cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ Rapport de ZHPDiag v2015.4.20.40 - Nicolas Coolman (20/04/2015)
~ Lancé par Administrateur (22/04/2015 22:26:06)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Version à jour.
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Not Found


---\\ Navigateurs Internet
MSIE: Internet Explorer v7.0.5730.11 (Defaut)
MFIE: Mozilla Firefox v3.0.6 (fr)

---\\ Informations sur les produits Windows
~ Langage: Français
Windows Automatic Updates : OK
Windows Genuine Advantage : KO
Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600)

---\\ Logiciels de protection du système
ESET NOD32 Antivirus v3.0.642.0

---\\ Logiciels d'optimisation du système
CCleaner

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 10 Plugin

---\\ Informations sur le système
~ Processor: x86 Family 15 Model 3 Stepping 4, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2013 MB (69% free)
System Restore: Désactivé (Disabled)
System drive C: has 141 GB (96%) free of 146 GB

---\\ Mode de connexion au système
~ Computer Name: EDITION_ULTRA
~ User Name: Administrateur
~ All Users Names: IWAM_EDITION_ULTRA, IUSR_EDITION_ULTRA, HelpAssistant, ASPNET, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Documents and Settings\Administrateur\Application Data\ZHP\
~ %AppData% : C:\Documents and Settings\Administrateur\Application Data\
~ %Desktop% : C:\Documents and Settings\Administrateur\Bureau\
~ %Favorites% : C:\Documents and Settings\Administrateur\Favoris\
~ %LocalAppData% : C:\Documents and Settings\Administrateur\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\Administrateur\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 141 Go of 146 Go)
D: Hard drive, Flash drive, Thumb drive (Free 45 Go of 59 Go)
E: Hard drive, Flash drive, Thumb drive (Free 48 Go of 59 Go)
F: Hard drive, Flash drive, Thumb drive (Free 37 Go of 59 Go)
G: Hard drive, Flash drive, Thumb drive (Free 44 Go of 59 Go)
H: Hard drive, Flash drive, Thumb drive (Free 22 Go of 59 Go)
I: Hard drive, Flash drive, Thumb drive (Free 18 Go of 26 Go)
J: Floppy drive, Flash card reader, USB Key (Not Inserted)
K: CD-ROM drive (Free 0 Go of 1 Go)
L: CD-ROM drive (Not Inserted)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
~ Security Center: 41 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.13/04/2008 - 19:34:04.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.6CE32F7778061CCC5814D5E0F282D369] - (.Microsoft Corporation - Internet Extensions for Win32.) (.08/03/2009 - 04:34:58.) -- C:\WINDOWS\system32\wininet.dll [914944]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.13/04/2008 - 19:34:30.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.322D0E36693D6E24A2398BEE62A268CD] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.13/04/2008 - 12:19:24.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138112]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 11:40:32.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 12:14:22.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 11:40:48.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.13/04/2008 - 18:57:40.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 09:36:06.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.13/04/2008 - 19:00:54.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 11:41:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 11:57:16.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 12:19:44.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.68755F0FF16070178B54674FE5B847B0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.13/04/2008 - 12:17:02.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456576]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 12:21:02.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 12:15:54.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.13/04/2008 - 19:47:24.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 12:19:44.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 11:32:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.13/04/2008 - 18:57:36.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.13/04/2008 - 18:56:06.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes musiques (My Musics) : 1/2
~ Mes Videos (My Videos) : 0/0
~ Mes Favoris (My Favorites) : 1/11
~ Mes Documents (My Documents) : 1/5
~ Mon Bureau (My Desktop) : 0/11
~ Menu demarrer (Programs) : 1/37
~ Hidden Files: Scanned in 00mn 00s



---\\ Processus lancés
[MD5.890369AED0DDE1A98F09F7DC239CA2BD] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [152984] [PID.1564]
[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.172]
[MD5.3FE5A84FAC62753A20F539BE3E7BFC56] - (.Microsoft Corporation - Services Internet (IIS).) -- C:\WINDOWS\system32\inetsrv\inetinfo.exe [15872] [PID.2916]
[MD5.0411F7EE63AE48D2918AB4F2C79AB6C4] - (.Microsoft Corporation - Windows® installer.) -- C:\WINDOWS\system32\msiexec.exe [78848] [PID.3680]
[MD5.F5179458B21780A88056C142F395406F] - (.ESET - Eset Service.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [472320] [PID.484]
[MD5.5F5BD0F4DFF2D82EF5767EB29D0E4572] - (.ESET - Eset GUI.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [1443072] [PID.328]
[MD5.7A56CF3E3F12E8AF599963B16F50FB6A] - (.Microsoft Corporation - Office Source Engine.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.exe [89136] [PID.3404]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- ystem32\rundll32.exe [0] [PID.3356]
[MD5.1142BEEDF0610250FB0E4A3213156197] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe [16855552] [PID.3336]
[MD5.B427B61409493138D39A48EFC5767283] - (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe [143360] [PID.3224]
[MD5.25B9D53B861552EC83B80A565AC07A47] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [172032] [PID.3208]
[MD5.E24AAF17E339759C296AC67EA56ED97B] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [143360] [PID.3464]
[MD5.6E15CAC2275E0B0A22E7EE9BAC30D7BA] - (...) -- C:\WINDOWS\VistaDrive\VistaDrive.exe [280779] [PID.3140]
[MD5.6A2FC790CD507336E05B7FAE29D79432] - (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe [1057280] [PID.2208]
[MD5.5C8167883287D5B22BA5E0AC28E4B04E] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [249856] [PID.2216]
[MD5.CD41982565D1D73CCA0915FEC2EA337B] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe [3536320] [PID.4048]
[MD5.207B16FA69F61D1895F8D8532F587E4B] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe [263600] [PID.1288]
[MD5.B60DDDD2D63CE41CB8C487FCFBB6419E] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [638816] [PID.736]
[MD5.2E0B0A051FFAA86E358465BB0880D453] - (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53784] [PID.2744]
[MD5.2C009C50C0EE073EC0F993698CDB6C92] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8198656] [PID.2788]
~ Processes Running: Scanned in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\zkalyan5.default\prefs.js
M3 - MFPP: Plugins - [Administrateur] -- C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\zkalyan5.default\searchplugins\118-811com.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\zkalyan5.default\searchplugins\dailymotion.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\zkalyan5.default\searchplugins\google-translate-en-fr.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\zkalyan5.default\searchplugins\MediaDICO-fr.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\zkalyan5.default\searchplugins\the-pirate-bay.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\zkalyan5.default\searchplugins\youtube.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Program Files\Mozilla FireFox\searchplugins\espacesimo.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M0 - MFSP: prefs.js [Administrateur - zkalyan5.default] http://espacesimo.freeheberg.com
M2 - MFEP: prefs.js [Administrateur - zkalyan5.default\{07b2a769-ed19-4483-87ce-c643914c81bb}] [] Vista-aero v2.0.0.62 (..)
M2 - MFEP: prefs.js [Administrateur - zkalyan5.default\{77b819fa-95ad-4f2c-ac7c-486b356188a9}] [] IE Tab v1.5.20090207 (..)
M2 - MFEP: prefs.js [Administrateur - zkalyan5.default\{A4732521-77D9-447E-A557-B279AC923F06}] [] Image Toolbar v0.6.5 (..)
M2 - MFEP: prefs.js [Administrateur - zkalyan5.default\{aba3f5c2-35d5-4960-bdfc-de9c162e39ce}] [] OpenBook v0.6.5 (..)
M2 - MFEP: prefs.js [Administrateur - zkalyan5.default\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}] [adblockplus] Adblock Plus v1.0.1 (..)
M2 - MFEP: prefs.js [Administrateur - zkalyan5.default\{EF522540-89F5-46b9-B6FE-1829E2B572C6}] [] GooglePreview v3.17 (..)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.0.) -- C:\Program Files\Mozilla Firefox\Plugins\np32dsw.dll
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeploytk.dll
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFFICE.DLL
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Mozilla Firefox\Plugins\nppl3260.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - 6.0.12.69.) -- C:\Program Files\Mozilla Firefox\Plugins\nprpjplug.dll
P2 - FPN:Firefox Plugin Navigator . (...) -- C:\Program Files\Mozilla Firefox\Plugins\NPSWF32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
~ Firefox Browser: 29 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.fr
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} . (...) (No version) -- (.not file.)
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (...) (No version) -- (.not file.)
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
~ IE Browser: 14 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (20)
~ Hosts File: Scanned in 00mn 00s



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} . (.Yahoo! Inc. - Yahoo! Toolbar.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} . (.Yahoo! Inc - Yahoo! Single Instance for Mail.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
~ BHO: 12 Scanned in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Yahoo! Toolbar - [HKLM]{EF99BD32-C1FB-11D2-892F-0090271D4F88} . (.Yahoo! Inc. - Yahoo! Toolbar.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
~ Toolbar: Scanned in 00mn 00s



---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [SkyTel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\WINDOWS\SkyTel.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\ALCMTR.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [VistaDrive] . (...) -- C:\WINDOWS\VistaDrive\VistaDrive.exe
O4 - HKLM\..\Run: [egui] . (.ESET - Eset GUI.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
O4 - HKUS\.DEFAULT\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
O4 - HKUS\S-1-5-18\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
O4 - HKUS\S-1-5-19\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
O4 - HKUS\S-1-5-20\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32
O4 - HKUS\S-1-5-21-796845957-261903793-1644491937-500\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKUS\S-1-5-21-796845957-261903793-1644491937-500\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-796845957-261903793-1644491937-500\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe
~ Application: Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\OFFICE11\REFBARH.ICO
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Clé orpheline
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
~ Winsock: 4 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{17ABB71F-9B77-4C35-9E06-D0D13CAD59DC}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{17ABB71F-9B77-4C35-9E06-D0D13CAD59DC}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\WINDOWS\system32\igfxdev.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\wpdshserviceobj.dll
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
~ SSODL: 5 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Eset Service (ekrn) . (.ESET - Eset Service.) - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
~ Services: 2 Scanned in 00mn 04s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\OFFICE11\WINWORD.exe
O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT: - (..) -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{341BD00F-A50B-4DF9-9E01-7C938F6F8E3E}.job [450]
~ Scheduled Task: 1 Scanned in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: IE7 Uninstall Stub - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe =>.Microsoft Corporation
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe =>.Microsoft Corporation
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player 11 - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf =>.Microsoft Corporation
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- c:\WINDOWS\system32\mscories.dll
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r22.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx
O40 - ASIC: Installed Component - S-1-5-21-796845957-261903793-1644491937-500 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexadécimal CLSID
O40 - ASIC: Installed Component - S-1-5-21-796845957-261903793-1644491937-500 - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS -- Not Hexadécimal CLSID
~ Active Setup: 21 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: (easdrv) . (.ESET - Eset AntiStealth driver.) - C:\WINDOWS\system32\DRIVERS\easdrv.sys
O41 - Driver: (epfwtdir) . (...) - C:\WINDOWS\system32\DRIVERS\epfwtdir.sys
O41 - Driver: (IDMTDI) . (.Tonec Inc. - Internet Download Manager TDI Driver.) - C:\WINDOWS\system32\DRIVERS\idmtdi.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: (ISODrive) . (.EZB Systems, Inc. - ISO DVD/CD-ROM Device Driver.) - C:\Program Files\UltraISO\drivers\ISODrive.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
~ Drivers: 65 Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 4.57 - (...) [HKLM] -- 7-Zip
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Allok 3GP PSP MP4 iPod Video Converter 5.2.0202 - (.Allok Soft .Inc.) [HKLM] -- Allok 3GP PSP MP4 iPod Video Converter_is1
O42 - Logiciel: Archiveur WinRAR - (...) [HKLM] -- WinRAR archiver
O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: ESET NOD32 Antivirus - (.ESET spol s r. o..) [HKLM] -- {944F0F77-F26F-4D17-A440-6DA4CBE05B71}
O42 - Logiciel: Foxit Reader - (...) [HKLM] -- Foxit Reader
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager
O42 - Logiciel: Java(TM) 6 Update 13 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216013FF}
O42 - Logiciel: K-Lite Codec Pack 4.7.5 (Full) - (...) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: Mozilla Firefox (3.0.6) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.0.6)
O42 - Logiciel: NOD32 v3.0.642 FiX1.2 by TemDono (31 days remaining forever up - (...) [HKLM] -- Eset NOD32 v3.0.642 FiX1.2 by TemDono_is1
O42 - Logiciel: Nero 8 Micro 8.3.2.1 - (.Updatepack.nl.) [HKLM] -- Nero8Lite_is1
O42 - Logiciel: Realtek High Definition Audio Driver - (...) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: SuperCopier2 - (...) [HKLM] -- SuperCopier2
O42 - Logiciel: TL-WN751ND Driver - (.TP-LINK.) [HKLM] -- {14770694-6C1C-4137-95F9-6F934D8491B4}
O42 - Logiciel: UltraISO Premium V9.31 - (...) [HKLM] -- UltraISO_is1
O42 - Logiciel: Vista Drive Indicator! - (.KelCorp.) [HKLM] -- VDrive
O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM] -- Winamp
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Yahoo! Toolbar - (...) [HKLM] -- Yahoo! Companion
O42 - Logiciel: µTorrent - (...) [HKCU] -- uTorrent =>P2P.µTorrent
~ Logic: 41 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\7-Zip]
[HKCU\Software\BitTorrent] =>P2P.BitTorrent
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Cyberlink]
[HKCU\Software\DivXNetworks]
[HKCU\Software\DownloadManager]
[HKCU\Software\ESET]
[HKCU\Software\EasyBoot Systems]
[HKCU\Software\Foxit Software]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Haali]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\Macromedia]
[HKCU\Software\MediaInfo]
[HKCU\Software\Mozilla]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\SFX TEAM]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Winamp]
[HKCU\Software\Yahoo]
[HKLM\Software\Ahead]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CDDB]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Codec Tweak Tool]
[HKLM\Software\Cyberlink]
[HKLM\Software\DivXNetworks]
[HKLM\Software\Doug]
[HKLM\Software\ESET]
[HKLM\Software\EasyBoot Systems]
[HKLM\Software\Foxit Software]
[HKLM\Software\GNU]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\HaaliMkx]
[HKLM\Software\INTEL]
[HKLM\Software\JavaSoft]
[HKLM\Software\KLCodecPack]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Nero]
[HKLM\Software\Nullsoft]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\S3R521]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\TP-LINK]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Yahoo]
[HKLM\Software\mozilla.org]
~ Key Software: 133 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 23/04/2015 - 00:03:47 - [] ----D C:\Program Files\7-Zip
O43 - CFD: 23/04/2015 - 00:04:02 - [] ----D C:\Program Files\Allok 3GP PSP MP4 iPod Video Converter
O43 - CFD: 23/04/2015 - 00:04:07 - [] ----D C:\Program Files\CCleaner
O43 - CFD: 23/04/2015 - 00:00:42 - [0] ----D C:\Program Files\ComPlus Applications
O43 - CFD: 23/04/2015 - 00:12:19 - [] ----D C:\Program Files\ESET
O43 - CFD: 23/04/2015 - 00:15:47 - [] ----D C:\Program Files\Fichiers communs
O43 - CFD: 23/04/2015 - 00:04:13 - [] ----D C:\Program Files\Foxit Software
O43 - CFD: 23/04/2015 - 00:20:25 - [] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 23/04/2015 - 00:19:47 - [] ----D C:\Program Files\Internet Download Manager
O43 - CFD: 23/04/2015 - 00:11:28 - [] ----D C:\Program Files\Internet Explorer
O43 - CFD: 23/04/2015 - 00:04:34 - [] ----D C:\Program Files\Java
O43 - CFD: 23/04/2015 - 00:06:28 - [] ----D C:\Program Files\K-Lite Codec Pack
O43 - CFD: 22/04/2015 - 23:59:46 - [] ----D C:\Program Files\Messenger
O43 - CFD: 23/04/2015 - 00:06:44 - [] ----D C:\Program Files\microsoft frontpage
O43 - CFD: 23/04/2015 - 00:15:12 - [] ----D C:\Program Files\Microsoft Office
O43 - CFD: 23/04/2015 - 00:13:40 - [] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 23/04/2015 - 00:02:03 - [] ----D C:\Program Files\Movie Maker
O43 - CFD: 23/04/2015 - 00:19:53 - [] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 23/04/2015 - 00:15:07 - [] ----D C:\Program Files\MSECache
O43 - CFD: 22/04/2015 - 23:59:04 - [] ----D C:\Program Files\MSN
O43 - CFD: 22/04/2015 - 23:59:34 - [] ----D C:\Program Files\MSN Gaming Zone
O43 - CFD: 23/04/2015 - 00:10:29 - [] ----D C:\Program Files\Nero
O43 - CFD: 23/04/2015 - 00:02:13 - [] ----D C:\Program Files\NetMeeting
O43 - CFD: 23/04/2015 - 00:00:25 - [] ----D C:\Program Files\Online Services
O43 - CFD: 23/04/2015 - 00:02:10 - [] ----D C:\Program Files\Outlook Express =>.Microsoft Corporation
O43 - CFD: 23/04/2015 - 00:02:30 - [] ----D C:\Program Files\Services en ligne
O43 - CFD: 23/04/2015 - 00:15:25 - [] ----D C:\Program Files\SuperCopier2
O43 - CFD: 23/04/2015 - 00:15:48 - [] ----D C:\Program Files\UltraISO
O43 - CFD: 23/04/2015 - 00:18:11 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 23/04/2015 - 00:15:24 - [] ----D C:\Program Files\uTorrent =>P2P.µTorrent
O43 - CFD: 23/04/2015 - 00:03:59 - [] ----D C:\Program Files\Winamp
O43 - CFD: 23/04/2015 - 00:00:05 - [] ----D C:\Program Files\Windows Live
O43 - CFD: 23/04/2015 - 00:00:20 - [] ----D C:\Program Files\Windows Live SkyDrive
O43 - CFD: 22/04/2015 - 23:59:49 - [] ----D C:\Program Files\Windows Media Connect 2
O43 - CFD: 23/04/2015 - 00:03:32 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 22/04/2015 - 23:59:27 - [] ----D C:\Program Files\Windows NT
O43 - CFD: 23/04/2015 - 00:02:33 - [0] --H-D C:\Program Files\WindowsUpdate
O43 - CFD: 23/04/2015 - 00:04:16 - [] ----D C:\Program Files\WinRAR
O43 - CFD: 23/04/2015 - 00:06:44 - [] ----D C:\Program Files\xerox
O43 - CFD: 23/04/2015 - 00:04:10 - [] ----D C:\Program Files\Yahoo!
O43 - CFD: 22/04/2015 - 22:25:54 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 23/04/2015 - 00:14:00 - [] ----D C:\Program Files\Fichiers communs\DESIGNER
O43 - CFD: 23/04/2015 - 00:15:47 - [] ----D C:\Program Files\Fichiers communs\EZB Systems
O43 - CFD: 23/04/2015 - 00:15:11 - [] ----D C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 23/04/2015 - 00:02:09 - [] ----D C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 23/04/2015 - 00:10:25 - [] ----D C:\Program Files\Fichiers communs\Nero
O43 - CFD: 22/04/2015 - 23:53:55 - [] ----D C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 23/04/2015 - 00:02:12 - [] ----D C:\Program Files\Fichiers communs\Services
O43 - CFD: 22/04/2015 - 23:53:53 - [] ----D C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 23/04/2015 - 00:13:50 - [] ----D C:\Program Files\Fichiers communs\System
O43 - CFD: 23/04/2015 - 00:12:19 - [] ----D C:\Documents and Settings\All Users\Application Data\ESET
O43 - CFD: 23/04/2015 - 00:13:40 - [] -S--D C:\Documents and Settings\All Users\Application Data\Microsoft
O43 - CFD: 23/04/2015 - 00:10:22 - [] ----D C:\Documents and Settings\All Users\Application Data\Nero
O43 - CFD: 23/04/2015 - 00:20:20 - [] ----D C:\Documents and Settings\All Users\Application Data\TP-LINK
O43 - CFD: 23/04/2015 - 00:04:10 - [] ----D C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
O43 - CFD: 23/04/2015 - 00:03:47 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\7-Zip
O43 - CFD: 23/04/2015 - 00:01:22 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 23/04/2015 - 00:04:02 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Allok 3GP PSP MP4 iPod Video Converter
O43 - CFD: 22/04/2015 - 23:53:09 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 23/04/2015 - 00:12:19 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ESET
O43 - CFD: 23/04/2015 - 00:04:13 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Foxit Reader
O43 - CFD: 23/04/2015 - 00:19:44 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Internet Download Manager
O43 - CFD: 23/04/2015 - 00:01:01 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux
O43 - CFD: 23/04/2015 - 00:06:31 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\K-Lite Codec Pack
O43 - CFD: 23/04/2015 - 00:14:19 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Office
O43 - CFD: 23/04/2015 - 00:04:26 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox
O43 - CFD: 23/04/2015 - 00:10:27 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Nero
O43 - CFD: 23/04/2015 - 00:03:40 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 23/04/2015 - 00:20:38 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\TP-LINK
O43 - CFD: 23/04/2015 - 00:15:52 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\UltraISO
O43 - CFD: 23/04/2015 - 00:01:27 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Windows Live
O43 - CFD: 23/04/2015 - 00:04:16 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinRAR
O43 - CFD: 22/04/2015 - 22:25:54 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP =>.Nicolas Coolman
O43 - CFD: 23/04/2015 - 00:15:59 - [] ----D C:\Documents and Settings\Administrateur\Application Data\Adobe
O43 - CFD: 23/04/2015 - 00:19:47 - [] ----D C:\Documents and Settings\Administrateur\Application Data\DMCache
O43 - CFD: 23/04/2015 - 00:04:13 - [] ----D C:\Documents and Settings\Administrateur\Application Data\Foxit
O43 - CFD: 23/04/2015 - 00:18:14 - [] ----D C:\Documents and Settings\Administrateur\Application Data\Identities
O43 - CFD: 22/04/2015 - 22:25:12 - [] ----D C:\Documents and Settings\Administrateur\Application Data\IDM
O43 - CFD: 23/04/2015 - 00:18:22 - [] -S--D C:\Documents and Settings\Administrateur\Application Data\Microsoft
O43 - CFD: 23/04/2015 - 00:15:59 - [] ----D C:\Documents and Settings\Administrateur\Application Data\Mozilla
O43 - CFD: 23/04/2015 - 00:04:26 - [] ----D C:\Documents and Settings\Administrateur\Application Data\Sun
O43 - CFD: 23/04/2015 - 00:16:04 - [] ----D C:\Documents and Settings\Administrateur\Application Data\uTorrent =>P2P.µTorrent
O43 - CFD: 23/04/2015 - 00:16:04 - [] ----D C:\Documents and Settings\Administrateur\Application Data\Winamp
O43 - CFD: 23/04/2015 - 00:15:59 - [0] ----D C:\Documents and Settings\Administrateur\Application Data\WinRAR
O43 - CFD: 23/04/2015 - 00:04:10 - [] ----D C:\Documents and Settings\Administrateur\Application Data\Yahoo!
O43 - CFD: 22/04/2015 - 22:26:13 - [] ----D C:\Documents and Settings\Administrateur\Application Data\ZHP =>.Nicolas Coolman
O43 - CFD: 23/04/2015 - 00:18:32 - [] -S--D C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft
O43 - CFD: 23/04/2015 - 00:15:59 - [] ----D C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla
O43 - CFD: 23/04/2015 - 00:18:22 - [] R---D C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 23/04/2015 - 00:04:08 - [] ----D C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\CCleaner
O43 - CFD: 22/04/2015 - 23:53:09 - [] R---D C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 23/04/2015 - 00:19:44 - [] ----D C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Internet Download Manager
O43 - CFD: 23/04/2015 - 00:15:25 - [] ----D C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\SuperCopier2
O43 - CFD: 23/04/2015 - 00:15:25 - [] ----D C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\uTorrent =>P2P.µTorrent
O43 - CFD: 23/04/2015 - 00:04:16 - [] ----D C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\WinRAR
~ Program Folder: 95 Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.25291FEEF66404109D2EAD2B45AD1960] - 22/04/2015 - 22:23:21 ---A- . (...) -- C:\WINDOWS\setupapi.log [7263]
O44 - LFC:[MD5.8ED4B133A53CCD1C4C34E61EF321673C] - 22/04/2015 - 22:23:39 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [1096704]
O44 - LFC:[MD5.F02600052B3135FBAD9FF4B1A179687B] - 22/04/2015 - 22:23:39 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [67784]
O44 - LFC:[MD5.E5CD723A7240F4F6000BA1BC177B4C2A] - 22/04/2015 - 22:23:39 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [83134]
O44 - LFC:[MD5.857A10CA248F4F9F96DF8AE5B6EEEECE] - 22/04/2015 - 22:23:39 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [430064]
O44 - LFC:[MD5.31E64E565938CF65FED3BE45D1334D9F] - 22/04/2015 - 22:23:39 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [502320]
O44 - LFC:[MD5.B1B01BDC9D1E2D73DB0039635E95D4C0] - 22/04/2015 - 22:23:45 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [33806]
O44 - LFC:[MD5.A799EA2E17F8C6747801E37F25FE078F] - 22/04/2015 - 23:53:00 R--A- . (...) -- C:\WINDOWS\SET3.tmp [1246130]
O44 - LFC:[MD5.7DEBF83AF61B07063EF0CEEADD4B4E59] - 22/04/2015 - 23:53:01 R--A- . (...) -- C:\WINDOWS\SET4.tmp [1088840]
O44 - LFC:[MD5.619D9DD12A0BFDB080A86CE19F09CA10] - 22/04/2015 - 23:53:03 R--A- . (...) -- C:\WINDOWS\SET8.tmp [16825]
O44 - LFC:[MD5.F297AF7D5C0A1BE3047345894430DD1D] - 22/04/2015 - 23:53:17 ---A- . (.Microsoft Corporation - Pages de propriétés pour les périphériques.) -- C:\WINDOWS\system32\storprop.dll [76800]
O44 - LFC:[MD5.486E0B1BC94C346E5C352C295388C803] - 22/04/2015 - 23:53:18 ----- . (...) -- C:\WINDOWS\system32\CONFIG.TMP [3072]
O44 - LFC:[MD5.F08DBD8C48A168818A3DFC28929EE6B5] - 22/04/2015 - 23:53:18 ---A- . (...) -- C:\WINDOWS\system32\AUTOEXEC.NT [1896]
O44 - LFC:[MD5.5908A51993B7175271987C07CBE06950] - 22/04/2015 - 23:53:18 ---A- . (.Microsoft Corporation - Battery Class Installer.) -- C:\WINDOWS\system32\batt.dll [8704]
O44 - LFC:[MD5.2DCC5C800F51D487178814CA9EADA181] - 22/04/2015 - 23:53:18 ---A- . (.Microsoft Corporation - Bloc-notes.) -- C:\WINDOWS\NOTEPAD.EXE [70656]
O44 - LFC:[MD5.DA090A1AD995DB0716293E029E6198E5] - 22/04/2015 - 23:53:18 ---A- . (.Microsoft Corporation - Gestionnaire des tâches.) -- C:\WINDOWS\TASKMAN.EXE [15872]
O44 - LFC:[MD5.C93C9FF7B04D772627A3646D89F7BF89] - 22/04/2015 - 23:53:18 ---A- . (.Microsoft Corporation - Infra-Red Bus Enumerator.) -- C:\WINDOWS\system32\Drivers\irenum.sys [11264]
O44 - LFC:[MD5.1E9B88D340481EDA7A9BF53A949E1F42] - 22/04/2015 - 23:53:20 ---A- . (.Digi International - DGSETUP DLL.) -- C:\WINDOWS\system32\dgsetup.dll [86044]
O44 - LFC:[MD5.7AE4CDB4AD25A08B711ECC5BE12EF3D7] - 22/04/2015 - 23:53:20 ---A- . (.Digi International, Inc. - Digi RealPort® Driver Upgrade.) -- C:\WINDOWS\system32\dgrpsetu.dll [176157]
O44 - LFC:[MD5.F899213C79DEE079DCE1EE730D82594F] - 22/04/2015 - 23:53:20 ---A- . (.Equinox Systems Inc. - Co-installeur série multiport Equinox.) -- C:\WINDOWS\system32\EqnClass.Dll [103424]
O44 - LFC:[MD5.FA511331A48B582A7D584FC2408E8C1A] - 22/04/2015 - 23:53:20 ---A- . (.Perle Systems Ltd. - Specialix MPS NT Upgrade CoInstaller.) -- C:\WINDOWS\system32\spxcoins.dll [24661]
O44 - LFC:[MD5.6CB26848BCDAA361B6EE21264FB362C3] - 22/04/2015 - 23:53:21 ---A- . (...) -- C:\WINDOWS\system32\c_20127.nls [66082]
O44 - LFC:[MD5.A6011889A0F23EA2BFC9CCDEC11DF553] - 22/04/2015 - 23:53:21 ---A- . (.Microsoft Corporation - Co-installateur de classe Infrarouge.) -- C:\WINDOWS\system32\irclass.dll [13312]
O44 - LFC:[MD5.6F8A509550FE8C92D07EE0143BF29BA1] - 22/04/2015 - 23:53:25 ---A- . (...) -- C:\WINDOWS\system32\c_10010.nls [66082]
O44 - LFC:[MD5.D2CA471D36A69D17F82D5C1B64FAEE39] - 22/04/2015 - 23:53:25 ---A- . (...) -- C:\WINDOWS\system32\c_10029.nls [66082]
O44 - LFC:[MD5.9CA501D2A8E6909C5B2E8C9274682BF1] - 22/04/2015 - 23:53:25 ---A- . (...) -- C:\WINDOWS\system32\c_10082.nls [66082]
O44 - LFC:[MD5.21E928C8E6ED8EEAB0D1AAEE82ACDD76] - 22/04/2015 - 23:53:25 ---A- . (...) -- C:\WINDOWS\system32\c_852.nls [66594]
O44 - LFC:[MD5.615DDBB5CBBAE8301C1E7FA95F1E66A3] - 22/04/2015 - 23:53:25 R--A- . (.Microsoft Corporation - Albania Keyboard Layout.) -- C:\WINDOWS\system32\KBDAL.DLL [6656]
O44 - LFC:[MD5.5B46568257EE49714564511D58E0DE53] - 22/04/2015 - 23:53:25 R--A- . (.Microsoft Corporation - Croatian/Slovenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdcr.dll [6656]
O44 - LFC:[MD5.36E68E02AF2206FC4A8C73CAEABE1FB0] - 22/04/2015 - 23:53:25 R--A- . (.Microsoft Corporation - Czech Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz.dll [7168]
O44 - LFC:[MD5.AFA30A44ED11A5F9A059A2767AB6A81A] - 22/04/2015 - 23:53:25 R--A- . (.Microsoft Corporation - Czech_101 Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz1.dll [6656]
O44 - LFC:[MD5.90535C13EB54E1F2C95478F1B99DCCEB] - 22/04/2015 - 23:53:25 R--A- . (.Microsoft Corporation - Czech_Programmer's Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz2.dll [6656]
O44 - LFC:[MD5.F3D1EEC756847C70E65335E8CA1AE64B] - 22/04/2015 - 23:53:25 R--A- . (.Microsoft Corporation - Hungarian 101-key Keyboard Layout.) -- C:\WINDOWS\system32\kbdhu1.dll [5632]
O44 - LFC:[MD5.CF92D95B5CB6649CB9D7E8D7616487A7] - 22/04/2015 - 23:53:25 R--A- . (.Microsoft Corporation - Hungarian Keyboard Layout.) -- C:\WINDOWS\system32\kbdhu.dll [6656]
O44 - LFC:[MD5.D199B05901C2407FC0F87444A24A4F3C] - 22/04/2015 - 23:53:25 R--A- . (.Microsoft Corporation - Polish Keyboard Layout.) -- C:\WINDOWS\system32\kbdpl.dll [6656]
O44 - LFC:[MD5.897663C8606357A8E86E57CDEA8EE219] - 22/04/2015 - 23:53:25 R--A- . (.Microsoft Corporation - Polish Programmer's Keyboard Layout.) -- C:\WINDOWS\system32\kbdpl1.dll [5632]
O44 - LFC:[MD5.C2E62748C875A310A6D5B10498238A68] - 22/04/2015 - 23:53:25 R--A- . (.Microsoft Corporation - Romanian Keyboard Layout.) -- C:\WINDOWS\system32\kbdro.dll [5632]
O44 - LFC:[MD5.552221E92D6BF55F8358B927F00696C3] - 22/04/2015 - 23:53:25 R--A- . (.Microsoft Corporation - Serbian_Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdycl.dll [6656]
O44 - LFC:[MD5.DCCE231E5BDF1401AC0F770EE16902AA] - 22/04/2015 - 23:53:25 R--A- . (.Microsoft Corporation - Slovak Keyboard Layout.) -- C:\WINDOWS\system32\kbdsl.dll [6656]
O44 - LFC:[MD5.93033C3EA80FB24B198B24DDECA07D4A] - 22/04/2015 - 23:53:25 R--A- . (.Microsoft Corporation - Slovak(QWERTY) Keyboard Layout.) -- C:\WINDOWS\system32\kbdsl1.dll [6656]
O44 - LFC:[MD5.5D038EEABA8EA438F6B5ABD5E91BC851] - 22/04/2015 - 23:53:26 ---A- . (...) -- C:\WINDOWS\system32\C_28594.NLS [66082]
O44 - LFC:[MD5.3E969213F35127D83DAB48FF1283E8E4] - 22/04/2015 - 23:53:26 ---A- . (...) -- C:\WINDOWS\system32\c_855.nls [66594]
O44 - LFC:[MD5.5CD475CA7B87844DE1E0483B536F9AAE] - 22/04/2015 - 23:53:26 ---A- . (...) -- C:\WINDOWS\system32\c_866.nls [66594]
O44 - LFC:[MD5.BBB6C3346064C6AECEE6AD9F144B1AEA] - 22/04/2015 - 23:53:26 R--A- . (.Microsoft Corporation - Estonia Keyboard Layout.) -- C:\WINDOWS\system32\kbdest.dll [6144]
O44 - LFC:[MD5.C047165ED75FF85DB5A89EFEE3DA1133] - 22/04/2015 - 23:53:27 R--A- . (.Microsoft Corporation - Latvia Keyboard Layout.) -- C:\WINDOWS\system32\kbdlv.dll [6144]
O44 - LFC:[MD5.27D72BCF2B495FCDA073DBA5F189D7A1] - 22/04/2015 - 23:53:27 R--A- . (.Microsoft Corporation - Latvia-QWERTY Keyboard Layout.) -- C:\WINDOWS\system32\kbdlv1.dll [6144]
O44 - LFC:[MD5.F5B3B152A1D2752BC88928EB1E031B7E] - 22/04/2015 - 23:53:27 R--A- . (.Microsoft Corporation - Lithuania Keyboard Layout.) -- C:\WINDOWS\system32\kbdlt.dll [5632]
O44 - LFC:[MD5.AF05A41DBD1B0424B5CB47092152C7F6] - 22/04/2015 - 23:53:27 R--A- . (.Microsoft Corporation - Lithuanian Keyboard Layout.) -- C:\WINDOWS\system32\kbdlt1.dll [5632]
O44 - LFC:[MD5.B537ACFAB9E70F0EF48DB696A08ADC81] - 22/04/2015 - 23:53:28 ---A- . (...) -- C:\WINDOWS\system32\C_28597.NLS [66082]
O44 - LFC:[MD5.0A206B5CACD3CA70D2044DA691304765] - 22/04/2015 - 23:53:28 ---A- . (...) -- C:\WINDOWS\system32\c_10006.nls [66082]
O44 - LFC:[MD5.BAC7072B365F9648CA318154BA7E03EC] - 22/04/2015 - 23:53:28 ---A- . (...) -- C:\WINDOWS\system32\c_737.nls [66594]
O44 - LFC:[MD5.780C444EB16B65E6DE96F794A732DA12] - 22/04/2015 - 23:53:28 ---A- . (...) -- C:\WINDOWS\system32\c_869.nls [66594]
O44 - LFC:[MD5.8BE0D77A873730B4EB1DAB7C6622CD46] - 22/04/2015 - 23:53:28 ---A- . (...) -- C:\WINDOWS\system32\c_875.nls [66082]
O44 - LFC:[MD5.1E81E1F3D5ACB3371CF73C1DE8F800BF] - 22/04/2015 - 23:53:28 R--A- . (.Microsoft Corporation - Greek IBM 220 Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe220.dll [5632]
O44 - LFC:[MD5.D26533FDF72381947F823882BBA4A196] - 22/04/2015 - 23:53:28 R--A- . (.Microsoft Corporation - Greek IBM 220 Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdhela2.dll [6144]
O44 - LFC:[MD5.AC81A176BA35D1D7A5CD53137F3160FE] - 22/04/2015 - 23:53:28 R--A- . (.Microsoft Corporation - Greek IBM 319 Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe319.dll [5632]
O44 - LFC:[MD5.F2312B8A76FD584ACD1D956688BEB6F8] - 22/04/2015 - 23:53:28 R--A- . (.Microsoft Corporation - Greek IBM 319 Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdhela3.dll [6656]
O44 - LFC:[MD5.83C99B438B3D6DBE7B838DA783E173AC] - 22/04/2015 - 23:53:28 R--A- . (.Microsoft Corporation - Greek Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe.dll [5632]
O44 - LFC:[MD5.A93447C87DDB6B1945F1F5F87EAB68DC] - 22/04/2015 - 23:53:28 R--A- . (.Microsoft Corporation - Greek_Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdgkl.dll [6144]
O44 - LFC:[MD5.90CC52E8B52F0EC3A41D14FFBE789324] - 22/04/2015 - 23:53:28 R--A- . (.Microsoft Corporation - Greek_Polytonic Keyboard Layout.) -- C:\WINDOWS\system32\kbdhept.dll [8192]
O44 - LFC:[MD5.E22D1B9AC7854C0A654E4C4232074E49] - 22/04/2015 - 23:53:29 ---A- . (...) -- C:\WINDOWS\system32\C_28595.NLS [66082]
O44 - LFC:[MD5.AF4A866226BD04ACF06135088D75BB63] - 22/04/2015 - 23:53:29 ---A- . (...) -- C:\WINDOWS\system32\c_10007.nls [66082]
O44 - LFC:[MD5.314E85390BEBDAE5D1E11DB2D8CBC6E9] - 22/04/2015 - 23:53:29 ---A- . (...) -- C:\WINDOWS\system32\c_10017.nls [66082]
O44 - LFC:[MD5.A1FA7A83F9D98D84419A8E64286284F4] - 22/04/2015 - 23:53:29 R--A- . (.Microsoft Corporation - Belarusian Keyboard Layout.) -- C:\WINDOWS\system32\kbdblr.dll [5632]
O44 - LFC:[MD5.1DF6E4758611E1328567BFE4D1B28E27] - 22/04/2015 - 23:53:29 R--A- . (.Microsoft Corporation - Bulgarian Keyboard Layout.) -- C:\WINDOWS\system32\kbdbu.dll [5632]
O44 - LFC:[MD5.95D9106D39AB410A7F7EE513F181F84C] - 22/04/2015 - 23:53:29 R--A- . (.Microsoft Corporation - Kazak_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdkaz.dll [5632]
O44 - LFC:[MD5.B6E962B7AC1CB4A78876953D369BE6DD] - 22/04/2015 - 23:53:29 R--A- . (.Microsoft Corporation - Russia(Typewriter) Keyboard Layout.) -- C:\WINDOWS\system32\kbdru1.dll [5632]
O44 - LFC:[MD5.C6F23BC1411E91C179B0635893BB40A1] - 22/04/2015 - 23:53:29 R--A- . (.Microsoft Corporation - Russian Keyboard Layout.) -- C:\WINDOWS\system32\kbdru.dll [5632]
O44 - LFC:[MD5.E5D4673C83271FEEE1ED73E1E281A42B] - 22/04/2015 - 23:53:29 R--A- . (.Microsoft Corporation - Serbian_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdycc.dll [5632]
O44 - LFC:[MD5.3DDE3DC57C54452A313DC20F3019F8E3] - 22/04/2015 - 23:53:29 R--A- . (.Microsoft Corporation - Ukrainian Keyboard Layout.) -- C:\WINDOWS\system32\kbdur.dll [5632]
O44 - LFC:[MD5.0304318F189E3CC4A99FCCCB0A68147F] - 22/04/2015 - 23:53:30 R--A- . (.Microsoft Corporation - Azerbaijan_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdaze.dll [5632]
O44 - LFC:[MD5.1696413C242327A0AF8AF8E5CBD8AE04] - 22/04/2015 - 23:53:30 R--A- . (.Microsoft Corporation - Kyrgyz Keyboard Layout.) -- C:\WINDOWS\system32\kbdkyr.dll [5632]
O44 - LFC:[MD5.6AEDBCEE8C0475B10A5C244A35572737] - 22/04/2015 - 23:53:30 R--A- . (.Microsoft Corporation - Mongolian Keyboard Layout.) -- C:\WINDOWS\system32\kbdmon.dll [5632]
O44 - LFC:[MD5.F2D1EEF5ADCD5995C015AB3CB15C9415] - 22/04/2015 - 23:53:30 R--A- . (.Microsoft Corporation - Tatar_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdtat.dll [5632]
O44 - LFC:[MD5.4F9CFFBF05831BB81833FC64A5329C36] - 22/04/2015 - 23:53:30 R--A- . (.Microsoft Corporation - Uzbek_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbduzb.dll [5632]
O44 - LFC:[MD5.EFFDFF60A38CF648811BBCDD722ECF5E] - 22/04/2015 - 23:53:31 ---A- . (...) -- C:\WINDOWS\system32\c_10081.nls [66082]
O44 - LFC:[MD5.C37A21EE1ADFDC13FC707D97073148ED] - 22/04/2015 - 23:53:31 ---A- . (...) -- C:\WINDOWS\system32\c_28599.nls [66082]
O44 - LFC:[MD5.A8764750B22B528D85A691A52CB21856] - 22/04/2015 - 23:53:31 ---A- . (...) -- C:\WINDOWS\system32\c_857.nls [66594]
O44 - LFC:[MD5.712A218557F99D136735E0545E5AE223] - 22/04/2015 - 23:53:31 R--A- . (.Microsoft Corporation - Azeri-Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdazel.dll [5632]
O44 - LFC:[MD5.188E56B70419D8353B8D4F3E381D9E52] - 22/04/2015 - 23:53:31 R--A- . (.Microsoft Corporation - Turkish F Keyboard Layout.) -- C:\WINDOWS\system32\kbdtuf.dll [6144]
O44 - LFC:[MD5.5D569F2951F878EF01D7723DC08682E9] - 22/04/2015 - 23:53:31 R--A- . (.Microsoft Corporation - Turkish Q Keyboard Layout.) -- C:\WINDOWS\system32\kbdtuq.dll [6144]
O44 - LFC:[MD5.35448F3A71EBBECF8E997FAD3A99327D] - 22/04/2015 - 23:53:33 ---A- . (...) -- C:\WINDOWS\system32\c_28603.nls [66082]
O44 - LFC:[MD5.DCE6C200965B21A6A1F3AF9BDB0ECA0C] - 22/04/2015 - 23:53:33 ---A- . (.Microsoft Corporation - Thai Wordbreaker.) -- C:\WINDOWS\system32\ftlx041e.dll [6144]
O44 - LFC:[MD5.F3C139AD492C4F73353057442E6995CE] - 22/04/2015 - 23:53:34 ---A- . (...) -- C:\WINDOWS\system32\c_10021.nls [66082]
O44 - LFC:[MD5.7D352AB808790C2E9E9DB6C105CF612F] - 22/04/2015 - 23:53:34 R--A- . (.Microsoft Corporation - Thai Kedmanee (non-ShiftLock) Keyboard Layo.) -- C:\WINDOWS\system32\kbdth2.dll [6144]
O44 - LFC:[MD5.117165FB781152E40C2180F66CBAC891] - 22/04/2015 - 23:53:34 R--A- . (.Microsoft Corporation - Thai Kedmanee Keyboard Layout.) -- C:\WINDOWS\system32\kbdth0.dll [5632]
O44 - LFC:[MD5.D99EC6E644373B10B4C84048CEBCAF21] - 22/04/2015 - 23:53:34 R--A- . (.Microsoft Corporation - Thai Pattachote (non-ShiftLock) Keyboard La.) -- C:\WINDOWS\system32\kbdth3.dll [6144]
O44 - LFC:[MD5.095B7A282AEF532A31CD5AB5DB2B9A49] - 22/04/2015 - 23:53:34 R--A- . (.Microsoft Corporation - Thai Pattachote Keyboard Layout.) -- C:\WINDOWS\system32\kbdth1.dll [5632]
O44 - LFC:[MD5.72233F1A1D788A84D4687A258CC97CBF] - 22/04/2015 - 23:53:40 ---A- . (...) -- C:\WINDOWS\system32\c_10005.nls [66082]
O44 - LFC:[MD5.A99203A3397A9DB352C5D8DFBDA230A8] - 22/04/2015 - 23:53:40 ---A- . (...) -- C:\WINDOWS\system32\c_862.nls [66594]
O44 - LFC:[MD5.42F5D1376CA979E956A86964FA0D358F] - 22/04/2015 - 23:53:40 R--A- . (.Microsoft Corporation - KBDHEB Keyboard Layout.) -- C:\WINDOWS\system32\kbdheb.dll [5632]
O44 - LFC:[MD5.4D4C7CED88E5621F21A4911A44CADACC] - 22/04/2015 - 23:53:43 ---A- . (...) -- C:\WINDOWS\system32\C_28596.NLS [66082]
O44 - LFC:[MD5.1DBBCC1B712C2674BDF29A05A5DD366E] - 22/04/2015 - 23:53:43 ---A- . (...) -- C:\WINDOWS\system32\c_10004.nls [66082]
O44 - LFC:[MD5.77F127766D758EB2C6451E221A0C7F7D] - 22/04/2015 - 23:53:43 ---A- . (...) -- C:\WINDOWS\system32\c_708.nls [66082]
O44 - LFC:[MD5.C050215D8D21DF5658E94187973FB89C] - 22/04/2015 - 23:53:43 ---A- . (...) -- C:\WINDOWS\system32\c_720.nls [66594]
O44 - LFC:[MD5.C58563DF50115E935BC811FFBCE1FC89] - 22/04/2015 - 23:53:43 ---A- . (...) -- C:\WINDOWS\system32\c_864.nls [66594]
O44 - LFC:[MD5.D3C4347C5BEC57226ACA73BFFDC22E40] - 22/04/2015 - 23:53:43 R--A- . (.Microsoft Corporation - Arabic_English_101 Keyboard Layout.) -- C:\WINDOWS\system32\kbda1.dll [5632]
O44 - LFC:[MD5.465E698788EC46B5E59A755CB0DE850A] - 22/04/2015 - 23:53:44 ---A- . (.Microsoft Corporation - US IBM Arabic 238_L Keyboard Layout.) -- C:\WINDOWS\system32\kbdusa.dll [5632]
O44 - LFC:[MD5.BDAAC25FA476984ED44719BEBE908A08] - 22/04/2015 - 23:53:44 R--A- . (.Microsoft Corporation - Arabic_2 Keyboard Layout.) -- C:\WINDOWS\system32\kbda2.dll [5632]
O44 - LFC:[MD5.187351E6E2EA64DE1F179D1C79909E74] - 22/04/2015 - 23:53:44 R--A- . (.Microsoft Corporation - Arabic_French_102 Keyboard Layout.) -- C:\WINDOWS\system32\kbda3.dll [5632]
O44 - LFC:[MD5.D69D0521B115D3E859183283754B5DF2] - 22/04/2015 - 23:53:44 R--A- . (.Microsoft Corporation - Divehi Phonetic Keyboard Layout.) -- C:\WINDOWS\system32\kbddiv1.dll [5632]
O44 - LFC:[MD5.96BE5DEF930D2F8BA4DCB98B3B4DB47E] - 22/04/2015 - 23:53:44 R--A- . (.Microsoft Corporation - Divehi Typewriter Keyboard Layout.) -- C:\WINDOWS\system32\kbddiv2.dll [5632]
O44 - LFC:[MD5.6A3F192C65B05AAD670570A184204FA0] - 22/04/2015 - 23:53:44 R--A- . (.Microsoft Corporation - Farsi Keyboard Layout.) -- C:\WINDOWS\system32\kbdfa.dll [5632]
O44 - LFC:[MD5.22C2AF66D10FB47153706E1EA3B21AC8] - 22/04/2015 - 23:53:44 R--A- . (.Microsoft Corporation - Syriac Phoenetic Keyboard Layout.) -- C:\WINDOWS\system32\kbdsyr2.dll [5632]
O44 - LFC:[MD5.402870DEF2B91ABA38DF8BFCA129BCA1] - 22/04/2015 - 23:53:44 R--A- . (.Microsoft Corporation - Syriac Standard Keyboard Layout.) -- C:\WINDOWS\system32\kbdsyr1.dll [5632]
O44 - LFC:[MD5.FD72905E46F0250D7C1C4E1FD38B77F4] - 22/04/2015 - 23:53:44 R--A- . (.Microsoft Corporation - Urdu Keyboard Layout.) -- C:\WINDOWS\system32\kbdurdu.dll [5632]
O44 - LFC:[MD5.CF6F4A013A9B41E0321E3A0DDDDCA9B9] - 22/04/2015 - 23:53:47 ---A- . (.Microsoft Corporation - ISCII Code Page Translation DLL.) -- C:\WINDOWS\system32\c_iscii.dll [10752]
O44 - LFC:[MD5.94CEB7ACA994968685E18F6155EA86E8] - 22/04/2015 - 23:53:47 R--A- . (.Microsoft Corporation - Devanagari Keyboard Layout.) -- C:\WINDOWS\system32\kbdindev.dll [5632]
O44 - LFC:[MD5.F514F89F4903C7FC56BE62A4BDE20C60] - 22/04/2015 - 23:53:47 R--A- . (.Microsoft Corporation - Gujarati Keyboard Layout.) -- C:\WINDOWS\system32\kbdinguj.dll [5632]
O44 - LFC:[MD5.0E445D2CEE6F1454973D84E1FFAA6140] - 22/04/2015 - 23:53:47 R--A- . (.Microsoft Corporation - Hindi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinhin.dll [5632]
O44 - LFC:[MD5.5174B929760629FEE0450F821F836CBA] - 22/04/2015 - 23:53:47 R--A- . (.Microsoft Corporation - Marathi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinmar.dll [5632]
O44 - LFC:[MD5.76B29E1C9AEF011AFCE0F591234933BE] - 22/04/2015 - 23:53:47 R--A- . (.Microsoft Corporation - Punjabi/Gurmukhi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinpun.dll [6144]
O44 - LFC:[MD5.DCC32B8533FA6C84D64620BE49E110E3] - 22/04/2015 - 23:53:47 R--A- . (.Microsoft Corporation - Tamil Keyboard Layout.) -- C:\WINDOWS\system32\kbdintam.dll [5632]
O44 - LFC:[MD5.89FD6D6E233393794FB75CF79DDC1E06] - 22/04/2015 - 23:53:47 R--A- . (.Microsoft Corporation - Vietnamese Keyboard Layout.) -- C:\WINDOWS\system32\kbdvntc.dll [5632]
O44 - LFC:[MD5.E98DC261A6D62610293FF0CBDA8CAF65] - 22/04/2015 - 23:53:48 R--A- . (.Microsoft Corporation - Georgian Keyboard Layout.) -- C:\WINDOWS\system32\kbdgeo.dll [5120]
O44 - LFC:[MD5.38709AC2F9012F620DD1043DF0BF86DE] - 22/04/2015 - 23:53:48 R--A- . (.Microsoft Corporation - Kannada Keyboard Layout.) -- C:\WINDOWS\system32\kbdinkan.dll [5632]
O44 - LFC:[MD5.4DA25F026970A630B0F5FE5002BA7ECA] - 22/04/2015 - 23:53:48 R--A- . (.Microsoft Corporation - Telugu Keyboard Layout.) -- C:\WINDOWS\system32\kbdintel.dll [5632]
O44 - LFC:[MD5.1BC1AE513105BD2AEE27583A5DB650D6] - 22/04/2015 - 23:53:49 ---A- . (.Microsoft Corporation - Thai Word Breaker.) -- C:\WINDOWS\system32\Thawbrkr.dll [185344]
O44 - LFC:[MD5.0EC03162E932B49E635A79445CCE1E4C] - 22/04/2015 - 23:53:49 R--A- . (.Microsoft Corporation - Eastern Armenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdarme.dll [5120]
O44 - LFC:[MD5.1004B259E77BEF2033CAF435760D95A6] - 22/04/2015 - 23:53:49 R--A- . (.Microsoft Corporation - Western Armenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdarmw.dll [5120]
O44 - LFC:[MD5.A0E02492452D4E237465D99D005D91FD] - 22/04/2015 - 23:53:51 ---A- . (...) -- C:\WINDOWS\system.ini [231]
O44 - LFC:[MD5.8FD44267C6809E520F659E2C3B610B64] - 22/04/2015 - 23:54:01 ---A- . (...) -- C:\WINDOWS\system32\pid.PNF [4444]
O44 - LFC:[MD5.18B1B6FE90BC5CD3F96F47D419CD1E8B] - 22/04/2015 - 23:55:37 ---A- . (.Microsoft Corporation - DLL de l'interface utilisateur USB.) -- C:\WINDOWS\system32\usbui.dll [77312]
O44 - LFC:[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - 22/04/2015 - 23:56:32 ---A- . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
O44 - LFC:[MD5.61364CD71EF63B0F038B7E9DF00F1EFA] - 22/04/2015 - 23:56:51 ---A- . (.Microsoft Corporation - Bluetooth Miniport Driver.) -- C:\WINDOWS\system32\Drivers\BTHUSB.SYS [18944]
O44 - LFC:[MD5.B6DCFA596E97C3964F9148D5D9198EF8] - 22/04/2015 - 23:56:51 ---A- . (.Microsoft Corporation - Pilote de bus Bluetooth.) -- C:\WINDOWS\system32\Drivers\bthport.sys [273664]
O44 - LFC:[MD5.6CB08593487F5701D2D2254E693EAFCE] - 22/04/2015 - 23:57:03 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Descrambler Filter.) -- C:\WINDOWS\system32\Drivers\drmk.sys [60160]
O44 - LFC:[MD5.E82A496C3961EFC6828B508C310CE98F] - 22/04/2015 - 23:57:03 ---A- . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\WINDOWS\system32\Drivers\portcls.sys [146048]
O44 - LFC:[MD5.C8B7941F9824E9F4D3D7B9B9BAE14FEE] - 22/04/2015 - 23:57:03 ---A- . (.Microsoft Corporation - User CSA Library.) -- C:\WINDOWS\system32\ksuser.dll [4096]
O44 - LFC:[MD5.CB02AED45257FEB8D3B294DCFC0CE7C7] - 22/04/2015 - 23:57:03 ---A- . (.Microsoft Corporation - WDM Streaming ActiveMovie Proxy.) -- C:\WINDOWS\system32\ksproxy.ax [129536]
O44 - LFC:[MD5.B5016FAE26C7FC184200D90D33CF1DE4] - 22/04/2015 - 23:57:10 ---A- . (.Microsoft Corporation - Application de transfert de fichier par une.) -- C:\WINDOWS\system32\irftp.exe [153088]
O44 - LFC:[MD5.F9CB3A98B395A5E5CC36C65B3C41AD9C] - 22/04/2015 - 23:57:10 ---A- . (.Microsoft Corporation - Moniteur infrarouge.) -- C:\WINDOWS\system32\irmon.dll [29184]
O44 - LFC:[MD5.0581FA5156804FDF0149E1B942E3CD23] - 22/04/2015 - 23:57:10 ---A- . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshirda.dll [8192]
O44 - LFC:[MD5.B279426E3C0C344893ED78A613A73BDE] - 22/04/2015 - 23:57:11 ---A- . (.Microsoft Corporation - Bluetooth Bus Extender.) -- C:\WINDOWS\system32\Drivers\BthEnum.sys [17024]
O44 - LFC:[MD5.851C30DF2807FCFA21E4C681A7D6440E] - 22/04/2015 - 23:57:11 ---A- . (.Microsoft Corporation - Bluetooth RFCOMM Driver.) -- C:\WINDOWS\system32\Drivers\rfcomm.sys [59136]
O44 - LFC:[MD5.80602B8746D3738F5886CE3D67EF06B6] - 22/04/2015 - 23:57:14 ---A- . (.Microsoft Corporation - Bluetooth Personal Area Networking.) -- C:\WINDOWS\system32\Drivers\bthpan.sys [101120]
O44 - LFC:[MD5.A3B9B4A68BC839CE5A264D5908092261] - 22/04/2015 - 23:57:24 ---A- . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504]
O44 - LFC:[MD5.D9F724AA26C010A217C97606B160ED68] - 22/04/2015 - 23:57:35 ---A- . (.Microsoft Corporation - AudStub Driver.) -- C:\WINDOWS\system32\Drivers\audstub.sys [3072]
O44 - LFC:[MD5.BAD59648BA099DA4A17680B39730CB3D] - 22/04/2015 - 23:57:38 ---A- . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\system32\Drivers\MSPQM.sys [4992]
O44 - LFC:[MD5.8F5FCFF8E8848AFAC920905FBD9D33C8] - 22/04/2015 - 23:57:39 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Audio Descrambler Filt.) -- C:\WINDOWS\system32\Drivers\drmkaud.sys [2944]
O44 - LFC:[MD5.6768ACF64B18196494413695F0C3A00F] - 22/04/2015 - 23:57:40 ---A- . (.Microsoft Corporation - MMSYSTEM Wave/Midi API mapper.) -- C:\WINDOWS\system32\Drivers\wdmaud.sys [83072]
O44 - LFC:[MD5.692BCF44383D056AED41B045A323D378] - 22/04/2015 - 23:57:41 ---A- . (.Microsoft Corporation - Kernel Mode Audio Mixer.) -- C:\WINDOWS\system32\Drivers\kmixer.sys [172416]
O44 - LFC:[MD5.8B83F3ED0F1688B4958F77CD6D2BF290] - 22/04/2015 - 23:57:43 ---A- . (.Microsoft Corporation - System Audio WDM Filter.) -- C:\WINDOWS\system32\Drivers\sysaudio.sys [60800]
O44 - LFC:[MD5.325BB26842FC7CCC1FCCE2C457317F3E] - 22/04/2015 - 23:57:44 ---A- . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\system32\Drivers\MSPCLOCK.sys [5376]
O44 - LFC:[MD5.D1575E71568F4D9E14CA56B7B0453BF1] - 22/04/2015 - 23:57:46 ---A- . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\system32\Drivers\MSKSSRV.sys [7552]
O44 - LFC:[MD5.8A208DFCF89792A484E76C40E5F50B45] - 22/04/2015 - 23:57:47 ---A- . (.Microsoft Corporation - Microsoft Kernel DLS Synthesizer.) -- C:\WINDOWS\system32\Drivers\DMusic.sys [52864]
O44 - LFC:[MD5.8CE882BCC6CF8A62F2B2323D95CB3D01] - 22/04/2015 - 23:57:49 ---A- . (.Microsoft Corporation - Microsoft GS Wavetable Synthesizer.) -- C:\WINDOWS\system32\Drivers\swmidi.sys [56576]
O44 - LFC:[MD5.8BED39E3C35D6A489438B8141717A557] - 22/04/2015 - 23:57:50 ---A- . (.Microsoft Corporation - Microsoft Acoustic Echo Canceller.) -- C:\WINDOWS\system32\Drivers\aec.sys [142592]
O44 - LFC:[MD5.AB8B92451ECB048A4D1DE7C3FFCB4A9F] - 22/04/2015 - 23:57:51 ---A- . (.Microsoft Corporation - Microsoft Kernel Audio Splitter.) -- C:\WINDOWS\system32\Drivers\splitter.sys [6272]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 22/04/2015 - 23:58:00 ---A- . (...) -- C:\WINDOWS\system32\h323log.txt [0]
O44 - LFC:[MD5.775E188DD15C9AC9E735A556FB95578E] - 22/04/2015 - 23:58:01 -SH-- . (...) -- C:\boot.ini [212]
O44 - LFC:[MD5.15CABD0F7C00C47C70124907916AF3F1] - 22/04/2015 - 23:58:38 ---A- . (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
O44 - LFC:[MD5.88155247177638048422893737429D9E] - 22/04/2015 - 23:58:38 ---A- . (.Microsoft Corporation - Terminal Server Driver.) -- C:\WINDOWS\system32\Drivers\termdd.sys [40840]
O44 - LFC:[MD5.60101662853FA56F3F18F1DEA937FECB] - 22/04/2015 - 23:58:45 ---A- . (.Microsoft Corporation - Application d'assistance du composant de lo.) -- C:\WINDOWS\system32\mmfutil.dll [17920]
O44 - LFC:[MD5.0584A0A065B1FCA52B74FB65A7A19E09] - 22/04/2015 - 23:58:45 ---A- . (.Microsoft Corporation - Composant logiciel enfichable WMI.) -- C:\WINDOWS\system32\cmprops.dll [191488]
O44 - LFC:[MD5.86FC0740683709C5314722EF8CA64062] - 22/04/2015 - 23:58:45 ---A- . (.Microsoft Corporation - WMI Snapins.) -- C:\WINDOWS\system32\servdeps.dll [56320]
O44 - LFC:[MD5.8BC58C4B4471EA21D80FC28FF5788B3B] - 22/04/2015 - 23:58:45 ---A- . (.Microsoft Corporation - Windows Product Activation Configuration WM.) -- C:\WINDOWS\system32\licwmi.dll [58880]
O44 - LFC:[MD5.8A5ECDF0E279CD44F6BDFEA7FB25CDB7] - 22/04/2015 - 23:58:50 ---A- . (.Microsoft Corporation - Microsoft Exchange Server Memory Management.) -- C:\WINDOWS\system32\staxmem.dll [8192]
O44 - LFC:[MD5.8BF86BFCFD105F6CD8E4FF16CFA7DA7A] - 22/04/2015 - 23:58:53 ---A- . (.Microsoft Corporation - ADs IIS Provider DLL.) -- C:\WINDOWS\system32\adsiis.dll [290816]
O44 - LFC:[MD5.61E5B57C1E92719BB01E2A30B4AAAD47] - 22/04/2015 - 23:58:53 ---A- . (.Microsoft Corporation - Async Trace DLL.) -- C:\WINDOWS\system32\exstrace.dll [14336]
O44 - LFC:[MD5.E03B3862B07E15B0866408C6FD9BB372] - 22/04/2015 - 23:58:53 ---A- . (.Microsoft Corporation - IIS Admin Com API Proxy dll.) -- C:\WINDOWS\system32\admwprox.dll [43520]
O44 - LFC:[MD5.E4592F2C465314486A9F329E71717415] - 22/04/2015 - 23:58:53 ---A- . (.Microsoft Corporation - IIS RunTime Library.) -- C:\WINDOWS\system32\iisRtl.dll [133632]
O44 - LFC:[MD5.462CD76CFCAD4423711DC230ADB405C5] - 22/04/2015 - 23:58:53 ---A- . (.Microsoft Corporation - Internet Info Server Admin Client API Stubs.) -- C:\WINDOWS\system32\infoadmn.dll [13312]
O44 - LFC:[MD5.14B60D448DD9AA18F4B020AE48EF6F9F] - 22/04/2015 - 23:58:53 ---A- . (.Microsoft Corporation - Mappeur Microsoft IIS.) -- C:\WINDOWS\system32\iismap.dll [64512]
O44 - LFC:[MD5.405C8240003855DD9D39B1685D45F305] - 22/04/2015 - 23:58:54 ---A- . (.Microsoft Corporation - ADs IIS Extension DLL.) -- C:\WINDOWS\system32\iisext.dll [68608]
O44 - LFC:[MD5.15CEBBB6AF0D08A963EA664A695E30B6] - 22/04/2015 - 23:58:54 ---A- . (.Microsoft Corporation - RWNH.) -- C:\WINDOWS\system32\rwnh.dll [9728]
O44 - LFC:[MD5.A44C7541A5DC3EDF297C35FFBBE9D15A] - 22/04/2015 - 23:58:54 ---A- . (.Microsoft Corporation - SMTP Service Client API Stubs.) -- C:\WINDOWS\system32\smtpapi.dll [10752]
O44 - LFC:[MD5.BD6C84E39CB7073BDA60A0B16B9298C2] - 22/04/2015 - 23:58:57 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\clbcatq.dll [498688]
O44 - LFC:[MD5.67217D3DF13594B3EE2A5F37ABA953B3] - 22/04/2015 - 23:58:57 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comsnap.dll [167424]
O44 - LFC:[MD5.6B9D6177E2852C103114C07D62072851] - 22/04/2015 - 23:58:58 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\catsrv.dll [226304]
O44 - LFC:[MD5.32278ADD920546C94E035549D183A5C1] - 22/04/2015 - 23:58:58 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\catsrvps.dll [85504]
O44 - LFC:[MD5.BEB9AD8CD1E53495D4F584C9F7C1DB3E] - 22/04/2015 - 23:58:58 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\catsrvut.dll [625664]
O44 - LFC:[MD5.3E7E079AF9CFF7AFC4EDCC332E94F42E] - 22/04/2015 - 23:58:58 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\clbcatex.dll [110592]
O44 - LFC:[MD5.84179A6F77F264A71651CE75DCDD7947] - 22/04/2015 - 23:58:58 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comaddin.dll [28160]
O44 - LFC:[MD5.C01BE55479D4323CFFE90C283C7E944D] - 22/04/2015 - 23:58:58 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comrepl.dll [97792]
O44 - LFC:[MD5.4FC412747440950E8C0D24203ECCCD88] - 22/04/2015 - 23:58:58 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comsvcs.dll [1267200]
O44 - LFC:[MD5.D408E96DE7D1DCFC7D37A0C38B31EBF1] - 22/04/2015 - 23:58:58 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comuid.dll [539648]
O44 - LFC:[MD5.79D221D6ECCF243CA4560F4BE7BAD9F5] - 22/04/2015 - 23:58:58 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\stclient.dll [59392]
O44 - LFC:[MD5.8648D670AE0D95C95E7BBB5B80661796] - 22/04/2015 - 23:58:59 ---A- . (.Microsoft Corporation - MS DTC console program.) -- C:\WINDOWS\system32\msdtc.exe [6144]
O44 - LFC:[MD5.2275F850DFCE63C9BE9ADBF42664CFAD] - 22/04/2015 - 23:58:59 ---A- . (.Microsoft Corporation - MS DTC helper APIs DLL.) -- C:\WINDOWS\system32\xolehlp.dll [11776]
O44 - LFC:[MD5.02675B394D2078A72A7E1F04EF2EC481] - 22/04/2015 - 23:58:59 ---A- . (.Microsoft Corporation - MS DTC log manager DLL.) -- C:\WINDOWS\system32\msdtclog.dll [58880]
O44 - LFC:[MD5.912797ACCD9C4361593F23BBDC01EE71] - 22/04/2015 - 23:58:59 ---A- . (.Microsoft Corporation - MS DTC transaction manager DLL.) -- C:\WINDOWS\system32\msdtctm.dll [956928]
O44 - LFC:[MD5.8245A3D7C3C42DFA3536E7F38ACBA1FE] - 22/04/2015 - 23:58:59 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\colbact.dll [60416]
O44 - LFC:[MD5.9D42C248D7C519147F1FA3111382A525] - 22/04/2015 - 23:58:59 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\dcomcnfg.exe [6144]
O44 - LFC:[MD5.DD421F87FD528E330088581E232431DB] - 22/04/2015 - 23:58:59 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\mtxdm.dll [30720]
O44 - LFC:[MD5.47E17AB71B070D0020D765753D3026AB] - 22/04/2015 - 23:58:59 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\mtxex.dll [4096]
O44 - LFC:[MD5.C725F25A2622BF21A761A609DAB360A9] - 22/04/2015 - 23:58:59 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\mtxlegih.dll [34304]
O44 - LFC:[MD5.0B7B1CD44A4B7A8B0B3E122B529629BB] - 22/04/2015 - 23:59:00 ---A- . (.Microsoft Corporation - Configuration Backend Interface.) -- C:\WINDOWS\system32\cfgbkend.dll [39424]
O44 - LFC:[MD5.1BDA51C28FAAB97D8A88D59C8A221485] - 22/04/2015 - 23:59:00 ---A- . (.Microsoft Corporation - DLL Interface to TermDD Device Driver.) -- C:\WINDOWS\system32\icaapi.dll [11264]
O44 - LFC:[MD5.BB0175779746E7DF14182EC461D55CDD] - 22/04/2015 - 23:59:00 ---A- . (.Microsoft Corporation - MS DTC OLE Transactions interface proxy DLL.) -- C:\WINDOWS\system32\msdtcprx.dll [427008]
O44 - LFC:[MD5.D926AEC879EE607570EE97CE48388CA6] - 22/04/2015 - 23:59:00 ---A- . (.Microsoft Corporation - MS DTC administrative component DLL.) -- C:\WINDOWS\system32\msdtcuiu.dll [161792]
O44 - LFC:[MD5.69AB25E73007E9A527A55754820D2D8A] - 22/04/2015 - 23:59:00 ---A- . (.Microsoft Corporation - Microsoft database support DLL for Oracle.) -- C:\WINDOWS\system32\mtxoci.dll [91648]
O44 - LFC:[MD5.C3E6A7A4B35DD176B5D17C0EA485996B] - 22/04/2015 - 23:59:00 ---A- . (.Microsoft Corporation - Pilote multimédia du service Terminal Serve.) -- C:\WINDOWS\system32\rdpsnd.dll [19968]
O44 - LFC:[MD5.B46EF6930DDE7393FB4BD0150BCC786C] - 22/04/2015 - 23:59:00 ---A- . (.Microsoft Corporation - RDP Clip Monitor.) -- C:\WINDOWS\system32\rdpclip.exe [62976]
O44 - LFC:[MD5.70413FB509C8E5248C84F17767557F24] - 22/04/2015 - 23:59:00 ---A- . (.Microsoft Corporation - RDP Extension DLL.) -- C:\WINDOWS\system32\rdpwsx.dll [87176]
O44 - LFC:[MD5.710BC85A8C22626EE094439E3EA0D38C] - 22/04/2015 - 23:59:00 ---A- . (.Microsoft Corporation - Service Terminal Server.) -- C:\WINDOWS\system32\termsrv.dll [297984]
O44 - LFC:[MD5.F9DE7D28A9D584A6D1B22512E45631BC] - 22/04/2015 - 23:59:00 ---A- . (.Microsoft Corporation - Utilitaire d'interrogation de processus.) -- C:\WINDOWS\system32\qprocess.exe [20992]
O44 - LFC:[MD5.A6A06A89A6ABC8964F7D147B3245F217] - 22/04/2015 - 23:59:01 ---A- . (.Microsoft Corporation - Anywhere access client.) -- C:\WINDOWS\system32\aaclient.dll [136192]
O44 - LFC:[MD5.15F67931677258D482A93990F8B3F3AF] - 22/04/2015 - 23:59:01 ---A- . (.Microsoft Corporation - Extension du Panneau de configuration Sessi.) -- C:\WINDOWS\system32\remotepg.dll [61952]
O44 - LFC:[MD5.9F63D9C5B238ED1C375D417EFF3D5BE7] - 22/04/2015 - 23:59:01 ---A- . (.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) -- C:\WINDOWS\system32\sessmgr.exe [142848]
O44 - LFC:[MD5.454F013E6F538FE66A0D567B939BF360] - 22/04/2015 - 23:59:01 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop TSRDP Session Add-.) -- C:\WINDOWS\system32\rdsaddin.exe [13824]
O44 - LFC:[MD5.7BC4641B6C54338593D19130EB674620] - 22/04/2015 - 23:59:01 ---A- . (.Microsoft Corporation - RDSHost Client Module.) -- C:\WINDOWS\system32\rdchost.dll [147968]
O44 - LFC:[MD5.81F64944CDC453A79EB482B99F1A4264] - 22/04/2015 - 23:59:01 ---A- . (.Microsoft Corporation - RDSHost Server Module.) -- C:\WINDOWS\system32\rdshost.exe [67072]
O44 - LFC:[MD5.A42EAADFADEC1D879928CE056EBA1E2A] - 22/04/2015 - 23:59:01 ---A- . (.Microsoft Corporation - Remote Desktop Connection.) -- C:\WINDOWS\system32\mstsc.exe [677888]
O44 - LFC:[MD5.F31CC69F407BEEA05C4440BEA3FEDDE9] - 22/04/2015 - 23:59:01 ---A- . (.Microsoft Corporation - Terminal Services ActiveX Client.) -- C:\WINDOWS\system32\mstscax.dll [2061824]
O44 - LFC:[MD5.3EFE86DBFD6B34FE2ADF6602D657342D] - 22/04/2015 - 23:59:02 ---A- . (.Microsoft Corporation - Fournisseur d'infrastructure WMI de configu.) -- C:\WINDOWS\system32\tscfgwmi.dll [94208]
O44 - LFC:[MD5.6471A66807F5E104E4885F5B67349397] - 22/04/2015 - 23:59:02 ---A- . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys [12040]
O44 - LFC:[MD5.6728E45B66F93C08F11DE2E316FC70DD] - 22/04/2015 - 23:59:02 ---A- . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only,.) -- C:\WINDOWS\system32\Drivers\rdpwd.sys [139656]
O44 - LFC:[MD5.87B6A9310687594F315798D532721F65] - 22/04/2015 - 23:59:02 ---A- . (.Microsoft Corporation - RPC/HTTP Downlevel Side-by-side Runtime.) -- C:\WINDOWS\system32\rhttpaa.dll [290304]
O44 - LFC:[MD5.C56B6D0402371CF3700EB322EF3AAF61] - 22/04/2015 - 23:59:02 ---A- . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys [21896]
O44 - LFC:[MD5.B7BD738EBA6E3C4C0744B4947CB54572] - 22/04/2015 - 23:59:02 ---A- . (.Microsoft Corporation - TSGateway QEC.) -- C:\WINDOWS\system32\tsgqec.dll [53248]
O44 - LFC:[MD5.6A1D9675F87094A7FAB33A67A4C25F1C] - 22/04/2015 - 23:59:03 ---A- . (.Hilgraeve, Inc. - Bibliothèque d'applications HyperTerminal.) -- C:\WINDOWS\system32\hypertrm.dll [354304]
O44 - LFC:[MD5.F12E772F91FF7943AB1D8362E24E18C5] - 22/04/2015 - 23:59:03 ---A- . (.Microsoft Corporation - Afficheur de l'album Windows NT.) -- C:\WINDOWS\system32\clipbrd.exe [104448]
O44 - LFC:[MD5.D0BB79521316E5926A5C3DB49E812428] - 22/04/2015 - 23:59:03 ---A- . (.Microsoft Corporation - Media Player.) -- C:\WINDOWS\system32\mplay32.exe [124928]
O44 - LFC:[MD5.1263B2123DED522D5398980D6FD36358] - 22/04/2015 - 23:59:03 ---A- . (.Microsoft Corporation - Paint.) -- C:\WINDOWS\system32\mspaint.exe [347648]
O44 - LFC:[MD5.D8A768A65A549F07AE6329B8558A0FBB] - 22/04/2015 - 23:59:03 ---A- . (.Microsoft Corporation - Spider.) -- C:\WINDOWS\system32\spider.exe [539136]
O44 - LFC:[MD5.247C9A4B86B395D847353D7169920D42] - 22/04/2015 - 23:59:04 ---A- . (.Microsoft Corporation - Accessoires du magnétophone.) -- C:\WINDOWS\system32\sndrec32.exe [133120]
O44 - LFC:[MD5.72153A1D6181A6C72C1427E782E3A367] - 22/04/2015 - 23:59:04 ---A- . (.Microsoft Corporation - Assistant Accessibilité Microsoft.) -- C:\WINDOWS\system32\accwiz.exe [190464]
O44 - LFC:[MD5.36718363842D69F6EB26AEBEECD72239] - 22/04/2015 - 23:59:04 ---A- . (.Microsoft Corporation - DLL du Panneau de configuration.) -- C:\WINDOWS\system32\access.cpl [71680]
O44 - LFC:[MD5.2CE7B1EEB99C14032C0E2201B004F80E] - 22/04/2015 - 23:59:12 ---A- . (...) -- C:\WINDOWS\system32\wmimgmt.msc [63488]
O44 - LFC:[MD5.DF1B9533D2A6D7CF91E3B299F755652E] - 22/04/2015 - 23:59:15 ---A- . (.Microsoft Corporation - IIS Admin Ex Com API Proxy dll.) -- C:\WINDOWS\system32\admxprox.dll [6144]
O44 - LFC:[MD5.8AE7F4FCE600CC296A71ABE96F59D025] - 22/04/2015 - 23:59:16 ---A- . (...) -- C:\WINDOWS\system32\infoctrs.h [3276]
O44 - LFC:[MD5.F8311FF9EA31242F81771FA56048D363] - 22/04/2015 - 23:59:16 ---A- . (...) -- C:\WINDOWS\system32\infoctrs.ini [17538]
O44 - LFC:[MD5.AE7503EED13ED7516AD964CFD71E36BB] - 22/04/2015 - 23:59:16 ---A- . (.Microsoft Corporation - Common Internet Information Service Perform.) -- C:\WINDOWS\system32\infoctrs.dll [8704]
O44 - LFC:[MD5.3091E56F812FF8335BEBE8DA255ED245] - 22/04/2015 - 23:59:16 ---A- . (.Microsoft Corporation - Internet Service Location protocol library.) -- C:\WINDOWS\system32\inetsloc.dll [19968]
O44 - LFC:[MD5.832F4EF84E852FC2374A8D13AF9BB325] - 22/04/2015 - 23:59:16 ---A- . (.Microsoft Corporation - Utilitaire Conversion de fichier journal II.) -- C:\WINDOWS\system32\convlog.exe [56832]
O44 - LFC:[MD5.FD05272B3AEBA9D4DC5B2015E4154704] - 22/04/2015 - 23:59:16 ---A- . (.Microsoft Corporation - Utilitaire.) -- C:\WINDOWS\system32\iismui.dll [3584]
O44 - LFC:[MD5.CCD2E39DD103F89C9C74E9D349C06D10] - 22/04/2015 - 23:59:16 ---A- . (.Microsoft Corporation - WAMREG Proxy Stub.) -- C:\WINDOWS\system32\wamregps.dll [7168]
O44 - LFC:[MD5.3101A8BCCD6482D59F428F5634C5A7DC] - 22/04/2015 - 23:59:17 ---A- . (.Microsoft Corporation - FTP Service Client API Stubs.) -- C:\WINDOWS\system32\ftpsapi2.dll [6144]
O44 - LFC:[MD5.21E92E94E588B6A8954B3DBA1FE903AE] - 22/04/2015 - 23:59:17 ---A- . (.Microsoft Corporation - IIS Restart API Proxy dll.) -- C:\WINDOWS\system32\iisrstap.dll [5632]
O44 - LFC:[MD5.57F32F2F36E300299B525E21579C0584] - 22/04/2015 - 23:59:17 ---A- . (.Microsoft Corporation - Utilitaire de ligne de commande IIS control.) -- C:\WINDOWS\system32\iisreset.exe [14848]
O44 - LFC:[MD5.EF44CB1F5D34BBD267D0D8AEE7FDC15E] - 22/04/2015 - 23:59:18 ---A- . (...) -- C:\WINDOWS\system32\axctrnm.h [2024]
O44 - LFC:[MD5.B7A0225316B63DD3EF0C5236DC97AF1D] - 22/04/2015 - 23:59:18 ---A- . (...) -- C:\WINDOWS\system32\axperf.ini [15286]
O44 - LFC:[MD5.29211066E577BF4E3BDB89FB0FA8DC50] - 22/04/2015 - 23:59:18 ---A- . (...) -- C:\WINDOWS\system32\w3ctrs.h [5379]
O44 - LFC:[MD5.4A8CEE34640289DE7DB07A2334740A37] - 22/04/2015 - 23:59:18 ---A- . (...) -- C:\WINDOWS\system32\w3ctrs.ini [60366]
O44 - LFC:[MD5.165710F71A2BC1192F532EF963BA4B65] - 22/04/2015 - 23:59:18 ---A- . (.Microsoft Corporation - Active Server Pages Performance Monitor DLL.) -- C:\WINDOWS\system32\aspperf.dll [10240]
O44 - LFC:[MD5.29B72C0F48B51556279F23E465FEF8D4] - 22/04/2015 - 23:59:18 ---A- . (.Microsoft Corporation - Compteurs de performance du service W3.) -- C:\WINDOWS\system32\w3ctrs.dll [4608]
O44 - LFC:[MD5.AAB49DC9357855118447D2C4D7B981AA] - 22/04/2015 - 23:59:18 ---A- . (.Microsoft Corporation - W3 Service Client API Stubs.) -- C:\WINDOWS\system32\w3svapi.dll [5632]
O44 - LFC:[MD5.CDD932EDCB756FB5F7CE5E2F090BA838] - 22/04/2015 - 23:59:21 ---A- . (...) -- C:\WINDOWS\system32\msdtcprf.h [768]
O44 - LFC:[MD5.FDA18F513403E67CAE9BF0D2DD948B28] - 22/04/2015 - 23:59:21 ---A- . (...) -- C:\WINDOWS\system32\msdtcprf.ini [3914]
O44 - LFC:[MD5.4701BA735D535D9F46AB2A285610A04B] - 22/04/2015 - 23:59:21 ---A- . (.Microsoft Corporation - Extension de configuration de connexion Ter.) -- C:\WINDOWS\system32\rdpcfgex.dll [4608]
O44 - LFC:[MD5.2CA1060C5CF9C03B865977F12123C3F8] - 22/04/2015 - 23:59:21 ---A- . (.Microsoft Corporation - Modem Connection Driver.) -- C:\WINDOWS\system32\cdmodem.dll [15872]
O44 - LFC:[MD5.9C847DF5E1F783716032977AE4559CCC] - 22/04/2015 - 23:59:21 ---A- . (.Microsoft Corporation - Registry Initializer.) -- C:\WINDOWS\system32\regini.exe [33792]
O44 - LFC:[MD5.CEBA968375EE0B55094FFBA03EE69BAF] - 22/04/2015 - 23:59:21 ---A- . (.Microsoft Corporation - Utilitaire d'interrogation Terminal Server.) -- C:\WINDOWS\system32\qappsrv.exe [17408]
O44 - LFC:[MD5.8A6A5D2505D1BF424EAFD38D76D6C0E9] - 22/04/2015 - 23:59:21 ---A- . (.Microsoft Corporation - Utilitaire de déconnexion de session.) -- C:\WINDOWS\system32\logoff.exe [15872]
O44 - LFC:[MD5.25900127DAE605546899D80EA6AE61FB] - 22/04/2015 - 23:59:21 ---A- . (.Microsoft Corporation - Utilitaire de gestion des sessions de requê.) -- C:\WINDOWS\system32\qwinsta.exe [22528]
O44 - LFC:[MD5.31BF3B4C0D04EC84684F58D14F521426] - 22/04/2015 - 23:59:21 ---A- . (.Microsoft Corporation - Utilitaire de message.) -- C:\WINDOWS\system32\msg.exe [22528]
O44 - LFC:[MD5.4A547D74B435E78418BE06406250C1D3] - 22/04/2015 - 23:59:22 ---A- . (...) -- C:\WINDOWS\system32\tslabels.h [3286]
O44 - LFC:[MD5.F9A14C7B36E10052A1B0F071BC3C1C65] - 22/04/2015 - 23:59:22 ---A- . (...) -- C:\WINDOWS\system32\tslabels.ini [27768]
O44 - LFC:[MD5.9F27B27C8405FEAF7DFC4DA3751DEF22] - 22/04/2015 - 23:59:22 ---A- . (...) -- C:\WINDOWS\system32\usrlogon.cmd [1263]
O44 - LFC:[MD5.CACA53644879416250C9BFA6A109E3D8] - 22/04/2015 - 23:59:22 ---A- . (.Microsoft Corporation - Applet du jeu Solitaire.) -- C:\WINDOWS\system32\sol.exe [57344]
O44 - LFC:[MD5.EA682C022F7204CC8E8C9EF5DCE29356] - 22/04/2015 - 23:59:22 ---A- . (.Microsoft Corporation - Jeu Démineur du pack Entertainment.) -- C:\WINDOWS\system32\winmine.exe [119808]
O44 - LFC:[MD5.043D073DFF5E3AD85FDA67D8C30F4305] - 22/04/2015 - 23:59:22 ---A- . (.Microsoft Corporation - Jeu FreeCell du pack Entertainment.) -- C:\WINDOWS\system32\freecell.exe [55808]
O44 - LFC:[MD5.DDCA854934C0D4EF46E8E093F3446ABF] - 22/04/2015 - 23:59:22 ---A- . (.Microsoft Corporation - La Dame de Pique en réseau.) -- C:\WINDOWS\system32\mshearts.exe [128000]
O44 - LFC:[MD5.E167CEBDBADE82F4A6E30BBAF495800B] - 22/04/2015 - 23:59:22 ---A- . (.Microsoft Corporation - Utilitaire d'arrêt de processus des service.) -- C:\WINDOWS\system32\tskill.exe [16896]
O44 - LFC:[MD5.3861B0195ACDCD8F1187C37617C090C4] - 22/04/2015 - 23:59:22 ---A- . (.Microsoft Corporation - Utilitaire d'arrêt du système.) -- C:\WINDOWS\system32\tsshutdn.exe [17408]
O44 - LFC:[MD5.8F0514EF34C2A69036CC55F91F903168] - 22/04/2015 - 23:59:22 ---A- . (.Microsoft Corporation - Utilitaire de connexion de session.) -- C:\WINDOWS\system32\tscon.exe [15360]
O44 - LFC:[MD5.B1D3D78F35E85E7481A9651BB11394B0] - 22/04/2015 - 23:59:22 ---A- . (.Microsoft Corporation - Utilitaire de contrôle à distance de sessio.) -- C:\WINDOWS\system32\shadow.exe [15360]
O44 - LFC:[MD5.C2E457CCCC8691F3194D12E4F5E70EA4] - 22/04/2015 - 23:59:22 ---A- . (.Microsoft Corporation - Utilitaire de déconnexion de session.) -- C:\WINDOWS\system32\tsdiscon.exe [14848]
O44 - LFC:[MD5.946B7A66354D385D9242F9AFC1CAC7C0] - 22/04/2015 - 23:59:22 ---A- . (.Microsoft Corporation - Utilitaire de réinitialisation de session.) -- C:\WINDOWS\system32\rwinsta.exe [16384]
O44 - LFC:[MD5.C05B691CC2328DB5456AECD616E81970] - 22/04/2015 - 23:59:22 ---A- . (.Microsoft Corporation - Utilitaire de réinitialisation des services.) -- C:\WINDOWS\system32\reset.exe [10240]
O44 - LFC:[MD5.405E1EF8E3C88E9BCD2853382BB12430] - 22/04/2015 - 23:59:23 ---A- . (...) -- C:\WINDOWS\system32\bopomofo.uce [22984]
O44 - LFC:[MD5.4FDED87068052EEB9B72A97FDBC141DB] - 22/04/2015 - 23:59:23 ---A- . (...) -- C:\WINDOWS\system32\gb2312.uce [24006]
O44 - LFC:[MD5.038F6AD6CEE43585D814CDBC7CDFD3EC] - 22/04/2015 - 23:59:23 ---A- . (...) -- C:\WINDOWS\system32\ideograf.uce [60458]
O44 - LFC:[MD5.7C0C25F4BA1084C4ABBEEA2C74194C5F] - 22/04/2015 - 23:59:23 ---A- . (...) -- C:\WINDOWS\system32\kanji_1.uce [6948]
O44 - LFC:[MD5.529BBD63519BBD654EF328454019693F] - 22/04/2015 - 23:59:23 ---A- . (...) -- C:\WINDOWS\system32\kanji_2.uce [8484]
O44 - LFC:[MD5.7A7A04370A6030B9B0E8178DAD4A6E41] - 22/04/2015 - 23:59:23 ---A- . (...) -- C:\WINDOWS\system32\korean.uce [12876]
O44 - LFC:[MD5.8CA32E9D986FA76F60EFBCFCD9D80A58] - 22/04/2015 - 23:59:23 ---A- . (...) -- C:\WINDOWS\system32\shiftjis.uce [16740]
O44 - LFC:[MD5.30F5568679A54042F99CA9EC1102EBCD] - 22/04/2015 - 23:59:23 ---A- . (...) -- C:\WINDOWS\system32\subrange.uce [93702]
O44 - LFC:[MD5.5911F4AE105C7469636F7ADCEA35349F] - 22/04/2015 - 23:59:23 ---A- . (.Microsoft Corporation - Application Calculatrice de Windows.) -- C:\WINDOWS\system32\calc.exe [115200]
O44 - LFC:[MD5.C525A8A367F9641ABB8FF32C96BD08A4] - 22/04/2015 - 23:59:23 ---A- . (.Microsoft Corporation - DLL des noms UNICODE pour UCE.) -- C:\WINDOWS\system32\getuname.dll [634880]
O44 - LFC:[MD5.0DD55909896EF797C9E5E12662CD3BDF] - 22/04/2015 - 23:59:23 ---A- . (.Microsoft Corporation - Table des caractères.) -- C:\WINDOWS\system32\charmap.exe [80896]
O44 - LFC:[MD5.520A03D1F113D251EFBFA00C164F2087] - 22/04/2015 - 23:59:27 ---A- . (.Hilgraeve, Inc. - HyperTerminal Applet Library.) -- C:\WINDOWS\system32\hticons.dll [44544]
O44 - LFC:[MD5.831347571C0F5006CE3913D32F21AB69] - 22/04/2015 - 23:59:27 ---A- . (.Microsoft Corporation - Contrôle du volume.) -- C:\WINDOWS\system32\sndvol32.exe [139264]
O44 - LFC:[MD5.E7EF0C8FE4CAE6B9CA990D5B15A079CE] - 22/04/2015 - 23:59:27 ---A- . (.Microsoft Corporation - Contrôles de mesure.) -- C:\WINDOWS\system32\avmeter.dll [16384]
O44 - LFC:[MD5.2A99260794224489F29B628717B7947E] - 22/04/2015 - 23:59:27 ---A- . (.Microsoft Corporation - Conversation pour Windows NT.) -- C:\WINDOWS\system32\winchat.exe [35840]
O44 - LFC:[MD5.128CEA94B381C19C655AA18DA74ECA0A] - 22/04/2015 - 23:59:27 ---A- . (.Microsoft Corporation - Numéroteur TAPI 3.0 et Visualisateur de con.) -- C:\WINDOWS\system32\avtapi.dll [232960]
O44 - LFC:[MD5.F7B2FA971A70A335F92785DEF9478B62] - 22/04/2015 - 23:59:27 ---A- . (.Microsoft Corporation - Wave Manipulation Component.) -- C:\WINDOWS\system32\avwav.dll [73216]
O44 - LFC:[MD5.AF68D5BB112D56D00835252C76D2D871] - 22/04/2015 - 23:59:34 ---A- . (.Microsoft Corporation - Windows Write.) -- C:\WINDOWS\system32\write.exe [5632]
O44 - LFC:[MD5.7C85ECEEE291D2F5D9C0274E46A11421] - 22/04/2015 - 23:59:52 ---A- . (.Microsoft Corporation - Internet Explorer.) -- C:\WINDOWS\system32\ieframe.dll.mui [1310720]
O44 - LFC:[MD5.85D30B4D5278DE932C47C5B3AE25F22C] - 22/04/2015 - 23:59:54 ---A- . (.Microsoft Corporation - Microsoft Feeds Background Sync.) -- C:\WINDOWS\system32\msfeedsbs.dll [55296]
O44 - LFC:[MD5.FEE2BA1AD38F457F418E82EA30724053] - 22/04/2015 - 23:59:54 ---A- . (.Microsoft Corporation - Microsoft Feeds Synchronization.) -- C:\WINDOWS\system32\msfeedssync.exe [13312]
O44 - LFC:[MD5.6D21D0A95286DCD09E354B612F592EB7] - 22/04/2015 - 23:59:56 ---A- . (...) -- C:\WINDOWS\system32\ticrf.rat [1988]
O44 - LFC:[MD5.CB61F20255C666E59F076247203D8496] - 22/04/2015 - 23:59:56 ---A- . (.Microsoft Corporation - WinFX Runtime Components.) -- C:\WINDOWS\system32\WinFXDocObj.exe [208384]
O44 - LFC:[MD5.24F0029C1D260577CAC38C1B0317EF9B] - 22/04/2015 - 23:59:57 ---A- . (...) -- C:\WINDOWS\system32\IE7Eula.rtf [92431]
O44 - LFC:[MD5.ECD81B99477AB4A93D7838EB40B870D0] - 22/04/2015 - 23:59:57 ---A- . (...) -- C:\WINDOWS\system32\icrav03.rat [8798]
O44 - LFC:[MD5.4FDB8B53521CD845EE8E4A414D7322B6] - 22/04/2015 - 23:59:57 ---A- . (.Microsoft Corporation - ADVPACK.) -- C:\WINDOWS\system32\advpack.dll.mui [12288]
O44 - LFC:[MD5.C2D6A721EDF79456B0E74FAFF6713026] - 22/04/2015 - 23:59:57 R--A- . (.Microsoft Corporation - IE plugin image decoder support DLL.) -- C:\WINDOWS\system32\imgutil.tm1 [36352]
O44 - LFC:[MD5.A94AF62112DAD4FBB391087674F3F74D] - 22/04/2015 - 23:59:57 R--A- . (.Microsoft Corporation - Install engine.) -- C:\WINDOWS\system32\inseng.tm1 [92672]
O44 - LFC:[MD5.D9481E937D5BE0B2D5DBCD87745E925A] - 22/04/2015 - 23:59:58 R--A- . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.tm1 [3592192]
O44 - LFC:[MD5.EBA6E877B64FDF40F65256F29A103A69] - 22/04/2015 - 23:59:59 R--A- . (.Microsoft Corporation - IE PNG plugin image decoder.) -- C:\WINDOWS\system32\pngfilt.tm1 [44544]
O44 - LFC:[MD5.C2D6A721EDF79456B0E74FAFF6713026] - 22/04/2015 - 23:59:59 R--A- . (.Microsoft Corporation - IE plugin image decoder support DLL.) -- C:\WINDOWS\system32\imgutil.tm2 [36352]
O44 - LFC:[MD5.A94AF62112DAD4FBB391087674F3F74D] - 22/04/2015 - 23:59:59 R--A- . (.Microsoft Corporation - Install engine.) -- C:\WINDOWS\system32\inseng.tm2 [92672]
O44 - LFC:[MD5.B05F35EFFC1812578BA56AA8C4575862] - 22/04/2015 - 23:59:59 R--A- . (.Microsoft Corporation - Internet Ratings and Local User Management.) -- C:\WINDOWS\system32\msrating.tm1 [193024]
O44 - LFC:[MD5.5BA0167A87B373ADF418A090331AF7D3] - 22/04/2015 - 23:59:59 R--A- . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.tm1 [232960]
O44 - LFC:[MD5.EBA6E877B64FDF40F65256F29A103A69] - 23/04/2015 - 00:00:00 R--A- . (.Microsoft Corporation - IE PNG plugin image decoder.) -- C:\WINDOWS\system32\pngfilt.tm2 [44544]
O44 - LFC:[MD5.A2629D49435B7C83799165BAB9C73B63] - 23/04/2015 - 00:00:00 R--A- . (.Microsoft Corporation - Internet Control Panel.) -- C:\WINDOWS\system32\inetcpl.tm1 [1830912]
O44 - LFC:[MD5.B05F35EFFC1812578BA56AA8C4575862] - 23/04/2015 - 00:00:00 R--A- . (.Microsoft Corporation - Internet Ratings and Local User Management.) -- C:\WINDOWS\system32\msrating.tm2 [193024]
O44 - LFC:[MD5.D9481E937D5BE0B2D5DBCD87745E925A] - 23/04/2015 - 00:00:00 R--A- . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.tm2 [3592192]
O44 - LFC:[MD5.5BA0167A87B373ADF418A090331AF7D3] - 23/04/2015 - 00:00:00 R--A- . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.tm2 [232960]
O44 - LFC:[MD5.A2629D49435B7C83799165BAB9C73B63] - 23/04/2015 - 00:00:01 R--A- . (.Microsoft Corporation - Internet Control Panel.) -- C:\WINDOWS\system32\inetcpl.tm2 [1830912]
O44 - LFC:[MD5.E5830533C13F30407E76C0584778AA4D] - 23/04/2015 - 00:00:13 ---A- . (.Microsoft Corporation - Messenger Audio Codec.) -- C:\WINDOWS\system32\sirenacm.dll [49504]
O44 - LFC:[MD5.487403459F0B2F1A3ADEEF02496BD80E] - 23/04/2015 - 00:00:40 ---A- . (...) -- C:\WINDOWS\vb.ini [36]
O44 - LFC:[MD5.6C2F0BA210C2B53EF07653ABAC6C2490] - 23/04/2015 - 00:00:40 ---A- . (...) -- C:\WINDOWS\vbaddin.ini [37]
O44 - LFC:[MD5.EC84FC8A15F9E403A35E03FAAF9C78C1] - 23/04/2015 - 00:00:50 ---A- . (...) -- C:\WINDOWS\system32\emptyregdb.dat [21892]
O44 - LFC:[MD5.B3EB0AA0E194CD030C4A85BFA45F124B] - 23/04/2015 - 00:01:41 ---A- . (.Microsoft Corporation - Assistant Connexion Internet.) -- C:\WINDOWS\system32\icwphbk.dll [65536]
O44 - LFC:[MD5.23F4325A6AA7FA8EA951185CF8DC4D77] - 23/04/2015 - 00:01:41 ---A- . (.Microsoft Corporation - Bibliothèque de l'Assistant Connexion Inter.) -- C:\WINDOWS\system32\inetcfg.dll [282624]
O44 - LFC:[MD5.D37321C41EBEC52B26CC2DC11392B84E] - 23/04/2015 - 00:01:41 ---A- . (.Microsoft Corporation - Fichier DLL d'interface du Planificateur de.) -- C:\WINDOWS\system32\mstask.dll [281600]
O44 - LFC:[MD5.8BBDE02EA41851C2402C25B1490A20AE] - 23/04/2015 - 00:01:41 ---A- . (.Microsoft Corporation - Fichier d'installation du Planificateur de.) -- C:\WINDOWS\system32\mstinit.exe [12288]
O44 - LFC:[MD5.55F5C5C1BE1A78E285033E432BA01597] - 23/04/2015 - 00:01:41 ---A- . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560]
O44 - LFC:[MD5.B4483DA59385014F20ADEE7075B631FE] - 23/04/2015 - 00:01:41 ---A- . (.Microsoft Corporation - Numéroteur automatique de l'Assistant Conne.) -- C:\WINDOWS\system32\icwdial.dll [73728]
O44 - LFC:[MD5.E2FAF5A98ED960B0F37E1644AEC6AE2D] - 23/04/2015 - 00:01:41 ---A- . (.Microsoft Corporation - Processus d'abonnement à Internet.) -- C:\WINDOWS\system32\isign32.dll [86016]
O44 - LFC:[MD5.CFCFE96EDD7E6FD246F160368B87A13F] - 23/04/2015 - 00:01:42 ---A- . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll [691712]
O44 - LFC:[MD5.E538D7BC60D7CD67BDEA812F83AE092E] - 23/04/2015 - 00:01:42 ---A- . (.Microsoft Corporation - Ressources API de Microsoft Internet Messag.) -- C:\WINDOWS\system32\inetres.dll [50688]
O44 - LFC:[MD5.11FB4109191437CE765779F10EBBDFAB] - 23/04/2015 - 00:01:43 ---A- . (.Microsoft Corporation - Gestionnaire de comptes Internet.) -- C:\WINDOWS\system32\msoeacct.dll [252928]
O44 - LFC:[MD5.B150D1485996C0A40C8E397B141C3D8B] - 23/04/2015 - 00:01:43 ---A- . (.Microsoft Corporation - Microsoft Outlook Express RT Lib.) -- C:\WINDOWS\system32\msoert2.dll [105984]
O44 - LFC:[MD5.83CFBB693483E664CC12C8ED132BBDEA] - 23/04/2015 - 00:01:45 ---A- . (.Microsoft Corporation - Bibliothèque NMMKCERT.) -- C:\WINDOWS\system32\nmmkcert.dll [28672]
O44 - LFC:[MD5.681891FBFFB4F535F03C440D433B76C6] - 23/04/2015 - 00:01:45 ---A- . (.Microsoft Corporation - Dll de l'utilitaire de conférence.) -- C:\WINDOWS\system32\msconf.dll [69632]
O44 - LFC:[MD5.D3A2870CD96CDA7BCFF3DC54F64087AD] - 23/04/2015 - 00:01:45 ---A- . (.Microsoft Corporation - Partage de Bureau à distance NetMeeting.) -- C:\WINDOWS\system32\mnmsrvc.exe [32768]
O44 - LFC:[MD5.71ECBA795A063026843F70F31EF02689] - 23/04/2015 - 00:01:46 ---A- . (.Intel Corporation - ISR Debug 32-bit Engine.) -- C:\WINDOWS\system32\isrdbg32.dll [32768]
O44 - LFC:[MD5.B8D4B3C6E0E9746EF93CC988EB00F9E8] - 23/04/2015 - 00:01:46 ---A- . (.Microsoft Corporation - Application Sharing Display Driver.) -- C:\WINDOWS\system32\mnmdd.dll [34560]
O44 - LFC:[MD5.1B005DC4BC9B22CC1EF40D62C9F4F7BD] - 23/04/2015 - 00:01:46 ---A- . (.Microsoft Corporation - Bibliothèque d'opérations Restauration du s.) -- C:\WINDOWS\system32\srrstr.dll [241664]
O44 - LFC:[MD5.C8047DF7413568E549932BD725EBC65B] - 23/04/2015 - 00:01:46 ---A- . (.Microsoft Corporation - Dll du client SR.) -- C:\WINDOWS\system32\srclient.dll [67584]
O44 - LFC:[MD5.64A3919D5606CE42660247DB1CB9CB88] - 23/04/2015 - 00:01:46 ---A- . (.Microsoft Corporation - Filter Library.) -- C:\WINDOWS\system32\fltlib.dll [16896]
O44 - LFC:[MD5.62173E93A7AFF8B44158BE01E34C0FF7] - 23/04/2015 - 00:01:46 ---A- . (.Microsoft Corporation - Filter Manager Control Program.) -- C:\WINDOWS\system32\fltMc.exe [23040]
O44 - LFC:[MD5.B2CF4B0786F8212CB92ED2B50C6DB6B0] - 23/04/2015 - 00:01:46 ---A- . (.Microsoft Corporation - Microsoft Filesystem Filter Manager.) -- C:\WINDOWS\system32\Drivers\fltMgr.sys [129792]
O44 - LFC:[MD5.B4B61B3F41002E68D01A371C671B5F78] - 23/04/2015 - 00:01:46 ---A- . (.Microsoft Corporation - Pilote ICM Microsoft H.261.) -- C:\WINDOWS\system32\msh261.drv [188416]
O44 - LFC:[MD5.39626E6DC1FB39434EC40C42722B660A] - 23/04/2015 - 00:01:46 ---A- . (.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) -- C:\WINDOWS\system32\Drivers\sr.sys [73600]
O44 - LFC:[MD5.6ED29124A1C83BD0CF6B26BD01CA6F6F] - 23/04/2015 - 00:01:46 ---A- . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520]
O44 - LFC:[MD5.987A84CD549E6EFC653A9B4B3E2B24B2] - 23/04/2015 - 00:01:46 ---A- . (.Microsoft Corporation - User Location Services Component Module.) -- C:\WINDOWS\system32\ils.dll [81920]
O44 - LFC:[MD5.BAA0B6E647C1AD593E9BAE5CC31BCFFB] - 23/04/2015 - 00:02:03 ---A- . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\system32\qmgr.dll [409088]
O44 - LFC:[MD5.3D59806FB53B402C0583D35F96470D2F] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - API du client Windows Update.) -- C:\WINDOWS\system32\wuapi.dll.wusetup.859765.bak [432640]
O44 - LFC:[MD5.C31DD4CEC06D2908AE5F212A0B13805B] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Automatic Updates Control Panel.) -- C:\WINDOWS\system32\wuaucpl.cpl [219160]
O44 - LFC:[MD5.92A7AA8BBD4DDA38B012EDB223420FD4] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service 2.0.) -- C:\WINDOWS\system32\bitsprx3.dll [7168]
O44 - LFC:[MD5.5C5D4A7893B3A0FD9AEBEAED1E45E3B2] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service 2.5.) -- C:\WINDOWS\system32\bitsprx4.dll [7168]
O44 - LFC:[MD5.6B219C1EC5A6521332A41E7FA1DB07E9] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service Pro.) -- C:\WINDOWS\system32\bitsprx2.dll [8192]
O44 - LFC:[MD5.8E012E8D84724CB521E3BE09741980FB] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service Pro.) -- C:\WINDOWS\system32\qmgrprxy.dll [18944]
O44 - LFC:[MD5.20D03021936D649E6EDB9A8A26504CCD] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Client Mise à jour automatique Windows Upda.) -- C:\WINDOWS\system32\wuauclt1.exe [168960]
O44 - LFC:[MD5.7E3DEFE771CB451B0FF630BFA435417E] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Mises à jour automatiques.) -- C:\WINDOWS\system32\wuauclt.exe.wusetup.859953.bak [112640]
O44 - LFC:[MD5.367B5FB01100BEB42F160FF399A57C0D] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Moteur de mises à jour automatique Windows.) -- C:\WINDOWS\system32\wuaueng1.dll [184320]
O44 - LFC:[MD5.1F092E10753022CCC6D2FC2D1941E96E] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Panneau de configuration Mises à jour autom.) -- C:\WINDOWS\system32\wuaucpl.cpl.wusetup.860218.bak [163840]
O44 - LFC:[MD5.FC3EC24FCE372C89423E015A2AC1A31E] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Windows Update Agent.) -- C:\WINDOWS\system32\wuaueng.dll [1933848]
O44 - LFC:[MD5.38ED85E9C93B9983C2065AA2266B6E1F] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Engine.) -- C:\WINDOWS\system32\wuaueng.dll.wusetup.860453.bak [1135616]
O44 - LFC:[MD5.75D6C5C3D2C93B1F9931E5DFB693AE2A] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O44 - LFC:[MD5.1A617835452EEE5060976C9B9F5FE635] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Windows Update Client API.) -- C:\WINDOWS\system32\wuapi.dll [577048]
O44 - LFC:[MD5.C88C65DF1ED4DFD34CFBD11CDFE519A3] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Windows Update Client UI Plugin.) -- C:\WINDOWS\system32\wucltui.dll [329240]
O44 - LFC:[MD5.C31DCE575EE43CFE5EE1BD1B5FB29A8D] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Windows Update Web Control.) -- C:\WINDOWS\system32\wuweb.dll [210968]
O44 - LFC:[MD5.596A1743CFB1B5E008275E5552295B83] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Windows Update client proxy stub.) -- C:\WINDOWS\system32\wups.dll [32256]
O44 - LFC:[MD5.2E0B0A051FFAA86E358465BB0880D453] - 23/04/2015 - 00:02:04 ---A- . (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53784]
O44 - LFC:[MD5.13D8419CD73E6D14FE093A0066E36F18] - 23/04/2015 - 00:02:10 ---A- . (.Microsoft Corporation - Internet Connection Wizard.) -- C:\WINDOWS\system32\icfgnt5.dll [16384]
O44 - LFC:[MD5.D1560FE3CB700340235BECDE227C271E] - 23/04/2015 - 00:02:12 ---A- . (.Microsoft Corporation - Ressources du gestionnaire de comptes Micro.) -- C:\WINDOWS\system32\acctres.dll [72192]
O44 - LFC:[MD5.34A92A72CC0E0653828344DB5378B1E0] - 23/04/2015 - 00:02:13 ---A- . (.Microsoft Corporation - Codec Microsoft G.723.1 pour MSACM.) -- C:\WINDOWS\system32\msg723.acm [118784]
O44 - LFC:[MD5.8014838B3025DDFF6C476FCC7C18CD82] - 23/04/2015 - 00:02:13 ---A- . (.Microsoft Corporation - DLL d'enregistrement d'événements NetMeetin.) -- C:\WINDOWS\system32\nmevtmsg.dll [12288]
O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 23/04/2015 - 00:02:16 ---A- . (...) -- C:\WINDOWS\desktop.ini [2]
O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 23/04/2015 - 00:02:16 ---A- . (...) -- C:\WINDOWS\system32\desktop.ini [2]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 23/04/2015 - 00:02:37 R-HA- . (...) -- C:\WINDOWS\WindowsShell.Manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 23/04/2015 - 00:02:37 R-HA- . (...) -- C:\WINDOWS\system32\cdplayer.exe.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 23/04/2015 - 00:02:37 R-HA- . (...) -- C:\WINDOWS\system32\ncpa.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 23/04/2015 - 00:02:37 R-HA- . (...) -- C:\WINDOWS\system32\nwc.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 23/04/2015 - 00:02:37 R-HA- . (...) -- C:\WINDOWS\system32\sapi.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 23/04/2015 - 00:02:37 R-HA- . (...) -- C:\WINDOWS\system32\wuaucpl.cpl.manifest [749]
O44 - LFC:[MD5.5D76C3FB736514E1D7C88791E7322784] - 23/04/2015 - 00:02:41 R-HA- . (...) -- C:\WINDOWS\system32\WindowsLogon.manifest [488]
O44 - LFC:[MD5.5D76C3FB736514E1D7C88791E7322784] - 23/04/2015 - 00:02:41 R-HA- . (...) -- C:\WINDOWS\system32\logonui.exe.manifest [488]
O44 - LFC:[MD5.2B9C717D21A1331BA3731886E3EE87BB] - 23/04/2015 - 00:03:20 ---A- . (...) -- C:\WINDOWS\ODBCINST.INI [4205]
O44 - LFC:[MD5.662BD5F1A693F710F066BAF92FED394A] - 23/04/2015 - 00:03:20 ---A- . (.Microsoft Corporation - Extended MAPI 1.0 for Windows NT.) -- C:\WINDOWS\system32\mapi32.dll [112128]
O44 - LFC:[MD5.DC17DD0189B0C36D863B4DD0A036C10F] - 23/04/2015 - 00:03:26 ---A- . (...) -- C:\WINDOWS\WMSysPr9.prx [316640]
O44 - LFC:[MD5.6D6F4B1886E91EB37ABCCAD19C561EE0] - 23/04/2015 - 00:03:28 ---A- . (...) -- C:\WINDOWS\system32\amcompat.tlb [16832]
O44 - LFC:[MD5.A32B14BE5EDAE794FCE1A9E970827509] - 23/04/2015 - 00:03:28 ---A- . (...) -- C:\WINDOWS\system32\nscompat.tlb [23392]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 23/04/2015 - 00:03:35 ---A- . (...) -- C:\AUTOEXEC.BAT [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 23/04/2015 - 00:03:35 ---A- . (...) -- C:\CONFIG.SYS [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 23/04/2015 - 00:03:35 ---A- . (...) -- C:\WINDOWS\control.ini [0]
O44 - LFC:[MD5.486E0B1BC94C346E5C352C295388C803] - 23/04/2015 - 00:03:35 ---A- . (...) -- C:\WINDOWS\system32\CONFIG.NT [3072]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 23/04/2015 - 00:03:35 RSHA- . (...) -- C:\IO.SYS [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 23/04/2015 - 00:03:35 RSHA- . (...) -- C:\MSDOS.SYS [0]
O44 - LFC:[MD5.9714B7C918C6543D69074EC101F86AC4] - 23/04/2015 - 00:03:52 ----- . (.Sonic Solutions - CDR4 CD and DVD Place Holder Driver (see Px.) -- C:\WINDOWS\system32\Drivers\cdr4_xp.sys [9072]
O44 - LFC:[MD5.0D856D16C08440BFB566D6CDD9948D4E] - 23/04/2015 - 00:03:52 ----- . (.Sonic Solutions - CDRAL Place Holder Driver (see PxHelp).) -- C:\WINDOWS\system32\Drivers\cdralw2k.sys [9200]
O44 - LFC:[MD5.09132A1DA77EF78D06421C871B3B92C5] - 23/04/2015 - 00:03:52 ----- . (.Sonic Solutions - PX Install Application.) -- C:\WINDOWS\system32\pxcpya64.exe [66544]
O44 - LFC:[MD5.51598A4CD5BFC25C8D4FB1A740A43583] - 23/04/2015 - 00:03:52 ----- . (.Sonic Solutions - PX Install Application.) -- C:\WINDOWS\system32\pxhpinst.exe [72176]
O44 - LFC:[MD5.B36F01A58631341310C6D4116F2EDF5F] - 23/04/2015 - 00:03:52 ----- . (.Sonic Solutions - PX Install Application.) -- C:\WINDOWS\system32\pxinsa64.exe [66032]
O44 - LFC:[MD5.153D02480A0A2F45785522E814C634B6] - 23/04/2015 - 00:03:52 ----- . (.Sonic Solutions - Px Engine Device Driver for Windows 2000/XP.) -- C:\WINDOWS\system32\Drivers\PxHelp20.sys [44944]
O44 - LFC:[MD5.B248A451721CF86A6CDBA18B379EC80C] - 23/04/2015 - 00:03:52 ----- . (.Sonic Solutions - Px Unit Table.) -- C:\WINDOWS\system32\pxdrv.dll [551408]
O44 - LFC:[MD5.174D2EB772E843B6175EED45D8FA11E7] - 23/04/2015 - 00:03:52 ----- . (.Sonic Solutions - Px.) -- C:\WINDOWS\system32\px.dll [670192]
O44 - LFC:[MD5.9555982C980B760398C09EEFAE6FCF01] - 23/04/2015 - 00:03:52 ----- . (.Sonic Solutions - PxAFS Dynamic Link Library.) -- C:\WINDOWS\system32\pxafs.dll [129520]
O44 - LFC:[MD5.D4BFF8B48CD9A212B45C425F2A1C9B77] - 23/04/2015 - 00:03:52 ----- . (.Sonic Solutions - PxMas.) -- C:\WINDOWS\system32\pxmas.dll [219632]
O44 - LFC:[MD5.5420BAFE4BEFBC64452DEE6AF8782A20] - 23/04/2015 - 00:03:52 ----- . (.Sonic Solutions - PxSfs.) -- C:\WINDOWS\system32\pxsfs.dll [1858032]
O44 - LFC:[MD5.DFC64F80CBC171FB0631E7F15D79C998] - 23/04/2015 - 00:03:52 ----- . (.Sonic Solutions - PxWave.) -- C:\WINDOWS\system32\pxwave.dll [436720]
O44 - LFC:[MD5.23C98662461CA549487676E3E4E16C4F] - 23/04/2015 - 00:03:52 ----- . (.Sonic Solutions - VxBlock.) -- C:\WINDOWS\system32\vxblock.dll [96752]
O44 - LFC:[MD5.23B8B59396A50388CD34CEEE55A103EE] - 23/04/2015 - 00:04:01 ---A- . (...) -- C:\WINDOWS\system32\AVEQT.dll [28672]
O44 - LFC:[MD5.DC657CC8C152C77F22DBE14C7B96374D] - 23/04/2015 - 00:04:01 ---A- . (...) -- C:\WINDOWS\system32\AVERM.dll [129024]
O44 - LFC:[MD5.257810C9998178525447E32E0998BEE3] - 23/04/2015 - 00:04:02 ---A- . (.Peter Wimmer, Gabest - GPL MPEG-1/2 Decoder Filter for DirectShow.) -- C:\WINDOWS\system32\GplMpgDec.ax [258048]
O44 - LFC:[MD5.901B3434E2F34AA34519363184323E64] - 23/04/2015 - 00:04:35 ---A- . (.Sun Microsystems, Inc. - Java(TM) Control Panel.) -- C:\WINDOWS\system32\javacpl.cpl [73728]
O44 - LFC:[MD5.5B0CE37BE36679D9D3097B592F7213D9] - 23/04/2015 - 00:04:35 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\WINDOWS\system32\deploytk.dll [410984]
O44 - LFC:[MD5.D600A0D8FACA5158CA8B221006997808] - 23/04/2015 - 00:04:35 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\WINDOWS\system32\java.exe [144792]
O44 - LFC:[MD5.173DBAD67DAF64368294CB95BD2B9EE8] - 23/04/2015 - 00:04:35 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\WINDOWS\system32\javaw.exe [144792]
O44 - LFC:[MD5.CEEE2D40B37A1EABF7CE4EB15BCA006E] - 23/04/2015 - 00:04:35 ---A- . (.Sun Microsystems, Inc. - Java(TM) Web Start Launcher.) -- C:\WINDOWS\system32\javaws.exe [148888]
O44 - LFC:[MD5.81277BBA180CFF59833D267DA467CDF8] - 23/04/2015 - 00:05:54 ---A- . (.Microsoft Corporation - Update RunOnce Service.) -- C:\WINDOWS\system32\spupdsvc.exe [26144]
O44 - LFC:[MD5.BBCA1124D889A8C3B5C213B7B59E6345] - 23/04/2015 - 00:05:55 ----- . (.Microsoft Corporation - Messages du Service Pack.) -- C:\WINDOWS\system32\spmsg.dll [17952]
O44 - LFC:[MD5.86F1895AE8C5E8B17D99ECE768A70732] - 23/04/2015 - 00:06:24 ---A- . (.Microsoft Corporation - Microsoft® C Runtime Library.) -- C:\WINDOWS\system32\msvcr71.dll [348160]
O44 - LFC:[MD5.CE931021E18F385F519E945A8A10548E] - 23/04/2015 - 00:06:25 ---A- . (.Open Source Software community project - POSIX Threads for Windows32 Library.) -- C:\WINDOWS\system32\pthreadGC2.dll [60273]
O44 - LFC:[MD5.34AA164DFEA236DA3CCBB43D88DCE352] - 23/04/2015 - 00:06:26 ---A- . (...) -- C:\WINDOWS\system32\ff_vfw.dll [67584]
O44 - LFC:[MD5.AB90E3453839235FD759A854203B948E] - 23/04/2015 - 00:06:26 ---A- . (...) -- C:\WINDOWS\system32\ff_vfw.dll.manifest [547]
O44 - LFC:[MD5.02CE4DF5C0ED4024775F8C908B271638] - 23/04/2015 - 00:06:27 ---A- . (...) -- C:\WINDOWS\system32\qt-dx331.dll [3596288]
O44 - LFC:[MD5.A7815F80257E6E61FBA051B757F8C605] - 23/04/2015 - 00:06:27 ---A- . (.DivX, Inc. - DivX.) -- C:\WINDOWS\system32\divx.dll [684032]
O44 - LFC:[MD5.F0E9A533925F48576FFFC597DCAF14C0] - 23/04/2015 - 00:06:27 ---A- . (.DivX, Inc. - dpl100.) -- C:\WINDOWS\system32\dpl100.dll [86016]
O44 - LFC:[MD5.8401842B1D4899C2FDE9A0317AC682D0] - 23/04/2015 - 00:06:28 ---A- . (...) -- C:\WINDOWS\system32\xvidcore.dll [795648]
O44 - LFC:[MD5.B458203DC7C174D541E7DBA74DA1B857] - 23/04/2015 - 00:06:28 ---A- . (...) -- C:\WINDOWS\system32\xvidvfw.dll [130048]
O44 - LFC:[MD5.D95393B383FB3DB265836C84B53892A3] - 23/04/2015 - 00:06:28 ---A- . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\system32\ac3acm.acm [118784]
O44 - LFC:[MD5.DD602C1FBA3A3E962627569C9E10AF7C] - 23/04/2015 - 00:06:28 ---A- . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\WINDOWS\system32\yv12vfw.dll [217088]
O44 - LFC:[MD5.5B7F4F0976BE76D8F0A8BFA8714BD1C8] - 23/04/2015 - 00:06:29 ---A- . (...) -- C:\WINDOWS\system32\lame_acm.xml [414]
O44 - LFC:[MD5.22722B4E887BB95AB071542DE5A42C80] - 23/04/2015 - 00:06:29 ---A- . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\WINDOWS\system32\lameACM.acm [839680]
O44 - LFC:[MD5.421FC844F5EBE260AF7B8E64DC9E8D62] - 23/04/2015 - 00:06:30 ---A- . (...) -- C:\WINDOWS\system32\unrar.dll [168448]
O44 - LFC:[MD5.B4AAE0E58F91998A879251F4B4907898] - 23/04/2015 - 00:08:23 ---A- . (...) -- C:\WINDOWS\system32\$winnt$.inf [1929]
O44 - LFC:[MD5.1B5D8761D1D70D7F46C8EACCA55EEEF8] - 23/04/2015 - 00:09:09 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [154768]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 23/04/2015 - 00:09:16 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.6AB44226F25EF772C7B1039CDEA16267] - 23/04/2015 - 00:09:23 ---A- . (...) -- C:\WINDOWS\REGLOCS.OLD [8192]
O44 - LFC:[MD5.EE287034B3F5EF654E19EA9EEEFF4B86] - 23/04/2015 - 00:09:27 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [292]
O44 - LFC:[MD5.7B5F5469863DBE39B85E5E4A68BEFDFB] - 23/04/2015 - 00:09:49 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [2206]
O44 - LFC:[MD5.43B659AD3F34BFB1B8AE68A8C7D0CB6B] - 23/04/2015 - 00:10:08 ---A- . (...) -- C:\WINDOWS\system32\oeminfo.ini [828]
O44 - LFC:[MD5.A9E7AB1EC75586439BCC912D2CE78466] - 23/04/2015 - 00:10:08 ---A- . (...) -- C:\WINDOWS\system32\oemlogo.bmp [61614]
O44 - LFC:[MD5.56410EA0E47E1133041025973BC2C7D2] - 23/04/2015 - 00:10:08 ---A- . (.Axialis Software - Screen Saver.) -- C:\WINDOWS\system32\aurora.scr [890987]
O44 - LFC:[MD5.C38A76400CA00C939DFCFD6CA2194769] - 23/04/2015 - 00:14:37 ---A- . (...) -- C:\WINDOWS\win.ini [603]
O44 - LFC:[MD5.CF0376023360AADD55C89BA50564AFDC] - 23/04/2015 - 00:14:54 ---A- . (.Microsoft Corporation - Microsoft® Document Imaging.) -- C:\WINDOWS\system32\mdimon.dll [17920]
O44 - LFC:[MD5.D4761D8CDB9DEF6C39253C4166C610A7] - 23/04/2015 - 00:14:58 ---A- . (...) -- C:\WINDOWS\ODBC.INI [385]
O44 - LFC:[MD5.6FE190031191CD7EB4A5070321E1301F] - 23/04/2015 - 00:15:54 --HA- . (...) -- C:\WINDOWS\nod32fixtemdono.reg [568]
O44 - LFC:[MD5.8674C4329B510511C2E1CB906C8E954D] - 23/04/2015 - 00:15:54 --HA- . (...) -- C:\WINDOWS\nod32restoretemdono.reg [5702]
O44 - LFC:[MD5.DD41831A7504E711770FCA9D8BDE6A03] - 23/04/2015 - 00:16:08 ---A- . (...) -- C:\WINDOWS\ID386.tmp [1266]
O44 - LFC:[MD5.CDBC160D6A3062D2D4C9CEF5BBD6A2B7] - 23/04/2015 - 00:18:15 ---A- . (.Microsoft Corporation - Windows Media Player Applet Support DLL.) -- C:\WINDOWS\system32\wmpns.dll [221184]
O44 - LFC:[MD5.2833A5C1FBBE1E0BAADD45AF5FE26D58] - 23/04/2015 - 00:18:17 ---A- . (...) -- C:\WINDOWS\wmsetup.log [1382]
O44 - LFC:[MD5.A4B6C49FD5FD6433EEDA58B2C9D725A9] - 23/04/2015 - 00:18:18 ---A- . (...) -- C:\WINDOWS\OEWABLog.txt [345]
O44 - LFC:[MD5.6D0634CEBBFF7F428DD816706F5AA1FB] - 23/04/2015 - 00:18:38 ---A- . (...) -- C:\WINDOWS\system32\BuzzingBee.wav [146650]
O44 - LFC:[MD5.E2FA75ADE398C9A44815B11CC141105C] - 23/04/2015 - 00:18:38 ---A- . (...) -- C:\WINDOWS\system32\LoopyMusic.wav [940794]
O44 - LFC:[MD5.543FCAA93AC6E216363D26283F99279B] - 23/04/2015 - 00:20:31 ----- . (...) -- C:\WINDOWS\system32\netathw.cat [7630]
O44 - LFC:[MD5.3D2A04CF2D3AA96CF6F80631067B86BF] - 23/04/2015 - 00:20:31 ----- . (...) -- C:\WINDOWS\system32\netathw.inf [170359]
O44 - LFC:[MD5.144C4CFE6FC60EFB786E47143D090DBE] - 23/04/2015 - 00:20:31 ----- . (.Atheros Communications, Inc. - Driver for Atheros Wireless Network Adapter.) -- C:\WINDOWS\system32\athw.sys [1606976]
O44 - LFC:[MD5.144C4CFE6FC60EFB786E47143D090DBE] - 23/04/2015 - 00:20:31 ---A- . (.Atheros Communications, Inc. - Driver for Atheros Wireless Network Adapter.) -- C:\WINDOWS\system32\Drivers\athw.sys [1606976]
~ Files: 436 Scanned in 00mn 17s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.31A9670452E1681195AD6433A4EFF6B3] - 23/04/2015 - 00:15:25 ---A- - C:\WINDOWS\Prefetch\UTORRENT.EXE-2F1B50FF.pf =>P2P.µTorrent
O45 - LFCP:[MD5.3FE812329BED9EEBFABC50EFA66C4E3F] - 01/05/2009 - 13:53:20 ---A- - C:\WINDOWS\Prefetch\UTORRENT.EXE-3888D1B0.pf =>P2P.µTorrent
~ Prefetcher: 2 Scanned in 00mn 00s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
~ ShellExecuteHooks: Scanned in 00mn 00s



---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\uTorrent\uTorrent.exe" [Enabled] .(.BitTorrent, Inc..) -- C:\Program Files\uTorrent\uTorrent.exe =>P2P.BitTorrent
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
~ Keys Export: 5 Scanned in 00mn 00s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll
~ LSA: 6 Scanned in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
~ CSB: 21 Scanned in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ IFEO: Scanned in 00mn 00s



---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \Drivers32\"VIDC.DIVX"="divx.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\system32\divx.dll
O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (...) -- C:\WINDOWS\system32\xvidvfw.dll
O52 - TDSD: \Drivers32\"VIDC.YV12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\WINDOWS\system32\yv12vfw.dll
O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\system32\ac3acm.acm
O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\WINDOWS\system32\lameACM.acm
O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (...) -- C:\WINDOWS\system32\ff_vfw.dll
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC-3 ACM Codec" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\system32\ac3acm.acm
O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (...) -- C:\WINDOWS\system32\ff_vfw.dll
~ TDSD: 20 Scanned in 00mn 00s



---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
~ MSCP: 6 Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
~ MWPS: 5 Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSMHelp"=1
O56 - MWPE:[HKCU\...\policies\Explorer] - "ForceClassicControlPanel"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDesktopCleanupWizard"=1
~ MWPE Keys: 4 Scanned in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:12/04/2011 - 11:39:42 ---A- . (.Atheros Communications, Inc. - Driver for Atheros Wireless Network Adapter.) -- C:\WINDOWS\system32\Drivers\athw.sys [1606976]
O58 - SDL:20/08/2008 - 17:58:58 ----- . (.Sonic Solutions - CDR4 CD and DVD Place Holder Driver (see PxHelp).) -- C:\WINDOWS\system32\Drivers\cdr4_xp.sys [9072]
O58 - SDL:20/08/2008 - 17:58:58 ----- . (.Sonic Solutions - CDRAL Place Holder Driver (see PxHelp).) -- C:\WINDOWS\system32\Drivers\cdralw2k.sys [9200]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\Drivers\cinemst2.sys [262528]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\Drivers\cpqdap01.sys [11776]
O58 - SDL:13/04/2008 - 19:05:08 ---A- . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys [800256]
O58 - SDL:13/04/2008 - 19:05:14 ---A- . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys [154496]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys [5888]
O58 - SDL:20/02/2008 - 11:01:30 ---A- . (.ESET - Amon monitor.) -- C:\WINDOWS\system32\Drivers\eamon.sys [39944]
O58 - SDL:20/02/2008 - 11:02:22 ---A- . (.ESET - Eset AntiStealth driver.) -- C:\WINDOWS\system32\Drivers\easdrv.sys [29704]
O58 - SDL:20/02/2008 - 11:11:16 ---A- . (...) -- C:\WINDOWS\system32\Drivers\epfwtdir.sys [33800]
O58 - SDL:13/04/2008 - 09:36:06 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\hdaudbus.sys [144384]
O58 - SDL:27/09/2012 - 18:07:24 ---A- . (.Tonec Inc. - Internet Download Manager TDI Driver.) -- C:\WINDOWS\system32\Drivers\idmtdi.sys [111200]
O58 - SDL:27/03/2009 - 13:04:30 ---A- . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\system32\Drivers\igxpmp32.sys [6048768]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\nikedrv.sys [12032]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\Drivers\ptilink.sys [17792]
O58 - SDL:20/08/2008 - 17:58:58 ----- . (.Sonic Solutions - Px Engine Device Driver for Windows 2000/XP.) -- C:\WINDOWS\system32\Drivers\PxHelp20.sys [44944]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\Drivers\rio8drv.sys [12032]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\riodrv.sys [12032]
O58 - SDL:27/03/2009 - 13:18:44 ---A- . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\system32\Drivers\Rtenicxp.sys [94592]
O58 - SDL:27/03/2009 - 13:18:02 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\WINDOWS\system32\Drivers\RtkHDAud.sys [4625408]
O58 - SDL:13/04/2008 - 09:39:16 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\Drivers\secdrv.sys [20480]
O58 - SDL:24/05/2008 - 01:37:54 ---A- . (.Silicon Image, Inc - SATA Controller miniport driver.) -- C:\WINDOWS\system32\Drivers\Si3531.sys [210224]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\Drivers\tsbvcap.sys [21376]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\Drivers\vdmindvd.sys [58112]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]
O58 - SDL:12/04/2011 - 11:39:42 ----- . (.Atheros Communications, Inc. - Driver for Atheros Wireless Network Adapter.) -- C:\WINDOWS\system32\athw.sys [1606976]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]
O58 - SDL:13/04/2008 - 09:50:56 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]
O58 - SDL:28/08/2001 - 14:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]
O58 - SDL:13/04/2008 - 09:49:52 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]
O58 - SDL:13/04/2008 - 09:49:44 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]
O58 - SDL:13/04/2008 - 09:49:40 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]
O58 - SDL:13/04/2008 - 09:49:44 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]
O58 - SDL:13/04/2008 - 09:49:42 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]
~ Drivers: 41 Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 22/04/2015 - 22:26:37 ---A- . (.Nicolas Coolman.) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\Programs\ZHPDiag2.exe [6878142] =>.Nicolas Coolman
O61 - LFC: 23/04/2015 - 22:26:36 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\Administrateur\Application Data\IDM\idmmzcc5\components2\idmcchandler2.dll [247688]
O61 - LFC: 23/04/2015 - 22:26:36 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\Administrateur\Application Data\IDM\idmmzcc5\components2\idmcchandler2_64.dll [352136]
O61 - LFC: 23/04/2015 - 22:26:36 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\Administrateur\Application Data\IDM\idmmzcc5\components2\idmmzcc.dll [34216]
O61 - LFC: 23/04/2015 - 22:26:36 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\Administrateur\Application Data\IDM\idmmzcc5\components2\idmmzcc64.dll [28512]
O61 - LFC: 23/04/2015 - 22:26:36 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\Administrateur\Application Data\IDM\idmmzcc5\components8\idmmzcc.dll [24456]
O61 - LFC: 23/04/2015 - 22:26:36 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\Administrateur\Application Data\IDM\idmmzcc5\components8\idmmzcc64.dll [29064]
O61 - LFC: 23/04/2015 - 22:26:36 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\Administrateur\Application Data\IDM\idmmzcc5\components\idmmzcc.dll [34216]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Arabic.bin [20991]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Czech.bin [24321]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Danish.bin [22794]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Dutch.bin [25758]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\English.bin [21944]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Finnish.bin [22868]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\French.bin [27245]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\German.bin [25764]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Greek.bin [25093]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Hebrew.bin [19564]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Hungarian.bin [26094]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Italian.bin [27421]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Japanese.bin [24310]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Korean.bin [20145]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Norwegian.bin [21975]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Polish.bin [24232]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Portuguese(Brazil).bin [25082]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Portuguese.bin [26271]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Russian.bin [26136]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\SWEDISH.bin [24093]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\SimChin.bin [16420]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Spanish.bin [27764]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Thai.bin [21987]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\TradChin.bin [16962]
O61 - LFC: 23/04/2015 - 22:26:37 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Temp\Turkish.bin [22263]
~ 470 Fichiers temporaires (Temporary files)
~ 10 Fichiers cookies (Cookies files)
~ Files: 33 Scanned in 00mn 00s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT
O64 - Services: CurCS - 28/08/2001 - C:\WINDOWS\system32\drivers\dmload.sys (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - 20/02/2008 - C:\WINDOWS\system32\DRIVERS\eamon.sys (eamon) .(.ESET - Amon monitor.) - LEGACY_EAMON
O64 - Services: CurCS - 20/02/2008 - C:\WINDOWS\system32\DRIVERS\easdrv.sys (easdrv) .(.ESET - Eset AntiStealth driver.) - LEGACY_EASDRV
O64 - Services: CurCS - 20/02/2008 - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ekrn) .(.ESET - Eset Service.) - LEGACY_EKRN
O64 - Services: CurCS - 20/02/2008 - C:\WINDOWS\system32\DRIVERS\epfwtdir.sys (epfwtdir) .(...) - LEGACY_EPFWTDIR
O64 - Services: CurCS - 27/09/2012 - C:\WINDOWS\system32\DRIVERS\idmtdi.sys (IDMTDI) .(.Tonec Inc. - Internet Download Manager TDI Driver.) - LEGACY_IDMTDI
O64 - Services: CurCS - 24/05/2008 - C:\Program Files\UltraISO\drivers\ISODrive.sys (ISODrive) .(.EZB Systems, Inc. - ISO DVD/CD-ROM Device Driver.) - LEGACY_ISODRIVE
O64 - Services: CurCS - 23/04/2015 - C:\Program Files\Java\jre6\bin\jqs.exe (JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE
O64 - Services: CurCS - 16/12/1745 - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mc2399.tmp (mchInjDrv) .(...) - LEGACY_MCHINJDRV
~ Legacy: 102 Scanned in 00mn 00s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 10 Scanned in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {4FC1B895-E129-4345-B101-CF4EF5EF80C8} [DefaultScope] - (Google) - http://www.google.com
~ Keys: Scanned in 00mn 00s



---\\ Enumère les fichiers Crack & Keygen (CKF) (O82)
F:\FairStars Audio Converter 1.90 + KEYGEN [h33t] [mkrandow]\Keygen.exe =>.Crack,Keygen
F:\FairStars Audio Converter 1.90 + KEYGEN [h33t] [mkrandow]\setup.exe.exe =>.Crack,Keygen
F:\FairStars Audio Converter 1.90 + KEYGEN [h33t] [mkrandow].rar =>.Crack,Keygen
I:\FairStars Audio Converter 1.90 + KEYGEN [h33t] [mkrandow].rar =>.Crack,Keygen
~ Files: Scanned in 00mn 54s



---\\ Enumère les service demarrés par Svchost (SSS) (O83)
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\system32\appmgmts.dll [176640]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496]
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [77824]
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464]
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576]
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [127488]
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040]
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [246272]
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [96768]
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096]
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792]
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [198144]
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248]
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560]
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll [18944]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\system32\ipnathlp.dll [332800]
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\system32\tapisrv.dll [249856]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112]
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176]
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [483840]
O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\system32\advapi32.dll [685568]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408]
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896]
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024]
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll [293376]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [61440]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\mspmsnsv.dll [27136]
~ Services: 39 Scanned in 00mn 00s



---\\ Enumère les données de la clé NameSpace (MNS) (O92)
O92 - MNS: Dossiers Web - {BDEADF00-C265-11D0-BCED-00A0C90AB50F}
~ MNS: 1 Scanned in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 13/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SS - | Demand 20/02/2008 19200 | (EhttpSrv) . (.ESET.) - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
SR - | Auto 20/02/2008 472320 | (ekrn) . (.ESET.) - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
SR - | Auto 23/04/2015 152984 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe
SR - | Disabled 22/07/1658 0 | (mchInjDrv) . (...) - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mc2399.tmp
~ Services: Scanned in 00mn 24s



---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by Administrateur at 22/04/2015 22:28:02
device: opened successfully
user: MBR read successfully
Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
1 nt!IofCallDriver[0x804E1397] >> \Device\Harddisk0\DR0[0x89715AB8]
3 CLASSPNP[0xF7637FD7] >> nt!IofCallDriver[0x804E1397] >> \Device\00000058[0x897E6278]
5 ACPI[0xF75AD620] >> nt!IofCallDriver[0x804E1397] >> \Device\Ide\IdeDeviceP2T1L0-e[0x89716B00]
kernel: MBR read successfully
user & kernel MBR OK
~ MBR: 13 Scanned in 00mn 02s



---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Administrateur at 22/04/2015 22:28:04
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s



---\\ Scan Additionnel (O88)
Database Version : 13008 - (20/04/2015)
Clés trouvées (Keys found) : 13
Valeurs trouvées (Values found) : 2
Dossiers trouvés (Folders found) : 3
Fichiers trouvés (Files found) : 1

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent] =>P2P.µTorrent^
[HKLM\Software\Classes\TypeLib\{090ACFA1-1580-11D1-8AC0-00C0F00910F9}] =>Adware.AdRotator
[HKLM\Software\Classes\TypeLib\{B4E90801-B83C-11D0-8B40-00C0F00AE35A}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo
[HKLM\Software\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion] =>Toolbar.Yahoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}] =>Toolbar.Yahoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}] =>Toolbar.Yahoo
[HKLM\Software\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}] =>Toolbar.Yahoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}] =>Toolbar.Yahoo
[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{EF99BD32-C1FB-11D2-892F-0090271D4F88} =>Toolbar.Yahoo
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{EF99BD32-C1FB-11D2-892F-0090271D4F88} =>Toolbar.Yahoo
C:\Program Files\uTorrent =>P2P.µTorrent^
C:\Documents and Settings\Administrateur\Application Data\uTorrent =>P2P.µTorrent^
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\uTorrent =>P2P.µTorrent^
[HKCU\Software\BitTorrent] =>P2P.BitTorrent^
~ Additionnel Scan: 139458 Items scanned in 00mn 42s



---\\ Informations complémentaires sur les modules
~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5)
~ http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects de navigateur (O2)
~ http://nicolascoolman.fr/o3-internet-explorer-toolbars/ =>.Internet Explorer Toolbars (O3)
~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4)
~ http://nicolascoolman.fr/o50-image-file-execution-options-zhpdiag/ =>.Image File Execution Options (IFEO) (O50)
~ AMI: 5 Scanned in 00mn 00s



---\\ Récapitulatif des détections trouvées sur votre station
http://nicolascoolman.fr/adware-adrotator =>Adware.AdRotator
http://www.nicolascoolman.fr/blog/ =>Toolbar.Agent
http://www.nicolascoolman.fr/blog/ =>Toolbar.Yahoo
~ MSI: 3 link(s) detected in 00mn 00s



End of the scan (1449 lines in 02mn 55s)(4.4)

Publicité


Signaler le contenu de ce document

Publicité