Rapport de ZHPDiag v1.3.5.100 par Nicolas Coolman, Update du 19/02/2013
Run by aurore at 22/02/2013 17:46:01
State : Nouvelle version disponible
High Elevated Privileges : OK
UAC : Not Found


---\\ Web Browser
MSIE: Internet Explorer v7.0.5730.13
MFIE: Mozilla Firefox 15.0.1 v15.0.1 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows XP Home Edition Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : OK

---\\ System Information
~ Processor: x86 Family 6 Model 10 Stepping 0, AuthenticAMD
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 255 MB (32% free)
System Restore: Activé (Enable)
System drive C: has 59 GB (79%) free of 75 GB

---\\ Logged in mode
~ Computer Name: GUY
~ User Name: aurore
~ All Users Names: SUPPORT_388945a0, HelpAssistant, aurore, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Documents and Settings\aurore\Application Data\
~ %Desktop% : C:\Documents and Settings\aurore\Bureau\
~ %Favorites% : C:\Documents and Settings\aurore\Favoris\
~ %LocalAppData% : C:\Documents and Settings\aurore\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\aurore\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 59 Go of 75 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
J:\ Floppy drive, Flash card reader, USB Key (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 04:34:04.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.029D6BF4E1DA30416520C160EE559CA4] - (.Microsoft Corporation - Internet Extensions for Win32.) (.26/12/2012 - 21:38:16.) -- C:\WINDOWS\system32\wininet.dll [832512]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 04:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 15:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 20:40:30.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 21:14:22.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 20:40:46.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 03:57:38.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 18:36:06.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 04:00:52.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 20:40:58.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 20:57:16.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 21:19:42.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 15:29:32.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 21:21:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 21:15:54.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 04:09:40.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 21:19:44.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 20:32:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/04/2008 - 03:57:34.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 03:56:04.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Scan Generic Processes in 00mn 05s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/69
~ Mes musiques (My Musics) : 1/2
Mes Videos (My Videos) : 2/2   (Modified) 
~ Mes Favoris (My Favorites) : 1/14
~ Mes Documents (My Documents) : 1/90
~ Mon Bureau (My Desktop) : 0/71
~ Menu demarrer (Programs) : 1/23
~ Scan Hidden Files in 00mn 00s



---\\ Processus lancés
[MD5.B0C9FFF54F16DF2012F53A34736A0975] - (.France Telecom SA - Orange Connection Kit.) -- C:\Program Files\Fichiers communs\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe   [69632] [PID.1856]
[MD5.381B25DC8E958D905B33130D500BBF29] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe   [153376] [PID.1876]
[MD5.4BA84C832E0741A294C4444556DFE993] - (.Symantec Corporation - Symantec Service Framework.) -- C:\Program Files\Norton 360 Premier Edition\Engine\20.2.1.22\ccSvcHst.exe   [143928] [PID.2036]
[MD5.4BFA2DC8B18CF70577564CB4379C09CB] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 53.03.) -- C:\WINDOWS\System32\nvsvc32.exe   [77824] [PID.276]
[MD5.7418DC540608C9BAE4DFF58D2B427F63] - (.Neodio Corp. - Disk Monitor.) -- C:\Program Files\Generic\USB Card Reader Driver v1.9e3\Disk_Monitor.exe   [466944] [PID.804]
[MD5.72DE9723E5203A5C5D284C6D001A1D14] - (.France Telecom SA - Orange Connection Kit.) -- C:\Program Files\Orange\Connexion Internet Orange\Launcher\Launcher.exe   [717552] [PID.824]
[MD5.527F995C40417C0F4EBB74ACA98F915A] - (.France Telecom SA - Orange Connection Kit.) -- C:\Program Files\Fichiers communs\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe   [90112] [PID.1412]
[MD5.ABC9091B6D438381DBACFD1A82E0C0EA] - (.France Telecom SA - Orange Connection Kit.) -- C:\Program Files\Orange\Connexion Internet Orange\systray\systrayapp.exe   [282624] [PID.1808]
[MD5.682DB04704A74F228A080B31003B6FC6] - (.France Telecom SA - Orange Connection Kit.) -- C:\Program Files\Orange\Connexion Internet Orange\connectivity\connectivitymanager.exe   [974848] [PID.1892]
[MD5.CAF2CCB6E9F5FDBE99EE8904EB9DC506] - (.France Telecom SA - Orange Connection Kit.) -- C:\Program Files\Orange\Connexion Internet Orange\connectivity\CoreCom\CoreCom.exe   [495616] [PID.1916]
[MD5.8E884B0A19679340BFFF5C157075D6B5] - (.France Telecom SA - Orange Connection Kit.) -- C:\Program Files\Orange\Connexion Internet Orange\connectivity\CoreCom\OraConfigRecover.exe   [53248] [PID.3056]
[MD5.58ED0528F2B1BFB3301BC10E0E707C35] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe   [917400] [PID.528]
[MD5.B45F1D52C0A9519028BD95D34FFAB216] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe   [17304] [PID.2520]
[MD5.F6E3D406A555A557D0F7CF085362EB4C] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [5687296] [PID.3856]
[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe   [44544] [PID.2592]
~ Scan Processes Running in 00mn 08s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\prefs.js
M3 - MFPP: Plugins - [aurore] -- C:\Program Files\Mozilla FireFox\searchplugins\glarysearch.xml
M3 - MFPP: Plugins - [aurore] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M3 - MFPP: Plugins - [aurore] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [aurore] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [aurore] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [aurore] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [aurore] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [aurore] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M0 - MFSP: prefs.js [aurore - 2okcvrau.default-1361304743703] http://www.orange.fr
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_149.dll
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.0.) -- C:\WINDOWS\System32\Adobe\Director\np32dsw.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_29 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.6.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
~ Scan Firefox Browser in 00mn 01s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.6.) (No version) -- (.not file.)
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 20



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} . (.Symantec Corporation - coIEPlugIn.) -- C:\Program Files\Norton 360 Premier Edition\Engine\20.2.1.22\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} . (.Symantec Corporation - IPS Browser Helper DLL.) -- C:\Program Files\Norton 360 Premier Edition\Engine\20.2.1.22\IPS\IPSBHO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
~ Scan BHO in 00mn 01s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Norton Toolbar - [HKLM]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} . (.Symantec Corporation - coIEPlugIn.) -- C:\Program Files\Norton 360 Premier Edition\Engine\20.2.1.22\coIEPlg.dll
O3 - Toolbar: (no name) - [HKCU]{1E796980-9CC5-11D1-A83F-00C04FC99D61} Clé orpheline
~ Scan Toolbar in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [ORAHSSSessionManager] . (.France Telecom SA - Orange Connection Kit.) -- C:\Program Files\Orange\Connexion Internet Orange\SessionManager\SessionManager.exe 
O4 - HKLM\..\Run: [Disk Monitor] . (.Neodio Corp. - Disk Monitor.) -- C:\Program Files\Generic\USB Card Reader Driver v1.9e3\Disk_Monitor.exe 
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll 
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe 
O4 - HKUS\S-1-5-19\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\System32\NVMCTRAY.dll 
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe 
O4 - HKUS\S-1-5-20\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\System32\NVMCTRAY.dll 
O4 - HKUS\S-1-5-21-375612493-891307005-1094741515-1005\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN Explorer.lnk . (...)  -- C:\Program Files\MSN\MSNCoreFiles\msn6.exe (.not file.)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Acrobat Reader 5.0.lnk . (.Adobe Systems Incorporated.)  -- C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Access.lnk . (...)  -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\accicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Excel.lnk . (...)  -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\xlicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft FrontPage.lnk . (...)  -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\misc.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Outlook.lnk . (...)  -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\outicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft PowerPoint.lnk . (...)  -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\pptico.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Word.lnk . (...)  -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.)  -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (...)  -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\aurore\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\aurore\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\aurore\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\aurore\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
~ Scan Global Startup in 00mn 04s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Clé orpheline
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -- C:\Program Files\Messenger\msmsgs.exe (.not file.)
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
~ Scan Winsock in 00mn 00s



---\\ Piratage de l'Option 'Rétablir les paramètres Web' (O14)
O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=http://GLOBAL.ACER.COM/
~ Scan IE Paramètres WEB in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} ((no name)) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1292173485109
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} ((no name)) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1292173450265
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} ((no name)) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
~ Scan Objets ActiveX in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{386941E4-8F70-406B-A4B6-2170B54E4434}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{386941E4-8F70-406B-A4B6-2170B54E4434}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{386941E4-8F70-406B-A4B6-2170B54E4434}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\System32\wiascr.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Scan Winlogon in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\System32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) . (.France Telecom SA - Orange Connection Kit.) - C:\Program Files\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Norton 360 (N360) . (.Symantec Corporation - Symantec Service Framework.) - C:\Program Files\Norton 360 Premier Edition\Engine\20.2.1.22\ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 53.03.) - C:\WINDOWS\system32\nvsvc32.exe
~ Scan Services in 00mn 09s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\aurore\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\aurore\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GlaryInitialize.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
~ Scan Scheduled Task in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: IE7 Uninstall Stub - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Lecteur Windows Media - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
O40 - ASIC: Macromedia Shockwave Director 7.0.0 - {166B1BCA-3F9C-11CF-8075-444553540000} . (.Adobe Systems, Inc. - Shockwave ActiveX Control.) -- C:\WINDOWS\System32\Adobe\Director\SwDir.dll
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Adobe Shockwave Director 10.4 - {233C1507-6A77-46A4-9443-F871F945D258} . (.Adobe Systems, Inc. - Shockwave ActiveX Control.) -- C:\WINDOWS\system32\Adobe\Director\swdir.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp11.inf
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe
O40 - ASIC: Adobe Flash Player 9 ActiveX - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.5 r502.) -- C:\WINDOWS\system32\Macromed\Flash\Flash32_11_5_502_149.ocx
O40 - ASIC: Installed Component - S-1-5-21-375612493-891307005-1094741515-1005 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexadécimal CLSID
~ Scan Active Setup in 00mn 01s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver:  (AmdK7) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\amdk7.sys
O41 - Driver:  (BHDrvx86) . (.Symantec Corporation - BASH Driver.) - C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130208.001\BHDrvx86.sys
O41 - Driver:  (ccSet_N360) . (.Symantec Corporation - Common Client Settings Driver.) - C:\WINDOWS\system32\drivers\N360\1402010.016\ccSetx86.sys
O41 - Driver:  (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver:  (eeCtrl) . (.Symantec Corporation - Symantec Eraser Control Driver.) - C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver:  (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver:  (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver:  (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver:  (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver:  (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver:  (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver:  (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\processr.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver:  (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver:  (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver:  (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver:  (SRTSPX) . (.Symantec Corporation - Symantec AutoProtect.) - C:\WINDOWS\system32\drivers\N360\1402010.016\SRTSPX.sys
O41 - Driver:  (SymIRON) . (.Symantec Corporation - Iron Driver.) - C:\WINDOWS\system32\drivers\N360\1402010.016\Ironx86.sys
O41 - Driver:  (SYMTDI) . (.Symantec Corporation - Network Dispatch Driver.) - C:\WINDOWS\system32\Drivers\N360\1402010.016\SYMTDI.sys
O41 - Driver:  (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
~ Scan Drivers in 00mn 01s



---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Acrobat 5.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Acrobat 5.0
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader X (10.1.6) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Canon MP Navigator EX 1.0 - (.Pas de propriétaire.) [HKLM] -- MP Navigator EX 1.0
O42 - Logiciel: Canon MX300 series - (.Pas de propriétaire.) [HKLM] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX300_series
O42 - Logiciel: Canon My Printer - (.Pas de propriétaire.) [HKLM] -- CanonMyPrinter
O42 - Logiciel: Canon Utilities Easy-PhotoPrint EX - (.Pas de propriétaire.) [HKLM] -- Easy-PhotoPrint EX
O42 - Logiciel: Canon Utilities Solution Menu - (.Pas de propriétaire.) [HKLM] -- CanonSolutionMenu
O42 - Logiciel: Connexion Internet Orange - (.Pas de propriétaire.) [HKLM] -- {ORAHSS}.UninstallSuite
O42 - Logiciel: Enregistrement utilisateur de Canon MX300 series - (.Pas de propriétaire.) [HKLM] -- Enregistrement utilisateur de Canon MX300 series
O42 - Logiciel: Generic USB Card Reader Driver v1.9e3 - (.Pas de propriétaire.) [HKLM] -- Generic USB Card Reader Driver
O42 - Logiciel: Glary Utilities 2.51.0.1666 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Java 2 Runtime Environment, SE v1.4.2_01 - (.Sun Microsystems, Inc..) [HKLM] -- {7148F0A8-6813-11D6-A77B-00B0D0142010}
O42 - Logiciel: Java(TM) 6 Update 29 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216024FF}
O42 - Logiciel: Java(TM) 6 Update 6 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160060}
O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: Mahjong 1.1 - (.Absolutist Ltd..) [HKLM] -- Mahjong_is1
O42 - Logiciel: Malwarebytes Anti-Malware version 1.70.0.1100 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs
O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Mozilla Firefox 15.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 15.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: NTI CD & DVD-Maker 6.5 Gold  - (.NewTech Infosystems.) [HKLM] -- InstallShield_{C438B7C4-B4F8-49C5-A4DF-FF6F1F242778}
O42 - Logiciel: NVIDIA Display Driver - (.Pas de propriétaire.) [HKLM] -- NVIDIA Display Driver
O42 - Logiciel: Nero OEM - (.Pas de propriétaire.) [HKLM] -- Nero - Burning Rom!UninstallKey
O42 - Logiciel: Nero Suite - (.Pas de propriétaire.) [HKLM] -- NeroMultiInstaller!UninstallKey
O42 - Logiciel: NeroVision Express 2 - (.Pas de propriétaire.) [HKLM] -- NeroVision!UninstallKey
O42 - Logiciel: Norton 360 Premier Edition - (.Symantec Corporation.) [HKLM] -- N360
O42 - Logiciel: Notification Mail - (.Orange.) [HKLM] -- MailNotifier
O42 - Logiciel: PIXMA Extended Survey Program - (.Pas de propriétaire.) [HKLM] -- CANONIJPLM100
O42 - Logiciel: PowerDVD - (.Pas de propriétaire.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: Realtek AC'97 Audio - (.Pas de propriétaire.) [HKLM] -- {FB08F381-6533-4108-B7DD-039E11FBC27E}
O42 - Logiciel: ScanSoft OmniPage SE 4 - (.Nuance Communications, Inc..) [HKLM] -- {DEE88727-779B-47A9-ACEF-F87CA5F92A65}
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729) - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}
O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01 - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01
O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130
O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service

---\\ HKCU & HKLM Software Keys
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\Agfa]
[HKCU\Software\Ahead]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Macromedia]
[HKCU\Software\AppDataLow\Software\iGraal]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\CASIO]
[HKCU\Software\Canon]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\GlarySoft]
[HKCU\Software\IM Providers]
[HKCU\Software\IncrediMail]
[HKCU\Software\JavaSoft]
[HKCU\Software\Macromedia]
[HKCU\Software\Magnet]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Mozilla]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\Norton]
[HKCU\Software\ODBC]
[HKCU\Software\Panda Software]
[HKCU\Software\Policies]
[HKCU\Software\ScanSoft]
[HKCU\Software\Skype]
[HKCU\Software\SweetIM]
[HKCU\Software\Trend Micro]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\iGraal]
[HKLM\Software\Adobe]
[HKLM\Software\AdwCleaner]
[HKLM\Software\Agfa]
[HKLM\Software\Ahead]
[HKLM\Software\BrowserChoice]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Canon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Conexant]
[HKLM\Software\CyberLink]
[HKLM\Software\FRANCE TELECOM]
[HKLM\Software\GEAR Software]
[HKLM\Software\Gemplus]
[HKLM\Software\GlarySoft]
[HKLM\Software\Google]
[HKLM\Software\Hercules Technologies]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\InstallShield]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Licenses]
[HKLM\Software\MDC]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\McAfee.com]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\NewSoft]
[HKLM\Software\NewTech Infosystems]
[HKLM\Software\Norton]
[HKLM\Software\ODBC]
[HKLM\Software\Orange]
[HKLM\Software\PCTools]
[HKLM\Software\Panda Software]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\ScanSoft]
[HKLM\Software\Schlumberger]
[HKLM\Software\SweetIM]
[HKLM\Software\Symantec]
[HKLM\Software\TrendMicro]
[HKLM\Software\Via4in1Driver]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\mozilla.org]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 01/07/2008 - 17:22:44 - [249,604] ----D C:\Program Files\Fichiers communs
O43 - CFD: 01/07/2008 - 17:25:46 - [3,760] ----D C:\Program Files\Windows NT
O43 - CFD: 01/07/2008 - 17:25:52 - [8,341] ----D C:\Program Files\MSN Gaming Zone
O43 - CFD: 01/07/2008 - 17:25:56 - [24,460] ----D C:\Program Files\Windows Media Player
O43 - CFD: 01/07/2008 - 17:25:58 - [0,002] ----D C:\Program Files\Services en ligne
O43 - CFD: 01/07/2008 - 17:25:58 - [0] --H-D C:\Program Files\WindowsUpdate
O43 - CFD: 01/07/2008 - 17:26:42 - [6,195] ----D C:\Program Files\Internet Explorer
O43 - CFD: 01/07/2008 - 17:26:42 - [4,133] ----D C:\Program Files\Outlook Express
O43 - CFD: 01/07/2008 - 17:26:42 - [3,133] ----D C:\Program Files\NetMeeting
O43 - CFD: 01/07/2008 - 17:26:44 - [16,284] ----D C:\Program Files\Movie Maker
O43 - CFD: 01/07/2008 - 17:28:06 - [0] ----D C:\Program Files\microsoft frontpage
O43 - CFD: 01/07/2008 - 17:28:06 - [0] ----D C:\Program Files\xerox
O43 - CFD: 01/07/2008 - 17:32:10 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 01/07/2008 - 17:32:46 - [9,875] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 01/07/2008 - 17:32:46 - [5,226] ----D C:\Program Files\AvRack
O43 - CFD: 01/07/2008 - 17:32:46 - [0] ----D C:\Program Files\Realtek Sound Manager
O43 - CFD: 01/07/2008 - 17:33:20 - [0,618] ----D C:\Program Files\Generic
O43 - CFD: 01/07/2008 - 17:33:38 - [126,639] ----D C:\Program Files\Adobe
O43 - CFD: 01/07/2008 - 17:35:06 - [50,677] ----D C:\Program Files\NewTech Infosystems
O43 - CFD: 01/07/2008 - 17:36:04 - [16,024] ----D C:\Program Files\CyberLink
O43 - CFD: 01/07/2008 - 17:36:28 - [181,692] ----D C:\Program Files\Java
O43 - CFD: 01/07/2008 - 17:43:28 - [4,916] ----D C:\Program Files\Wanadoo
O43 - CFD: 01/07/2008 - 20:40:06 - [25,908] ----D C:\Program Files\Hewlett-Packard
O43 - CFD: 01/07/2008 - 20:50:30 - [187,530] ----D C:\Program Files\Ahead
O43 - CFD: 01/07/2008 - 21:03:22 - [179,111] ----D C:\Program Files\Microsoft Office
O43 - CFD: 24/08/2008 - 16:04:06 - [2,287] ----D C:\Program Files\Absolutist.com
O43 - CFD: 26/12/2008 - 16:54:24 - [287,986] ----D C:\Program Files\Canon
O43 - CFD: 26/12/2008 - 16:57:02 - [27,605] --H-D C:\Program Files\CanonBJ
O43 - CFD: 26/12/2008 - 18:41:02 - [115,938] ----D C:\Program Files\ScanSoft
O43 - CFD: 05/10/2010 - 19:51:40 - [351,928] ----D C:\Program Files\Orange
O43 - CFD: 24/12/2010 - 15:10:56 - [12,157] ----D C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 11/03/2011 - 11:45:36 - [24,803] ----D C:\Program Files\Glary Utilities
O43 - CFD: 03/04/2011 - 12:42:08 - [0,764] ----D C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 23/04/2011 - 16:13:52 - [0] ----D C:\Program Files\PC Tools Security
O43 - CFD: 06/06/2011 - 07:57:32 - [38,094] ----D C:\Program Files\MSECache
O43 - CFD: 12/02/2012 - 18:41:28 - [3,415] ----D C:\Program Files\Windows Media Connect 2
O43 - CFD: 08/05/2012 - 13:24:42 - [0,212] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 07/12/2012 - 07:43:12 - [33,130] ----D C:\Program Files\Nikon
O43 - CFD: 01/02/2013 - 17:34:04 - [13,728] ----D C:\Program Files\NortonInstaller
O43 - CFD: 01/02/2013 - 17:37:32 - [134,436] ----D C:\Program Files\Norton 360 Premier Edition
O43 - CFD: 01/02/2013 - 17:45:52 - [0,144] ----D C:\Program Files\Symantec
O43 - CFD: 06/02/2013 - 13:25:56 - [44,623] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 17/02/2013 - 18:55:14 - [0,370] ----D C:\Program Files\Trend Micro
O43 - CFD: 19/02/2013 - 19:53:04 - [30,736] ----D C:\Program Files\Ad-Remover
O43 - CFD: 22/02/2013 - 17:39:10 - [15,130] ----D C:\Program Files\ZHPDiag
O43 - CFD: 01/07/2008 - 17:22:44 - [108,844] ----D C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 01/07/2008 - 17:22:44 - [3,612] ----D C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 01/07/2008 - 17:22:46 - [0] ----D C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 01/07/2008 - 17:26:42 - [18,146] ----D C:\Program Files\Fichiers communs\System
O43 - CFD: 01/07/2008 - 17:26:46 - [0,271] ----D C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 01/07/2008 - 17:26:48 - [0,008] ----D C:\Program Files\Fichiers communs\Services
O43 - CFD: 01/07/2008 - 17:32:44 - [9,072] ----D C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 01/07/2008 - 17:33:38 - [3,937] ----D C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 01/07/2008 - 17:36:28 - [48,120] ----D C:\Program Files\Fichiers communs\Java
O43 - CFD: 01/07/2008 - 20:50:34 - [19,330] ----D C:\Program Files\Fichiers communs\Ahead
O43 - CFD: 01/07/2008 - 21:04:04 - [0,082] ----D C:\Program Files\Fichiers communs\Designer
O43 - CFD: 26/12/2008 - 17:01:54 - [0,001] ----D C:\Program Files\Fichiers communs\CANON
O43 - CFD: 26/12/2008 - 18:41:30 - [0,201] ----D C:\Program Files\Fichiers communs\ScanSoft Shared
O43 - CFD: 26/12/2008 - 18:43:50 - [3,538] ----D C:\Program Files\Fichiers communs\NewSoft
O43 - CFD: 05/10/2010 - 19:51:06 - [14,842] ----D C:\Program Files\Fichiers communs\France Telecom
O43 - CFD: 07/12/2012 - 07:43:14 - [18,676] ----D C:\Program Files\Fichiers communs\Nikon
O43 - CFD: 01/02/2013 - 17:45:52 - [0,923] ----D C:\Program Files\Fichiers communs\Symantec Shared
O43 - CFD: 01/07/2008 - 17:22:36 - [711,614] R-H-D C:\Documents and Settings\All Users\Application Data
O43 - CFD: 01/07/2008 - 17:22:36 - [0,006] ----D C:\Documents and Settings\All Users\Bureau
O43 - CFD: 01/07/2008 - 17:22:36 - [1,875] R---D C:\Documents and Settings\All Users\Menu Démarrer
O43 - CFD: 01/07/2008 - 17:22:36 - [0] --H-D C:\Documents and Settings\All Users\Modèles
O43 - CFD: 01/07/2008 - 17:22:36 - [0] ----D C:\Documents and Settings\All Users\Favoris
O43 - CFD: 01/07/2008 - 17:22:36 - [1,702] R---D C:\Documents and Settings\All Users\Documents
O43 - CFD: 01/07/2008 - 17:27:18 - [0,181] -SH-D C:\Documents and Settings\All Users\DRM
O43 - CFD: 01/07/2008 - 17:33:38 - [6,930] ----D C:\Documents and Settings\aurore\Application Data\Adobe
O43 - CFD: 01/07/2008 - 17:36:40 - [23,575] ----D C:\Documents and Settings\aurore\Application Data\Sun
O43 - CFD: 01/07/2008 - 17:22:20 - [1,843] -S--D C:\Documents and Settings\aurore\Application Data\Microsoft
O43 - CFD: 01/07/2008 - 21:11:40 - [6,962] ----D C:\Documents and Settings\aurore\Application Data\Macromedia
O43 - CFD: 04/01/2009 - 11:48:58 - [0,001] ----D C:\Documents and Settings\aurore\Application Data\Canon
O43 - CFD: 24/12/2010 - 15:11:14 - [0,214] ----D C:\Documents and Settings\aurore\Application Data\Malwarebytes
O43 - CFD: 11/03/2011 - 11:49:38 - [0,298] ----D C:\Documents and Settings\aurore\Application Data\GlarySoft
O43 - CFD: 27/04/2011 - 18:43:22 - [0,005] ----D C:\Documents and Settings\aurore\Application Data\PCTools
O43 - CFD: 08/01/2012 - 12:04:40 - [15,296] ----D C:\Documents and Settings\aurore\Application Data\Mozilla
O43 - CFD: 23/01/2012 - 19:39:28 - [0,004] ----D C:\Documents and Settings\aurore\Application Data\TestApp
O43 - CFD: 07/12/2012 - 07:46:26 - [0,000] ----D C:\Documents and Settings\aurore\Application Data\ArcSoft
O43 - CFD: 01/07/2008 - 17:30:46 - [10,884] ----D C:\Documents and Settings\aurore\Local Settings\Application Data\Microsoft
O43 - CFD: 04/07/2008 - 13:27:48 - [0,276] ----D C:\Documents and Settings\aurore\Local Settings\Application Data\Identities
O43 - CFD: 22/01/2009 - 09:36:30 - [0] ----D C:\Documents and Settings\aurore\Local Settings\Application Data\Canon Easy-PhotoPrint EX
O43 - CFD: 29/05/2010 - 11:38:34 - [14,506] ----D C:\Documents and Settings\aurore\Local Settings\Application Data\Adobe
O43 - CFD: 06/10/2010 - 11:39:22 - [0,000] ----D C:\Documents and Settings\aurore\Local Settings\Application Data\Orange
O43 - CFD: 01/08/2011 - 20:47:46 - [1,860] ----D C:\Documents and Settings\aurore\Local Settings\Application Data\Ahead
O43 - CFD: 06/10/2011 - 10:23:30 - [0] ----D C:\Documents and Settings\aurore\Local Settings\Application Data\Temp
O43 - CFD: 08/01/2012 - 12:04:40 - [9,269] ----D C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla
O43 - CFD: 01/07/2008 - 17:27:02 - [0,014] R---D C:\Documents and Settings\aurore\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 01/07/2008 - 17:22:36 - [0,000] R---D C:\Documents and Settings\aurore\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 17/02/2013 - 18:55:14 - [0,002] ----D C:\Documents and Settings\aurore\Menu Démarrer\Programmes\HiJackThis
~ Scan Program Folder in 00mn 21s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.0DB7527DB188C7D967A37BB51BBF3963] - 22/02/2013 - 17:23:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\Drivers\mbamswissarmy.sys   [40776]
O44 - LFC:[MD5.357ADEEB480D7F09C066745B7BA9DCAD] - 22/02/2013 - 17:06:18 ---A- . (...) -- C:\WINDOWS\wiadebug.log   [211]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 22/02/2013 - 17:02:08 ---A- . (...) -- C:\WINDOWS\0.log   [0]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 22/02/2013 - 17:01:36 -S-A- . (...) -- C:\WINDOWS\bootstat.dat   [2048]
O44 - LFC:[MD5.4975E8BEDD12551DBAAA41A9C1DBCABF] - 21/02/2013 - 22:58:34 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log   [1732944]
O44 - LFC:[MD5.359A558C47805DD8B4135D38258766CE] - 21/02/2013 - 22:58:22 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt   [32504]
O44 - LFC:[MD5.46363EAAB072D4541E6384D8F1DDBBE7] - 21/02/2013 - 22:58:16 ---A- . (...) -- C:\WINDOWS\wiaservc.log   [50]
O44 - LFC:[MD5.02C00E55BCE99A65DCAAFB2F82D95653] - 20/02/2013 - 21:29:14 ---A- . (...) -- C:\WINDOWS\KB2792100-IE7.log   [165654]
O44 - LFC:[MD5.D478DB97F71A1CD96AA4339FD7288DB7] - 20/02/2013 - 21:27:44 ---A- . (...) -- C:\WINDOWS\updspapi.log   [48870]
O44 - LFC:[MD5.629CABB0421668C9D3D402A3C3D77E14] - 19/02/2013 - 21:57:31 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\mbam.sys   [21104]
O44 - LFC:[MD5.95957995F157567E5350D366FF948184] - 19/02/2013 - 21:12:24 ---A- . (...) -- C:\WINDOWS\ntbtlog.txt   [142492]
O44 - LFC:[MD5.CEB2B2337240DAA2F28A3CF9E7B6FA10] - 19/02/2013 - 20:07:30 ---A- . (...) -- C:\Ad-Report-CLEAN[2].txt   [4353]
O44 - LFC:[MD5.A9DDE0293BC97D16A39E2F156B5496EA] - 19/02/2013 - 20:03:44 ---A- . (...) -- C:\Ad-Report-CLEAN[1].txt   [4287]
O44 - LFC:[MD5.938D505676AA459E40782C11526655D1] - 19/02/2013 - 19:33:24 ---A- . (...) -- C:\AdwCleaner[S1].txt   [2752]
O44 - LFC:[MD5.424AEF6B36B832F177C55921D1E3DE33] - 18/02/2013 - 21:09:18 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl   [2206]
O44 - LFC:[MD5.95B369289BDD6E8E973CC18B831F1FEC] - 17/02/2013 - 18:54:00 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT   [130096]
O44 - LFC:[MD5.D16D23085D7FBB3F6B669649FCD4998D] - 17/02/2013 - 17:47:56 ---A- . (...) -- C:\WINDOWS\KB2778344.log   [20970]
O44 - LFC:[MD5.BC0F33DCE0EABB96372C9C8CE1C2AB77] - 17/02/2013 - 17:47:54 ---A- . (...) -- C:\WINDOWS\comsetup.log   [164973]
O44 - LFC:[MD5.B9CC66883D757383D4F4144BE0625258] - 17/02/2013 - 17:47:54 ---A- . (...) -- C:\WINDOWS\iis6.log   [79049]
O44 - LFC:[MD5.A0884BAE83CE8DBDA24D098DE4259DC0] - 17/02/2013 - 17:47:54 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log   [99895]
O44 - LFC:[MD5.0946AF9DBC9AB65C3B9E40798606E116] - 17/02/2013 - 17:47:52 ---A- . (...) -- C:\WINDOWS\FaxSetup.log   [494621]
O44 - LFC:[MD5.3AC1CD9680315713C221425F697A33F3] - 17/02/2013 - 17:47:52 ---A- . (...) -- C:\WINDOWS\imsins.log   [1374]
O44 - LFC:[MD5.F1398AC12A3A87C11D55C26DBD17455A] - 17/02/2013 - 17:47:52 ---A- . (...) -- C:\WINDOWS\msgsocm.log   [24672]
O44 - LFC:[MD5.7EC1CD69C1B97FBB8DD4E1A3B3A58568] - 17/02/2013 - 17:47:52 ---A- . (...) -- C:\WINDOWS\ocgen.log   [236480]
O44 - LFC:[MD5.F761415A12018C6A3C404CFA27337406] - 17/02/2013 - 17:47:52 ---A- . (...) -- C:\WINDOWS\ocmsn.log   [27360]
O44 - LFC:[MD5.57220257A0C440CAB2D01D781FD180FA] - 17/02/2013 - 17:47:52 ---A- . (...) -- C:\WINDOWS\setupapi.log   [217246]
O44 - LFC:[MD5.A74B0AB9157A32025020A2A9E1AE2448] - 17/02/2013 - 17:47:52 ---A- . (...) -- C:\WINDOWS\tsoc.log   [188727]
O44 - LFC:[MD5.5D6685357C3E18F5F16B0F113BD57E18] - 17/02/2013 - 17:38:06 ---A- . (...) -- C:\WINDOWS\KB2797052-IE7.log   [14806]
O44 - LFC:[MD5.D6CC45F54354271A45EB90A559101915] - 17/02/2013 - 17:37:58 ---A- . (...) -- C:\WINDOWS\imsins.BAK   [1374]
O44 - LFC:[MD5.1EEA905CA4BC4EED276D4EFF52FB0F62] - 17/02/2013 - 17:32:40 ---A- . (...) -- C:\WINDOWS\KB2799494.log   [21385]
O44 - LFC:[MD5.23CC0BDE1A17FD8CDD801D46CB5C7C4D] - 17/02/2013 - 17:23:54 ---A- . (...) -- C:\WINDOWS\KB2802968.log   [19726]
O44 - LFC:[MD5.15D8945F89E17632CADEBFB246498D6E] - 17/02/2013 - 17:20:52 ---A- . (...) -- C:\WINDOWS\KB2780091.log   [19441]
O44 - LFC:[MD5.6280A479148CAEAD59E17A0CC3789161] - 13/02/2013 - 21:33:12 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerApp.exe   [697712]
O44 - LFC:[MD5.3E5633C0E3B4FE04E6EBFFA597227617] - 13/02/2013 - 21:33:12 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl   [74096]
O44 - LFC:[MD5.8378774ABC9CAA2C60B298AE0C084FB7] - 01/02/2013 - 17:45:54 ---A- . (...) -- C:\WINDOWS\system32\Drivers\SYMEVENT.CAT   [7446]
O44 - LFC:[MD5.2A8DCC2EC2AC5C0588F818B16E606CED] - 01/02/2013 - 17:45:54 ---A- . (...) -- C:\WINDOWS\system32\Drivers\SYMEVENT.INF   [806]
O44 - LFC:[MD5.C940F10C31E2C60CC967FFD6A370720C] - 01/02/2013 - 17:45:54 ---A- . (.Symantec Corporation - Symantec Event Library.) -- C:\WINDOWS\system32\Drivers\SYMEVENT.SYS   [142496]
~ Scan Files in 04mn 49s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.3BA3492ACD2DE83C09CE793B7F594A87] - 01/02/2013 - 17:34:12 ---A- - C:\WINDOWS\Prefetch\N360-PREMIER-ESD-20-1-0-24-FR-29F6D0D1.pf
O45 - LFCP:[MD5.2A580A9D1DC8BE2E7453F9F02E9D7735] - 01/02/2013 - 17:42:50 ---A- - C:\WINDOWS\Prefetch\INSTCA.EXE-0D1EE2BF.pf
O45 - LFCP:[MD5.9985741D09EB08C014089C2B016F4AE0] - 01/02/2013 - 17:43:00 ---A- - C:\WINDOWS\Prefetch\BHCA.EXE-2928AE47.pf
O45 - LFCP:[MD5.4C27105D51A0DD67CDD3DF67814BB8DC] - 01/02/2013 - 17:45:54 ---A- - C:\WINDOWS\Prefetch\SEVINST.EXE-036B86D9.pf
O45 - LFCP:[MD5.A620DC6AB084245EE87F94FA79A71785] - 01/02/2013 - 17:46:12 ---A- - C:\WINDOWS\Prefetch\SYMIMINS.EXE-1BF88924.pf
O45 - LFCP:[MD5.B59C671A111200C995C0BB0ABB20A5B6] - 01/02/2013 - 17:49:30 ---A- - C:\WINDOWS\Prefetch\COINST.EXE-03584B76.pf
O45 - LFCP:[MD5.EE5B126B7FA5BC73E62C5D15F0473AA0] - 01/02/2013 - 17:49:32 ---A- - C:\WINDOWS\Prefetch\BUIH.EXE-042278B5.pf
O45 - LFCP:[MD5.2F354B151C94AEB6EC4BFD711F2DD0CF] - 01/02/2013 - 17:49:36 ---A- - C:\WINDOWS\Prefetch\TUIH.EXE-06329D47.pf
O45 - LFCP:[MD5.1F5935DF67BBEA42DAC3D9BAE5CECDCB] - 01/02/2013 - 17:50:38 ---A- - C:\WINDOWS\Prefetch\CCSVCHST.EXE-0F028275.pf
O45 - LFCP:[MD5.B783A38A7DA12AE6A4E8EBE23AEC03F7] - 01/02/2013 - 17:53:28 ---A- - C:\WINDOWS\Prefetch\UISTUB.EXE-25396980.pf
O45 - LFCP:[MD5.4A25CEC159F6F9A9CD5CFF79526B2ADA] - 01/02/2013 - 18:10:02 ---A- - C:\WINDOWS\Prefetch\PCHDEP~1.EXE-0005C049.pf
O45 - LFCP:[MD5.FEE2C582E98FA3D42E6145E5A0FCC1DD] - 01/02/2013 - 18:12:26 ---A- - C:\WINDOWS\Prefetch\IPCONFIG.EXE-2395F30B.pf
O45 - LFCP:[MD5.8BF648C96DA8210B370DE4B2475C361B] - 01/02/2013 - 18:13:38 ---A- - C:\WINDOWS\Prefetch\CCSVCHST.EXE-0F028274.pf
O45 - LFCP:[MD5.DA86DF567B9AB1D2B520BFCEAB9DDF0A] - 01/02/2013 - 18:53:16 ---A- - C:\WINDOWS\Prefetch\DELPCH~1.EXE-11A0DA2C.pf
O45 - LFCP:[MD5.8A27A811CDEB99724E069A8078B5C843] - 01/02/2013 - 19:27:32 ---A- - C:\WINDOWS\Prefetch\CLTLMH.EXE-0738EEA0.pf
O45 - LFCP:[MD5.EDAE1466146F36DC9BF87324156A281F] - 01/02/2013 - 19:53:42 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-49C91C55.pf
O45 - LFCP:[MD5.789B7CBC5BAC0829BFAB977F47F4BECC] - 01/02/2013 - 20:16:56 ---A- - C:\WINDOWS\Prefetch\BUVSS.EXE-1D6D5260.pf
O45 - LFCP:[MD5.8AB0EB754DDEA3156B9AB1D4FAB93444] - 01/02/2013 - 20:27:30 ---A- - C:\WINDOWS\Prefetch\BUIH.EXE-2F3A6EB5.pf
O45 - LFCP:[MD5.FA8C9A8ECCD6B5900378EA65772A1545] - 01/02/2013 - 20:27:46 ---A- - C:\WINDOWS\Prefetch\DIFXINST32.EXE-31840D44.pf
O45 - LFCP:[MD5.7D4D2B4720CB8E0C5258B407C344DD06] - 01/02/2013 - 20:27:46 ---A- - C:\WINDOWS\Prefetch\GEARDIFX.EXE-3231438A.pf
O45 - LFCP:[MD5.4BB058F4715264FD109D5341A18597F9] - 01/02/2013 - 21:06:52 ---A- - C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf
O45 - LFCP:[MD5.DFE94614A3A8DFF17F1FD8A681B9C70B] - 01/02/2013 - 22:01:08 ---A- - C:\WINDOWS\Prefetch\SYMERR.EXE-24F13AA2.pf
O45 - LFCP:[MD5.16333D906C7084BB508865A7F95A5D82] - 02/02/2013 - 09:11:22 ---A- - C:\WINDOWS\Prefetch\WSCNTFY.EXE-1B24F5EB.pf
O45 - LFCP:[MD5.7989C629FD331A50C719B7F7E1B942AD] - 02/02/2013 - 22:50:56 ---A- - C:\WINDOWS\Prefetch\HOTFIX.EXE-07A2B121.pf
O45 - LFCP:[MD5.A65AFB6C9304402FA1D4B8558F228BB5] - 02/02/2013 - 22:51:02 ---A- - C:\WINDOWS\Prefetch\DELPCH~1.EXE-0A186F74.pf
O45 - LFCP:[MD5.91961D21F519A4DE14A23CD3BF0206CD] - 02/02/2013 - 23:38:50 ---A- - C:\WINDOWS\Prefetch\CRASHREPORTER.EXE-29951F6F.pf
O45 - LFCP:[MD5.248ADB4DD04F612114495E053F6B47E2] - 06/02/2013 - 13:26:08 ---A- - C:\WINDOWS\Prefetch\UPDATER.EXE-0224EEB6.pf
O45 - LFCP:[MD5.93ABAB726008DDF54D364B30160D448E] - 06/02/2013 - 13:38:24 ---A- - C:\WINDOWS\Prefetch\ACRORD32.EXE-19C3D96E.pf
O45 - LFCP:[MD5.14371145C5D98D06188BEEB47AFFD8F2] - 07/02/2013 - 09:06:52 ---A- - C:\WINDOWS\Prefetch\HELPER.EXE-0415776D.pf
O45 - LFCP:[MD5.BA95F207A532F9A5643F5CE372056E19] - 07/02/2013 - 09:06:52 ---A- - C:\WINDOWS\Prefetch\UPDATER.EXE-2F21369A.pf
O45 - LFCP:[MD5.F05FCD69D80A24BB2440433DFAAE16F5] - 07/02/2013 - 09:07:00 ---A- - C:\WINDOWS\Prefetch\MAINTENANCESERVICE_INSTALLER.-1FEBE613.pf
O45 - LFCP:[MD5.C391404405CBC4A10340DE21B15D70D5] - 07/02/2013 - 09:07:00 ---A- - C:\WINDOWS\Prefetch\MAINTENANCESERVICE_TMP.EXE-1C52D666.pf
O45 - LFCP:[MD5.D57093E61C52E08908F43BF3783EBE36] - 07/02/2013 - 09:07:00 ---A- - C:\WINDOWS\Prefetch\NS5.TMP-3151466F.pf
O45 - LFCP:[MD5.AA0519C85890EDD2E1D05BE6BC582F4D] - 09/02/2013 - 12:05:46 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3F24E805.pf
O45 - LFCP:[MD5.65899DBB27C4A18D1D83C63D6E6F9EA2] - 09/02/2013 - 12:37:32 ---A- - C:\WINDOWS\Prefetch\Layout.ini
O45 - LFCP:[MD5.4233350219EF4571FEC936829BB6B25A] - 13/02/2013 - 21:33:12 ---A- - C:\WINDOWS\Prefetch\FLASHPLAYERINSTALLER.EXE-202A7CDB.pf
O45 - LFCP:[MD5.F3FC19A85793147BA3A9AB73F380E62B] - 14/02/2013 - 21:15:22 ---A- - C:\WINDOWS\Prefetch\POWERPNT.EXE-0CAC7674.pf
O45 - LFCP:[MD5.B5E0CFB73EBF0C2DA48E815735F89EF8] - 14/02/2013 - 21:24:20 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-268BFF96.pf
O45 - LFCP:[MD5.5D6700C6FA70ADDB9CEC5E8D66BD4684] - 16/02/2013 - 09:23:06 ---A- - C:\WINDOWS\Prefetch\CNMSE90.EXE-0215C2F6.pf
O45 - LFCP:[MD5.CA83CC160E87CEB99E703AFAE236ECAA] - 16/02/2013 - 09:23:24 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-195DF187.pf
O45 - LFCP:[MD5.E24C25C498D212ACD63C8C175ACB298E] - 16/02/2013 - 09:34:06 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-155AD3F6.pf
O45 - LFCP:[MD5.4BF5AD58ECB8840CA71DE8FE0CD4B5BE] - 16/02/2013 - 09:35:08 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-3141DEE8.pf
O45 - LFCP:[MD5.A4F08D95B6B43F5D04A9F3138A1AE8A8] - 16/02/2013 - 09:36:32 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-33956987.pf
O45 - LFCP:[MD5.695C0F7EC7C21C6E65D1F40804990795] - 16/02/2013 - 09:42:56 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-1209D5BF.pf
O45 - LFCP:[MD5.1A13B5B12D8652090D3264056482F1AD] - 17/02/2013 - 18:29:38 ---A- - C:\WINDOWS\Prefetch\MRT.EXE-1B4A8D49.pf
O45 - LFCP:[MD5.8920110D5660FB72A2FD565D8DDAC30E] - 17/02/2013 - 20:28:50 ---A- - C:\WINDOWS\Prefetch\ASOELNCH.EXE-316C8969.pf
O45 - LFCP:[MD5.4F575B0FF9D8B8F30DEF54EC8BC5DFBD] - 17/02/2013 - 20:34:04 ---A- - C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf
O45 - LFCP:[MD5.E3C2CA9A51762178B50E7C7CE3BD6905] - 17/02/2013 - 20:34:10 ---A- - C:\WINDOWS\Prefetch\DFRGFAT.EXE-03D95883.pf
O45 - LFCP:[MD5.B7AB458F001A7A701D9AC2D248875D0C] - 18/02/2013 - 21:24:34 ---A- - C:\WINDOWS\Prefetch\MAHJONGG.EXE-2D1E67F5.pf
O45 - LFCP:[MD5.5134E226A61FC6740D0D4267BF60EF8E] - 18/02/2013 - 21:40:52 ---A- - C:\WINDOWS\Prefetch\SOL.EXE-1C0C14EB.pf
O45 - LFCP:[MD5.03EA21C876A65A7E50FDAA2684F72B41] - 19/02/2013 - 10:04:16 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-15F51D8E.pf
O45 - LFCP:[MD5.985E2C0E31D6D3D809ED52639C0BD23E] - 19/02/2013 - 10:04:42 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-18BBA324.pf
O45 - LFCP:[MD5.58C81AFA29384630FD4ED3B384143747] - 19/02/2013 - 10:04:52 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-19320EBD.pf
O45 - LFCP:[MD5.45DFE6223218E1466D9EFE0F2A7B9F98] - 19/02/2013 - 10:12:06 ---A- - C:\WINDOWS\Prefetch\SUITECHECKER.EXE-248CC613.pf
O45 - LFCP:[MD5.134E27489F619338D2D69F5635C2AC2D] - 19/02/2013 - 19:22:14 ---A- - C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf
O45 - LFCP:[MD5.BE1D2C2FBE516FC6F877F52169170D4A] - 20/02/2013 - 20:49:34 ---A- - C:\WINDOWS\Prefetch\CONNECTIVITYMANAGER.EXE-2ED75BB4.pf
O45 - LFCP:[MD5.D93918285715CBF9ABFC6CFC4C3A7AE1] - 20/02/2013 - 20:49:34 ---A- - C:\WINDOWS\Prefetch\CORECOM.EXE-069E99D7.pf
O45 - LFCP:[MD5.9AC75D6B2A11406B9BAB9EA1D4F08BB5] - 20/02/2013 - 20:49:34 ---A- - C:\WINDOWS\Prefetch\FTRTSVC.EXE-15E7D69F.pf
O45 - LFCP:[MD5.8D36A55E5F14EC8CC964450F29998A7E] - 20/02/2013 - 20:49:34 ---A- - C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf
O45 - LFCP:[MD5.9065EEA74515D8A7A70B7AA34A7E0896] - 20/02/2013 - 20:49:34 ---A- - C:\WINDOWS\Prefetch\JQS.EXE-1D781F77.pf
O45 - LFCP:[MD5.EF2F6D68A44736807940D73B95A56A98] - 20/02/2013 - 20:49:34 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4A5A9D78.pf
O45 - LFCP:[MD5.18B0421791826C43EA14C254A2041266] - 20/02/2013 - 20:49:34 ---A- - C:\WINDOWS\Prefetch\SPOOLSV.EXE-282F76A7.pf
O45 - LFCP:[MD5.9D7626A2721C37428000D87F0304F9AF] - 20/02/2013 - 20:49:34 ---A- - C:\WINDOWS\Prefetch\WMIAPSRV.EXE-1E2270A5.pf
O45 - LFCP:[MD5.785DE5D7CD6B69F8B5EF5C23822BE06F] - 20/02/2013 - 21:10:12 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-20574836.pf
O45 - LFCP:[MD5.E6E18F5A377F82D1D8E9FA432527D32F] - 20/02/2013 - 22:00:36 ---A- - C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf
O45 - LFCP:[MD5.183A0E8BEBDF6E9D90EB807F9F780C2B] - 20/02/2013 - 22:03:06 ---A- - C:\WINDOWS\Prefetch\DRWTSN32.EXE-2B4B52AC.pf
O45 - LFCP:[MD5.5C8179A9DC1AE04B626030C54AD93DD1] - 21/02/2013 - 17:25:52 ---A- - C:\WINDOWS\Prefetch\INSTALL_FLASHPLAYER11X32AU_MS-28FFB4B1.pf
O45 - LFCP:[MD5.A1C3BE614C97D4B5309D93561E97AA67] - 21/02/2013 - 17:50:16 ---A- - C:\WINDOWS\Prefetch\CLTRT.EXE-3AD5F92C.pf
O45 - LFCP:[MD5.5026733F382513E393A92C57248BDD3C] - 21/02/2013 - 21:54:26 ---A- - C:\WINDOWS\Prefetch\BUVSS.EXE-33D55D99.pf
O45 - LFCP:[MD5.17C2347E7BF4E32D9070960A46315178] - 21/02/2013 - 22:57:36 ---A- - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf
O45 - LFCP:[MD5.70E973602B8E8179EFF377D8C1DD1575] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\ADOBEARM.EXE-1095AC0A.pf
O45 - LFCP:[MD5.177F62C5C65B2E0ADEBD3C4CC6290223] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\CCSVCHST.EXE-23231F7E.pf
O45 - LFCP:[MD5.4FDBC9B28C0744E031F5D2C1860DC67E] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\CCSVCHST.EXE-23231F7F.pf
O45 - LFCP:[MD5.392B6611A4A15B6F2F30DD4DF53F2F04] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\CTFMON.EXE-0E17969B.pf
O45 - LFCP:[MD5.B4803D30223957361E0C4366C4AF3ED5] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\DISK_MONITOR.EXE-2079A017.pf
O45 - LFCP:[MD5.F953534FB01065A9720C14FB9130BAD2] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf
O45 - LFCP:[MD5.F2AC051F6B5A19228EDDCE15C44EDBD8] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\INITIALIZE.EXE-110970DF.pf
O45 - LFCP:[MD5.3540A6E7635D12AC47EA55E4BA7A791A] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\LAUNCHER.EXE-052EDDA8.pf
O45 - LFCP:[MD5.929A50B2B400366B5A78C854CE6DC811] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.73F5598FACFE6E4DDC35CAD2CEA82B45] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\NVSVC32.EXE-1F9EED18.pf
O45 - LFCP:[MD5.6B7B605964978A9E7E66D843CAC665F3] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\READER_SL.EXE-3329220B.pf
O45 - LFCP:[MD5.952E798AD61EF0B721C539FBF8EB8F31] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-415F88EC.pf
O45 - LFCP:[MD5.2B4A7716E6856A062F804F5E67579682] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\SESSIONMANAGER.EXE-0618BC03.pf
O45 - LFCP:[MD5.6FF09F52CE1935EF1A2CB55683B9FD94] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf
O45 - LFCP:[MD5.9F33EF67FDFE18D3B9D0BC504396659D] - 22/02/2013 - 17:02:30 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf
O45 - LFCP:[MD5.B837E8E166A7904111E280937A17F10C] - 22/02/2013 - 17:02:32 ---A- - C:\WINDOWS\Prefetch\ALERTMODULE.EXE-1EF8DECE.pf
O45 - LFCP:[MD5.9C07C90BCE9A094D548B9273F003E0DC] - 22/02/2013 - 17:02:32 ---A- - C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf
O45 - LFCP:[MD5.5AF069BD22D087C4878DCFD3FF8EF01D] - 22/02/2013 - 17:02:32 ---A- - C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf
O45 - LFCP:[MD5.44E92490681F8B8D13766E9186ABEB69] - 22/02/2013 - 17:02:32 ---A- - C:\WINDOWS\Prefetch\LIVEBOXUTILITIES.EXE-32F2417F.pf
O45 - LFCP:[MD5.9DA2506F23D7D2D5570763EB5F68B011] - 22/02/2013 - 17:02:32 ---A- - C:\WINDOWS\Prefetch\ORACONFIGRECOVER.EXE-314507EB.pf
O45 - LFCP:[MD5.57F53CAC368444A45B2BB673168F2CC9] - 22/02/2013 - 17:02:32 ---A- - C:\WINDOWS\Prefetch\SYSTRAYAPP.EXE-3178CA04.pf
O45 - LFCP:[MD5.1F916B15E815748FEC081C8437C15594] - 22/02/2013 - 17:02:32 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf
O45 - LFCP:[MD5.ED570C9C90FA8F090376DE3CB8C4B9E8] - 22/02/2013 - 17:02:32 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf
O45 - LFCP:[MD5.9668B4614DD9C4EDB1C1DBBCB4BD3C77] - 22/02/2013 - 17:07:38 ---A- - C:\WINDOWS\Prefetch\SPIDER.EXE-2D998CA6.pf
O45 - LFCP:[MD5.93E9D4D362850C8839F5D45D38DF9CFE] - 22/02/2013 - 17:10:56 ---A- - C:\WINDOWS\Prefetch\CLTLMH.EXE-098DB159.pf
O45 - LFCP:[MD5.C920293DBDBD061C1F05874523378F0E] - 22/02/2013 - 17:12:06 ---A- - C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf
O45 - LFCP:[MD5.3290B4BB399C7F12386E754AA8E48774] - 22/02/2013 - 17:26:34 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf
O45 - LFCP:[MD5.AEC225ABC2425BE18696286561908017] - 22/02/2013 - 17:28:26 ---A- - C:\WINDOWS\Prefetch\SYMERR.EXE-35B7DA9B.pf
O45 - LFCP:[MD5.BECE41CA3A0638FF1AD4686CF5480386] - 22/02/2013 - 17:29:18 ---A- - C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf
O45 - LFCP:[MD5.D4DEB8F11CD1D7AE85AF5C70B5BD45FA] - 22/02/2013 - 17:30:16 ---A- - C:\WINDOWS\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-34BC5027.pf
O45 - LFCP:[MD5.7D45B18591B6950C2654F2ABA32CE991] - 22/02/2013 - 17:30:34 ---A- - C:\WINDOWS\Prefetch\PLUGIN-CONTAINER.EXE-15EDC9DD.pf
O45 - LFCP:[MD5.0F352B119AE19EB5689D34AF98BAC967] - 22/02/2013 - 17:38:40 ---A- - C:\WINDOWS\Prefetch\DUMPREP.EXE-1B46F901.pf
O45 - LFCP:[MD5.E63B766C828F2856DC16572FCBA4E842] - 22/02/2013 - 17:46:18 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf
O45 - LFCP:[MD5.E4E135A1B6C1AC48552C8C758319A3A5] - 24/01/2013 - 08:33:54 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-204A1A90.pf
O45 - LFCP:[MD5.736F93FEDDEA51F471727231FD0FB5E4] - 24/01/2013 - 08:34:00 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-22BCF58B.pf
O45 - LFCP:[MD5.C69248CB8F105324F90F5844493F3AFD] - 24/01/2013 - 08:34:42 ---A- - C:\WINDOWS\Prefetch\WINDOWS-KB890830-V4.16-DELTA.-225628B1.pf
O45 - LFCP:[MD5.69AE91D817AC0A6C222BC3C2471AF727] - 24/01/2013 - 08:34:44 ---A- - C:\WINDOWS\Prefetch\MRTSTUB.EXE-25712B2B.pf
O45 - LFCP:[MD5.07DEB3B89398C9BF33F271CE95A35787] - 24/01/2013 - 08:37:54 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-2D862294.pf
O45 - LFCP:[MD5.947EAFC33E5F4A2A564B6302B8CDB193] - 24/01/2013 - 08:38:12 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-1D3E782F.pf
O45 - LFCP:[MD5.3E149164418FE9202F49CF488C9EF103] - 30/01/2013 - 13:08:54 ---A- - C:\WINDOWS\Prefetch\NS5.TMP-18B76651.pf
O45 - LFCP:[MD5.6F94B942649C2CFCFD3A7ED4F4334386] - 30/01/2013 - 13:34:14 ---A- - C:\WINDOWS\Prefetch\CNCAABC.EXE-012F5359.pf
O45 - LFCP:[MD5.E7801B24C84B5C2EF79A77FAF5D46296] - 30/01/2013 - 13:37:14 ---A- - C:\WINDOWS\Prefetch\ADOBEARMHELPER.EXE-35179F95.pf
O45 - LFCP:[MD5.42978A9399B8EFD71FE84A9F9D7FACF0] - 31/01/2013 - 09:10:54 ---A- - C:\WINDOWS\Prefetch\UPDATER.EXE-20C75A47.pf
O45 - LFCP:[MD5.28C9A923F4D8937475D8AFAA41B6D084] - 31/01/2013 - 09:10:56 ---A- - C:\WINDOWS\Prefetch\NS6.TMP-22A7151D.pf
~ Scan Prefetcher in 00mn 06s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
~ Scan ShellExecuteHooks in 00mn 00s



---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "C:\Program Files\Orange\Connexion Internet Orange\Connectivity\ConnectivityManager.exe" [Enabled] .(.France Telecom SA.) -- C:\Program Files\Orange\Connexion Internet Orange\Connectivity\ConnectivityManager.exe
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\System32\MSIEXEC.EXE" [Enabled] .(.Microsoft Corporation - Windows® installer.) -- C:\WINDOWS\System32\MSIexeC.exe
O47 - AAKE:Key Export SP - "C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe" [Enabled] .(...) -- C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\MSN Messenger\msnmsgr.exe" [Enabled] .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\MSN Messenger\livecall.exe" [Enabled] .(...) -- C:\Program Files\MSN Messenger\livecall.exe (.not file.)
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export DP - "C:\Program Files\MSN Messenger\msnmsgr.exe" [Enabled] .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.)
O47 - AAKE:Key Export DP - "C:\Program Files\MSN Messenger\livecall.exe" [Enabled] .(...) -- C:\Program Files\MSN Messenger\livecall.exe (.not file.)
~ Scan Keys in 00mn 00s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll
~ Scan Keys in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
~ Scan CSB in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ Scan IFEO in 00mn 00s



---\\ MountPoints2 Shell Key (O51) (None)

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.iac2"="iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\ctfmon.exe  [Key] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O53 - SMSR:HKLM\...\startupreg\nwiz  [Key] . (.NVIDIA Corporation - NVIDIA nView Wizard, Version 53.03.) -- C:\WINDOWS\system32\nwiz.exe
~ Scan SMSR Keys in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 28/08/2001 - 20:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\Drivers\ptilink.sys   [17792]
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 28/08/2001 - 20:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys   [9037]
~ Scan Drivers in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC:Last File Created 19/02/2013 - 09:41:24 -S-A- C:\Documents and Settings\aurore\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6   [88238]
O61 - LFC:Last File Created 19/02/2013 - 09:41:24 -S-A- C:\Documents and Settings\aurore\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6   [124]
O61 - LFC:Last File Created 19/02/2013 - 09:50:22 ---A- C:\Documents and Settings\aurore\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.mypornmotion.com\settings.sol   [90]
O61 - LFC:Last File Created 19/02/2013 - 10:04:44 ---A- C:\Documents and Settings\aurore\UserData\index.dat   [32768]
O61 - LFC:Last File Created 19/02/2013 - 10:08:04 ----- C:\Documents and Settings\aurore\Local Settings\Temp\WER76bd.dir00\iexplore.exe.hdmp   [0]
O61 - LFC:Last File Created 19/02/2013 - 10:08:04 ----- C:\Documents and Settings\aurore\Local Settings\Temp\WER76bd.dir00\iexplore.exe.mdmp   [112061]
O61 - LFC:Last File Created 19/02/2013 - 13:15:50 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\bookmarkbackups\bookmarks-2013-02-19.json   [5127]
O61 - LFC:Last File Created 19/02/2013 - 13:15:50 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\bookmarkbackups\bookmarks-2013-02-19.json   [5127]
O61 - LFC:Last File Created 19/02/2013 - 18:37:26 ---A- C:\Documents and Settings\aurore\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol   [81]
O61 - LFC:Last File Created 19/02/2013 - 19:42:16 ---A- C:\Documents and Settings\aurore\Mes documents\rapport adw\AdwCleaner[S1].txt   [2752]
O61 - LFC:Last File Created 19/02/2013 - 19:42:18 ---A- C:\Documents and Settings\aurore\Recent\AdwCleaner[S1].lnk   [624]
O61 - LFC:Last File Created 19/02/2013 - 19:42:22 ---A- C:\Documents and Settings\aurore\Recent\rapport adw.lnk   [355]
O61 - LFC:Last File Created 19/02/2013 - 19:45:44 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\search.json   [12346]
O61 - LFC:Last File Created 19/02/2013 - 19:55:24 ---A- C:\Documents and Settings\aurore\Bureau\AD-R.lnk   [1458]
O61 - LFC:Last File Created 19/02/2013 - 19:57:04 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\sessionstore.bak   [5849]
O61 - LFC:Last File Created 19/02/2013 - 19:57:24 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\downloads.sqlite   [65536]
O61 - LFC:Last File Created 19/02/2013 - 19:57:26 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\cert8.db   [212992]
O61 - LFC:Last File Created 19/02/2013 - 19:57:26 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\key3.db   [16384]
O61 - LFC:Last File Created 19/02/2013 - 20:10:10 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\urlclassifierkey3.txt   [154]
O61 - LFC:Last File Created 19/02/2013 - 20:38:16 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Crash Reports\pending\6d22027a-60bd-48eb-9f36-8437b8fc3a67.dmp   [38300]
O61 - LFC:Last File Created 19/02/2013 - 20:38:48 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Crash Reports\pending\6d22027a-60bd-48eb-9f36-8437b8fc3a67-browser.dmp   [97799]
O61 - LFC:Last File Created 19/02/2013 - 20:41:22 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Crash Reports\pending\6d22027a-60bd-48eb-9f36-8437b8fc3a67.extra   [3765]
O61 - LFC:Last File Created 19/02/2013 - 20:50:56 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\pluginreg.dat   [5000]
O61 - LFC:Last File Created 19/02/2013 - 21:03:02 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\localstore.rdf   [5859]
O61 - LFC:Last File Created 19/02/2013 - 21:08:28 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\sessionstore.js   [29917]
O61 - LFC:Last File Created 19/02/2013 - 21:08:34 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\cookies.sqlite   [1572864]
O61 - LFC:Last File Created 19/02/2013 - 21:08:34 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\cookies.sqlite-shm   [32768]
O61 - LFC:Last File Created 19/02/2013 - 21:08:34 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\cookies.sqlite-wal   [590288]
O61 - LFC:Last File Created 19/02/2013 - 21:08:34 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\extensions.sqlite   [458752]
O61 - LFC:Last File Created 19/02/2013 - 21:08:34 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\extensions.sqlite-journal   [262720]
O61 - LFC:Last File Created 19/02/2013 - 21:08:34 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\formhistory.sqlite   [196608]
O61 - LFC:Last File Created 19/02/2013 - 21:08:34 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\webappsstore.sqlite   [98304]
O61 - LFC:Last File Created 19/02/2013 - 21:12:00 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\parent.lock   [0]
O61 - LFC:Last File Created 19/02/2013 - 21:12:02 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\localstore-safe.rdf   [169]
O61 - LFC:Last File Created 19/02/2013 - 21:12:24 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\places.sqlite   [10485760]
O61 - LFC:Last File Created 19/02/2013 - 21:12:24 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\prefs.js   [8727]
O61 - LFC:Last File Created 19/02/2013 - 21:12:24 ---A- C:\Documents and Settings\aurore\Bureau\Anciennes données de Firefox\webapps\webapps.json   [2]
O61 - LFC:Last File Created 19/02/2013 - 21:12:44 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\secmod.db   [16384]
O61 - LFC:Last File Created 19/02/2013 - 21:12:48 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\safebrowsing\classifier.hashkey   [4]
O61 - LFC:Last File Created 19/02/2013 - 21:13:50 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\content-prefs.sqlite   [229376]
O61 - LFC:Last File Created 19/02/2013 - 21:13:50 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\webappsstore.sqlite   [98304]
O61 - LFC:Last File Created 19/02/2013 - 21:22:00 ---A- C:\Documents and Settings\aurore\Favoris\Liens\Personnaliser les liens.url   [133]
O61 - LFC:Last File Created 19/02/2013 - 21:22:00 ---A- C:\Documents and Settings\aurore\Favoris\Sites Web Microsoft\Internet Explorer 7 - Présentation rapide.url   [133]
O61 - LFC:Last File Created 19/02/2013 - 21:22:00 ---A- C:\Documents and Settings\aurore\Favoris\Sites Web Microsoft\Site Internet Explorer sur Microsoft.com.url   [133]
O61 - LFC:Last File Created 19/02/2013 - 21:22:00 ---A- C:\Documents and Settings\aurore\Favoris\Sites Web Microsoft\Windows Marketplace.url   [133]
O61 - LFC:Last File Created 19/02/2013 - 21:22:16 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Microsoft\Internet Explorer\brndlog.txt   [7536]
O61 - LFC:Last File Created 19/02/2013 - 21:26:04 ---A- C:\Documents and Settings\aurore\Bureau\Malwarebytes' Anti-Malware.lnk   [700]
O61 - LFC:Last File Created 19/02/2013 - 21:35:16 ---A- C:\Documents and Settings\aurore\Application Data\Macromedia\Flash Player\#SharedObjects\MZXF75MF\s.ytimg.com\videostats.sol   [161]
O61 - LFC:Last File Created 19/02/2013 - 21:36:44 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\addons.sqlite   [524288]
O61 - LFC:Last File Created 19/02/2013 - 21:36:44 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\addons.sqlite-journal   [512]
O61 - LFC:Last File Created 19/02/2013 - 21:48:04 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\mimeTypes.rdf   [3179]
O61 - LFC:Last File Created 19/02/2013 - 21:48:06 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\thumbnails\e6adefb4782e21ec57bf3ea98338f084.png   [51724]
O61 - LFC:Last File Created 19/02/2013 - 21:55:44 ---A- C:\Documents and Settings\aurore\Local Settings\Temp\is-5CM3V.tmp\_isetup\_shfoldr.dll   [23312]
O61 - LFC:Last File Created 19/02/2013 - 21:59:44 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\key3.db   [16384]
O61 - LFC:Last File Created 20/02/2013 - 21:39:14 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\bookmarkbackups\bookmarks-2013-02-20.json   [5127]
O61 - LFC:Last File Created 20/02/2013 - 21:44:28 ---A- C:\Documents and Settings\aurore\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol   [545]
O61 - LFC:Last File Created 21/02/2013 - 17:24:44 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\localstore.rdf   [1561]
O61 - LFC:Last File Created 21/02/2013 - 17:25:50 ---A- C:\Documents and Settings\aurore\Local Settings\Temp\install_flashplayer11x32au_mssa_aih.exe   [1005792]
O61 - LFC:Last File Created 21/02/2013 - 19:13:00 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\bookmarkbackups\bookmarks-2013-02-21.json   [5127]
O61 - LFC:Last File Created 21/02/2013 - 20:07:08 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\minidumps\effc84b4-e960-4897-854d-dc80ed8659c3.dmp   [0]
O61 - LFC:Last File Created 21/02/2013 - 20:09:28 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\cert8.db   [65536]
O61 - LFC:Last File Created 21/02/2013 - 20:09:28 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\cookies.sqlite   [1572864]
O61 - LFC:Last File Created 21/02/2013 - 20:09:28 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\permissions.sqlite   [65536]
O61 - LFC:Last File Created 21/02/2013 - 20:09:32 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\downloads.sqlite   [65536]
O61 - LFC:Last File Created 21/02/2013 - 22:56:14 ---A- C:\Documents and Settings\aurore\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2013-02-21 (18-02-48).txt   [2400]
O61 - LFC:Last File Created 21/02/2013 - 22:57:24 --HA- C:\Documents and Settings\aurore\Local Settings\Application Data\IconCache.db   [2271568]
O61 - LFC:Last File Created 22/02/2013 - 17:02:06 -SHA- C:\Documents and Settings\aurore\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat   [16384]
O61 - LFC:Last File Created 22/02/2013 - 17:25:40 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\search.json   [12353]
O61 - LFC:Last File Created 22/02/2013 - 17:27:26 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\sessionstore.bak   [12813]
O61 - LFC:Last File Created 22/02/2013 - 17:29:06 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\cookies.sqlite-shm   [32768]
O61 - LFC:Last File Created 22/02/2013 - 17:29:06 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\cookies.sqlite-wal   [655872]
O61 - LFC:Last File Created 22/02/2013 - 17:29:06 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\extensions.sqlite   [458752]
O61 - LFC:Last File Created 22/02/2013 - 17:29:06 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\extensions.sqlite-journal   [262720]
O61 - LFC:Last File Created 22/02/2013 - 17:29:06 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\places.sqlite-shm   [32768]
O61 - LFC:Last File Created 22/02/2013 - 17:29:46 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\webapps\webapps.json   [2]
O61 - LFC:Last File Created 22/02/2013 - 17:29:52 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\urlclassifierkey3.txt   [154]
O61 - LFC:Last File Created 22/02/2013 - 17:29:56 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\safebrowsing\test-malware-simple.cache   [44]
O61 - LFC:Last File Created 22/02/2013 - 17:29:56 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\safebrowsing\test-malware-simple.pset   [16]
O61 - LFC:Last File Created 22/02/2013 - 17:29:56 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\safebrowsing\test-malware-simple.sbstore   [232]
O61 - LFC:Last File Created 22/02/2013 - 17:29:56 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\safebrowsing\test-phish-simple.cache   [44]
O61 - LFC:Last File Created 22/02/2013 - 17:29:56 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\safebrowsing\test-phish-simple.pset   [16]
O61 - LFC:Last File Created 22/02/2013 - 17:29:56 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\safebrowsing\test-phish-simple.sbstore   [232]
O61 - LFC:Last File Created 22/02/2013 - 17:30:04 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\0\E2\71749d01   [20591]
O61 - LFC:Last File Created 22/02/2013 - 17:30:04 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\1\0E\E17A2d01   [24713]
O61 - LFC:Last File Created 22/02/2013 - 17:30:04 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\4\25\73FF6d01   [24601]
O61 - LFC:Last File Created 22/02/2013 - 17:30:04 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\8\7C\3B82Dd01   [19819]
O61 - LFC:Last File Created 22/02/2013 - 17:30:04 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\_CACHE_001_   [396865]
O61 - LFC:Last File Created 22/02/2013 - 17:30:04 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\_CACHE_002_   [325807]
O61 - LFC:Last File Created 22/02/2013 - 17:30:04 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\_CACHE_003_   [1032452]
O61 - LFC:Last File Created 22/02/2013 - 17:30:04 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\_CACHE_MAP_   [276]
O61 - LFC:Last File Created 22/02/2013 - 17:30:06 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\8\28\3FF47d01   [16646]
O61 - LFC:Last File Created 22/02/2013 - 17:30:08 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\E\B5\7B235d01   [18719]
O61 - LFC:Last File Created 22/02/2013 - 17:30:10 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\5\C7\9446Dd01   [17799]
O61 - LFC:Last File Created 22/02/2013 - 17:30:10 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\6\1A\F6D5Fd01   [16778]
O61 - LFC:Last File Created 22/02/2013 - 17:30:10 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\A\86\2475Bd01   [32331]
O61 - LFC:Last File Created 22/02/2013 - 17:30:10 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\D\77\DAC35d01   [25563]
O61 - LFC:Last File Created 22/02/2013 - 17:30:12 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\thumbnails\c8ccd3e865eff1d5b3fcb150dd1ab108.png   [89266]
O61 - LFC:Last File Created 22/02/2013 - 17:30:24 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\prefs.js   [3694]
O61 - LFC:Last File Created 22/02/2013 - 17:30:30 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\pluginreg.dat   [4998]
O61 - LFC:Last File Created 22/02/2013 - 17:30:30 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\1\DC\AB3BAd01   [31940]
O61 - LFC:Last File Created 22/02/2013 - 17:30:30 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\B\1B\D866Ad01   [36904]
O61 - LFC:Last File Created 22/02/2013 - 17:30:30 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\C\E1\39401d01   [18065]
O61 - LFC:Last File Created 22/02/2013 - 17:30:40 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\1\9A\52C33d01   [16542]
O61 - LFC:Last File Created 22/02/2013 - 17:30:40 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\B\E8\52DF1d01   [28930]
O61 - LFC:Last File Created 22/02/2013 - 17:30:40 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\C\26\1A0DDd01   [104926]
O61 - LFC:Last File Created 22/02/2013 - 17:30:40 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\D\AC\1BC01d01   [889394]
O61 - LFC:Last File Created 22/02/2013 - 17:30:42 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\0\84\314E4d01   [19504]
O61 - LFC:Last File Created 22/02/2013 - 17:30:44 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\0\BD\F7222d01   [19721]
O61 - LFC:Last File Created 22/02/2013 - 17:30:44 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\2\7B\B1908d01   [26443]
O61 - LFC:Last File Created 22/02/2013 - 17:30:44 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\5\4B\5C0ABd01   [34933]
O61 - LFC:Last File Created 22/02/2013 - 17:30:44 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\6\ED\430B2d01   [20021]
O61 - LFC:Last File Created 22/02/2013 - 17:30:44 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\7\1B\56D0Fd01   [27865]
O61 - LFC:Last File Created 22/02/2013 - 17:30:44 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\9\9F\6A671d01   [28435]
O61 - LFC:Last File Created 22/02/2013 - 17:30:44 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\9\FC\F81B2d01   [22407]
O61 - LFC:Last File Created 22/02/2013 - 17:30:44 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\A\2F\247C8d01   [18581]
O61 - LFC:Last File Created 22/02/2013 - 17:30:44 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\B\46\BE067d01   [69754]
O61 - LFC:Last File Created 22/02/2013 - 17:30:44 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\D\D4\AABA9d01   [47776]
O61 - LFC:Last File Created 22/02/2013 - 17:30:44 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\E\B1\FC7AEd01   [18442]
O61 - LFC:Last File Created 22/02/2013 - 17:30:46 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\2\AB\87642d01   [29996]
O61 - LFC:Last File Created 22/02/2013 - 17:30:48 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\B\00\29A09d01   [37983]
O61 - LFC:Last File Created 22/02/2013 - 17:30:52 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\formhistory.sqlite   [196608]
O61 - LFC:Last File Created 22/02/2013 - 17:30:52 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\1\12\AD300d01   [67977]
O61 - LFC:Last File Created 22/02/2013 - 17:30:52 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\1\FD\DEE8Bd01   [20922]
O61 - LFC:Last File Created 22/02/2013 - 17:30:58 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\A\87\F84C8d01   [40553]
O61 - LFC:Last File Created 22/02/2013 - 17:31:24 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\6\01\53875d01   [22148]
O61 - LFC:Last File Created 22/02/2013 - 17:31:30 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\C\8A\62883d01   [49082]
O61 - LFC:Last File Created 22/02/2013 - 17:31:38 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\B\FA\E568Bd01   [16486]
O61 - LFC:Last File Created 22/02/2013 - 17:31:40 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\4\E8\5EF51d01   [209740]
O61 - LFC:Last File Created 22/02/2013 - 17:31:40 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\8\07\4ED80d01   [200251]
O61 - LFC:Last File Created 22/02/2013 - 17:31:40 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\thumbnails\43cb88a2fc258323d866e57179a33703.png   [65073]
O61 - LFC:Last File Created 22/02/2013 - 17:33:06 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\5\F8\578DCd01   [49088]
O61 - LFC:Last File Created 22/02/2013 - 17:33:10 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\0\34\7ECD8d01   [38938]
O61 - LFC:Last File Created 22/02/2013 - 17:33:10 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\4\51\2EF04d01   [102101]
O61 - LFC:Last File Created 22/02/2013 - 17:33:10 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\7\F7\F517Fd01   [60093]
O61 - LFC:Last File Created 22/02/2013 - 17:33:14 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\9\F0\49999d01   [52251]
O61 - LFC:Last File Created 22/02/2013 - 17:33:24 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\7\1D\F3F55d01   [52071]
O61 - LFC:Last File Created 22/02/2013 - 17:33:26 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\2\0A\BBB37d01   [21936]
O61 - LFC:Last File Created 22/02/2013 - 17:33:26 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\7\5E\9341Cd01   [17509]
O61 - LFC:Last File Created 22/02/2013 - 17:33:28 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\D\A2\A8357d01   [65624]
O61 - LFC:Last File Created 22/02/2013 - 17:33:34 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\B\A8\2C243d01   [37040]
O61 - LFC:Last File Created 22/02/2013 - 17:33:50 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\blocklist.xml   [50406]
O61 - LFC:Last File Created 22/02/2013 - 17:33:50 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\1\E6\EF7ACd01   [50406]
O61 - LFC:Last File Created 22/02/2013 - 17:33:50 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\5\CA\5FDC9d01   [19954]
O61 - LFC:Last File Created 22/02/2013 - 17:33:54 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\thumbnails\ec9e8936b8ebada048914e952c0b4b7e.png   [29137]
O61 - LFC:Last File Created 22/02/2013 - 17:34:54 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\F\1E\F511Ed01   [16982]
O61 - LFC:Last File Created 22/02/2013 - 17:35:02 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\safebrowsing\goog-phish-shavar.sbstore   [593174]
O61 - LFC:Last File Created 22/02/2013 - 17:35:04 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\safebrowsing\goog-phish-shavar.cache   [428]
O61 - LFC:Last File Created 22/02/2013 - 17:35:04 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\safebrowsing\goog-phish-shavar.pset   [633272]
O61 - LFC:Last File Created 22/02/2013 - 17:36:00 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\safebrowsing\goog-malware-shavar.sbstore   [1532755]
O61 - LFC:Last File Created 22/02/2013 - 17:36:02 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\safebrowsing\goog-malware-shavar.cache   [172]
O61 - LFC:Last File Created 22/02/2013 - 17:36:02 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\safebrowsing\goog-malware-shavar.pset   [816820]
O61 - LFC:Last File Created 22/02/2013 - 17:36:04 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\9\B7\B4E5Cd01   [58993]
O61 - LFC:Last File Created 22/02/2013 - 17:36:20 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\5\9B\84012d01   [16643]
O61 - LFC:Last File Created 22/02/2013 - 17:36:32 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\2\DF\AD4EFd01   [17462]
O61 - LFC:Last File Created 22/02/2013 - 17:36:36 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\E\DE\1C7EEd01   [37706]
O61 - LFC:Last File Created 22/02/2013 - 17:37:12 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\thumbnails\b2ef4a2530a7a76f194335c26b1ef6e7.png   [28531]
O61 - LFC:Last File Created 22/02/2013 - 17:37:16 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\8\05\D9481d01   [32046]
O61 - LFC:Last File Created 22/02/2013 - 17:37:32 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\thumbnails\70bf6a61e2f772d7ea804ac72c0fb9b8.png   [29359]
O61 - LFC:Last File Created 22/02/2013 - 17:43:48 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\startupCache\startupCache.4.little   [1049375]
O61 - LFC:Last File Created 22/02/2013 - 17:44:12 ---A- C:\Documents and Settings\aurore\Cookies\index.dat   [98304]
O61 - LFC:Last File Created 22/02/2013 - 17:44:12 ---A- C:\Documents and Settings\aurore\Local Settings\Historique\History.IE5\index.dat   [507904]
O61 - LFC:Last File Created 22/02/2013 - 17:48:46 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\places.sqlite   [10485760]
O61 - LFC:Last File Created 22/02/2013 - 17:48:56 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\places.sqlite-wal   [32824]
O61 - LFC:Last File Created 22/02/2013 - 17:49:16 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\5\CE\2183Fd01   [26563]
O61 - LFC:Last File Created 22/02/2013 - 17:49:20 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\A\42\E0273d01   [25862]
O61 - LFC:Last File Created 22/02/2013 - 17:49:22 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\7\5F\580F5d01   [21399]
O61 - LFC:Last File Created 22/02/2013 - 17:49:24 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\6\48\C2023d01   [36008]
O61 - LFC:Last File Created 22/02/2013 - 17:49:24 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\Cache\9\AA\DB805d01   [21647]
O61 - LFC:Last File Created 22/02/2013 - 17:49:30 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\thumbnails\cceed554820be308d069333ceb7e4eb3.png   [14347]
O61 - LFC:Last File Created 22/02/2013 - 17:49:32 ---A- C:\Documents and Settings\aurore\Local Settings\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\_CACHE_CLEAN_   [1]
O61 - LFC:Last File Created 22/02/2013 - 17:49:38 ---A- C:\Documents and Settings\aurore\Application Data\Mozilla\Firefox\Profiles\2okcvrau.default-1361304743703\sessionstore.js   [8507]
~ Scan Files in 01mn 12s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: Ad-Remover par C_XX - (.C_XX.) [HKLM] -- Ad-Remover
O63 - Logiciel: ZHPDiag 1.3.5 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
O63 - Logiciel: HiJackThis - (.Trend Micro.) [HKLM] -- {45A66726-69BC-466B-A7A4-12FCBA4883D7}
~ Scan ADS in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 13/02/2013 - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (AdobeFlashPlayerUpdateSvc)  .(.Adobe Systems Incorporated - Adobe® Flash® Player Update Service 11.5 r5.) - LEGACY_ADOBEFLASHPLAYERUPDATESVC
O64 - Services: CurCS - 17/07/2008 - C:\WINDOWS\system32\DRIVERS\AegisP.sys (AegisP)  .(.Meetinghouse Data Communications - IEEE 802.1X Protocol Driver.) - LEGACY_AEGISP
O64 - Services: CurCS - 16/01/2013 - C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130208.001\BHDrvx86.sys (BHDrvx86)  .(.Symantec Corporation - BASH Driver.) - LE
O64 - Services: CurCS - 20/08/2012 - C:\WINDOWS\system32\drivers\N360\1402010.016\ccSetx86.sys (ccSet_N360)  .(.Symantec Corporation - Common Client Settings Driver.) - LEGACY_CCSET_N360
O64 - Services: CurCS - ??\??\???? -  (DcomLaunch)  .(. - .) - LEGACY_DCOMLAUNCH
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys (dmboot)  .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT
O64 - Services: CurCS - 28/08/2001 - C:\WINDOWS\system32\drivers\dmload.sys (dmload)  .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - 01/02/2013 - C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys (eeCtrl)  .(.Symantec Corporation - Symantec Eraser Control Driver.) - LEGACY_EECTRL
O64 - Services: CurCS - 02/02/2013 - C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (EraserUtilRebootDrv)  .(.Symantec Corporation - Symantec Eraser Utility Driver.) - LEGACY_ERASERUTILREBOOTDRV
O64 - Services: CurCS - 08/07/2002 - C:\WINDOWS\system32\DRIVERS\C4C_FALL.sys (Fallback)  .(.Conexant Systems - Fallback driver.) - LEGACY_FALLBACK
O64 - Services: CurCS - 08/07/2002 - C:\WINDOWS\system32\DRIVERS\C4C_FSKS.sys (Fsks)  .(.Conexant Systems - FSKsNT driver.) - LEGACY_FSKS
O64 - Services: CurCS - 24/08/2009 - C:\Program Files\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe (FTRTSVC)  .(.France Telecom SA - Orange Connection Kit.) - LEGACY_FTRTSVC
O64 - Services: CurCS - 31/01/2013 - C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130221.001\IDSxpx86.sys (IDSxpx86)  .(.Symantec Corporation - IDS Core Driver.) -
O64 - Services: CurCS - 13/04/2007 - C:\Program Files\Canon\IJPLM\IJPLMSVC.exe (IJPLMSVC)  .(.Pas de propriétaire - PIXMA Extended Servey Program Service.) - LEGACY_IJPLMSVC
O64 - Services: CurCS - 03/10/2011 - C:\Program Files\Java\jre6\bin\jqs.exe (JavaQuickStarterService)  .(.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE
O64 - Services: CurCS - 08/07/2002 - C:\WINDOWS\system32\DRIVERS\C4C_K56K.sys (K56)  .(.Conexant Systems - K56NT driver.) - LEGACY_K56
O64 - Services: CurCS - 22/02/2013 - C:\WINDOWS\system32\drivers\mbamswissarmy.sys (MBAMSwissArmy)  .(.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - LEGACY_MBAMSWISSARMY
O64 - Services: CurCS - 17/09/2001 - C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys (mdmxsdk)  .(.Conexant - Diagnostic Interface DRIVER.) - LEGACY_MDMXSDK
O64 - Services: CurCS - 05/12/2012 - C:\Program Files\Norton 360 Premier Edition\Engine\20.2.1.22\ccSvcHst.exe (N360)  .(.Symantec Corporation - Symantec Service Framework.) - LEGACY_N360
O64 - Services: CurCS - 22/02/2013 - C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130222.003\NAVENG.sys (NAVENG)  .(.Symantec Corporation - AV Engine.) - LEGACY_
O64 - Services: CurCS - 22/02/2013 - C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130222.003\NAVEX15.sys (NAVEX15)  .(.Symantec Corporation - AV Engine.) - LEGAC
O64 - Services: CurCS - 17/11/2003 - C:\WINDOWS\system32\nvsvc32.exe (NVSvc)  .(.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 53.03.) - LEGACY_NVSVC
O64 - Services: CurCS - 24/08/2009 - C:\WINDOWS\system32\PCANDIS5.sys (PCANDIS5)  .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) - LEGACY_PCANDIS5
O64 - Services: CurCS - ??\??\???? -  (RpcSs)  .(. - .) - LEGACY_RPCSS
O64 - Services: CurCS - 08/07/2002 - C:\WINDOWS\system32\DRIVERS\C4C_FAXX.sys (SoftFax)  .(.Conexant Systems - FaxNT driver.) - LEGACY_SOFTFAX
O64 - Services: CurCS - 09/10/2012 - C:\WINDOWS\system32\Drivers\N360\1402010.016\SRTSP.sys (SRTSP)  .(.Symantec Corporation - Symantec AutoProtect.) - LEGACY_SRTSP
O64 - Services: CurCS - 24/05/2012 - C:\WINDOWS\system32\drivers\N360\1402010.016\SRTSPX.sys (SRTSPX)  .(.Symantec Corporation - Symantec AutoProtect.) - LEGACY_SRTSPX
O64 - Services: CurCS - 04/10/2012 - C:\WINDOWS\system32\drivers\N360\1402010.016\SYMDS.sys (SymDS)  .(.Symantec Corporation - Symantec Data Store.) - LEGACY_SYMDS
O64 - Services: CurCS - 04/10/2012 - C:\WINDOWS\system32\drivers\N360\1402010.016\SYMEFA.sys (SymEFA)  .(.Symantec Corporation - Symantec Extended File Attributes.) - LEGACY_SYMEFA
O64 - Services: CurCS - 01/02/2013 - C:\WINDOWS\system32\Drivers\SYMEVENT.sys (SymEvent)  .(.Symantec Corporation - Symantec Event Library.) - LEGACY_SYMEVENT
O64 - Services: CurCS - 07/09/2012 - C:\WINDOWS\system32\drivers\N360\1402010.016\Ironx86.sys (SymIRON)  .(.Symantec Corporation - Iron Driver.) - LEGACY_SYMIRON
O64 - Services: CurCS - 07/09/2012 - C:\WINDOWS\system32\Drivers\N360\1402010.016\SYMTDI.sys (SYMTDI)  .(.Symantec Corporation - Network Dispatch Driver.) - LEGACY_SYMTDI
O64 - Services: CurCS - ??\??\???? -  (TermService)  .(. - .) - LEGACY_TERMSERVICE
O64 - Services: CurCS - 08/07/2002 - C:\WINDOWS\system32\DRIVERS\C4C_TONE.sys (Tones)  .(.Conexant Systems - TonesNT driver.) - LEGACY_TONES
O64 - Services: CurCS - 08/07/2002 - C:\WINDOWS\system32\DRIVERS\C4C_V124.sys (V124)  .(.Conexant Systems - V124NT driver.) - LEGACY_V124
~ Scan Services in 00mn 02s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <MSN Explorer> <>[HKLM\..\Shell\open\Command] (.Not Key.)
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://search.live.com
O69 - SBI: SearchScopes [HKCU] {c1d89ae7-449d-4929-b24b-fded04adbe06} - (Glary Search) - http://isearch.glarysoft.com
~ Scan Keys in 00mn 00s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (...) -- C:\WINDOWS\system32\appmgmts.dll   [0]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll   [42496]
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll   [78336]
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll   [62464]
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll   [24576]
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll   [127488]
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll   [23040]
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\System32\es.dll   [253952]
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: HidServ (HidServ) . (...) -- C:\WINDOWS\system32\hidserv.dll   [0]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll   [99840]
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll   [132096]
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll   [33792]
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll   [198144]
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll   [247808]
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll   [438272]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll   [88576]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll   [186368]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll   [53248]
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll   [194560]
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll   [18944]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll   [39424]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\system32\ipnathlp.dll   [332800]
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\System32\srsvc.dll   [171520]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\system32\tapisrv.dll   [249856]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll   [90112]
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\System32\w32time.dll   [178176]
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll   [483840]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll   [145408]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Service Terminal Server.) -- C:\WINDOWS\system32\termsrv.dll   [297984]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll   [6656]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll   [409088]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll   [38400]
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll   [27136]
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll   [129024]
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll   [80896]
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll   [293376]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll   [61440]
~ Scan Services in 00mn 00s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.DD3975246D8928C04549B31B6B49434F] [SPRF][24/03/2008] (.Adobe Systems Incorporated - Adobe® Flash® Player ActiveX Installer.) -- C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe   [1527056]
[MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\WINDOWS\Downloaded Program Files\dwusplay.dll   [24576]
[MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\WINDOWS\Downloaded Program Files\dwusplay.exe   [196608]
[MD5.3F4413DCD8D3BBABF08F68F25E6D60E1] [SPRF][16/02/2005] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\WINDOWS\Downloaded Program Files\isusweb.dll   [401408]
~ Scan Files in 00mn 01s



---\\ Scan Additionnel (O88)
Database Version : v2.10791 - (19/02/2013)
Clés trouvées (Keys found) : 2
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 0
Fichiers trouvés  (Files found) : 0

[HKCU\Software\SweetIM]   =>PUP.SweetIM
[HKLM\Software\SweetIM]   =>PUP.SweetIM
~ Scan Additionnel in 00mn 30s



---\\ Recherche détournement de DNS routeur (O89) (None)

---\\ Product Upgrade Codes (O90)
O90 - PUC: "000021090200C0400000000000F01FEC" . (.Module de compatibilité pour Microsoft Office System 2007.) -- C:\WINDOWS\Installer\{90120000-0020-040C-0000-0000000FF1CE}\O12ConvIcon.exe
O90 - PUC: "4C7B834C8F4B5C944AFDFFF6F1427287" . (.NTI CD &  DVD-Maker.) -- C:\WINDOWS\Installer\{C438B7C4-B4F8-49C5-A4DF-FF6F1F242778}\ARPPRODUCTICON.exe
O90 - PUC: "68AB67CA7DA76301B744AA0100000010" . (.Adobe Reader X (10.1.6) - Français.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O90 - PUC: "72788EEDB9779A74CAFE8FC75A9FA256" . (.ScanSoft OmniPage SE 4.) -- C:\WINDOWS\Installer\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}\ARPPRODUCTICON.exe
O90 - PUC: "9F2FDFE0D6387BE43AD230B83D1FBFA2" . (.Security Update for CAPICOM (KB931906).) -- C:\WINDOWS\Installer\{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}\folder.ico
O90 - PUC: "C040820900063D11C8EF00054038389C" . (.Microsoft Office XP Professional avec FrontPage.) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\misc.exe,6
~ Scan Files in 00mn 00s



---\\ MyComputer Name Space (O92)
O92 - MNS: Lecteur de sauvegarde Norton - {0579E89F-E364-4a3d-A9CB-90262B2B7E1C}
O92 - MNS: Dossiers Web - {BDEADF00-C265-11D0-BCED-00A0C90AB50F}
~ Scan MNS in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 13/02/2013 251248 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 14/04/2008 225280 |  (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SR - | Auto 24/08/2009 69632 | C:\Program Files\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe (FTRTSVC) . (.France Telecom SA.) - C:\Program Files\Fichiers communs\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
SS - | Demand  97432 |  (IJPLMSVC) . (...) - C:\Program Files\Canon\IJPLM\IJPLMSVC.exe
SR - | Auto 03/10/2011 153376 |  (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe
SS - | Demand 06/02/2013 115608 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 05/12/2012 143928 |  (N360) . (.Symantec Corporation.) - C:\Program Files\Norton 360 Premier Edition\Engine\20.2.1.22\ccSvcHst.exe
SR - | Auto 17/11/2003 77824 |  (NVSvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvsvc32.exe
~ Scan Services in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by aurore at 22/02/2013 17:55:45

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys viaide.sys 
1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x81B36030]
3 CLASSPNP[0xF9AA2FD7] -> nt!IofCallDriver[0x804E37D5] -> \Device\0000006e[0x81B43EB0]
5 ACPI[0xF99E8620] -> nt!IofCallDriver[0x804E37D5] -> \Device\Ide\IdeDeviceP0T0L0-3[0x81B39418]
kernel: MBR read successfully
user & kernel MBR OK 
~ Scan MBR in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by aurore at 22/02/2013 17:55:47

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ Scan MBR in 00mn 04s



End of the scan (1300 lines in 09mn 45s)(0)