cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ Report of ZHPDiag v2015.6.4.54 - Nicolas Coolman (31-05-2015)
~ Launched by hisham (07-06-2015 14:06:29)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Web forum address : http://forum.nicolascoolman.fr
~ Translated by
~ Version State : Updated version.
~ White List : Deactivate by user
~ Elevation of privilege : OK
~ User Account Control : Not Found


---\\ Internet browsers
MSIE: Internet Explorer v6.0.2900.5512
GCIE: Google Chrome v43.0.2357.81 (Defaut)

---\\ Windows product information
~ Langage: Anglais
Windows Automatic Updates : OK
Windows Genuine Advantage : KO
Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600)

---\\ System protection software

---\\ System optimization software

---\\ Sharing software PeerToPeer

---\\ Surveillance software
Adobe Flash Player 17 ActiveX

---\\ Information on the system
~ Processor: x86 Family 6 Model 13 Stepping 8, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 502.4 MB (6% free)
System Restore: Activé (Enable)
System drive C: has 15 GB (77%) free of 20 GB

---\\ Connection to the system mode
~ Computer Name: HISHAM-86105F24
~ User Name: hisham
~ All Users Names: SUPPORT_388945a0, hisham, HelpAssistant, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Environment variables
~ System Unit : C:\
~ %AppZHP% : C:\Documents and Settings\hisham\Application Data\ZHP\
~ %AppData% : C:\Documents and Settings\hisham\Application Data\
~ %Desktop% : C:\Documents and Settings\hisham\Bureau\
~ %Favorites% : C:\Documents and Settings\hisham\Favoris\
~ %LocalAppData% : C:\Documents and Settings\hisham\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\hisham\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ Enumeration of the disk units
C: Hard drive, Flash drive, Thumb drive (Free 15 Go of 20 Go)
D: Hard drive, Flash drive, Thumb drive (Free 8 Go of 9 Go)
E: Hard drive, Flash drive, Thumb drive (Free 30 Go of 46 Go)



---\\ State of the Windows Security Center
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
~ Security Center: 40 Scanned in 00mn 00s



---\\ Search Generic System Files
[MD5.3EFE912DD25D2586E6A0341DB0A66F69] - (.Microsoft Corporation - Explorateur Windows.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\Explorer.exe [979968]
[MD5.3601E0109C765D5236EB42E663CF2681] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\wininet.dll [704512]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.322D0E36693D6E24A2398BEE62A268CD] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138112]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13-04-2008 - 10:40:32.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.68755F0FF16070178B54674FE5B847B0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456576]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13-04-2008 - 10:32:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14-04-2008 - 15:00:00.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Generic Processes: Scanned in 00mn 01s



---\\ Hidden files state (Hidden/Total)
~ Mes images (My Pictures) : 1/2
~ Mes musiques (My Musics) : 1/2
~ Mes Videos (My Videos) : 0/0
~ Mes Favoris (My Favorites) : 1/7
~ Mes Documents (My Documents) : 1/9
~ Mon Bureau (My Desktop) : 0/3
~ Menu demarrer (Programs) : 1/36
~ Hidden Files: Scanned in 00mn 00s



---\\ Process running
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- ystem32\rundll32.exe [0] [PID.632]
[MD5.D2124327CB66F3727D26343122DBC4F5] - (.ESET - ESET Main GUI.) -- C:\Program Files\ESET\ESET Smart Security\egui.exe [5088456] [PID.664]
[MD5.3F2C8DD08549BB3419CDA372F5999FFA] - (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe [94208] [PID.672]
[MD5.01018F75F3F18CE629FAC9689954A2AE] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [77824] [PID.688]
[MD5.996ABAC2332DE28F3B6A179C6DA20205] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [114688] [PID.704]
[MD5.80FD4D46B0E9B620CF757A9A5C789329] - (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\SOUNDMAN.exe [577536] [PID.788]
[MD5.D3BC8027763DB4B75A7C1C8353BD0446] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe [3886672] [PID.840]
[MD5.BD95E822E7A958BBCA842D078426A151] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe [269848] [PID.948]
[MD5.58FBDA10FC403CF9F82ABD0A68129BA3] - (.ESET - ESET Service.) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1349576] [PID.1492]
[MD5.1E1AC1BDED0704868199E519F74B80BB] - (.IObit - No Comment.) -- C:\Program Files\IObit\IObit Uninstaller\UninstallMonitor.exe [187168] [PID.3696]
[MD5.C4EF32C1C0473392EF4204890AF8E457] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [813896] [PID.1952]
[MD5.12E2FC1F74265881402DE856D01EFFFE] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8214016] [PID.4012]
~ Processes Running: Scanned in 00mn 18s



---\\ Google Chrome, Start,Search,Extensions (G0,G1,G2)
C:\Documents and Settings\hisham\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

---\\ Google Chrome Extension Folder
G2 - EXT: C:\Documents and Settings\hisham\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [__MSG_appName__]
G2 - EXT: C:\Documents and Settings\hisham\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [__MSG_appName__]
G2 - EXT: C:\Documents and Settings\hisham\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [WOT]
G2 - EXT: C:\Documents and Settings\hisham\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [__MSG_appName__]
G2 - EXT: C:\Documents and Settings\hisham\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [__MSG_appName__]
G2 - EXT: C:\Documents and Settings\hisham\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [Bookmark Manager]
G2 - EXT: C:\Documents and Settings\hisham\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\iebhdknplcmgbpofainnbfglhpdgdlmg [__MSG_name__]
G2 - EXT: C:\Documents and Settings\hisham\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn [IDM Integration Module]
G2 - EXT: C:\Documents and Settings\hisham\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\knebimhcckndhiglamoabbnifdkijidd [__MSG_name__]
G2 - EXT: C:\Documents and Settings\hisham\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [__MSG_APP_NAME__]
G2 - EXT: C:\Documents and Settings\hisham\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [__MSG_appName__]
~ Google Lines Browser: 22 Scanned in 00mn 01s



---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.2.0] - (.VideoLAN - VLC media player Web Plugin.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN
~ Firefox Browser: 3 Scanned in 00mn 00s



---\\ Internet Explorer Extensions, Start, Search (R4,R3,R0,R1)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.VideoLAN - VLC media player Web Plugin.) (No version) -- (.not file.) =>.VideoLAN
~ IE Browser: 7 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Line Analysis F0, F1, F2, F3 - IniFiles, Auto loading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (20)
~ Hosts File: Scanned in 00mn 01s



---\\ Browser Helper Objects (O2)
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} . (.IObit - Uninstall for explorer.) -- C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll
~ BHO: 4 Scanned in 00mn 00s



---\\ Internet Explorer toolbars (O3)
O3 - Toolbar: ExplorerWnd Helper - [HKLM]{10921475-03CE-4E04-90CE-E2E7EF20C814} . (.IObit - Uninstall for explorer.) -- C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{01E04581-4EEE-11D0-BFE9-00AA005B4383} Orphan key
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{0E5CBF21-D15F-11D0-8301-00AA005B4383} Orphan key
~ Toolbar: Scanned in 00mn 00s



---\\ Auto loading programs from Registry and folders (O4)
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [egui] . (.ESET - ESET Main GUI.) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
O4 - HKLM\..\Run: [igfxtray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMan] . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\SOUNDMAN.exe
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-796845957-1409082233-1177238915-1003\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-796845957-1409082233-1177238915-1003\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe
~ Application: Scanned in 00mn 00s



---\\ Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu (O9)
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Orphan key
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
~ Winsock: 4 Scanned in 00mn 00s



---\\ Lop.com/Domain Hijackers (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{8B8EED53-5923-4797-8E05-F0069C68740C}: DhcpNameServer = 37.48.127.131 8.8.8.8
O17 - HKLM\System\CS1\Services\Tcpip\..\{8B8EED53-5923-4797-8E05-F0069C68740C}: DhcpNameServer = 37.48.127.131 8.8.8.8
O17 - HKLM\System\CS2\Services\Tcpip\..\{8B8EED53-5923-4797-8E05-F0069C68740C}: DhcpNameServer = 37.48.127.131 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 37.48.127.131 8.8.8.8
~ Domain: Scanned in 00mn 00s



---\\ Extra protocols (O18)
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ AppInit_DLLs Registry value Autorun (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\WINDOWS\system32\igfxdev.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Winlogon: Scanned in 00mn 00s



---\\ ShellServiceObjectDelayLoad (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
~ SSODL: 4 Scanned in 00mn 00s



---\\ Non Microsoft non disabled Windows XP/NT/2000 Services (O23)
O23 - Service: ESET Service (ekrn) . (.ESET - ESET Service.) - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: خدمة Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc
O23 - Service: LiveUpdate (LiveUpdateSvc) . (.IObit - Product Updater.) - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
~ Services: 3 Scanned in 00mn 06s



---\\ Windows Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
O24 - Desktop General: BackupWallPaper - .(...) - C:\WINDOWS\web\wallpaper\Colline verdoyante.bmp
O24 - Desktop General: WallPaper - .(...) - C:\WINDOWS\web\wallpaper\Colline verdoyante.bmp
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Task Planned Automatically (039)
[MD5.B04A4810C6CC205F9DC72DC22E4AB236] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [268464]
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107848]
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107848]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [826]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [830]
~ Scheduled Task: 7 Scanned in 00mn 02s



---\\ ActiveSetup Installed Components (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe =>.Microsoft Corporation
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe =>.Microsoft Corporation
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} . (.Microsoft Corporation - DirectX Media -- DirectAnimation.) -- C:\WINDOWS\system32\danim.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Améliorations pour la navigation - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf =>.Microsoft Corporation
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer 6 - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'installation individualisée de Internet Explorer.) -- C:\WINDOWS\system32\ie4uinit.exe
O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\43.0.2357.81\Installer\chrmstp.exe
O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 17.0 r0.) -- C:\WINDOWS\system32\Macromed\Flash\Flash32_17_0_0_169.ocx
O40 - ASIC: Installed Component - S-1-5-21-796845957-1409082233-1177238915-1003 - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS -- Not Hexadécimal CLSID
~ Active Setup: 18 Scanned in 00mn 01s



---\\ Drivers launched at startup (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (eamonm) . (.ESET - Amon monitor.) - C:\WINDOWS\system32\DRIVERS\eamonm.sys
O41 - Driver: (ehdrv) . (.ESET - ESET Helper driver.) - C:\WINDOWS\system32\DRIVERS\ehdrv.sys
O41 - Driver: (epfwtdi) . (.ESET - ESET Personal Firewall TDI filter.) - C:\WINDOWS\system32\DRIVERS\epfwtdi.sys
O41 - Driver: (HWiNFO32) . (.REALiX(tm) - HWiNFO x86 Kernel Driver.) - C:\WINDOWS\system32\drivers\HWiNFO32.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: (IDMTDI) . (.Tonec Inc. - Internet Download Manager TDI Driver.) - C:\WINDOWS\system32\DRIVERS\idmtdi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
~ Drivers: 60 Scanned in 00mn 00s



---\\ Software installed (O42)
O42 - Logiciel: Adobe Flash Player 17 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Conexant AC-Link Audio - (...) [HKLM] -- Conexant PCI Audio
O42 - Logiciel: Google Chrome - (.Google Inc‎.‎.) [HKLM] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: IObit Uninstaller - (.IObit.) [HKLM] -- IObitUninstall
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver for Mobile - (...) [HKLM] -- {8A708DD8-A5E6-11D4-A706-000629E95E20}
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager
O42 - Logiciel: Pack Vista Inspirat 2 1.0 - (.Bricomix.) [HKLM] -- Pack Vista Inspirat 2
O42 - Logiciel: Realtek AC'97 Audio - (.Realtek Semiconductor Corp..) [HKLM] -- {FB08F381-6533-4108-B7DD-039E11FBC27E}
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: WinRAR 5.21 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
~ Logic: 13 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\DownloadManager]
[HKCU\Software\Driver Magician]
[HKCU\Software\ESET]
[HKCU\Software\Google]
[HKCU\Software\Intel]
[HKCU\Software\Macromedia]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\Policies]
[HKCU\Software\Revenger inc.]
[HKCU\Software\RocketDock]
[HKCU\Software\UberIcon-v1.0.0]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Bricomix.net]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Conexant]
[HKLM\Software\ESET]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\INTEL]
[HKLM\Software\IObit]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Revenger inc.]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\VideoLAN]
[HKLM\Software\WinRAR]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\iColorFolder]
~ Key Software: 69 Scanned in 00mn 00s



---\\ Contents of the Common Files folders (O43)
O43 - CFD: 06-06-2015 - 2:14:09 - [0] ----D C:\Program Files\ComPlus Applications
O43 - CFD: 06-06-2015 - 4:11:57 - [] ----D C:\Program Files\ESET
O43 - CFD: 06-06-2015 - 4:21:45 - [] ----D C:\Program Files\Fichiers communs
O43 - CFD: 06-06-2015 - 3:52:04 - [] ----D C:\Program Files\Google
O43 - CFD: 06-06-2015 - 4:22:23 - [] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 06-06-2015 - 3:31:40 - [] ----D C:\Program Files\Intel
O43 - CFD: 06-06-2015 - 3:51:28 - [] ----D C:\Program Files\Internet Download Manager
O43 - CFD: 06-06-2015 - 4:39:38 - [] ----D C:\Program Files\Internet Explorer
O43 - CFD: 06-06-2015 - 4:39:34 - [] ----D C:\Program Files\IObit
O43 - CFD: 06-06-2015 - 2:13:45 - [] ----D C:\Program Files\Messenger
O43 - CFD: 06-06-2015 - 2:17:43 - [] ----D C:\Program Files\microsoft frontpage
O43 - CFD: 06-06-2015 - 4:39:39 - [] ----D C:\Program Files\Movie Maker
O43 - CFD: 06-06-2015 - 2:13:19 - [] ----D C:\Program Files\MSN
O43 - CFD: 06-06-2015 - 2:13:42 - [] ----D C:\Program Files\MSN Gaming Zone
O43 - CFD: 06-06-2015 - 2:15:28 - [] ----D C:\Program Files\NetMeeting
O43 - CFD: 06-06-2015 - 2:13:52 - [] ----D C:\Program Files\Online Services
O43 - CFD: 06-06-2015 - 4:39:39 - [] ----D C:\Program Files\Outlook Express =>.Microsoft Corporation
O43 - CFD: 06-06-2015 - 4:24:05 - [] ----D C:\Program Files\Realtek AC97
O43 - CFD: 06-06-2015 - 2:15:49 - [] ----D C:\Program Files\Services en ligne
O43 - CFD: 06-06-2015 - 2:23:17 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 06-06-2015 - 3:48:02 - [] ----D C:\Program Files\VideoLAN
O43 - CFD: 06-06-2015 - 2:17:22 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 06-06-2015 - 2:13:35 - [] ----D C:\Program Files\Windows NT
O43 - CFD: 06-06-2015 - 2:15:54 - [0] --H-D C:\Program Files\WindowsUpdate
O43 - CFD: 06-06-2015 - 2:25:15 - [] ----D C:\Program Files\WinRAR
O43 - CFD: 06-06-2015 - 2:17:43 - [] ----D C:\Program Files\xerox
O43 - CFD: 07-06-2015 - 13:58:39 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 06-06-2015 - 4:21:45 - [] ----D C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 06-06-2015 - 3:35:29 - [] ----D C:\Program Files\Fichiers communs\IObit
O43 - CFD: 06-06-2015 - 2:23:28 - [] ----D C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 06-06-2015 - 2:15:22 - [] ----D C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 06-06-2015 - 4:05:15 - [] ----D C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 06-06-2015 - 2:15:28 - [] ----D C:\Program Files\Fichiers communs\Services
O43 - CFD: 06-06-2015 - 4:05:13 - [] ----D C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 06-06-2015 - 2:14:57 - [] ----D C:\Program Files\Fichiers communs\System
O43 - CFD: 06-06-2015 - 4:11:57 - [] ----D C:\Documents and Settings\All Users\Application Data\ESET
O43 - CFD: 06-06-2015 - 3:51:25 - [0] ----D C:\Documents and Settings\All Users\Application Data\IDM
O43 - CFD: 06-06-2015 - 4:02:22 - [] ----D C:\Documents and Settings\All Users\Application Data\IObit
O43 - CFD: 06-06-2015 - 14:58:17 - [] -S--D C:\Documents and Settings\All Users\Application Data\Microsoft
O43 - CFD: 06-06-2015 - 4:02:21 - [] ----D C:\Documents and Settings\All Users\Application Data\ProductData
O43 - CFD: 06-06-2015 - 3:35:40 - [0] ----D C:\Documents and Settings\All Users\Application Data\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
O43 - CFD: 06-06-2015 - 2:14:47 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 06-06-2015 - 4:04:50 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 06-06-2015 - 4:11:58 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ESET
O43 - CFD: 06-06-2015 - 3:52:30 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Google Chrome
O43 - CFD: 06-06-2015 - 3:51:23 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Internet Download Manager
O43 - CFD: 06-06-2015 - 3:35:45 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\IObit Uninstaller
O43 - CFD: 06-06-2015 - 2:14:24 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux
O43 - CFD: 06-06-2015 - 2:17:29 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 06-06-2015 - 3:49:14 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\VideoLAN
O43 - CFD: 06-06-2015 - 2:25:15 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinRAR
O43 - CFD: 07-06-2015 - 13:59:32 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP =>.Nicolas Coolman
O43 - CFD: 07-06-2015 - 9:58:02 - [] ----D C:\Documents and Settings\hisham\Application Data\Adobe
O43 - CFD: 06-06-2015 - 3:35:34 - [] ----D C:\Documents and Settings\hisham\Application Data\Apple Computer
O43 - CFD: 06-06-2015 - 3:52:25 - [] ----D C:\Documents and Settings\hisham\Application Data\DMCache
O43 - CFD: 06-06-2015 - 4:14:17 - [] ----D C:\Documents and Settings\hisham\Application Data\ESET
O43 - CFD: 06-06-2015 - 2:23:20 - [] ----D C:\Documents and Settings\hisham\Application Data\Identities
O43 - CFD: 06-06-2015 - 4:16:41 - [] ----D C:\Documents and Settings\hisham\Application Data\IDM
O43 - CFD: 06-06-2015 - 3:43:23 - [] ----D C:\Documents and Settings\hisham\Application Data\IObit
O43 - CFD: 06-06-2015 - 11:30:51 - [] -S--D C:\Documents and Settings\hisham\Application Data\Microsoft
O43 - CFD: 06-06-2015 - 3:36:43 - [] ----D C:\Documents and Settings\hisham\Application Data\ProductData
O43 - CFD: 06-06-2015 - 16:48:58 - [] ----D C:\Documents and Settings\hisham\Application Data\vlc
O43 - CFD: 06-06-2015 - 3:33:37 - [] ----D C:\Documents and Settings\hisham\Application Data\WinRAR
O43 - CFD: 07-06-2015 - 14:07:09 - [] ----D C:\Documents and Settings\hisham\Application Data\ZHP =>.Nicolas Coolman
O43 - CFD: 06-06-2015 - 4:14:17 - [] ----D C:\Documents and Settings\hisham\Local Settings\Application Data\ESET
O43 - CFD: 06-06-2015 - 3:52:37 - [] ----D C:\Documents and Settings\hisham\Local Settings\Application Data\Google
O43 - CFD: 06-06-2015 - 3:35:56 - [] ----D C:\Documents and Settings\hisham\Local Settings\Application Data\Microsoft
O43 - CFD: 06-06-2015 - 2:23:23 - [] R---D C:\Documents and Settings\hisham\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 06-06-2015 - 4:08:04 - [] ----D C:\Documents and Settings\hisham\Menu Démarrer\Programmes\BricoPacks
O43 - CFD: 06-06-2015 - 4:12:11 - [] R---D C:\Documents and Settings\hisham\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 06-06-2015 - 3:51:23 - [] ----D C:\Documents and Settings\hisham\Menu Démarrer\Programmes\Internet Download Manager
O43 - CFD: 06-06-2015 - 2:25:15 - [] ----D C:\Documents and Settings\hisham\Menu Démarrer\Programmes\WinRAR
~ Program Folder: 72 Scanned in 00mn 00s



---\\ Last modified or created files under Windows and System32 (O44)
O44 - LFC:[MD5.0F866DA8A80C38260C815A1454C658FC] - 06-06-2015 - 14:09:34 ---A- . (...) -- C:\WINDOWS\setupapi.log [400599]
O44 - LFC:[MD5.EEDB7B1F14A68C1022A6FD278416973F] - 06-06-2015 - 1:12:06 -SHA- . (...) -- C:\BOOT.001 [1095]
O44 - LFC:[MD5.88155247177638048422893737429D9E] - 06-06-2015 - 1:13:09 ---A- . (.Microsoft Corporation - Terminal Server Driver.) -- C:\WINDOWS\system32\Drivers\termdd.sys [40840]
O44 - LFC:[MD5.60101662853FA56F3F18F1DEA937FECB] - 06-06-2015 - 1:13:10 ---A- . (.Microsoft Corporation - Application d'assistance du composant de lo.) -- C:\WINDOWS\system32\mmfutil.dll [17920]
O44 - LFC:[MD5.0584A0A065B1FCA52B74FB65A7A19E09] - 06-06-2015 - 1:13:10 ---A- . (.Microsoft Corporation - Composant logiciel enfichable WMI.) -- C:\WINDOWS\system32\cmprops.dll [191488]
O44 - LFC:[MD5.15CABD0F7C00C47C70124907916AF3F1] - 06-06-2015 - 1:13:10 ---A- . (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
O44 - LFC:[MD5.86FC0740683709C5314722EF8CA64062] - 06-06-2015 - 1:13:10 ---A- . (.Microsoft Corporation - WMI Snapins.) -- C:\WINDOWS\system32\servdeps.dll [56320]
O44 - LFC:[MD5.8BC58C4B4471EA21D80FC28FF5788B3B] - 06-06-2015 - 1:13:10 ---A- . (.Microsoft Corporation - Windows Product Activation Configuration WM.) -- C:\WINDOWS\system32\licwmi.dll [58880]
O44 - LFC:[MD5.BD6C84E39CB7073BDA60A0B16B9298C2] - 06-06-2015 - 1:13:14 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\clbcatq.dll [498688]
O44 - LFC:[MD5.67217D3DF13594B3EE2A5F37ABA953B3] - 06-06-2015 - 1:13:14 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comsnap.dll [167424]
O44 - LFC:[MD5.D408E96DE7D1DCFC7D37A0C38B31EBF1] - 06-06-2015 - 1:13:14 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comuid.dll [539648]
O44 - LFC:[MD5.6B9D6177E2852C103114C07D62072851] - 06-06-2015 - 1:13:15 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\catsrv.dll [226304]
O44 - LFC:[MD5.32278ADD920546C94E035549D183A5C1] - 06-06-2015 - 1:13:15 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\catsrvps.dll [85504]
O44 - LFC:[MD5.BEB9AD8CD1E53495D4F584C9F7C1DB3E] - 06-06-2015 - 1:13:15 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\catsrvut.dll [625664]
O44 - LFC:[MD5.3E7E079AF9CFF7AFC4EDCC332E94F42E] - 06-06-2015 - 1:13:15 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\clbcatex.dll [110592]
O44 - LFC:[MD5.8245A3D7C3C42DFA3536E7F38ACBA1FE] - 06-06-2015 - 1:13:15 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\colbact.dll [60416]
O44 - LFC:[MD5.84179A6F77F264A71651CE75DCDD7947] - 06-06-2015 - 1:13:15 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comaddin.dll [28160]
O44 - LFC:[MD5.C01BE55479D4323CFFE90C283C7E944D] - 06-06-2015 - 1:13:15 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comrepl.dll [97792]
O44 - LFC:[MD5.4FC412747440950E8C0D24203ECCCD88] - 06-06-2015 - 1:13:15 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comsvcs.dll [1267200]
O44 - LFC:[MD5.79D221D6ECCF243CA4560F4BE7BAD9F5] - 06-06-2015 - 1:13:15 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\stclient.dll [59392]
O44 - LFC:[MD5.BB0175779746E7DF14182EC461D55CDD] - 06-06-2015 - 1:13:16 ---A- . (.Microsoft Corporation - MS DTC OLE Transactions interface proxy DLL.) -- C:\WINDOWS\system32\msdtcprx.dll [427008]
O44 - LFC:[MD5.D926AEC879EE607570EE97CE48388CA6] - 06-06-2015 - 1:13:16 ---A- . (.Microsoft Corporation - MS DTC administrative component DLL.) -- C:\WINDOWS\system32\msdtcuiu.dll [161792]
O44 - LFC:[MD5.8648D670AE0D95C95E7BBB5B80661796] - 06-06-2015 - 1:13:16 ---A- . (.Microsoft Corporation - MS DTC console program.) -- C:\WINDOWS\system32\msdtc.exe [6144]
O44 - LFC:[MD5.2275F850DFCE63C9BE9ADBF42664CFAD] - 06-06-2015 - 1:13:16 ---A- . (.Microsoft Corporation - MS DTC helper APIs DLL.) -- C:\WINDOWS\system32\xolehlp.dll [11776]
O44 - LFC:[MD5.02675B394D2078A72A7E1F04EF2EC481] - 06-06-2015 - 1:13:16 ---A- . (.Microsoft Corporation - MS DTC log manager DLL.) -- C:\WINDOWS\system32\msdtclog.dll [58880]
O44 - LFC:[MD5.912797ACCD9C4361593F23BBDC01EE71] - 06-06-2015 - 1:13:16 ---A- . (.Microsoft Corporation - MS DTC transaction manager DLL.) -- C:\WINDOWS\system32\msdtctm.dll [956928]
O44 - LFC:[MD5.69AB25E73007E9A527A55754820D2D8A] - 06-06-2015 - 1:13:16 ---A- . (.Microsoft Corporation - Microsoft database support DLL for Oracle.) -- C:\WINDOWS\system32\mtxoci.dll [91648]
O44 - LFC:[MD5.9D42C248D7C519147F1FA3111382A525] - 06-06-2015 - 1:13:16 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\dcomcnfg.exe [6144]
O44 - LFC:[MD5.DD421F87FD528E330088581E232431DB] - 06-06-2015 - 1:13:16 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\mtxdm.dll [30720]
O44 - LFC:[MD5.47E17AB71B070D0020D765753D3026AB] - 06-06-2015 - 1:13:16 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\mtxex.dll [4096]
O44 - LFC:[MD5.C725F25A2622BF21A761A609DAB360A9] - 06-06-2015 - 1:13:16 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\mtxlegih.dll [34304]
O44 - LFC:[MD5.A6A06A89A6ABC8964F7D147B3245F217] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - Anywhere access client.) -- C:\WINDOWS\system32\aaclient.dll [136192]
O44 - LFC:[MD5.0B7B1CD44A4B7A8B0B3E122B529629BB] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - Configuration Backend Interface.) -- C:\WINDOWS\system32\cfgbkend.dll [39424]
O44 - LFC:[MD5.1BDA51C28FAAB97D8A88D59C8A221485] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - DLL Interface to TermDD Device Driver.) -- C:\WINDOWS\system32\icaapi.dll [11264]
O44 - LFC:[MD5.15F67931677258D482A93990F8B3F3AF] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - Extension du Panneau de configuration Sessi.) -- C:\WINDOWS\system32\remotepg.dll [61952]
O44 - LFC:[MD5.3EFE86DBFD6B34FE2ADF6602D657342D] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - Fournisseur d'infrastructure WMI de configu.) -- C:\WINDOWS\system32\tscfgwmi.dll [94208]
O44 - LFC:[MD5.9F63D9C5B238ED1C375D417EFF3D5BE7] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) -- C:\WINDOWS\system32\sessmgr.exe [142848]
O44 - LFC:[MD5.454F013E6F538FE66A0D567B939BF360] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop TSRDP Session Add-.) -- C:\WINDOWS\system32\rdsaddin.exe [13824]
O44 - LFC:[MD5.C3E6A7A4B35DD176B5D17C0EA485996B] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - Pilote multimédia du service Terminal Serve.) -- C:\WINDOWS\system32\rdpsnd.dll [19968]
O44 - LFC:[MD5.B46EF6930DDE7393FB4BD0150BCC786C] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - RDP Clip Monitor.) -- C:\WINDOWS\system32\rdpclip.exe [62976]
O44 - LFC:[MD5.70413FB509C8E5248C84F17767557F24] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - RDP Extension DLL.) -- C:\WINDOWS\system32\rdpwsx.dll [87176]
O44 - LFC:[MD5.7BC4641B6C54338593D19130EB674620] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - RDSHost Client Module.) -- C:\WINDOWS\system32\rdchost.dll [147968]
O44 - LFC:[MD5.81F64944CDC453A79EB482B99F1A4264] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - RDSHost Server Module.) -- C:\WINDOWS\system32\rdshost.exe [67072]
O44 - LFC:[MD5.87B6A9310687594F315798D532721F65] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - RPC/HTTP Downlevel Side-by-side Runtime.) -- C:\WINDOWS\system32\rhttpaa.dll [290304]
O44 - LFC:[MD5.A42EAADFADEC1D879928CE056EBA1E2A] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - Remote Desktop Connection.) -- C:\WINDOWS\system32\mstsc.exe [677888]
O44 - LFC:[MD5.710BC85A8C22626EE094439E3EA0D38C] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - Service Terminal Server.) -- C:\WINDOWS\system32\termsrv.dll [297984]
O44 - LFC:[MD5.B7BD738EBA6E3C4C0744B4947CB54572] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - TSGateway QEC.) -- C:\WINDOWS\system32\tsgqec.dll [53248]
O44 - LFC:[MD5.ADE1BCB47973D36D01AE9ED066776C06] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - Terminal Services ActiveX Client.) -- C:\WINDOWS\system32\mstscax.dll [2089472]
O44 - LFC:[MD5.F9DE7D28A9D584A6D1B22512E45631BC] - 06-06-2015 - 1:13:17 ---A- . (.Microsoft Corporation - Utilitaire d'interrogation de processus.) -- C:\WINDOWS\system32\qprocess.exe [20992]
O44 - LFC:[MD5.6A1D9675F87094A7FAB33A67A4C25F1C] - 06-06-2015 - 1:13:18 ---A- . (.Hilgraeve, Inc. - Bibliothèque d'applications HyperTerminal.) -- C:\WINDOWS\system32\hypertrm.dll [354304]
O44 - LFC:[MD5.F12E772F91FF7943AB1D8362E24E18C5] - 06-06-2015 - 1:13:18 ---A- . (.Microsoft Corporation - Afficheur de l'album Windows NT.) -- C:\WINDOWS\system32\clipbrd.exe [104448]
O44 - LFC:[MD5.6471A66807F5E104E4885F5B67349397] - 06-06-2015 - 1:13:18 ---A- . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys [12040]
O44 - LFC:[MD5.5DE6734D16C73EA7CEA2EA2E0C734A78] - 06-06-2015 - 1:13:18 ---A- . (.Microsoft Corporation - Paint.) -- C:\WINDOWS\system32\mspaint.exe [444928]
O44 - LFC:[MD5.6728E45B66F93C08F11DE2E316FC70DD] - 06-06-2015 - 1:13:18 ---A- . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only,.) -- C:\WINDOWS\system32\Drivers\rdpwd.sys [139656]
O44 - LFC:[MD5.D8A768A65A549F07AE6329B8558A0FBB] - 06-06-2015 - 1:13:18 ---A- . (.Microsoft Corporation - Spider.) -- C:\WINDOWS\system32\spider.exe [539136]
O44 - LFC:[MD5.C56B6D0402371CF3700EB322EF3AAF61] - 06-06-2015 - 1:13:18 ---A- . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys [21896]
O44 - LFC:[MD5.027A1DB11F4143C6458FC6AC316FD764] - 06-06-2015 - 1:13:19 ---A- . (.Microsoft Corporation - Accessoires du magnétophone.) -- C:\WINDOWS\system32\sndrec32.exe [182272]
O44 - LFC:[MD5.72153A1D6181A6C72C1427E782E3A367] - 06-06-2015 - 1:13:19 ---A- . (.Microsoft Corporation - Assistant Accessibilité Microsoft.) -- C:\WINDOWS\system32\accwiz.exe [190464]
O44 - LFC:[MD5.950728D575FEF88AA98E4478EFDB9D0B] - 06-06-2015 - 1:13:19 ---A- . (.Microsoft Corporation - DLL du Panneau de configuration.) -- C:\WINDOWS\system32\access.cpl [65536]
O44 - LFC:[MD5.D0BB79521316E5926A5C3DB49E812428] - 06-06-2015 - 1:13:19 ---A- . (.Microsoft Corporation - Media Player.) -- C:\WINDOWS\system32\mplay32.exe [124928]
O44 - LFC:[MD5.2CE7B1EEB99C14032C0E2201B004F80E] - 06-06-2015 - 1:13:21 ---A- . (...) -- C:\WINDOWS\system32\wmimgmt.msc [63488]
O44 - LFC:[MD5.CDD932EDCB756FB5F7CE5E2F090BA838] - 06-06-2015 - 1:13:26 ---A- . (...) -- C:\WINDOWS\system32\msdtcprf.h [768]
O44 - LFC:[MD5.FDA18F513403E67CAE9BF0D2DD948B28] - 06-06-2015 - 1:13:26 ---A- . (...) -- C:\WINDOWS\system32\msdtcprf.ini [3914]
O44 - LFC:[MD5.2CA1060C5CF9C03B865977F12123C3F8] - 06-06-2015 - 1:13:26 ---A- . (.Microsoft Corporation - Modem Connection Driver.) -- C:\WINDOWS\system32\cdmodem.dll [15872]
O44 - LFC:[MD5.CEBA968375EE0B55094FFBA03EE69BAF] - 06-06-2015 - 1:13:26 ---A- . (.Microsoft Corporation - Utilitaire d'interrogation Terminal Server.) -- C:\WINDOWS\system32\qappsrv.exe [17408]
O44 - LFC:[MD5.8A6A5D2505D1BF424EAFD38D76D6C0E9] - 06-06-2015 - 1:13:26 ---A- . (.Microsoft Corporation - Utilitaire de déconnexion de session.) -- C:\WINDOWS\system32\logoff.exe [15872]
O44 - LFC:[MD5.25900127DAE605546899D80EA6AE61FB] - 06-06-2015 - 1:13:26 ---A- . (.Microsoft Corporation - Utilitaire de gestion des sessions de requê.) -- C:\WINDOWS\system32\qwinsta.exe [22528]
O44 - LFC:[MD5.31BF3B4C0D04EC84684F58D14F521426] - 06-06-2015 - 1:13:26 ---A- . (.Microsoft Corporation - Utilitaire de message.) -- C:\WINDOWS\system32\msg.exe [22528]
O44 - LFC:[MD5.4A547D74B435E78418BE06406250C1D3] - 06-06-2015 - 1:13:27 ---A- . (...) -- C:\WINDOWS\system32\tslabels.h [3286]
O44 - LFC:[MD5.F9A14C7B36E10052A1B0F071BC3C1C65] - 06-06-2015 - 1:13:27 ---A- . (...) -- C:\WINDOWS\system32\tslabels.ini [27768]
O44 - LFC:[MD5.4701BA735D535D9F46AB2A285610A04B] - 06-06-2015 - 1:13:27 ---A- . (.Microsoft Corporation - Extension de configuration de connexion Ter.) -- C:\WINDOWS\system32\rdpcfgex.dll [4608]
O44 - LFC:[MD5.9C847DF5E1F783716032977AE4559CCC] - 06-06-2015 - 1:13:27 ---A- . (.Microsoft Corporation - Registry Initializer.) -- C:\WINDOWS\system32\regini.exe [33792]
O44 - LFC:[MD5.3861B0195ACDCD8F1187C37617C090C4] - 06-06-2015 - 1:13:27 ---A- . (.Microsoft Corporation - Utilitaire d'arrêt du système.) -- C:\WINDOWS\system32\tsshutdn.exe [17408]
O44 - LFC:[MD5.8F0514EF34C2A69036CC55F91F903168] - 06-06-2015 - 1:13:27 ---A- . (.Microsoft Corporation - Utilitaire de connexion de session.) -- C:\WINDOWS\system32\tscon.exe [15360]
O44 - LFC:[MD5.B1D3D78F35E85E7481A9651BB11394B0] - 06-06-2015 - 1:13:27 ---A- . (.Microsoft Corporation - Utilitaire de contrôle à distance de sessio.) -- C:\WINDOWS\system32\shadow.exe [15360]
O44 - LFC:[MD5.C2E457CCCC8691F3194D12E4F5E70EA4] - 06-06-2015 - 1:13:27 ---A- . (.Microsoft Corporation - Utilitaire de déconnexion de session.) -- C:\WINDOWS\system32\tsdiscon.exe [14848]
O44 - LFC:[MD5.946B7A66354D385D9242F9AFC1CAC7C0] - 06-06-2015 - 1:13:27 ---A- . (.Microsoft Corporation - Utilitaire de réinitialisation de session.) -- C:\WINDOWS\system32\rwinsta.exe [16384]
O44 - LFC:[MD5.9F27B27C8405FEAF7DFC4DA3751DEF22] - 06-06-2015 - 1:13:28 ---A- . (...) -- C:\WINDOWS\system32\usrlogon.cmd [1263]
O44 - LFC:[MD5.EA682C022F7204CC8E8C9EF5DCE29356] - 06-06-2015 - 1:13:28 ---A- . (.Microsoft Corporation - Jeu Démineur du pack Entertainment.) -- C:\WINDOWS\system32\winmine.exe [119808]
O44 - LFC:[MD5.043D073DFF5E3AD85FDA67D8C30F4305] - 06-06-2015 - 1:13:28 ---A- . (.Microsoft Corporation - Jeu FreeCell du pack Entertainment.) -- C:\WINDOWS\system32\freecell.exe [55808]
O44 - LFC:[MD5.DDCA854934C0D4EF46E8E093F3446ABF] - 06-06-2015 - 1:13:28 ---A- . (.Microsoft Corporation - La Dame de Pique en réseau.) -- C:\WINDOWS\system32\mshearts.exe [128000]
O44 - LFC:[MD5.E167CEBDBADE82F4A6E30BBAF495800B] - 06-06-2015 - 1:13:28 ---A- . (.Microsoft Corporation - Utilitaire d'arrêt de processus des service.) -- C:\WINDOWS\system32\tskill.exe [16896]
O44 - LFC:[MD5.C05B691CC2328DB5456AECD616E81970] - 06-06-2015 - 1:13:28 ---A- . (.Microsoft Corporation - Utilitaire de réinitialisation des services.) -- C:\WINDOWS\system32\reset.exe [10240]
O44 - LFC:[MD5.DAC71A10A6A71CB6E3F427AE3283734B] - 06-06-2015 - 1:13:29 ---A- . (...) -- C:\WINDOWS\Rosace bleue 16.bmp [1272]
O44 - LFC:[MD5.405E1EF8E3C88E9BCD2853382BB12430] - 06-06-2015 - 1:13:29 ---A- . (...) -- C:\WINDOWS\system32\bopomofo.uce [22984]
O44 - LFC:[MD5.4FDED87068052EEB9B72A97FDBC141DB] - 06-06-2015 - 1:13:29 ---A- . (...) -- C:\WINDOWS\system32\gb2312.uce [24006]
O44 - LFC:[MD5.038F6AD6CEE43585D814CDBC7CDFD3EC] - 06-06-2015 - 1:13:29 ---A- . (...) -- C:\WINDOWS\system32\ideograf.uce [60458]
O44 - LFC:[MD5.7C0C25F4BA1084C4ABBEEA2C74194C5F] - 06-06-2015 - 1:13:29 ---A- . (...) -- C:\WINDOWS\system32\kanji_1.uce [6948]
O44 - LFC:[MD5.529BBD63519BBD654EF328454019693F] - 06-06-2015 - 1:13:29 ---A- . (...) -- C:\WINDOWS\system32\kanji_2.uce [8484]
O44 - LFC:[MD5.7A7A04370A6030B9B0E8178DAD4A6E41] - 06-06-2015 - 1:13:29 ---A- . (...) -- C:\WINDOWS\system32\korean.uce [12876]
O44 - LFC:[MD5.8CA32E9D986FA76F60EFBCFCD9D80A58] - 06-06-2015 - 1:13:29 ---A- . (...) -- C:\WINDOWS\system32\shiftjis.uce [16740]
O44 - LFC:[MD5.30F5568679A54042F99CA9EC1102EBCD] - 06-06-2015 - 1:13:29 ---A- . (...) -- C:\WINDOWS\system32\subrange.uce [93702]
O44 - LFC:[MD5.CACA53644879416250C9BFA6A109E3D8] - 06-06-2015 - 1:13:29 ---A- . (.Microsoft Corporation - Applet du jeu Solitaire.) -- C:\WINDOWS\system32\sol.exe [57344]
O44 - LFC:[MD5.6595766B3FCA77B6BA41DBCC46091ACF] - 06-06-2015 - 1:13:29 ---A- . (.Microsoft Corporation - Application Calculatrice de Windows.) -- C:\WINDOWS\system32\calc.exe [118272]
O44 - LFC:[MD5.C525A8A367F9641ABB8FF32C96BD08A4] - 06-06-2015 - 1:13:29 ---A- . (.Microsoft Corporation - DLL des noms UNICODE pour UCE.) -- C:\WINDOWS\system32\getuname.dll [634880]
O44 - LFC:[MD5.0DD55909896EF797C9E5E12662CD3BDF] - 06-06-2015 - 1:13:29 ---A- . (.Microsoft Corporation - Table des caractères.) -- C:\WINDOWS\system32\charmap.exe [80896]
O44 - LFC:[MD5.39F43DBCE366B2561DF073B4C0839299] - 06-06-2015 - 1:13:30 ---A- . (...) -- C:\WINDOWS\Bulles de savon.bmp [65978]
O44 - LFC:[MD5.1AC5E83598D4F2143B59A2D893C3279A] - 06-06-2015 - 1:13:30 ---A- . (...) -- C:\WINDOWS\Granit vert.bmp [26582]
O44 - LFC:[MD5.203EF178BF8B0A8EC34E27E4DEDB6349] - 06-06-2015 - 1:13:30 ---A- . (...) -- C:\WINDOWS\Jour de pêche.bmp [17336]
O44 - LFC:[MD5.EB3BFC14E41FBAA41B4FD4489AA82D39] - 06-06-2015 - 1:13:30 ---A- . (...) -- C:\WINDOWS\Mur de Santa Fe.bmp [65832]
O44 - LFC:[MD5.3A8B85AB7B415BF3F8AFE285DFE0CE29] - 06-06-2015 - 1:13:30 ---A- . (...) -- C:\WINDOWS\Plume.bmp [16730]
O44 - LFC:[MD5.927A66BD587E31CB12D3AB25381658DC] - 06-06-2015 - 1:13:30 ---A- . (...) -- C:\WINDOWS\Rhododendron.bmp [17362]
O44 - LFC:[MD5.5B4AC407E566076BB726BA91E067D313] - 06-06-2015 - 1:13:30 ---A- . (...) -- C:\WINDOWS\Rivière Sumida.bmp [26680]
O44 - LFC:[MD5.73D70ED3EC3BBFD8FD35DF431C38F374] - 06-06-2015 - 1:13:30 ---A- . (...) -- C:\WINDOWS\Tasse à café.bmp [17062]
O44 - LFC:[MD5.280920B6773C74C3649A934257112BE1] - 06-06-2015 - 1:13:30 ---A- . (...) -- C:\WINDOWS\Vent de prairie.bmp [65954]
O44 - LFC:[MD5.5290EA6951F4724259F423B12C8E1393] - 06-06-2015 - 1:13:30 ---A- . (...) -- C:\WINDOWS\Zapotec.bmp [9522]
O44 - LFC:[MD5.2A99260794224489F29B628717B7947E] - 06-06-2015 - 1:13:34 ---A- . (.Microsoft Corporation - Conversation pour Windows NT.) -- C:\WINDOWS\system32\winchat.exe [35840]
O44 - LFC:[MD5.128CEA94B381C19C655AA18DA74ECA0A] - 06-06-2015 - 1:13:34 ---A- . (.Microsoft Corporation - Numéroteur TAPI 3.0 et Visualisateur de con.) -- C:\WINDOWS\system32\avtapi.dll [232960]
O44 - LFC:[MD5.520A03D1F113D251EFBFA00C164F2087] - 06-06-2015 - 1:13:35 ---A- . (.Hilgraeve, Inc. - HyperTerminal Applet Library.) -- C:\WINDOWS\system32\hticons.dll [44544]
O44 - LFC:[MD5.51AC8835F3AA24D27E5F53EDFB981C9F] - 06-06-2015 - 1:13:35 ---A- . (.Microsoft Corporation - Contrôle du volume.) -- C:\WINDOWS\system32\sndvol32.exe [152576]
O44 - LFC:[MD5.E7EF0C8FE4CAE6B9CA990D5B15A079CE] - 06-06-2015 - 1:13:35 ---A- . (.Microsoft Corporation - Contrôles de mesure.) -- C:\WINDOWS\system32\avmeter.dll [16384]
O44 - LFC:[MD5.F7B2FA971A70A335F92785DEF9478B62] - 06-06-2015 - 1:13:35 ---A- . (.Microsoft Corporation - Wave Manipulation Component.) -- C:\WINDOWS\system32\avwav.dll [73216]
O44 - LFC:[MD5.AF68D5BB112D56D00835252C76D2D871] - 06-06-2015 - 1:13:42 ---A- . (.Microsoft Corporation - Windows Write.) -- C:\WINDOWS\system32\write.exe [5632]
O44 - LFC:[MD5.487403459F0B2F1A3ADEEF02496BD80E] - 06-06-2015 - 1:14:06 ---A- . (...) -- C:\WINDOWS\vb.ini [36]
O44 - LFC:[MD5.6C2F0BA210C2B53EF07653ABAC6C2490] - 06-06-2015 - 1:14:06 ---A- . (...) -- C:\WINDOWS\vbaddin.ini [37]
O44 - LFC:[MD5.5DA816181C3F784F19229D3316913E6C] - 06-06-2015 - 1:14:22 ---A- . (...) -- C:\WINDOWS\system32\emptyregdb.dat [21892]
O44 - LFC:[MD5.B3EB0AA0E194CD030C4A85BFA45F124B] - 06-06-2015 - 1:14:55 ---A- . (.Microsoft Corporation - Assistant Connexion Internet.) -- C:\WINDOWS\system32\icwphbk.dll [65536]
O44 - LFC:[MD5.23F4325A6AA7FA8EA951185CF8DC4D77] - 06-06-2015 - 1:14:55 ---A- . (.Microsoft Corporation - Bibliothèque de l'Assistant Connexion Inter.) -- C:\WINDOWS\system32\inetcfg.dll [282624]
O44 - LFC:[MD5.B4483DA59385014F20ADEE7075B631FE] - 06-06-2015 - 1:14:55 ---A- . (.Microsoft Corporation - Numéroteur automatique de l'Assistant Conne.) -- C:\WINDOWS\system32\icwdial.dll [73728]
O44 - LFC:[MD5.E2FAF5A98ED960B0F37E1644AEC6AE2D] - 06-06-2015 - 1:14:55 ---A- . (.Microsoft Corporation - Processus d'abonnement à Internet.) -- C:\WINDOWS\system32\isign32.dll [86016]
O44 - LFC:[MD5.021A720843716D98988CC9F9FAE1A3B3] - 06-06-2015 - 1:14:56 ---A- . (.Microsoft Corporation - Fichier DLL d'interface du Planificateur de.) -- C:\WINDOWS\system32\mstask.dll [328192]
O44 - LFC:[MD5.8BBDE02EA41851C2402C25B1490A20AE] - 06-06-2015 - 1:14:56 ---A- . (.Microsoft Corporation - Fichier d'installation du Planificateur de.) -- C:\WINDOWS\system32\mstinit.exe [12288]
O44 - LFC:[MD5.55F5C5C1BE1A78E285033E432BA01597] - 06-06-2015 - 1:14:56 ---A- . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560]
O44 - LFC:[MD5.CFCFE96EDD7E6FD246F160368B87A13F] - 06-06-2015 - 1:14:57 ---A- . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll [691712]
O44 - LFC:[MD5.E538D7BC60D7CD67BDEA812F83AE092E] - 06-06-2015 - 1:14:57 ---A- . (.Microsoft Corporation - Ressources API de Microsoft Internet Messag.) -- C:\WINDOWS\system32\inetres.dll [50688]
O44 - LFC:[MD5.11FB4109191437CE765779F10EBBDFAB] - 06-06-2015 - 1:14:58 ---A- . (.Microsoft Corporation - Gestionnaire de comptes Internet.) -- C:\WINDOWS\system32\msoeacct.dll [252928]
O44 - LFC:[MD5.B150D1485996C0A40C8E397B141C3D8B] - 06-06-2015 - 1:14:58 ---A- . (.Microsoft Corporation - Microsoft Outlook Express RT Lib.) -- C:\WINDOWS\system32\msoert2.dll [105984]
O44 - LFC:[MD5.71ECBA795A063026843F70F31EF02689] - 06-06-2015 - 1:14:59 ---A- . (.Intel Corporation - ISR Debug 32-bit Engine.) -- C:\WINDOWS\system32\isrdbg32.dll [32768]
O44 - LFC:[MD5.B8D4B3C6E0E9746EF93CC988EB00F9E8] - 06-06-2015 - 1:14:59 ---A- . (.Microsoft Corporation - Application Sharing Display Driver.) -- C:\WINDOWS\system32\mnmdd.dll [34560]
O44 - LFC:[MD5.83CFBB693483E664CC12C8ED132BBDEA] - 06-06-2015 - 1:14:59 ---A- . (.Microsoft Corporation - Bibliothèque NMMKCERT.) -- C:\WINDOWS\system32\nmmkcert.dll [28672]
O44 - LFC:[MD5.681891FBFFB4F535F03C440D433B76C6] - 06-06-2015 - 1:14:59 ---A- . (.Microsoft Corporation - Dll de l'utilitaire de conférence.) -- C:\WINDOWS\system32\msconf.dll [69632]
O44 - LFC:[MD5.D3A2870CD96CDA7BCFF3DC54F64087AD] - 06-06-2015 - 1:14:59 ---A- . (.Microsoft Corporation - Partage de Bureau à distance NetMeeting.) -- C:\WINDOWS\system32\mnmsrvc.exe [32768]
O44 - LFC:[MD5.B4B61B3F41002E68D01A371C671B5F78] - 06-06-2015 - 1:14:59 ---A- . (.Microsoft Corporation - Pilote ICM Microsoft H.261.) -- C:\WINDOWS\system32\msh261.drv [188416]
O44 - LFC:[MD5.987A84CD549E6EFC653A9B4B3E2B24B2] - 06-06-2015 - 1:14:59 ---A- . (.Microsoft Corporation - User Location Services Component Module.) -- C:\WINDOWS\system32\ils.dll [81920]
O44 - LFC:[MD5.1B005DC4BC9B22CC1EF40D62C9F4F7BD] - 06-06-2015 - 1:15:00 ---A- . (.Microsoft Corporation - Bibliothèque d'opérations Restauration du s.) -- C:\WINDOWS\system32\srrstr.dll [241664]
O44 - LFC:[MD5.C8047DF7413568E549932BD725EBC65B] - 06-06-2015 - 1:15:00 ---A- . (.Microsoft Corporation - Dll du client SR.) -- C:\WINDOWS\system32\srclient.dll [67584]
O44 - LFC:[MD5.64A3919D5606CE42660247DB1CB9CB88] - 06-06-2015 - 1:15:00 ---A- . (.Microsoft Corporation - Filter Library.) -- C:\WINDOWS\system32\fltlib.dll [16896]
O44 - LFC:[MD5.62173E93A7AFF8B44158BE01E34C0FF7] - 06-06-2015 - 1:15:00 ---A- . (.Microsoft Corporation - Filter Manager Control Program.) -- C:\WINDOWS\system32\fltMc.exe [23040]
O44 - LFC:[MD5.B2CF4B0786F8212CB92ED2B50C6DB6B0] - 06-06-2015 - 1:15:00 ---A- . (.Microsoft Corporation - Microsoft Filesystem Filter Manager.) -- C:\WINDOWS\system32\Drivers\fltMgr.sys [129792]
O44 - LFC:[MD5.39626E6DC1FB39434EC40C42722B660A] - 06-06-2015 - 1:15:00 ---A- . (.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) -- C:\WINDOWS\system32\Drivers\sr.sys [73600]
O44 - LFC:[MD5.6ED29124A1C83BD0CF6B26BD01CA6F6F] - 06-06-2015 - 1:15:00 ---A- . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520]
O44 - LFC:[MD5.FF84939E5219562530EB627CC726E65C] - 06-06-2015 - 1:15:01 ---A- . (.Microsoft Corporation - Assistance à distance Microsoft.) -- C:\WINDOWS\system32\racpldlg.dll [43520]
O44 - LFC:[MD5.068E36F77A5BC2067927C17FF8A7B63E] - 06-06-2015 - 1:15:01 ---A- . (.Microsoft Corporation - Contrôles Fichier/Ouvrir et Enregistrer de.) -- C:\WINDOWS\system32\safrcdlg.dll [43520]
O44 - LFC:[MD5.E84A20DABF81C9A5D08E1DE8C49B0005] - 06-06-2015 - 1:15:01 ---A- . (.Microsoft Corporation - Gestionnaire du bureau du centre d'Aide Mic.) -- C:\WINDOWS\system32\safrdm.dll [29696]
O44 - LFC:[MD5.B94996F7C1B88942D6F95EFD93C236AA] - 06-06-2015 - 1:15:02 ---A- . (.Microsoft Corporation - Microsoft Help Center Session Resolver.) -- C:\WINDOWS\system32\safrslv.dll [45568]
O44 - LFC:[MD5.3D59806FB53B402C0583D35F96470D2F] - 06-06-2015 - 1:15:18 ---A- . (.Microsoft Corporation - API du client Windows Update.) -- C:\WINDOWS\system32\wuapi.dll [432640]
O44 - LFC:[MD5.92A7AA8BBD4DDA38B012EDB223420FD4] - 06-06-2015 - 1:15:18 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service 2.0.) -- C:\WINDOWS\system32\bitsprx3.dll [7168]
O44 - LFC:[MD5.5C5D4A7893B3A0FD9AEBEAED1E45E3B2] - 06-06-2015 - 1:15:18 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service 2.5.) -- C:\WINDOWS\system32\bitsprx4.dll [7168]
O44 - LFC:[MD5.6B219C1EC5A6521332A41E7FA1DB07E9] - 06-06-2015 - 1:15:18 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service Pro.) -- C:\WINDOWS\system32\bitsprx2.dll [8192]
O44 - LFC:[MD5.8E012E8D84724CB521E3BE09741980FB] - 06-06-2015 - 1:15:18 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service Pro.) -- C:\WINDOWS\system32\qmgrprxy.dll [18944]
O44 - LFC:[MD5.FC8E4749919ED89A047C3C758D704773] - 06-06-2015 - 1:15:18 ---A- . (.Microsoft Corporation - Client Mise à jour automatique Windows Upda.) -- C:\WINDOWS\system32\wuauclt1.exe [288768]
O44 - LFC:[MD5.478B314098276163EDD8FCD47CC15BE5] - 06-06-2015 - 1:15:18 ---A- . (.Microsoft Corporation - Mises à jour automatiques.) -- C:\WINDOWS\system32\wuauclt.exe [102400]
O44 - LFC:[MD5.C69624C0F37D737F735FD14022017A46] - 06-06-2015 - 1:15:18 ---A- . (.Microsoft Corporation - Panneau de configuration Mises à jour autom.) -- C:\WINDOWS\system32\wuaucpl.cpl [163328]
O44 - LFC:[MD5.BAA0B6E647C1AD593E9BAE5CC31BCFFB] - 06-06-2015 - 1:15:18 ---A- . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\system32\qmgr.dll [409088]
O44 - LFC:[MD5.38ED85E9C93B9983C2065AA2266B6E1F] - 06-06-2015 - 1:15:18 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Engine.) -- C:\WINDOWS\system32\wuaueng.dll [1135616]
O44 - LFC:[MD5.596A1743CFB1B5E008275E5552295B83] - 06-06-2015 - 1:15:18 ---A- . (.Microsoft Corporation - Windows Update client proxy stub.) -- C:\WINDOWS\system32\wups.dll [32256]
O44 - LFC:[MD5.367B5FB01100BEB42F160FF399A57C0D] - 06-06-2015 - 1:15:19 ---A- . (.Microsoft Corporation - Moteur de mises à jour automatique Windows.) -- C:\WINDOWS\system32\wuaueng1.dll [184320]
O44 - LFC:[MD5.29F31C7DF413439C333DBAE82FE979D1] - 06-06-2015 - 1:15:19 ---A- . (.Microsoft Corporation - Plug-in Interface utilisateur du client Mis.) -- C:\WINDOWS\system32\wucltui.dll [114176]
O44 - LFC:[MD5.75D6C5C3D2C93B1F9931E5DFB693AE2A] - 06-06-2015 - 1:15:19 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O44 - LFC:[MD5.C19B5764E05862AD82E4D2AB441FF34F] - 06-06-2015 - 1:15:19 ---A- . (.Microsoft Corporation - Windows Update Web Control.) -- C:\WINDOWS\system32\wuweb.dll [120320]
O44 - LFC:[MD5.13D8419CD73E6D14FE093A0066E36F18] - 06-06-2015 - 1:15:23 ---A- . (.Microsoft Corporation - Internet Connection Wizard.) -- C:\WINDOWS\system32\icfgnt5.dll [16384]
O44 - LFC:[MD5.34A92A72CC0E0653828344DB5378B1E0] - 06-06-2015 - 1:15:28 ---A- . (.Microsoft Corporation - Codec Microsoft G.723.1 pour MSACM.) -- C:\WINDOWS\system32\msg723.acm [118784]
O44 - LFC:[MD5.8014838B3025DDFF6C476FCC7C18CD82] - 06-06-2015 - 1:15:28 ---A- . (.Microsoft Corporation - DLL d'enregistrement d'événements NetMeetin.) -- C:\WINDOWS\system32\nmevtmsg.dll [12288]
O44 - LFC:[MD5.D1560FE3CB700340235BECDE227C271E] - 06-06-2015 - 1:15:28 ---A- . (.Microsoft Corporation - Ressources du gestionnaire de comptes Micro.) -- C:\WINDOWS\system32\acctres.dll [72192]
O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 06-06-2015 - 1:15:32 ---A- . (...) -- C:\WINDOWS\desktop.ini [2]
O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 06-06-2015 - 1:15:32 ---A- . (...) -- C:\WINDOWS\system32\desktop.ini [2]
O44 - LFC:[MD5.8FBEC4D51D39DB985490F7C049AF488E] - 06-06-2015 - 1:15:33 -SH-- . (...) -- C:\WINDOWS\winnt.bmp [49102]
O44 - LFC:[MD5.8FBEC4D51D39DB985490F7C049AF488E] - 06-06-2015 - 1:15:33 -SH-- . (...) -- C:\WINDOWS\winnt256.bmp [49102]
O44 - LFC:[MD5.D935270C569D1E4F224F861AB0559E1E] - 06-06-2015 - 1:15:34 ---A- . (.Microsoft Corporation - Async Trace DLL.) -- C:\WINDOWS\system32\atrace.dll [11264]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 06-06-2015 - 1:15:59 R-HA- . (...) -- C:\WINDOWS\WindowsShell.Manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 06-06-2015 - 1:15:59 R-HA- . (...) -- C:\WINDOWS\system32\cdplayer.exe.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 06-06-2015 - 1:15:59 R-HA- . (...) -- C:\WINDOWS\system32\ncpa.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 06-06-2015 - 1:15:59 R-HA- . (...) -- C:\WINDOWS\system32\nwc.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 06-06-2015 - 1:15:59 R-HA- . (...) -- C:\WINDOWS\system32\sapi.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 06-06-2015 - 1:15:59 R-HA- . (...) -- C:\WINDOWS\system32\wuaucpl.cpl.manifest [749]
O44 - LFC:[MD5.5D76C3FB736514E1D7C88791E7322784] - 06-06-2015 - 1:16:05 R-HA- . (...) -- C:\WINDOWS\system32\WindowsLogon.manifest [488]
O44 - LFC:[MD5.5D76C3FB736514E1D7C88791E7322784] - 06-06-2015 - 1:16:05 R-HA- . (...) -- C:\WINDOWS\system32\logonui.exe.manifest [488]
O44 - LFC:[MD5.2B9C717D21A1331BA3731886E3EE87BB] - 06-06-2015 - 1:17:02 ---A- . (...) -- C:\WINDOWS\ODBCINST.INI [4205]
O44 - LFC:[MD5.662BD5F1A693F710F066BAF92FED394A] - 06-06-2015 - 1:17:02 ---A- . (.Microsoft Corporation - Extended MAPI 1.0 for Windows NT.) -- C:\WINDOWS\system32\mapi32.dll [112128]
O44 - LFC:[MD5.6D6F4B1886E91EB37ABCCAD19C561EE0] - 06-06-2015 - 1:17:13 ---A- . (...) -- C:\WINDOWS\system32\amcompat.tlb [16832]
O44 - LFC:[MD5.A32B14BE5EDAE794FCE1A9E970827509] - 06-06-2015 - 1:17:13 ---A- . (...) -- C:\WINDOWS\system32\nscompat.tlb [23392]
O44 - LFC:[MD5.DC17DD0189B0C36D863B4DD0A036C10F] - 06-06-2015 - 1:17:14 ---A- . (...) -- C:\WINDOWS\WMSysPr9.prx [316640]
O44 - LFC:[MD5.8715347D6B7B2E3A7CFE5ADF2D510CE3] - 06-06-2015 - 1:17:22 ---A- . (...) -- C:\WINDOWS\win.ini [477]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 06-06-2015 - 1:17:23 ---A- . (...) -- C:\AUTOEXEC.BAT [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 06-06-2015 - 1:17:23 ---A- . (...) -- C:\CONFIG.SYS [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 06-06-2015 - 1:17:23 ---A- . (...) -- C:\WINDOWS\control.ini [0]
O44 - LFC:[MD5.486E0B1BC94C346E5C352C295388C803] - 06-06-2015 - 1:17:23 ---A- . (...) -- C:\WINDOWS\system32\CONFIG.NT [3072]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 06-06-2015 - 1:17:23 RSHA- . (...) -- C:\IO.SYS [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 06-06-2015 - 1:17:23 RSHA- . (...) -- C:\MSDOS.SYS [0]
O44 - LFC:[MD5.D3FD3B864091853307AD4212C6DD3E15] - 06-06-2015 - 1:17:43 ---A- . (...) -- C:\boot.ini [1230]
O44 - LFC:[MD5.AF88DD4E62C1F586E3FD61585641462F] - 06-06-2015 - 1:20:40 ---A- . (...) -- C:\WINDOWS\system32\$winnt$.inf [383]
O44 - LFC:[MD5.99D5FA138D291B183CE980C9B599D521] - 06-06-2015 - 1:21:38 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [151584]
O44 - LFC:[MD5.B086EEC6EF026CFD0FDA69692F901A75] - 06-06-2015 - 1:21:50 ---A- . (...) -- C:\WINDOWS\REGLOCS.OLD [8192]
O44 - LFC:[MD5.86B78AC82C881D15707E512B8902069E] - 06-06-2015 - 1:23:08 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [2206]
O44 - LFC:[MD5.CF833AC004268E1C3C4BF543656200A9] - 06-06-2015 - 1:26:40 ---A- . (.Intel Corporation - hccutils Module.) -- C:\WINDOWS\system32\hccutils.dll [73728]
O44 - LFC:[MD5.01018F75F3F18CE629FAC9689954A2AE] - 06-06-2015 - 1:26:40 ---A- . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [77824]
O44 - LFC:[MD5.2F9A1ECAF31B9071C89D401756FC5E7F] - 06-06-2015 - 1:26:40 ---A- . (.Intel Corporation - igfxcfg Module.) -- C:\WINDOWS\system32\igfxcfg.exe [446464]
O44 - LFC:[MD5.437B1D1A97CEF611EC1473B427E7AA3C] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxcpl Module.) -- C:\WINDOWS\system32\igfxcpl.cpl [77824]
O44 - LFC:[MD5.09DC1F2A2293E5536FE31D23AF3E8C05] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxdev Module.) -- C:\WINDOWS\system32\igfxdev.dll [135168]
O44 - LFC:[MD5.174FE6D9FF04B46B7A7A23E3EF9D6B1D] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxdo Module.) -- C:\WINDOWS\system32\igfxdo.dll [86016]
O44 - LFC:[MD5.82453DBBD198BBF10DB91E50BB1FE42E] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxext Module.) -- C:\WINDOWS\system32\igfxexps.dll [40960]
O44 - LFC:[MD5.9D1F30A4D531A64E1F5080E6E49AF64F] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxext Module.) -- C:\WINDOWS\system32\igfxext.exe [94208]
O44 - LFC:[MD5.3AB3A2948B034B1C7F18B2B20E13D4E8] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxpph Module.) -- C:\WINDOWS\system32\igfxpph.dll [147456]
O44 - LFC:[MD5.9671B8C93FE9DC1E8464A17481CD5E42] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrara.lrc [122880]
O44 - LFC:[MD5.DEC837062BBE1E00231793A8B76278F0] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrchs.lrc [81920]
O44 - LFC:[MD5.6419CD7FF0DEC6BC73C95F3E48C366D1] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrcht.lrc [81920]
O44 - LFC:[MD5.B0D0F6721A6686E09812C069E3F7AD4B] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrcsy.lrc [139264]
O44 - LFC:[MD5.E5D2A56C4A2E947CA89AF6C87741D3DA] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrdan.lrc [139264]
O44 - LFC:[MD5.57E1EE11CC9D5A36543BE86CA8991E8A] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrdeu.lrc [155648]
O44 - LFC:[MD5.3A9466B291A966EAEEA1BAC39E590860] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrell.lrc [155648]
O44 - LFC:[MD5.41B2B21ABE8D2029AFE0F6194E0A8BBA] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrenu.lrc [135168]
O44 - LFC:[MD5.5D84713804CBCE20C428E57CDB4F52A1] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxresp.lrc [151552]
O44 - LFC:[MD5.AF33D280EEE99BE29F85ABC94C0813E9] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrfin.lrc [139264]
O44 - LFC:[MD5.35A9E9F3CFF9C9050E11AF00BA19782A] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrfra.lrc [147456]
O44 - LFC:[MD5.3690DFD2B9ED01927BF565151BCA2F0F] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrheb.lrc [122880]
O44 - LFC:[MD5.D074B0010F7BB6ABA010B1C043565FF1] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrhun.lrc [147456]
O44 - LFC:[MD5.9390B43F207E1875005209EB9DA8FF7D] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrita.lrc [151552]
O44 - LFC:[MD5.DA56D42F6365C721F8EFB6C1AD1631AD] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrjpn.lrc [98304]
O44 - LFC:[MD5.22019A264521E079F75B52E74FDA4657] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrkor.lrc [98304]
O44 - LFC:[MD5.5D6651EED58D29029877615CF36AD3F8] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrnld.lrc [151552]
O44 - LFC:[MD5.8EE517704BD125B9FE133CB20AECC278] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrnor.lrc [139264]
O44 - LFC:[MD5.60C0D4776807AFC47F2639D6271F6DF0] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrplk.lrc [143360]
O44 - LFC:[MD5.F666F4C7A95C7A91E64F1BABAA1BB1E0] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrptb.lrc [143360]
O44 - LFC:[MD5.95C346BF3B8856AC84D158FAA3E3F2B6] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - igfxress Module.) -- C:\WINDOWS\system32\igfxress.dll [1503232]
O44 - LFC:[MD5.996ABAC2332DE28F3B6A179C6DA20205] - 06-06-2015 - 1:26:41 ---A- . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [114688]
O44 - LFC:[MD5.9826B9617A31D31FAC2B2B1DDCFEC6E3] - 06-06-2015 - 1:26:42 ---A- . (...) -- C:\WINDOWS\system32\igfxCoIn_v4764.dll [204800]
O44 - LFC:[MD5.EE34119CD544A50A0D5F6E0750DAA389] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - Component GHAL Driver.) -- C:\WINDOWS\system32\igxpdv32.dll [1563776]
O44 - LFC:[MD5.2680FC3AA485925DCFE9ADF853FCF267] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - DirectDraw(R) Driver for Intel(R) Graphics.) -- C:\WINDOWS\system32\igxpdx32.dll [2482688]
O44 - LFC:[MD5.1A096FAC65424352D6C0F460E4D742F7] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - OpenGL(R) Device Driver for Intel(R) Graphi.) -- C:\WINDOWS\system32\igldev32.dll [524288]
O44 - LFC:[MD5.00AF94456853B3C24E27EDB969483F2E] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - OpenGL(R) Driver for Intel(R) Graphics Acce.) -- C:\WINDOWS\system32\iglicd32.dll [2310144]
O44 - LFC:[MD5.3F2C8DD08549BB3419CDA372F5999FFA] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe [94208]
O44 - LFC:[MD5.18AD4EE85DCC256459B5D0EB653EA259] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrptg.lrc [143360]
O44 - LFC:[MD5.2B79CE1271B8909B37A8BAA1394350DC] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrrus.lrc [143360]
O44 - LFC:[MD5.DDB76A587FE7B3588E8C480F01B7CAA8] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrsky.lrc [176128]
O44 - LFC:[MD5.6BC8D1232080BA05A3F4BB769CBCD6AC] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrslv.lrc [172032]
O44 - LFC:[MD5.4F8ABD34B0843752395E36569C79BCA2] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrsve.lrc [139264]
O44 - LFC:[MD5.5B1D0BB9082CC36478D6B13898DA4528] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrtha.lrc [126976]
O44 - LFC:[MD5.4CCA8EA7427CD27CA40D0B2F4F4B51ED] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrtrk.lrc [139264]
O44 - LFC:[MD5.25A2C1F0A75AB0B6508784220D1B102C] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.dll [57344]
O44 - LFC:[MD5.98B93FD3A8F8D140B18D414014C5F929] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [159744]
O44 - LFC:[MD5.3F9AFB1093DEB23B50FF8B57240A4616] - 06-06-2015 - 1:26:42 ---A- . (.Intel Corporation - igfxzoom Module.) -- C:\WINDOWS\system32\igfxzoom.exe [114688]
O44 - LFC:[MD5.765CB03717D62E6F7C9F0D42D6420BE3] - 06-06-2015 - 1:26:43 ---A- . (...) -- C:\WINDOWS\system32\igxpxk32.vp [58704]
O44 - LFC:[MD5.4F61B041FB6D605845E834BD4EAF0E00] - 06-06-2015 - 1:26:43 ---A- . (...) -- C:\WINDOWS\system32\igxpxs32.vp [24736]
O44 - LFC:[MD5.E95967EB24F5036998947E771E5BE734] - 06-06-2015 - 1:26:43 ---A- . (.Intel Corporation - Intel Graphics 2D Driver.) -- C:\WINDOWS\system32\igxpgd32.dll [149504]
O44 - LFC:[MD5.9326C80A449CE799977207138B9F7FEE] - 06-06-2015 - 1:26:43 ---A- . (.Intel Corporation - Intel Graphics 2D Rotation Driver.) -- C:\WINDOWS\system32\igxprd32.dll [57344]
O44 - LFC:[MD5.2AAE7BE67911F4AEC9AD28E9CFB9096F] - 06-06-2015 - 1:26:43 ---A- . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\system32\Drivers\igxpmp32.sys [5672032]
O44 - LFC:[MD5.F9FB5C5C37FAB5396B312A11DA8C2BA0] - 06-06-2015 - 1:26:43 ---A- . (.Intel Corporation - Oemdspif Module.) -- C:\WINDOWS\system32\oemdspif.dll [53248]
O44 - LFC:[MD5.B073E39AC258E2AF10D7105DA2125CBC] - 06-06-2015 - 1:26:45 ---A- . (.No owner - About Page.) -- C:\WINDOWS\system32\RtNicProp32.dll [73728]
O44 - LFC:[MD5.CF84B1F0E8B14D4120AAF9CF35CBB265] - 06-06-2015 - 1:26:45 ---A- . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\system32\Drivers\Rtnicxp.sys [130432]
O44 - LFC:[MD5.1DBC3A60E3ACEAB2A86BE0260E791098] - 06-06-2015 - 2:31:40 ---A- . (...) -- C:\WINDOWS\system32\Drivers\verfile.tic [13]
O44 - LFC:[MD5.EC1B5F31541AF1C9ECC6B44F598A975C] - 06-06-2015 - 2:31:40 ---A- . (.Intel Corporation - Coinstaller and NCPA 32 bit DLL.) -- C:\WINDOWS\system32\W29MLRES.DLL [1654784]
O44 - LFC:[MD5.CB02AED45257FEB8D3B294DCFC0CE7C7] - 06-06-2015 - 2:32:22 ---A- . (.Microsoft Corporation - WDM Streaming ActiveMovie Proxy.) -- C:\WINDOWS\system32\ksproxy.ax [129536]
O44 - LFC:[MD5.6CB08593487F5701D2D2254E693EAFCE] - 06-06-2015 - 2:32:23 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Descrambler Filter.) -- C:\WINDOWS\system32\Drivers\drmk.sys [60160]
O44 - LFC:[MD5.E82A496C3961EFC6828B508C310CE98F] - 06-06-2015 - 2:32:24 ---A- . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\WINDOWS\system32\Drivers\portcls.sys [146048]
O44 - LFC:[MD5.C8B7941F9824E9F4D3D7B9B9BAE14FEE] - 06-06-2015 - 2:32:24 ---A- . (.Microsoft Corporation - User CSA Library.) -- C:\WINDOWS\system32\ksuser.dll [4096]
O44 - LFC:[MD5.325BB26842FC7CCC1FCCE2C457317F3E] - 06-06-2015 - 2:32:32 ---A- . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\system32\Drivers\MSPCLOCK.sys [5376]
O44 - LFC:[MD5.BAD59648BA099DA4A17680B39730CB3D] - 06-06-2015 - 2:32:34 ---A- . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\system32\Drivers\MSPQM.sys [4992]
O44 - LFC:[MD5.D1575E71568F4D9E14CA56B7B0453BF1] - 06-06-2015 - 2:32:35 ---A- . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\system32\Drivers\MSKSSRV.sys [7552]
O44 - LFC:[MD5.8B83F3ED0F1688B4958F77CD6D2BF290] - 06-06-2015 - 2:32:37 ---A- . (.Microsoft Corporation - System Audio WDM Filter.) -- C:\WINDOWS\system32\Drivers\sysaudio.sys [60800]
O44 - LFC:[MD5.8F5FCFF8E8848AFAC920905FBD9D33C8] - 06-06-2015 - 2:32:39 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Audio Descrambler Filt.) -- C:\WINDOWS\system32\Drivers\drmkaud.sys [2944]
O44 - LFC:[MD5.692BCF44383D056AED41B045A323D378] - 06-06-2015 - 2:32:40 ---A- . (.Microsoft Corporation - Kernel Mode Audio Mixer.) -- C:\WINDOWS\system32\Drivers\kmixer.sys [172416]
O44 - LFC:[MD5.8BED39E3C35D6A489438B8141717A557] - 06-06-2015 - 2:32:42 ---A- . (.Microsoft Corporation - Microsoft Acoustic Echo Canceller.) -- C:\WINDOWS\system32\Drivers\aec.sys [142592]
O44 - LFC:[MD5.8CE882BCC6CF8A62F2B2323D95CB3D01] - 06-06-2015 - 2:32:43 ---A- . (.Microsoft Corporation - Microsoft GS Wavetable Synthesizer.) -- C:\WINDOWS\system32\Drivers\swmidi.sys [56576]
O44 - LFC:[MD5.8A208DFCF89792A484E76C40E5F50B45] - 06-06-2015 - 2:32:45 ---A- . (.Microsoft Corporation - Microsoft Kernel DLS Synthesizer.) -- C:\WINDOWS\system32\Drivers\DMusic.sys [52864]
O44 - LFC:[MD5.6768ACF64B18196494413695F0C3A00F] - 06-06-2015 - 2:32:47 ---A- . (.Microsoft Corporation - MMSYSTEM Wave/Midi API mapper.) -- C:\WINDOWS\system32\Drivers\wdmaud.sys [83072]
O44 - LFC:[MD5.AB8B92451ECB048A4D1DE7C3FFCB4A9F] - 06-06-2015 - 2:32:49 ---A- . (.Microsoft Corporation - Microsoft Kernel Audio Splitter.) -- C:\WINDOWS\system32\Drivers\splitter.sys [6272]
O44 - LFC:[MD5.9671B8C93FE9DC1E8464A17481CD5E42] - 06-06-2015 - 2:34:33 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxres.dll [122880]
O44 - LFC:[MD5.F1525F3D112F4DD28BBFC4C6B4F42335] - 06-06-2015 - 2:40:33 ---A- . (.IObit - Advanced SystemCare.) -- C:\WINDOWS\system32\RegistryDefragBootTime.exe [23840]
O44 - LFC:[MD5.6FFB351C9C9BB88E91785F4CD7396D31] - 06-06-2015 - 2:43:20 ---A- . (.REALiX(tm) - HWiNFO x86 Kernel Driver.) -- C:\WINDOWS\system32\Drivers\HWiNFO32.SYS [23840]
O44 - LFC:[MD5.B7B344A383243B32862FE90C66568265] - 06-06-2015 - 2:48:05 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [775210]
O44 - LFC:[MD5.431D740B3F1AD5A5AF392D8C3D035E6A] - 06-06-2015 - 2:48:08 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [40326]
O44 - LFC:[MD5.4FCAF3452E3E2E4DD46EC5E1E498BF38] - 06-06-2015 - 2:48:08 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [48918]
O44 - LFC:[MD5.FBFFBF851AFE1C56D10CD5F45783B986] - 06-06-2015 - 2:48:08 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [311938]
O44 - LFC:[MD5.BE9500DB11FF8A29BE94123B64D05291] - 06-06-2015 - 2:48:08 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [367922]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 06-06-2015 - 2:54:31 --HA- . (...) -- C:\asc_rdflag [0]
O44 - LFC:[MD5.D92A016F3EDE0DE942786D55B0F196A0] - 06-06-2015 - 3:04:59 ---A- . (.Microsoft Corporation - Bloc-notes.) -- C:\WINDOWS\notepad.exe [156672]
O44 - LFC:[MD5.F297AF7D5C0A1BE3047345894430DD1D] - 06-06-2015 - 3:04:59 ---A- . (.Microsoft Corporation - Pages de propriétés pour les périphériques.) -- C:\WINDOWS\system32\storprop.dll [76800]
O44 - LFC:[MD5.486E0B1BC94C346E5C352C295388C803] - 06-06-2015 - 3:05:00 ----- . (...) -- C:\WINDOWS\system32\CONFIG.TMP [3072]
O44 - LFC:[MD5.F08DBD8C48A168818A3DFC28929EE6B5] - 06-06-2015 - 3:05:00 ---A- . (...) -- C:\WINDOWS\system32\AUTOEXEC.NT [1896]
O44 - LFC:[MD5.5908A51993B7175271987C07CBE06950] - 06-06-2015 - 3:05:00 ---A- . (.Microsoft Corporation - Battery Class Installer.) -- C:\WINDOWS\system32\batt.dll [8704]
O44 - LFC:[MD5.DA090A1AD995DB0716293E029E6198E5] - 06-06-2015 - 3:05:00 ---A- . (.Microsoft Corporation - Gestionnaire des tâches.) -- C:\WINDOWS\TASKMAN.EXE [15872]
O44 - LFC:[MD5.C93C9FF7B04D772627A3646D89F7BF89] - 06-06-2015 - 3:05:00 ---A- . (.Microsoft Corporation - Infra-Red Bus Enumerator.) -- C:\WINDOWS\system32\Drivers\irenum.sys [11264]
O44 - LFC:[MD5.1E9B88D340481EDA7A9BF53A949E1F42] - 06-06-2015 - 3:05:02 ---A- . (.Digi International - DGSETUP DLL.) -- C:\WINDOWS\system32\dgsetup.dll [86044]
O44 - LFC:[MD5.7AE4CDB4AD25A08B711ECC5BE12EF3D7] - 06-06-2015 - 3:05:02 ---A- . (.Digi International, Inc. - Digi RealPort® Driver Upgrade.) -- C:\WINDOWS\system32\dgrpsetu.dll [176157]
O44 - LFC:[MD5.F899213C79DEE079DCE1EE730D82594F] - 06-06-2015 - 3:05:02 ---A- . (.Equinox Systems Inc. - Co-installeur série multiport Equinox.) -- C:\WINDOWS\system32\EqnClass.Dll [103424]
O44 - LFC:[MD5.A6011889A0F23EA2BFC9CCDEC11DF553] - 06-06-2015 - 3:05:02 ---A- . (.Microsoft Corporation - Co-installateur de classe Infrarouge.) -- C:\WINDOWS\system32\irclass.dll [13312]
O44 - LFC:[MD5.FA511331A48B582A7D584FC2408E8C1A] - 06-06-2015 - 3:05:02 ---A- . (.Perle Systems Ltd. - Specialix MPS NT Upgrade CoInstaller.) -- C:\WINDOWS\system32\spxcoins.dll [24661]
O44 - LFC:[MD5.6CB26848BCDAA361B6EE21264FB362C3] - 06-06-2015 - 3:05:03 ---A- . (...) -- C:\WINDOWS\system32\c_20127.nls [66082]
O44 - LFC:[MD5.6F8A509550FE8C92D07EE0143BF29BA1] - 06-06-2015 - 3:05:04 ---A- . (...) -- C:\WINDOWS\system32\c_10010.nls [66082]
O44 - LFC:[MD5.D2CA471D36A69D17F82D5C1B64FAEE39] - 06-06-2015 - 3:05:04 ---A- . (...) -- C:\WINDOWS\system32\c_10029.nls [66082]
O44 - LFC:[MD5.9CA501D2A8E6909C5B2E8C9274682BF1] - 06-06-2015 - 3:05:04 ---A- . (...) -- C:\WINDOWS\system32\c_10082.nls [66082]
O44 - LFC:[MD5.21E928C8E6ED8EEAB0D1AAEE82ACDD76] - 06-06-2015 - 3:05:04 ---A- . (...) -- C:\WINDOWS\system32\c_852.nls [66594]
O44 - LFC:[MD5.615DDBB5CBBAE8301C1E7FA95F1E66A3] - 06-06-2015 - 3:05:04 R--A- . (.Microsoft Corporation - Albania Keyboard Layout.) -- C:\WINDOWS\system32\KBDAL.DLL [6656]
O44 - LFC:[MD5.5B46568257EE49714564511D58E0DE53] - 06-06-2015 - 3:05:04 R--A- . (.Microsoft Corporation - Croatian/Slovenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdcr.dll [6656]
O44 - LFC:[MD5.36E68E02AF2206FC4A8C73CAEABE1FB0] - 06-06-2015 - 3:05:04 R--A- . (.Microsoft Corporation - Czech Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz.dll [7168]
O44 - LFC:[MD5.AFA30A44ED11A5F9A059A2767AB6A81A] - 06-06-2015 - 3:05:04 R--A- . (.Microsoft Corporation - Czech_101 Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz1.dll [6656]
O44 - LFC:[MD5.90535C13EB54E1F2C95478F1B99DCCEB] - 06-06-2015 - 3:05:04 R--A- . (.Microsoft Corporation - Czech_Programmer's Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz2.dll [6656]
O44 - LFC:[MD5.F3D1EEC756847C70E65335E8CA1AE64B] - 06-06-2015 - 3:05:04 R--A- . (.Microsoft Corporation - Hungarian 101-key Keyboard Layout.) -- C:\WINDOWS\system32\kbdhu1.dll [5632]
O44 - LFC:[MD5.CF92D95B5CB6649CB9D7E8D7616487A7] - 06-06-2015 - 3:05:04 R--A- . (.Microsoft Corporation - Hungarian Keyboard Layout.) -- C:\WINDOWS\system32\kbdhu.dll [6656]
O44 - LFC:[MD5.D199B05901C2407FC0F87444A24A4F3C] - 06-06-2015 - 3:05:04 R--A- . (.Microsoft Corporation - Polish Keyboard Layout.) -- C:\WINDOWS\system32\kbdpl.dll [6656]
O44 - LFC:[MD5.897663C8606357A8E86E57CDEA8EE219] - 06-06-2015 - 3:05:04 R--A- . (.Microsoft Corporation - Polish Programmer's Keyboard Layout.) -- C:\WINDOWS\system32\kbdpl1.dll [5632]
O44 - LFC:[MD5.C2E62748C875A310A6D5B10498238A68] - 06-06-2015 - 3:05:04 R--A- . (.Microsoft Corporation - Romanian Keyboard Layout.) -- C:\WINDOWS\system32\kbdro.dll [5632]
O44 - LFC:[MD5.552221E92D6BF55F8358B927F00696C3] - 06-06-2015 - 3:05:04 R--A- . (.Microsoft Corporation - Serbian_Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdycl.dll [6656]
O44 - LFC:[MD5.DCCE231E5BDF1401AC0F770EE16902AA] - 06-06-2015 - 3:05:04 R--A- . (.Microsoft Corporation - Slovak Keyboard Layout.) -- C:\WINDOWS\system32\kbdsl.dll [6656]
O44 - LFC:[MD5.93033C3EA80FB24B198B24DDECA07D4A] - 06-06-2015 - 3:05:04 R--A- . (.Microsoft Corporation - Slovak(QWERTY) Keyboard Layout.) -- C:\WINDOWS\system32\kbdsl1.dll [6656]
O44 - LFC:[MD5.3E969213F35127D83DAB48FF1283E8E4] - 06-06-2015 - 3:05:05 ---A- . (...) -- C:\WINDOWS\system32\c_855.nls [66594]
O44 - LFC:[MD5.5CD475CA7B87844DE1E0483B536F9AAE] - 06-06-2015 - 3:05:05 ---A- . (...) -- C:\WINDOWS\system32\c_866.nls [66594]
O44 - LFC:[MD5.5D038EEABA8EA438F6B5ABD5E91BC851] - 06-06-2015 - 3:05:06 ---A- . (...) -- C:\WINDOWS\system32\C_28594.NLS [66082]
O44 - LFC:[MD5.BBB6C3346064C6AECEE6AD9F144B1AEA] - 06-06-2015 - 3:05:06 R--A- . (.Microsoft Corporation - Estonia Keyboard Layout.) -- C:\WINDOWS\system32\kbdest.dll [6144]
O44 - LFC:[MD5.C047165ED75FF85DB5A89EFEE3DA1133] - 06-06-2015 - 3:05:06 R--A- . (.Microsoft Corporation - Latvia Keyboard Layout.) -- C:\WINDOWS\system32\kbdlv.dll [6144]
O44 - LFC:[MD5.27D72BCF2B495FCDA073DBA5F189D7A1] - 06-06-2015 - 3:05:06 R--A- . (.Microsoft Corporation - Latvia-QWERTY Keyboard Layout.) -- C:\WINDOWS\system32\kbdlv1.dll [6144]
O44 - LFC:[MD5.F5B3B152A1D2752BC88928EB1E031B7E] - 06-06-2015 - 3:05:06 R--A- . (.Microsoft Corporation - Lithuania Keyboard Layout.) -- C:\WINDOWS\system32\kbdlt.dll [5632]
O44 - LFC:[MD5.AF05A41DBD1B0424B5CB47092152C7F6] - 06-06-2015 - 3:05:06 R--A- . (.Microsoft Corporation - Lithuanian Keyboard Layout.) -- C:\WINDOWS\system32\kbdlt1.dll [5632]
O44 - LFC:[MD5.B537ACFAB9E70F0EF48DB696A08ADC81] - 06-06-2015 - 3:05:07 ---A- . (...) -- C:\WINDOWS\system32\C_28597.NLS [66082]
O44 - LFC:[MD5.0A206B5CACD3CA70D2044DA691304765] - 06-06-2015 - 3:05:07 ---A- . (...) -- C:\WINDOWS\system32\c_10006.nls [66082]
O44 - LFC:[MD5.BAC7072B365F9648CA318154BA7E03EC] - 06-06-2015 - 3:05:07 ---A- . (...) -- C:\WINDOWS\system32\c_737.nls [66594]
O44 - LFC:[MD5.780C444EB16B65E6DE96F794A732DA12] - 06-06-2015 - 3:05:07 ---A- . (...) -- C:\WINDOWS\system32\c_869.nls [66594]
O44 - LFC:[MD5.8BE0D77A873730B4EB1DAB7C6622CD46] - 06-06-2015 - 3:05:07 ---A- . (...) -- C:\WINDOWS\system32\c_875.nls [66082]
O44 - LFC:[MD5.1E81E1F3D5ACB3371CF73C1DE8F800BF] - 06-06-2015 - 3:05:07 R--A- . (.Microsoft Corporation - Greek IBM 220 Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe220.dll [5632]
O44 - LFC:[MD5.D26533FDF72381947F823882BBA4A196] - 06-06-2015 - 3:05:07 R--A- . (.Microsoft Corporation - Greek IBM 220 Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdhela2.dll [6144]
O44 - LFC:[MD5.AC81A176BA35D1D7A5CD53137F3160FE] - 06-06-2015 - 3:05:07 R--A- . (.Microsoft Corporation - Greek IBM 319 Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe319.dll [5632]
O44 - LFC:[MD5.F2312B8A76FD584ACD1D956688BEB6F8] - 06-06-2015 - 3:05:07 R--A- . (.Microsoft Corporation - Greek IBM 319 Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdhela3.dll [6656]
O44 - LFC:[MD5.83C99B438B3D6DBE7B838DA783E173AC] - 06-06-2015 - 3:05:07 R--A- . (.Microsoft Corporation - Greek Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe.dll [5632]
O44 - LFC:[MD5.A93447C87DDB6B1945F1F5F87EAB68DC] - 06-06-2015 - 3:05:07 R--A- . (.Microsoft Corporation - Greek_Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdgkl.dll [6144]
O44 - LFC:[MD5.90CC52E8B52F0EC3A41D14FFBE789324] - 06-06-2015 - 3:05:07 R--A- . (.Microsoft Corporation - Greek_Polytonic Keyboard Layout.) -- C:\WINDOWS\system32\kbdhept.dll [8192]
O44 - LFC:[MD5.E22D1B9AC7854C0A654E4C4232074E49] - 06-06-2015 - 3:05:08 ---A- . (...) -- C:\WINDOWS\system32\C_28595.NLS [66082]
O44 - LFC:[MD5.AF4A866226BD04ACF06135088D75BB63] - 06-06-2015 - 3:05:08 ---A- . (...) -- C:\WINDOWS\system32\c_10007.nls [66082]
O44 - LFC:[MD5.314E85390BEBDAE5D1E11DB2D8CBC6E9] - 06-06-2015 - 3:05:08 ---A- . (...) -- C:\WINDOWS\system32\c_10017.nls [66082]
O44 - LFC:[MD5.0304318F189E3CC4A99FCCCB0A68147F] - 06-06-2015 - 3:05:08 R--A- . (.Microsoft Corporation - Azerbaijan_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdaze.dll [5632]
O44 - LFC:[MD5.A1FA7A83F9D98D84419A8E64286284F4] - 06-06-2015 - 3:05:08 R--A- . (.Microsoft Corporation - Belarusian Keyboard Layout.) -- C:\WINDOWS\system32\kbdblr.dll [5632]
O44 - LFC:[MD5.1DF6E4758611E1328567BFE4D1B28E27] - 06-06-2015 - 3:05:08 R--A- . (.Microsoft Corporation - Bulgarian Keyboard Layout.) -- C:\WINDOWS\system32\kbdbu.dll [5632]
O44 - LFC:[MD5.95D9106D39AB410A7F7EE513F181F84C] - 06-06-2015 - 3:05:08 R--A- . (.Microsoft Corporation - Kazak_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdkaz.dll [5632]
O44 - LFC:[MD5.1696413C242327A0AF8AF8E5CBD8AE04] - 06-06-2015 - 3:05:08 R--A- . (.Microsoft Corporation - Kyrgyz Keyboard Layout.) -- C:\WINDOWS\system32\kbdkyr.dll [5632]
O44 - LFC:[MD5.6AEDBCEE8C0475B10A5C244A35572737] - 06-06-2015 - 3:05:08 R--A- . (.Microsoft Corporation - Mongolian Keyboard Layout.) -- C:\WINDOWS\system32\kbdmon.dll [5632]
O44 - LFC:[MD5.B6E962B7AC1CB4A78876953D369BE6DD] - 06-06-2015 - 3:05:08 R--A- . (.Microsoft Corporation - Russia(Typewriter) Keyboard Layout.) -- C:\WINDOWS\system32\kbdru1.dll [5632]
O44 - LFC:[MD5.C6F23BC1411E91C179B0635893BB40A1] - 06-06-2015 - 3:05:08 R--A- . (.Microsoft Corporation - Russian Keyboard Layout.) -- C:\WINDOWS\system32\kbdru.dll [5632]
O44 - LFC:[MD5.E5D4673C83271FEEE1ED73E1E281A42B] - 06-06-2015 - 3:05:08 R--A- . (.Microsoft Corporation - Serbian_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdycc.dll [5632]
O44 - LFC:[MD5.F2D1EEF5ADCD5995C015AB3CB15C9415] - 06-06-2015 - 3:05:08 R--A- . (.Microsoft Corporation - Tatar_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdtat.dll [5632]
O44 - LFC:[MD5.3DDE3DC57C54452A313DC20F3019F8E3] - 06-06-2015 - 3:05:08 R--A- . (.Microsoft Corporation - Ukrainian Keyboard Layout.) -- C:\WINDOWS\system32\kbdur.dll [5632]
O44 - LFC:[MD5.4F9CFFBF05831BB81833FC64A5329C36] - 06-06-2015 - 3:05:08 R--A- . (.Microsoft Corporation - Uzbek_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbduzb.dll [5632]
O44 - LFC:[MD5.EFFDFF60A38CF648811BBCDD722ECF5E] - 06-06-2015 - 3:05:10 ---A- . (...) -- C:\WINDOWS\system32\c_10081.nls [66082]
O44 - LFC:[MD5.C37A21EE1ADFDC13FC707D97073148ED] - 06-06-2015 - 3:05:10 ---A- . (...) -- C:\WINDOWS\system32\c_28599.nls [66082]
O44 - LFC:[MD5.A8764750B22B528D85A691A52CB21856] - 06-06-2015 - 3:05:10 ---A- . (...) -- C:\WINDOWS\system32\c_857.nls [66594]
O44 - LFC:[MD5.712A218557F99D136735E0545E5AE223] - 06-06-2015 - 3:05:10 R--A- . (.Microsoft Corporation - Azeri-Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdazel.dll [5632]
O44 - LFC:[MD5.188E56B70419D8353B8D4F3E381D9E52] - 06-06-2015 - 3:05:10 R--A- . (.Microsoft Corporation - Turkish F Keyboard Layout.) -- C:\WINDOWS\system32\kbdtuf.dll [6144]
O44 - LFC:[MD5.5D569F2951F878EF01D7723DC08682E9] - 06-06-2015 - 3:05:10 R--A- . (.Microsoft Corporation - Turkish Q Keyboard Layout.) -- C:\WINDOWS\system32\kbdtuq.dll [6144]
O44 - LFC:[MD5.35448F3A71EBBECF8E997FAD3A99327D] - 06-06-2015 - 3:05:11 ---A- . (...) -- C:\WINDOWS\system32\c_28603.nls [66082]
O44 - LFC:[MD5.0D93976F7801B7FCD8135CC77257BBD0] - 06-06-2015 - 3:06:20 ---A- . (.Microsoft Corporation - Battery Class Driver.) -- C:\WINDOWS\system32\Drivers\battc.sys [14208]
O44 - LFC:[MD5.0F6C187D38D98F8DF904589A5F94D411] - 06-06-2015 - 3:06:20 ---A- . (.Microsoft Corporation - Control Method Battery Driver.) -- C:\WINDOWS\system32\Drivers\CmBatt.sys [13952]
O44 - LFC:[MD5.6E4C9F21F0FAE8940661144F41B13203] - 06-06-2015 - 3:06:21 ---A- . (.Microsoft Corporation - Composite Battery Driver.) -- C:\WINDOWS\system32\Drivers\compbatt.sys [10240]
O44 - LFC:[MD5.18B1B6FE90BC5CD3F96F47D419CD1E8B] - 06-06-2015 - 3:06:33 ---A- . (.Microsoft Corporation - DLL de l'interface utilisateur USB.) -- C:\WINDOWS\system32\usbui.dll [77312]
O44 - LFC:[MD5.4B6DA2F0A4095857A9E3F3697399D575] - 06-06-2015 - 3:06:41 ---A- . (.Microsoft Corporation - Pilote IDE Intel PCI.) -- C:\WINDOWS\system32\Drivers\intelide.sys [5504]
O44 - LFC:[MD5.80D1B490B60E74E002DC116EC5D41748] - 06-06-2015 - 3:06:51 ---A- . (.Microsoft Corporation - Ndis 1394 Enumerator.) -- C:\WINDOWS\system32\Drivers\enum1394.sys [6400]
O44 - LFC:[MD5.2ADC0CA9945C65284B3D19BC18765974] - 06-06-2015 - 3:07:07 ---A- . (.National Semiconductor Corporation - NSC Fast Infrared Driver..) -- C:\WINDOWS\system32\Drivers\nscirda.sys [28672]
O44 - LFC:[MD5.B5016FAE26C7FC184200D90D33CF1DE4] - 06-06-2015 - 3:07:10 ---A- . (.Microsoft Corporation - Application de transfert de fichier par une.) -- C:\WINDOWS\system32\irftp.exe [153088]
O44 - LFC:[MD5.ACA5E7B54409F9CB5EED97ED0C81120E] - 06-06-2015 - 3:07:10 ---A- . (.Microsoft Corporation - IRDA Protocol Driver.) -- C:\WINDOWS\system32\Drivers\irda.sys [88192]
O44 - LFC:[MD5.F9CB3A98B395A5E5CC36C65B3C41AD9C] - 06-06-2015 - 3:07:10 ---A- . (.Microsoft Corporation - Moniteur infrarouge.) -- C:\WINDOWS\system32\irmon.dll [29184]
O44 - LFC:[MD5.0581FA5156804FDF0149E1B942E3CD23] - 06-06-2015 - 3:07:10 ---A- . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshirda.dll [8192]
O44 - LFC:[MD5.0207D26DDF796A193CCD9F83047BB5FC] - 06-06-2015 - 3:07:13 ---A- . (.Microsoft Corporation - IrDA WAN Miniport Driver.) -- C:\WINDOWS\system32\Drivers\rasirda.sys [19584]
O44 - LFC:[MD5.61364CD71EF63B0F038B7E9DF00F1EFA] - 06-06-2015 - 3:07:25 ---A- . (.Microsoft Corporation - Bluetooth Miniport Driver.) -- C:\WINDOWS\system32\Drivers\BTHUSB.SYS [18944]
O44 - LFC:[MD5.B6DCFA596E97C3964F9148D5D9198EF8] - 06-06-2015 - 3:07:25 ---A- . (.Microsoft Corporation - Pilote de bus Bluetooth.) -- C:\WINDOWS\system32\Drivers\bthport.sys [273664]
O44 - LFC:[MD5.B279426E3C0C344893ED78A613A73BDE] - 06-06-2015 - 3:07:38 ---A- . (.Microsoft Corporation - Bluetooth Bus Extender.) -- C:\WINDOWS\system32\Drivers\BthEnum.sys [17024]
O44 - LFC:[MD5.851C30DF2807FCFA21E4C681A7D6440E] - 06-06-2015 - 3:07:38 ---A- . (.Microsoft Corporation - Bluetooth RFCOMM Driver.) -- C:\WINDOWS\system32\Drivers\rfcomm.sys [59136]
O44 - LFC:[MD5.80602B8746D3738F5886CE3D67EF06B6] - 06-06-2015 - 3:07:42 ---A- . (.Microsoft Corporation - Bluetooth Personal Area Networking.) -- C:\WINDOWS\system32\Drivers\bthpan.sys [101120]
O44 - LFC:[MD5.D9F724AA26C010A217C97606B160ED68] - 06-06-2015 - 3:07:51 ---A- . (.Microsoft Corporation - AudStub Driver.) -- C:\WINDOWS\system32\Drivers\audstub.sys [3072]
O44 - LFC:[MD5.F3C139AD492C4F73353057442E6995CE] - 06-06-2015 - 3:08:24 ---A- . (...) -- C:\WINDOWS\system32\c_10021.nls [66082]
O44 - LFC:[MD5.DCE6C200965B21A6A1F3AF9BDB0ECA0C] - 06-06-2015 - 3:08:24 ---A- . (.Microsoft Corporation - Thai Wordbreaker.) -- C:\WINDOWS\system32\ftlx041e.dll [6144]
O44 - LFC:[MD5.7D352AB808790C2E9E9DB6C105CF612F] - 06-06-2015 - 3:08:24 R--A- . (.Microsoft Corporation - Thai Kedmanee (non-ShiftLock) Keyboard Layo.) -- C:\WINDOWS\system32\kbdth2.dll [6144]
O44 - LFC:[MD5.117165FB781152E40C2180F66CBAC891] - 06-06-2015 - 3:08:24 R--A- . (.Microsoft Corporation - Thai Kedmanee Keyboard Layout.) -- C:\WINDOWS\system32\kbdth0.dll [5632]
O44 - LFC:[MD5.D99EC6E644373B10B4C84048CEBCAF21] - 06-06-2015 - 3:08:24 R--A- . (.Microsoft Corporation - Thai Pattachote (non-ShiftLock) Keyboard La.) -- C:\WINDOWS\system32\kbdth3.dll [6144]
O44 - LFC:[MD5.095B7A282AEF532A31CD5AB5DB2B9A49] - 06-06-2015 - 3:08:24 R--A- . (.Microsoft Corporation - Thai Pattachote Keyboard Layout.) -- C:\WINDOWS\system32\kbdth1.dll [5632]
O44 - LFC:[MD5.A99203A3397A9DB352C5D8DFBDA230A8] - 06-06-2015 - 3:08:26 ---A- . (...) -- C:\WINDOWS\system32\c_862.nls [66594]
O44 - LFC:[MD5.72233F1A1D788A84D4687A258CC97CBF] - 06-06-2015 - 3:08:27 ---A- . (...) -- C:\WINDOWS\system32\c_10005.nls [66082]
O44 - LFC:[MD5.42F5D1376CA979E956A86964FA0D358F] - 06-06-2015 - 3:08:27 R--A- . (.Microsoft Corporation - KBDHEB Keyboard Layout.) -- C:\WINDOWS\system32\kbdheb.dll [5632]
O44 - LFC:[MD5.4D4C7CED88E5621F21A4911A44CADACC] - 06-06-2015 - 3:08:28 ---A- . (...) -- C:\WINDOWS\system32\C_28596.NLS [66082]
O44 - LFC:[MD5.1DBBCC1B712C2674BDF29A05A5DD366E] - 06-06-2015 - 3:08:28 ---A- . (...) -- C:\WINDOWS\system32\c_10004.nls [66082]
O44 - LFC:[MD5.77F127766D758EB2C6451E221A0C7F7D] - 06-06-2015 - 3:08:28 ---A- . (...) -- C:\WINDOWS\system32\c_708.nls [66082]
O44 - LFC:[MD5.C050215D8D21DF5658E94187973FB89C] - 06-06-2015 - 3:08:28 ---A- . (...) -- C:\WINDOWS\system32\c_720.nls [66594]
O44 - LFC:[MD5.C58563DF50115E935BC811FFBCE1FC89] - 06-06-2015 - 3:08:28 ---A- . (...) -- C:\WINDOWS\system32\c_864.nls [66594]
O44 - LFC:[MD5.BDAAC25FA476984ED44719BEBE908A08] - 06-06-2015 - 3:08:28 R--A- . (.Microsoft Corporation - Arabic_2 Keyboard Layout.) -- C:\WINDOWS\system32\kbda2.dll [5632]
O44 - LFC:[MD5.D3C4347C5BEC57226ACA73BFFDC22E40] - 06-06-2015 - 3:08:28 R--A- . (.Microsoft Corporation - Arabic_English_101 Keyboard Layout.) -- C:\WINDOWS\system32\kbda1.dll [5632]
O44 - LFC:[MD5.187351E6E2EA64DE1F179D1C79909E74] - 06-06-2015 - 3:08:28 R--A- . (.Microsoft Corporation - Arabic_French_102 Keyboard Layout.) -- C:\WINDOWS\system32\kbda3.dll [5632]
O44 - LFC:[MD5.465E698788EC46B5E59A755CB0DE850A] - 06-06-2015 - 3:08:29 ---A- . (.Microsoft Corporation - US IBM Arabic 238_L Keyboard Layout.) -- C:\WINDOWS\system32\kbdusa.dll [5632]
O44 - LFC:[MD5.D69D0521B115D3E859183283754B5DF2] - 06-06-2015 - 3:08:29 R--A- . (.Microsoft Corporation - Divehi Phonetic Keyboard Layout.) -- C:\WINDOWS\system32\kbddiv1.dll [5632]
O44 - LFC:[MD5.96BE5DEF930D2F8BA4DCB98B3B4DB47E] - 06-06-2015 - 3:08:29 R--A- . (.Microsoft Corporation - Divehi Typewriter Keyboard Layout.) -- C:\WINDOWS\system32\kbddiv2.dll [5632]
O44 - LFC:[MD5.6A3F192C65B05AAD670570A184204FA0] - 06-06-2015 - 3:08:29 R--A- . (.Microsoft Corporation - Farsi Keyboard Layout.) -- C:\WINDOWS\system32\kbdfa.dll [5632]
O44 - LFC:[MD5.22C2AF66D10FB47153706E1EA3B21AC8] - 06-06-2015 - 3:08:29 R--A- . (.Microsoft Corporation - Syriac Phoenetic Keyboard Layout.) -- C:\WINDOWS\system32\kbdsyr2.dll [5632]
O44 - LFC:[MD5.402870DEF2B91ABA38DF8BFCA129BCA1] - 06-06-2015 - 3:08:29 R--A- . (.Microsoft Corporation - Syriac Standard Keyboard Layout.) -- C:\WINDOWS\system32\kbdsyr1.dll [5632]
O44 - LFC:[MD5.FD72905E46F0250D7C1C4E1FD38B77F4] - 06-06-2015 - 3:08:29 R--A- . (.Microsoft Corporation - Urdu Keyboard Layout.) -- C:\WINDOWS\system32\kbdurdu.dll [5632]
O44 - LFC:[MD5.CF6F4A013A9B41E0321E3A0DDDDCA9B9] - 06-06-2015 - 3:08:30 ---A- . (.Microsoft Corporation - ISCII Code Page Translation DLL.) -- C:\WINDOWS\system32\c_iscii.dll [10752]
O44 - LFC:[MD5.1BC1AE513105BD2AEE27583A5DB650D6] - 06-06-2015 - 3:08:30 ---A- . (.Microsoft Corporation - Thai Word Breaker.) -- C:\WINDOWS\system32\Thawbrkr.dll [185344]
O44 - LFC:[MD5.94CEB7ACA994968685E18F6155EA86E8] - 06-06-2015 - 3:08:30 R--A- . (.Microsoft Corporation - Devanagari Keyboard Layout.) -- C:\WINDOWS\system32\kbdindev.dll [5632]
O44 - LFC:[MD5.0EC03162E932B49E635A79445CCE1E4C] - 06-06-2015 - 3:08:30 R--A- . (.Microsoft Corporation - Eastern Armenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdarme.dll [5120]
O44 - LFC:[MD5.E98DC261A6D62610293FF0CBDA8CAF65] - 06-06-2015 - 3:08:30 R--A- . (.Microsoft Corporation - Georgian Keyboard Layout.) -- C:\WINDOWS\system32\kbdgeo.dll [5120]
O44 - LFC:[MD5.F514F89F4903C7FC56BE62A4BDE20C60] - 06-06-2015 - 3:08:30 R--A- . (.Microsoft Corporation - Gujarati Keyboard Layout.) -- C:\WINDOWS\system32\kbdinguj.dll [5632]
O44 - LFC:[MD5.0E445D2CEE6F1454973D84E1FFAA6140] - 06-06-2015 - 3:08:30 R--A- . (.Microsoft Corporation - Hindi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinhin.dll [5632]
O44 - LFC:[MD5.38709AC2F9012F620DD1043DF0BF86DE] - 06-06-2015 - 3:08:30 R--A- . (.Microsoft Corporation - Kannada Keyboard Layout.) -- C:\WINDOWS\system32\kbdinkan.dll [5632]
O44 - LFC:[MD5.5174B929760629FEE0450F821F836CBA] - 06-06-2015 - 3:08:30 R--A- . (.Microsoft Corporation - Marathi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinmar.dll [5632]
O44 - LFC:[MD5.76B29E1C9AEF011AFCE0F591234933BE] - 06-06-2015 - 3:08:30 R--A- . (.Microsoft Corporation - Punjabi/Gurmukhi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinpun.dll [6144]
O44 - LFC:[MD5.DCC32B8533FA6C84D64620BE49E110E3] - 06-06-2015 - 3:08:30 R--A- . (.Microsoft Corporation - Tamil Keyboard Layout.) -- C:\WINDOWS\system32\kbdintam.dll [5632]
O44 - LFC:[MD5.4DA25F026970A630B0F5FE5002BA7ECA] - 06-06-2015 - 3:08:30 R--A- . (.Microsoft Corporation - Telugu Keyboard Layout.) -- C:\WINDOWS\system32\kbdintel.dll [5632]
O44 - LFC:[MD5.89FD6D6E233393794FB75CF79DDC1E06] - 06-06-2015 - 3:08:30 R--A- . (.Microsoft Corporation - Vietnamese Keyboard Layout.) -- C:\WINDOWS\system32\kbdvntc.dll [5632]
O44 - LFC:[MD5.1004B259E77BEF2033CAF435760D95A6] - 06-06-2015 - 3:08:30 R--A- . (.Microsoft Corporation - Western Armenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdarmw.dll [5120]
O44 - LFC:[MD5.446549BF9E7D8E1E3D74281636BF3979] - 06-06-2015 - 3:09:25 ---A- . (...) -- C:\WINDOWS\BricoPack Wallpaper.bmp [2359350]
O44 - LFC:[MD5.B0DA3DDE074E31DB33C8CDC5146514D6] - 06-06-2015 - 3:09:38 ---A- . (...) -- C:\WINDOWS\BricoPackFoldersDelete.cmd [6116]
O44 - LFC:[MD5.6338C3BBA1DE7CF44F52FE797EDD9F7F] - 06-06-2015 - 3:09:38 ---A- . (...) -- C:\WINDOWS\BricoPackUninst.cmd [64274]
O44 - LFC:[MD5.6338C3BBA1DE7CF44F52FE797EDD9F7F] - 06-06-2015 - 3:09:38 ---A- . (...) -- C:\WINDOWS\BricoPackUninst.txt [64274]
O44 - LFC:[MD5.1B01A195883A09DD18E50AF87F924DFC] - 06-06-2015 - 3:09:38 ---A- . (.Microsoft Corporation - Bibliothèque de thèmes Ux Microsoft.) -- C:\WINDOWS\system32\uxtheme.dll [219648]
O44 - LFC:[MD5.1D13436E6E07CC475031FB9CAF9C49D0] - 06-06-2015 - 3:09:54 ---A- . (...) -- C:\WINDOWS\system.ini [231]
O44 - LFC:[MD5.3A516C2A3CC691CE0626D1863A12A9B4] - 06-06-2015 - 3:10:32 ---A- . (...) -- C:\WINDOWS\system32\pid.PNF [4444]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 06-06-2015 - 3:11:57 ---A- . (...) -- C:\WINDOWS\system32\h323log.txt [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 06-06-2015 - 3:20:16 ---A- . (...) -- C:\WINDOWS\setupact.log [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 06-06-2015 - 3:20:16 ---A- . (...) -- C:\WINDOWS\setuperr.log [0]
O44 - LFC:[MD5.B8D51A5F2961AE381723F964978AA848] - 06-06-2015 - 3:23:03 ---A- . (.Realtek Semiconductor Corp. - Driver Removing for Windows x64 or x86_32.) -- C:\WINDOWS\Alcrmv.exe [217088]
O44 - LFC:[MD5.A3CF502659EF4EBA42C70E832ED967ED] - 06-06-2015 - 3:23:03 ---A- . (.Realtek Semiconductor Corp. - Driver Update for Windows x64 or x86_32.) -- C:\WINDOWS\alcupd.exe [315392]
O44 - LFC:[MD5.BB47824F9B42B7EF93E4F7129782A48E] - 06-06-2015 - 3:23:28 ---A- . (.No owner - RtlCPAPI Module.) -- C:\WINDOWS\system32\RtlCPAPI.dll [147456]
O44 - LFC:[MD5.3390B4635D37163CB5B2C0A13403B58B] - 06-06-2015 - 3:23:28 ---A- . (.Realtek Semiconductor Corp. - Realtek AC97 Audio Control Panel.) -- C:\WINDOWS\system32\alsndmgr.cpl [18804736]
O44 - LFC:[MD5.80FD4D46B0E9B620CF757A9A5C789329] - 06-06-2015 - 3:23:28 ---A- . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\soundman.exe [577536]
O44 - LFC:[MD5.C99E22EFE74C8B3EFF93E227472FE247] - 06-06-2015 - 3:23:30 ---A- . (...) -- C:\WINDOWS\system32\alsndmgr.wav [141016]
O44 - LFC:[MD5.336402653D18149456C1AF57A6529A99] - 06-06-2015 - 3:23:30 ---A- . (.Realtek Semiconductor Corp. - Realtek Audio Control Panel.) -- C:\WINDOWS\system32\RTLCPL.exe [10528768]
O44 - LFC:[MD5.DD8520280304B6145A6BE31008748C7C] - 06-06-2015 - 3:24:47 R--A- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\system32\Drivers\alcxwdm.sys [4122368]
O44 - LFC:[MD5.43C3571EADA5BC1EDEAD7CA22AD66F30] - 06-06-2015 - 3:25:55 ---A- . (...) -- C:\WINDOWS\system32\ChCfg.exe [49152]
O44 - LFC:[MD5.B3BE320A55EDECD2F1A963C8AEAF4FE9] - 07-06-2015 - 11:24:29 ---A- . (...) -- C:\WINDOWS\startimes2.ini [176]
O44 - LFC:[MD5.284B355C59723C6A66595C5B29898D8E] - 07-06-2015 - 2:55:55 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [26304]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 07-06-2015 - 8:56:00 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 07-06-2015 - 8:56:03 ---A- . (...) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.5A46AA7E689797D9B60873B1730C8576] - 07-06-2015 - 9:02:11 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [30653]
O44 - LFC:[MD5.C16128AF698D98D23849A6AC59D0E672] - 07-06-2015 - 9:21:43 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerApp.exe [778416]
O44 - LFC:[MD5.B432B52EAD3006A61D7A37A2F7978416] - 07-06-2015 - 9:21:43 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl [142512]
~ Files: 430 Scanned in 01mn 22s



---\\ Operations and functions at Windows Explorer startup (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
~ ShellExecuteHooks: Scanned in 00mn 00s



---\\ Export authorized application key (O47)
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Google\Chrome\Application\chrome.exe" [Enabled] .(.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
~ Keys Export: 5 Scanned in 00mn 00s



---\\ Local Security Authority-LSA Deny (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll
~ LSA: 6 Scanned in 00mn 00s



---\\ Safe Boot Control (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
~ CSB: 21 Scanned in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ IFEO: Scanned in 00mn 00s



---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
~ TDSD: 12 Scanned in 00mn 01s



---\\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
~ MSCP: 6 Scanned in 00mn 00s



---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
~ MWPS: 5 Scanned in 00mn 00s



---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
~ MWPE Keys: 1 Scanned in 00mn 00s



---\\ System Drivers List (SDL) (O58)
O58 - SDL:24-09-2008 - 9:40:22 R--A- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\system32\Drivers\alcxwdm.sys [4122368]
O58 - SDL:20-04-2005 - 17:46:00 ---A- . (.Conexant Systems Inc. - Conexant WDM AC97 Audio Driver.) -- C:\WINDOWS\system32\Drivers\camc6aud.sys [37760]
O58 - SDL:20-04-2005 - 17:46:00 ---A- . (.Conexant Systems Inc. - Conexant AmcHal Driver.) -- C:\WINDOWS\system32\Drivers\camc6hal.sys [346496]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\Drivers\cinemst2.sys [262528]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\Drivers\cpqdap01.sys [11776]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys [800256]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys [154496]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys [5888]
O58 - SDL:22-09-2014 - 7:20:06 ---A- . (.ESET - Amon monitor.) -- C:\WINDOWS\system32\Drivers\eamonm.sys [191928]
O58 - SDL:22-09-2014 - 7:20:06 ---A- . (.ESET - Devmon monitor.) -- C:\WINDOWS\system32\Drivers\edevmon.sys [190368]
O58 - SDL:22-09-2014 - 7:20:06 ---A- . (.ESET - ESET Helper driver.) -- C:\WINDOWS\system32\Drivers\ehdrv.sys [135296]
O58 - SDL:22-09-2014 - 7:20:06 ---A- . (.ESET - ESET Personal Firewall driver.) -- C:\WINDOWS\system32\Drivers\epfw.sys [176448]
O58 - SDL:22-09-2014 - 7:20:06 ---A- . (.ESET - ESET Personal Firewall NDIS filter.) -- C:\WINDOWS\system32\Drivers\epfwndis.sys [39464]
O58 - SDL:22-09-2014 - 7:20:06 ---A- . (.ESET - ESET Personal Firewall TDI filter.) -- C:\WINDOWS\system32\Drivers\epfwtdi.sys [63160]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\hdaudbus.sys [144384]
O58 - SDL:06-06-2015 - 2:43:20 ---A- . (.REALiX(tm) - HWiNFO x86 Kernel Driver.) -- C:\WINDOWS\system32\Drivers\HWiNFO32.SYS [23840]
O58 - SDL:20-09-2005 - 10:00:54 ---A- . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\system32\Drivers\ialmnt5.sys [1302332]
O58 - SDL:29-11-2014 - 1:37:06 ---A- . (.Tonec Inc. - Internet Download Manager TDI Driver.) -- C:\WINDOWS\system32\Drivers\idmtdi.sys [123360]
O58 - SDL:16-03-2015 - 21:12:28 ---A- . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\system32\Drivers\igxpmp32.sys [5672032]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\nikedrv.sys [12032]
O58 - SDL:13-04-2008 - 12:54:38 ---A- . (.National Semiconductor Corporation - NSC Fast Infrared Driver..) -- C:\WINDOWS\system32\Drivers\nscirda.sys [28672]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\Drivers\ptilink.sys [17792]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\Drivers\rio8drv.sys [12032]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\riodrv.sys [12032]
O58 - SDL:25-03-2009 - 14:29:52 ---A- . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\system32\Drivers\Rtnicxp.sys [130432]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\Drivers\secdrv.sys [20480]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\Drivers\tsbvcap.sys [21376]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\Drivers\vdmindvd.sys [58112]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]
O58 - SDL:14-04-2008 - 15:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]
~ Drivers: 43 Scanned in 00mn 05s



---\\ Last modified or created user files (O61)
O61 - LFC: 06-06-2015 - 14:08:44 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\hisham\Application Data\IDM\idmmzcc5\components\idmmzcc.dll [34216]
O61 - LFC: 06-06-2015 - 14:08:45 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\hisham\Application Data\IDM\idmmzcc5\components10\idmmzcc.dll [26136]
O61 - LFC: 06-06-2015 - 14:08:45 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\hisham\Application Data\IDM\idmmzcc5\components10\idmmzcc64.dll [31256]
O61 - LFC: 06-06-2015 - 14:08:45 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\hisham\Application Data\IDM\idmmzcc5\components2\idmcchandler2.dll [326168]
O61 - LFC: 06-06-2015 - 14:08:45 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\hisham\Application Data\IDM\idmmzcc5\components2\idmcchandler2_64.dll [452632]
O61 - LFC: 06-06-2015 - 14:08:45 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\hisham\Application Data\IDM\idmmzcc5\components2\idmmzcc.dll [34216]
O61 - LFC: 06-06-2015 - 14:08:45 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\hisham\Application Data\IDM\idmmzcc5\components2\idmmzcc64.dll [28512]
O61 - LFC: 06-06-2015 - 14:08:49 ---A- . (.ESET.) -- C:\Documents and Settings\hisham\Local Settings\Temp\InstHelper.exe [307400]
O61 - LFC: 06-06-2015 - 14:08:49 ---A- . (.IObit.) -- C:\Documents and Settings\hisham\Local Settings\Temp\ASCSetup_256859.exe [44322208]
O61 - LFC: 06-06-2015 - 14:08:49 ---A- . (.Microsoft Corporation.) -- C:\Documents and Settings\hisham\Local Settings\Temp\is-MB0FP.tmp\_isetup\_shfoldr.dll [23312]
O61 - LFC: 06-06-2015 - 14:08:50 ---A- . (...) -- C:\Documents and Settings\hisham\Local Settings\Temp\_tmpdgp.exe [26303835]
O61 - LFC: 06-06-2015 - 14:08:50 ---A- . (...) -- C:\Documents and Settings\hisham\Local Settings\Temp\schtasks_42161.1685537731.bat [108]
O61 - LFC: 06-06-2015 - 14:08:56 ---A- . (.Intel Corporation.) -- C:\Documents and Settings\hisham\Mes documents\Downloads\Programs\win2k_xp1417.exe [5290394]
O61 - LFC: 07-06-2015 - 14:08:48 ---A- . (...) -- C:\Documents and Settings\hisham\Local Settings\Application Data\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849]
O61 - LFC: 07-06-2015 - 14:08:56 ---A- . (.Nicolas Coolman.) -- C:\Documents and Settings\hisham\Mes documents\Downloads\Programs\ZHPDiag2.exe [6880102] =>.Nicolas Coolman
~ 1610 Fichiers temporaires (Temporary files)
~ 18 Fichiers cookies (Cookies files)
~ Files: 15 Scanned in 00mn 11s



---\\ List all tools cleaner (LATC) (O63)
O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ List all legacy services(LALS) (O64)
O64 - Services: CurCS - 14-04-2008 - C:\WINDOWS\system32\drivers\dmload.sys (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - 22-09-2014 - C:\WINDOWS\system32\DRIVERS\eamonm.sys (eamonm) .(.ESET - Amon monitor.) - LEGACY_EAMONM
O64 - Services: CurCS - 22-09-2014 - C:\WINDOWS\system32\DRIVERS\ehdrv.sys (ehdrv) .(.ESET - ESET Helper driver.) - LEGACY_EHDRV
O64 - Services: CurCS - 01-10-2014 - C:\Program Files\ESET\ESET Smart Security\ekrn.exe (ekrn) .(.ESET - ESET Service.) - LEGACY_EKRN
O64 - Services: CurCS - 22-09-2014 - C:\WINDOWS\system32\DRIVERS\epfw.sys (epfw) .(.ESET - ESET Personal Firewall driver.) - LEGACY_EPFW
O64 - Services: CurCS - 22-09-2014 - C:\WINDOWS\system32\DRIVERS\epfwtdi.sys (epfwtdi) .(.ESET - ESET Personal Firewall TDI filter.) - LEGACY_EPFWTDI
O64 - Services: CurCS - 06-06-2015 - C:\WINDOWS\system32\drivers\HWiNFO32.sys (HWiNFO32) .(.REALiX(tm) - HWiNFO x86 Kernel Driver.) - LEGACY_HWINFO32
O64 - Services: CurCS - 29-11-2014 - C:\WINDOWS\system32\DRIVERS\idmtdi.sys (IDMTDI) .(.Tonec Inc. - Internet Download Manager TDI Driver.) - LEGACY_IDMTDI
~ Legacy: 104 Scanned in 00mn 01s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 10 Scanned in 00mn 01s



---\\ Start Menu Internet (SMI) (O68)
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Search Browser Infection (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {3D585554-3A2C-4BF8-9587-2D99C7A6EBAD} [DefaultScope] - (Google) - http://www.google.com
~ Keys: Scanned in 00mn 00s



---\\ Search Svchost Services (SSS) (O83)
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\system32\appmgmts.dll [176640]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496]
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [77824]
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464]
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576]
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [127488]
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040]
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\es.dll [246272]
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: HidServ (HidServ) . (...) -- C:\WINDOWS\system32\hidserv.dll [0]
O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Moniteur infrarouge.) -- C:\WINDOWS\system32\irmon.dll [29184]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [96768]
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096]
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792]
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [198144]
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248]
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560]
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll [18944]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\system32\ipnathlp.dll [332800]
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\system32\tapisrv.dll [249856]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112]
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176]
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [483840]
O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\system32\advapi32.dll [685568]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408]
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896]
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024]
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll [293376]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [61440]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400]
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Fournisseur de services de périphérique multimédia Microsoft.) -- C:\WINDOWS\system32\mspmsnsv.dll [52736]
~ Services: 41 Scanned in 00mn 01s



---\\ General States of Services not Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 07-06-2015 268464 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 14-04-2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SS - | Auto 06-06-2015 107848 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 06-06-2015 107848 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Auto 26-03-2015 2585376 | (LiveUpdateSvc) . (.IObit.) - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
SR - | Auto 01-10-2014 1349576 | (ekrn) . (.ESET.) - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
~ Services: Scanned in 00mn 08s



---\\ Search Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by hisham at 07-06-2015 14:09:45
device: opened successfully
~ MBR: 4 Scanned in 00mn 02s



---\\ Search Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by hisham at 07-06-2015 14:09:47
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s



---\\ Scan Additionnel (O88)
Database Version : 13008 - (31-05-2015)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 0

~ Additionnel Scan: 78142 Items scanned in 00mn 17s



---\\ Additional information about modules
~ http://nicolascoolman.fr/g2-google-chrome-extensions/ =>.Google Chrome, Start,Search,Extensions (G0,G1,G2)
~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5)
~ http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects (O2)
~ http://nicolascoolman.fr/o3-internet-explorer-toolbars/ =>.Internet Explorer toolbars (O3)
~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Auto loading programs from Registry and folders (O4)
~ http://nicolascoolman.fr/o50-image-file-execution-options-zhpdiag/ =>.Image File Execution Options (IFEO) (O50)
~ AMI: 6 Scanned in 00mn 00s



End of the scan (1255 lines in 03mn 45s)(0.4)

Publicité


Signaler le contenu de ce document

Publicité