.Microsoft Corporation - Microsoft IP Driver.) -- C:\WINDOWS\system32\Drivers\NdisIP.sys [10880]
O44 - LFC:[MD5.E53736A9E30C45FA9E7B5EAC55056D1D] - 20/03/2015 - 17:18:09 ---A- . (.Microsoft Corporation - WDM Tee/Communication Transform Filter.) -- C:\WINDOWS\system32\Drivers\MSTEE.sys [5504]
O44 - LFC:[MD5.FD44FA80DA03EA144153A76DEBBB61B4] - 20/03/2015 - 17:52:42 ---A- . (...) -- C:\WINDOWS\system32\Drivers\TrueSight.sys [35064]
O44 - LFC:[MD5.C89AB47A468AEE1A1A99F25F85FBFEC5] - 20/03/2015 - 19:05:29 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]
O44 - LFC:[MD5.8E2E9CCD873ABF180F48BCAEEEBE347D] - 20/03/2015 - 20:02:49 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys [114904]
O44 - LFC:[MD5.81277BBA180CFF59833D267DA467CDF8] - 20/03/2015 - 20:30:34 ---A- . (.Microsoft Corporation - Update RunOnce Service.) -- C:\WINDOWS\system32\spupdsvc.exe [26144]
O44 - LFC:[MD5.BBCA1124D889A8C3B5C213B7B59E6345] - 20/03/2015 - 20:30:38 ----- . (.Microsoft Corporation - Messages du Service Pack.) -- C:\WINDOWS\system32\spmsg.dll [17952]
O44 - LFC:[MD5.0E1E501ABEA859A52891583871C51DC4] - 20/03/2015 - 20:31:15 ---A- . (...) -- C:\WINDOWS\updspapi.log [33504]
O44 - LFC:[MD5.744024881011F3A45C26967609B9DBFE] - 20/03/2015 - 20:31:46 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [110465]
O44 - LFC:[MD5.AFF6E05E415C57DEBC0A0FEA59BEC3F5] - 20/03/2015 - 20:31:46 ---A- . (...) -- C:\WINDOWS\msgsocm.log [5815]
O44 - LFC:[MD5.1C0CDEF0577059E5B75B7F4A52046657] - 20/03/2015 - 20:31:46 ---A- . (...) -- C:\WINDOWS\ocgen.log [62021]
O44 - LFC:[MD5.37A4060B59111FB39E407B15E385048E] - 20/03/2015 - 20:31:46 ---A- . (...) -- C:\WINDOWS\setupapi.log [715945]
O44 - LFC:[MD5.929721395BC33861418EE0AAF0DDCC05] - 20/03/2015 - 20:31:50 ---A- . (...) -- C:\WINDOWS\comsetup.log [48326]
O44 - LFC:[MD5.C5DDF5CE6BC5A2040D40E0EFBA0FF6D7] - 20/03/2015 - 20:31:50 ---A- . (...) -- C:\WINDOWS\ie8.log [60743]
O44 - LFC:[MD5.F58599EA2F95E64495AA088B891268AE] - 20/03/2015 - 20:31:50 ---A- . (...) -- C:\WINDOWS\iis6.log [16221]
O44 - LFC:[MD5.24BF5414BEC3B8AACB12F4CBCF7AC08C] - 20/03/2015 - 20:31:50 ---A- . (...) -- C:\WINDOWS\imsins.log [1374]
O44 - LFC:[MD5.8B8D4E02E983F6A7E504421569ED23F7] - 20/03/2015 - 20:31:50 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [27480]
O44 - LFC:[MD5.EC0511AEC953DEF27FBD6EF5CC8C4097] - 20/03/2015 - 20:31:50 ---A- . (...) -- C:\WINDOWS\ocmsn.log [6357]
O44 - LFC:[MD5.E61AFBA4F45416C1E81501942EEA7134] - 20/03/2015 - 20:31:50 ---A- . (...) -- C:\WINDOWS\tsoc.log [46701]
O44 - LFC:[MD5.0FA0458EEC1330A31DD8B16D4678B046] - 20/03/2015 - 20:31:54 ---A- . (...) -- C:\WINDOWS\ie8_main.log [22050]
O44 - LFC:[MD5.674A02F3455BD00740ADE6B42EE622A6] - 20/03/2015 - 20:58:56 ---A- . (...) -- C:\WINDOWS\spupdsvc.log [8549]
O44 - LFC:[MD5.46F3321AD6D76132A8373A2E5167E54A] - 20/03/2015 - 21:08:31 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [31608]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 20/03/2015 - 21:38:29 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.3B8094E48A03381B68218434120D32ED] - 20/03/2015 - 21:38:35 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.CC5F8641D6E763E3B0BA635A29A9A245] - 20/03/2015 - 21:38:36 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 20/03/2015 - 21:38:37 ---A- . (...) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.6913F4837FD2945C980EE2E246AE8F4B] - 20/03/2015 - 21:44:32 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [449146]
~ Files: 580 Scanned in 00mn 10s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
~ ShellExecuteHooks: Scanned in 00mn 00s



---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Mozilla Firefox\firefox.exe" [Enabled] .(.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office12\OUTLOOK.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office12\GROOVE.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office12\ONENOTE.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
~ Keys Export: 9 Scanned in 00mn 00s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll
~ LSA: 6 Scanned in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
~ CSB: 20 Scanned in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ IFEO: Scanned in 00mn 00s



---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
~ TDSD: 12 Scanned in 00mn 00s



---\\ Enumération des clés de registre StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\ArcSoft Connection Service [Key] . (.ArcSoft - ArcSoft Connect Daemon.) -- C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe
O53 - SMSR:HKLM\...\startupreg\CTFMON.EXE [Key] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O53 - SMSR:HKLM\...\startupreg\EPSON Stylus DX4200 Series [Key] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.exe =>.Epson Seiko Corporation
O53 - SMSR:HKLM\...\startupreg\GrooveMonitor [Key] . (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
O53 - SMSR:HKLM\...\startupreg\HotKeysCmds [Key] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O53 - SMSR:HKLM\...\startupreg\IgfxTray [Key] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
~ SMSR Keys: 7 Scanned in 00mn 00s



---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
~ MSCP: 6 Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "SoftwareSASGeneration"=1
~ MWPS: 6 Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
~ MWPE Keys: 1 Scanned in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:28/01/2005 - 18:48:58 ---A- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\system32\Drivers\ALCXWDM.SYS [2310272]
O58 - SDL:26/01/2005 - 09:12:09 ---A- . (...) -- C:\WINDOWS\system32\Drivers\ASUSHWIO.SYS [5824]
O58 - SDL:19/03/2015 - 17:19:20 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswHwid.sys [24144] =>.ALWIL Software
O58 - SDL:19/03/2015 - 17:19:05 ---A- . (.Avast Software s.r.o. - avast! Keyboard Filter Driver.) -- C:\WINDOWS\system32\Drivers\aswKbd.sys [26096]
O58 - SDL:19/03/2015 - 17:19:20 ---A- . (.Avast Software s.r.o. - avast! File System Minifilter for Windows 2003/Vista.) -- C:\WINDOWS\system32\Drivers\aswMonFlt.sys [73440]
O58 - SDL:19/03/2015 - 17:18:57 ---A- . (.ALWIL Software - avast! Filtering NDIS driver.) -- C:\WINDOWS\system32\Drivers\aswNdis.sys [12112]
O58 - SDL:19/03/2015 - 17:18:57 ---A- . (.Avast Software s.r.o. - avast! Filtering NDIS driver.) -- C:\WINDOWS\system32\Drivers\aswNdis2.sys [253728]
O58 - SDL:19/03/2015 - 17:19:20 ---A- . (.Avast Software s.r.o. - avast! TDI Redirect Driver.) -- C:\WINDOWS\system32\Drivers\aswRdr.sys [55200]
O58 - SDL:19/03/2015 - 17:19:20 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904] =>.ALWIL Software
O58 - SDL:19/03/2015 - 17:19:05 ---A- . (.Avast Software s.r.o. - avast! Virtualization Driver.) -- C:\WINDOWS\system32\Drivers\aswSnx.sys [788272]
O58 - SDL:19/03/2015 - 17:19:20 ---A- . (.Avast Software s.r.o. - avast! self protection module.) -- C:\WINDOWS\system32\Drivers\aswSP.sys [427480]
O58 - SDL:19/03/2015 - 17:19:20 ---A- . (.Avast Software s.r.o. - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\Drivers\aswTdi.sys [57888]
O58 - SDL:19/03/2015 - 17:19:20 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswVmm.sys [206976] =>.ALWIL Software
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\Drivers\cinemst2.sys [262528]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\Drivers\cpqdap01.sys [11776]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys [800256]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys [154496]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys [5888]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\hdaudbus.sys [144384]
O58 - SDL:01/07/2004 - 13:26:16 R--A- . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\system32\Drivers\ialmnt5.sys [724221]
O58 - SDL:21/11/2014 - 06:14:06 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\mbam.sys [23256]
O58 - SDL:21/11/2014 - 06:14:14 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\WINDOWS\system32\Drivers\mbamchameleon.sys [54360]
O58 - SDL:20/03/2015 - 20:02:49 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys [114904]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\nikedrv.sys [12032]
O58 - SDL:14/06/2007 - 15:29:08 ---A- . (.PixArt Imaging Inc. - PAC7302.) -- C:\WINDOWS\system32\Drivers\PAC7302.SYS [457856]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\Drivers\ptilink.sys [17792]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\Drivers\rio8drv.sys [12032]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\riodrv.sys [12032]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\Drivers\secdrv.sys [20480]
O58 - SDL:20/03/2015 - 17:52:42 ---A- . (...) -- C:\WINDOWS\system32\Drivers\TrueSight.sys [35064]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\Drivers\tsbvcap.sys [21376]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\Drivers\vdmindvd.sys [58112]
O58 - SDL:19/08/2004 - 07:21:00 ---A- . (.Marvell - NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller.) -- C:\WINDOWS\system32\Drivers\yk51x86.sys [189568]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]
~ Drivers: 48 Scanned in 00mn 02s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 19/03/2015 - 21:47:56 ---A- . (.Avast Software s.r.o..) -- C:\Documents and Settings\Annie\Mes documents\Téléchargements\avast_internet_security_setup_online.exe [5446736]
O61 - LFC: 19/03/2015 - 21:48:00 ---A- . (.Skype Technologies S.A..) -- C:\Documents and Settings\Annie\Mes documents\Téléchargements\SkypeSetup.exe [1380448]
O61 - LFC: 19/03/2015 - 21:48:24 ---A- . (.Skype Technologies S.A..) -- C:\Documents and Settings\Annie\Mes documents\Téléchargements\SkypeSetupFull.exe [45211232]
O61 - LFC: 19/03/2015 - 21:48:26 ---A- . (.Labtec Inc..) -- C:\Documents and Settings\Annie\Mes documents\Téléchargements\webcam1051fra.exe [63050304]
O61 - LFC: 20/03/2015 - 21:47:52 ---A- . (...) -- C:\Documents and Settings\Annie\Application Data\D536BEE8-1426867047-11D9-9C8C-8A18ABC3536B\Uninstall.exe [80478]
O61 - LFC: 20/03/2015 - 21:47:53 ---A- . (...) -- C:\Documents and Settings\Annie\Application Data\ZHP\ZHPCleaner.exe [1700864] =>.Nicolas Coolman
O61 - LFC: 20/03/2015 - 21:47:53 ---A- . (...) -- C:\Documents and Settings\Annie\Local Settings\Application Data\D536BEE8-1426870927-11D9-9C8C-8A18ABC3536B\pnspAB.exe [116000]
O61 - LFC: 20/03/2015 - 21:47:55 ---A- . (.Malwarebytes Corporation.) -- C:\Documents and Settings\Annie\Mes documents\malwarebytes-anti-malware_2-04-1028_fr_215092 [1].exe [20447072]
O61 - LFC: 20/03/2015 - 21:47:55 ---A- . (.Microsoft Corporation.) -- C:\Documents and Settings\Annie\Mes documents\internet-explorer-8_fr_403570_32 [1].exe [17001840]
O61 - LFC: 20/03/2015 - 21:47:56 ---A- . (...) -- C:\Documents and Settings\Annie\Mes documents\Téléchargements\adwcleaner_4.112.exe [2171392]
O61 - LFC: 20/03/2015 - 21:47:56 ---A- . (.Internet Generic Installer.) -- C:\Documents and Settings\Annie\Mes documents\Téléchargements\ccsetup503.exe [679152]
O61 - LFC: 20/03/2015 - 21:47:56 ---A- . (.Internet software.) -- C:\Documents and Settings\Annie\Mes documents\Téléchargements\internet-explorer-8_fr_403570_32.exe [712312]
O61 - LFC: 20/03/2015 - 21:47:56 ---A- . (.Internet software.) -- C:\Documents and Settings\Annie\Mes documents\Téléchargements\malwarebytes-anti-malware_2-04-1028_fr_215092.exe [712312]
O61 - LFC: 20/03/2015 - 21:47:57 ---A- . (...) -- C:\Documents and Settings\Annie\Mes documents\Téléchargements\OneClick2RP.exe [739397]
O61 - LFC: 20/03/2015 - 21:47:58 ---A- . (...) -- C:\Documents and Settings\Annie\Mes documents\Téléchargements\RogueKiller.exe [15648856]
O61 - LFC: 20/03/2015 - 21:47:59 ---A- . (...) -- C:\Documents and Settings\Annie\Mes documents\Téléchargements\Skype.exe [639536]
O61 - LFC: 20/03/2015 - 21:48:14 ---A- . (.Skype Technologies S.A..) -- C:\Documents and Settings\Annie\Mes documents\Téléchargements\SkypeSetupFull(1).exe [45211232]
O61 - LFC: 20/03/2015 - 21:48:27 ---A- . (...) -- C:\Documents and Settings\Annie\Mes documents\Téléchargements\ZHPCleaner.exe [1700864] =>.Nicolas Coolman
O61 - LFC: 20/03/2015 - 21:48:28 ---A- . (.Nicolas Coolman.) -- C:\Documents and Settings\Annie\Mes documents\Téléchargements\ZHPDiag2.exe [6876452] =>.Nicolas Coolman
~ 145 Fichiers temporaires (Temporary files)
~ 33 Fichiers cookies (Cookies files)
~ Files: 19 Scanned in 00mn 37s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 19/03/2015 - C:\WINDOWS\system32\drivers\aswHwid.sys (aswHwid) .(...) - LEGACY_ASWHWID
O64 - Services: CurCS - 19/03/2015 - C:\WINDOWS\system32\drivers\aswMonFlt.sys (aswMonFlt) .(.Avast Software s.r.o. - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - 19/03/2015 - C:\WINDOWS\system32\Drivers\aswNdis2.sys (aswNdis2) .(.Avast Software s.r.o. - avast! Filtering NDIS driver.) - LEGACY_ASWNDIS2
O64 - Services: CurCS - 19/03/2015 - C:\WINDOWS\system32\drivers\aswRdr.sys (aswRdr) .(.Avast Software s.r.o. - avast! TDI Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - 19/03/2015 - C:\WINDOWS\system32\Drivers\aswRvrt.sys (aswRvrt) .(...) - LEGACY_ASWRVRT
O64 - Services: CurCS - 19/03/2015 - C:\WINDOWS\system32\drivers\aswSnx.sys (aswSnx) .(.Avast Software s.r.o. - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - 19/03/2015 - C:\WINDOWS\system32\drivers\aswSP.sys (aswSP) .(.Avast Software s.r.o. - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - 19/03/2015 - C:\WINDOWS\system32\drivers\aswTdi.sys (aswTdi) .(.Avast Software s.r.o. - avast! TDI Filter Driver.) - LEGACY_ASWTDI
O64 - Services: CurCS - 19/03/2015 - C:\WINDOWS\system32\Drivers\aswVmm.sys (aswVmm) .(...) - LEGACY_ASWVMM
O64 - Services: CurCS - 19/03/2015 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (avast! Antivirus) .(.Avast Software s.r.o. - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS
O64 - Services: CurCS - 19/03/2015 - C:\Program Files\AVAST Software\Avast\afwServ.exe (avast! Firewall) .(.Avast Software s.r.o. - avast! firewall service.) - LEGACY_AVAST!_FIREWALL
~ Legacy: 108 Scanned in 00mn 01s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
~ FASS Keys: 10 Scanned in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
~ Keys: Scanned in 00mn 00s



---\\ Enumère les service demarrés par Svchost (SSS) (O83)
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (...) -- C:\WINDOWS\system32\appmgmts.dll [0]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496]
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [77824]
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464]
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576]
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [127488]
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040]
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [246272]
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [96768]
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096]
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792]
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [198144]
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248]
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560]
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll [18944]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\system32\ipnathlp.dll [332800]
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\system32\tapisrv.dll [249856]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112]
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176]
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [483840]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408]
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896]
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024]
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll [293376]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [61440]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400]
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Fournisseur de services de périphérique multimédia Microsoft.) -- C:\WINDOWS\system32\mspmsnsv.dll [52736]
~ Services: 39 Scanned in 00mn 01s



---\\ Enumère les données de la clé NameSpace (MNS) (O92)
O92 - MNS: Web Folders - {BDEADF00-C265-11D0-BCED-00A0C90AB50F}
~ MNS: 1 Scanned in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Auto 20/03/2015 113664 | (berogupe) . (...) - C:\Documents and Settings\Annie\Application Data\D536BEE8-1426867047-11D9-9C8C-8A18ABC3536B\jnsm7A.tmp
SS - | Demand 14/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SS - | Demand 05/03/2015 148080 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Auto 02/01/2015 315488 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
SR - | Auto 19/03/2015 343336 | (avast! Antivirus) . (.Avast Software s.r.o..) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 19/03/2015 107448 | (avast! Firewall) . (.Avast Software s.r.o..) - C:\Program Files\AVAST Software\Avast\afwServ.exe
~ Services: Scanned in 00mn 14s



---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by Annie at 20/03/2015 21:49:41
device: opened successfully
user: MBR read successfully
Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys atapi.sys hal.dll pciide.sys PCIIDEX.SYS
1 nt!IofCallDriver[0x804E1397] >> \Device\Harddisk0\DR0[0x86385AB8]
3 CLASSPNP[0xF7636FD7] >> nt!IofCallDriver[0x804E1397] >> \Device\Ide\IdeDeviceP1T0L0-17[0x86387B00]
kernel: MBR read successfully
user & kernel MBR OK
~ MBR: 12 Scanned in 00mn 02s



---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Annie at 20/03/2015 21:49:43
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s



---\\ Scan Additionnel (O88)
Database Version : 13008 - (19/03/2015)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 0

~ Additionnel Scan: 138651 Items scanned in 00mn 32s



---\\ Informations complémentaires sur les modules
~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5)
~ http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects de navigateur (O2)
~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4)
~ http://nicolascoolman.fr/o50-image-file-execution-options-zhpdiag/ =>.Image File Execution Options (IFEO) (O50)
~ AMI: 4 Scanned in 00mn 00s



End of the scan (1464 lines in 03mn 06s)(0.4)