OTL logfile created on: 12/06/2013 23:11:21 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Documents and Settings\VINCENT\Mes documents\Téléchargements
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
3,50 Gb Total Physical Memory | 2,81 Gb Available Physical Memory | 80,20% Memory free
5,34 Gb Paging File | 4,64 Gb Available in Paging File | 86,97% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 668,61 Gb Total Space | 608,41 Gb Free Space | 91,00% Space Free | Partition Type: NTFS
Drive D: | 262,83 Gb Total Space | 180,31 Gb Free Space | 68,60% Space Free | Partition Type: FAT32
 
Computer Name: PCTECHNIQUE | User Name: VINCENT | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - C:\Documents and Settings\VINCENT\Mes documents\Téléchargements\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\ma-config.com\MaConfigAgent.exe (CybelSoft)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\Trusteer\Rapport\bin\RapportService.exe (Trusteer Ltd.)
PRC - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe (Trusteer Ltd.)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Java\jre7\bin\jqs.exe (Oracle Corporation)
PRC - C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (Oracle Corporation)
PRC - C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
PRC - C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe (Canal+ Active)
PRC - c:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
PRC - c:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - C:\Program Files\AVAST Software\Avast\defs\13061200\algo.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\17440cd05eee7f87026b3c17119eed58\System.Configuration.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\81b85db6e9fe04e4d1c9547b993acfce\System.Windows.Forms.ni.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll ()
MOD - C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportMS\baseline\RapportMS.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\e143370f0583abe015d8e3d2d536185e\System.Web.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\d7ee03714420b252415b952d40ef59e4\System.ServiceProcess.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\cbee94ec6a0fe649e3b4643cea6e1259\Accessibility.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\fe025743210c22bea2f009e1612c38bf\System.Xml.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\7782f356a838c403b4a8e9c80df5a577\System.Drawing.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\aeac298c43c77d8860db8e7634d9f2eb\System.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\eab2340ead8e1a84bdf1a87868659979\mscorlib.ni.dll ()
MOD - C:\Program Files\Trusteer\Rapport\bin\js32.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_fr_b77a5c561934e089\System.Windows.Forms.resources.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll ()
MOD - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll ()
MOD - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\AxInterop.WBOCXLib.dll ()
MOD - C:\WINDOWS\system32\pdfcmnnt.dll ()
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - (HidServ) -- %SystemRoot%\System32\hidserv.dll File not found
SRV - (AppMgmt) -- %SystemRoot%\System32\appmgmts.dll File not found
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (MaConfigAgent) -- C:\Program Files\ma-config.com\MaConfigAgent.exe (CybelSoft)
SRV - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (RapportMgmtService) -- C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe (Trusteer Ltd.)
SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (JavaQuickStarterService) -- C:\Program Files\Java\jre7\bin\jqs.exe (Oracle Corporation)
SRV - (Sony PC Companion) -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe (Avanquest Software)
SRV - (odserv) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (CanalPlus.VOD) -- C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe (Canal+ Active)
SRV - (osppsvc) -- C:\Program Files\Fichiers communs\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation)
SRV - (ose) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (wlidsvc) -- c:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - (WDICA) --  File not found
DRV - (PDRFRAME) --  File not found
DRV - (PDRELI) --  File not found
DRV - (PDFRAME) --  File not found
DRV - (PDCOMP) --  File not found
DRV - (PCIDump) --  File not found
DRV - (lbrtfdc) --  File not found
DRV - (i2omgmt) --  File not found
DRV - (Changer) --  File not found
DRV - (aswSnx) -- C:\WINDOWS\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) -- C:\WINDOWS\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswVmm) -- C:\WINDOWS\System32\drivers\aswVmm.sys ()
DRV - (aswTdi) -- C:\WINDOWS\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswRvrt) -- C:\WINDOWS\System32\drivers\aswRvrt.sys ()
DRV - (aswMonFlt) -- C:\WINDOWS\system32\drivers\aswMonFlt.sys (AVAST Software)
DRV - (aswRdr) -- C:\WINDOWS\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswFsBlk) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (RapportPG) -- C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys (Trusteer Ltd.)
DRV - (RapportEI) -- C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys (Trusteer Ltd.)
DRV - (RapportKELL) -- C:\WINDOWS\system32\drivers\RapportKELL.sys (Trusteer Ltd.)
DRV - (MBAMProtector) -- C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (RapportCerberus_51755) -- C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus32_51755.sys ()
DRV - (aswKbd) -- C:\WINDOWS\System32\drivers\aswKbd.sys (AVAST Software)
DRV - (ggsemc) -- C:\WINDOWS\system32\drivers\ggsemc.sys (Sony Ericsson Mobile Communications)
DRV - (ggflt) -- C:\WINDOWS\system32\drivers\ggflt.sys (Sony Ericsson Mobile Communications)
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (driverhardwarev2) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys (CybelSoft)
DRV - (IntcAzAudAddService) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (Monfilt) -- C:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
DRV - (Ambfilt) -- C:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (L1c) -- C:\WINDOWS\system32\drivers\l1c51x86.sys (Atheros Communications, Inc.)
DRV - (MTsensor) -- C:\WINDOWS\system32\drivers\ASACPI.sys ()
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = 
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\..\SearchScopes,DefaultScope = 
IE - HKCU\..\SearchScopes\${searchCLSID}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{77643DD4-346D-41EC-9563-A4A1A0112A1F}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=fr_FR&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^FR&apn_uid=C35280D3-6115-4181-B7C5-02A42C36E04F&apn_sauid=FE2EF4A4-3637-4E3E-86CD-C9E5E863D03D
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: 4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6%4036857116-74e0-4973-936f-860cd2a102a9.com:0.91.9
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@canalplus.fr/Assistants VOD,version=1.0.0.0: C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\npcpvod.dll (Canal+ Active)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files\Sony\Media Go\npmediago.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013/05/26 23:48:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/05/17 21:07:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
 
[2013/02/15 20:53:25 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\VINCENT\Application Data\Mozilla\Extensions
[2013/06/12 21:23:53 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\VINCENT\Application Data\Mozilla\Firefox\Profiles\kr0vmh3p.default\extensions
[2013/06/03 07:50:55 | 000,000,000 | ---D | M] ("Plus-HD-2.2") -- C:\Documents and Settings\VINCENT\Application Data\Mozilla\Firefox\Profiles\kr0vmh3p.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com
[2013/06/03 07:50:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\VINCENT\Application Data\Mozilla\Firefox\Profiles\kr0vmh3p.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\extensionCode
[2013/06/03 07:37:03 | 000,213,470 | ---- | M] () (No name found) -- C:\Documents and Settings\VINCENT\Application Data\Mozilla\Firefox\Profiles\kr0vmh3p.default\extensions\torntv2@torntv.com.xpi
[2013/04/30 14:53:27 | 000,001,102 | ---- | M] () -- C:\Documents and Settings\VINCENT\Application Data\Mozilla\Firefox\Profiles\kr0vmh3p.default\searchplugins\01netcom-main-customized-web-search.xml
[2013/06/09 13:51:59 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\Extensions
[2013/05/17 21:07:47 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013/05/17 21:07:47 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Delta Search (Enabled)
CHR - default_search_provider: search_url = http://www.delta-search.com/?q={searchTerms}&affID=119357&babsrc=SP_ss&mntrId=05B7F46D046ED6F4
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.delta-search.com/?affID=119357&babsrc=HP_ss&mntrId=05B7F46D046ED6F4
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.110\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.110\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.110\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL
CHR - plugin: Canal+ Assistants VOD (Enabled) = C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\npcpvod.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 7 U21 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: McAfee Security Scanner + (Enabled) = C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll
CHR - plugin: PlayStation(R)Network Downloader Check Plug-in (Enabled) = C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
 
O1 HOSTS File: ([2011/08/09 22:07:52 | 000,001,073 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts:  Copyright (c) 1993-1999 Microsoft Corp.                
O1 - Hosts: 127.0.0.1    localhost
O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll File not found
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll File not found
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll File not found
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Fichiers communs\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (Oracle Corporation)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe File not found
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Envoyer à OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E&xporter vers Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} http://fichiers.touslesdrivers.com/maconfig/MaConfig_5_2_1_0.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_13-windows-i586.cab (Java Plug-in 10.21.2)
O16 - DPF: {CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_13-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_13-windows-i586.cab (Java Plug-in 10.21.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3CEAE3E9-B202-4A64-81B7-BB073D27227E}: DhcpNameServer = 192.168.1.1 192.168.1.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\VINCENT\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\VINCENT\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012/01/07 18:45:33 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
NetSvcs: 6to4 -  File not found
NetSvcs: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
NetSvcs: HidServ - %SystemRoot%\System32\hidserv.dll File not found
NetSvcs: Ias -  File not found
NetSvcs: Iprip -  File not found
NetSvcs: Irmon -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: WmdmPmSp -  File not found
 
MsConfig - StartUpFolder: C:^Documents and Settings^Moi^Menu Démarrer^Programmes^Démarrage^OneNote 2010 - Capture d’écran et lancement.lnk - C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE - (Microsoft Corporation)
MsConfig - StartUpReg: [b]CANAL+ CANALSAT A LA DEMANDE[/b] - hkey= - key= - C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\Launcher.exe (Canal+)
MsConfig - StartUpReg: [b]QuickTime Task[/b] - hkey= - key= - C:\Program Files\QuickTime\qttask.exe (Apple Inc.)
MsConfig - StartUpReg: [b]XboxStat[/b] - hkey= - key= - c:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)
 
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Rendu VML (Vector Graphics Rendering)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Liaison de données Dynamic HTML pour Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Création avancée
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015C} - Microsoft DirectX
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - Classes Java DirectAnimation
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {72AD53CC-CCC0-3757-8480-9EE176866A7C} - .NET Framework
ActiveX: {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - Web Folders
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} - 
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C3C986D6-06B1-43BF-90DD-BE30756C00DE} - RevokedRootsUpdate
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Planificateur de tâches
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Reg Error: Value error.
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
 
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
 
CREATERESTOREPOINT 
Restore point Set: OTL Restore Point
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013/06/11 23:33:23 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\VINCENT\Recent
[2013/06/09 13:52:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\VINCENT\Local Settings\Application Data\Downloaded Installations
[2013/06/09 13:51:09 | 000,000,000 | ---D | C] -- C:\Program Files\Image Converter
[2013/06/08 13:28:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ma-config.com
[2013/06/08 13:28:00 | 000,000,000 | ---D | C] -- C:\Program Files\ma-config.com
[2013/06/08 13:28:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\ma-config.com
[2013/05/24 22:37:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\VINCENT\Bureau\mathis
[2013/05/17 21:07:35 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013/06/12 23:33:20 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013/06/12 21:30:37 | 000,624,992 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2013/06/12 21:30:37 | 000,548,690 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013/06/12 21:30:37 | 000,117,380 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2013/06/12 21:30:37 | 000,098,282 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013/06/12 21:28:09 | 000,000,364 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2013/06/12 21:26:03 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013/06/11 20:47:16 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013/06/08 13:28:01 | 000,000,745 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Ma-Config.com - Démarrer la détection.lnk
[2013/06/04 22:49:30 | 000,001,820 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Google Chrome.lnk
[2013/06/03 07:41:45 | 000,001,576 | ---- | M] () -- C:\WINDOWS\System32\InstallUtil.InstallLog
[2013/06/03 07:40:53 | 000,001,002 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013/06/03 07:40:52 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013/06/03 07:40:51 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013/05/26 23:48:49 | 000,003,072 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2013/05/19 20:44:12 | 000,095,811 | ---- | M] () -- C:\Documents and Settings\VINCENT\Bureau\D86-39CantondeLogerie.jpg
[2013/05/16 12:57:02 | 000,261,432 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013/06/12 23:33:20 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013/06/08 13:28:01 | 000,000,745 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Ma-Config.com - Démarrer la détection.lnk
[2013/05/19 20:44:11 | 000,095,811 | ---- | C] () -- C:\Documents and Settings\VINCENT\Bureau\D86-39CantondeLogerie.jpg
[2013/03/16 14:29:28 | 000,174,664 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2013/03/16 14:29:28 | 000,049,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2013/02/23 02:08:36 | 000,287,778 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1390067357-1957994488-1417001333-1007-0.dat
[2013/02/15 15:46:31 | 000,261,432 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013/01/27 10:22:02 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2013/01/23 01:28:19 | 000,287,778 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2013/01/23 01:28:19 | 000,287,626 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1390067357-1957994488-1417001333-1004-0.dat
[2012/08/14 22:39:49 | 000,069,632 | ---- | C] () -- C:\WINDOWS\uinst001.exe
[2012/06/23 20:36:06 | 000,000,290 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2012/05/30 23:57:39 | 000,051,096 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2012/02/19 19:52:22 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2012/01/17 23:37:26 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[2012/01/17 21:46:01 | 000,160,221 | ---- | C] () -- C:\WINDOWS\hpoins14.dat
[2012/01/17 21:46:00 | 000,002,000 | ---- | C] () -- C:\WINDOWS\hpomdl14.dat
[2012/01/09 15:35:31 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2012/01/09 15:35:23 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2012/01/09 15:35:22 | 000,243,168 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2012/01/09 15:35:22 | 000,000,003 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2012/01/07 19:35:24 | 000,004,392 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012/01/07 18:54:35 | 000,982,196 | R--- | C] () -- C:\WINDOWS\System32\igkrng500.bin
[2012/01/07 18:54:35 | 000,417,344 | R--- | C] () -- C:\WINDOWS\System32\igcompkrng500.bin
[2012/01/07 18:49:23 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2012/01/07 18:49:20 | 000,001,769 | ---- | C] () -- C:\WINDOWS\Language_trs.ini
[2012/01/07 18:49:18 | 000,023,057 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2012/01/07 18:49:17 | 000,010,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2012/01/07 18:46:40 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012/01/07 18:43:31 | 000,021,892 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2011/11/09 23:39:44 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\OpenVideo.dll
[2011/11/09 23:39:32 | 000,054,784 | ---- | C] () -- C:\WINDOWS\System32\OVDecode.dll
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2012/01/09 15:45:19 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2012/10/31 13:33:21 | 001,510,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009/02/09 12:53:55 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008/04/14 14:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== Custom Scans ==========[/color]
 
[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
 
[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
 
[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]
 
[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
Invalid Environment Variable: alluserprofile
Invalid Environment Variable: alluserprofile
 
[color=#A23BEC]< %appdata%\*. >[/color]
[2013/02/16 00:08:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\VINCENT\Application Data\Adobe
[2013/02/15 20:20:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\VINCENT\Application Data\Apple Computer
[2013/02/15 20:20:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\VINCENT\Application Data\ATI
[2013/02/26 09:18:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\VINCENT\Application Data\DF Express
[2013/02/15 19:40:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\VINCENT\Application Data\Identities
[2013/02/17 12:58:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\VINCENT\Application Data\Leadertech
[2012/12/01 00:37:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\VINCENT\Application Data\Macromedia
[2013/02/15 21:30:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\VINCENT\Application Data\Malwarebytes
[2013/05/07 23:19:12 | 000,000,000 | --SD | M] -- C:\Documents and Settings\VINCENT\Application Data\Microsoft
[2013/02/15 20:53:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\VINCENT\Application Data\Mozilla
[2013/02/16 00:24:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\VINCENT\Application Data\PMU
[2013/03/23 19:00:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\VINCENT\Application Data\QuickRoute
[2013/02/17 21:16:16 | 000,000,000 | RH-D | M] -- C:\Documents and Settings\VINCENT\Application Data\SecuROM
[2013/02/15 20:25:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\VINCENT\Application Data\Sun
 
[color=#A23BEC]< %appdata%\*.exe /s >[/color]
[2013/03/23 18:58:39 | 000,032,038 | R--- | M] () -- C:\Documents and Settings\VINCENT\Application Data\Microsoft\Installer\{BDF3D53A-78E0-416D-B03E-A360355FDD6D}\_112D608FD02CD87FDC7735.exe
[2013/03/23 18:58:39 | 000,032,038 | R--- | M] () -- C:\Documents and Settings\VINCENT\Application Data\Microsoft\Installer\{BDF3D53A-78E0-416D-B03E-A360355FDD6D}\_853F67D554F05449430E7E.exe
[2013/03/23 18:58:39 | 000,032,038 | R--- | M] () -- C:\Documents and Settings\VINCENT\Application Data\Microsoft\Installer\{BDF3D53A-78E0-416D-B03E-A360355FDD6D}\_8FBAE6689726C65F3762FF.exe
 
[color=#A23BEC]< %systemdrive%\*. >[/color]
[2012/01/09 15:31:19 | 000,000,000 | ---D | M] -- C:\ATI
[2012/01/09 15:45:58 | 000,000,000 | ---D | M] -- C:\b77d86ca3c306dbddedc523c05816055
[2013/06/08 13:28:08 | 000,000,000 | -H-D | M] -- C:\Config.Msi
[2013/02/15 19:37:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings
[2012/10/01 20:34:49 | 000,000,000 | ---D | M] -- C:\FIFA 11
[2012/01/07 18:50:01 | 000,000,000 | ---D | M] -- C:\Intel
[2012/01/09 12:46:03 | 000,000,000 | RH-D | M] -- C:\MSOCache
[2013/06/12 21:23:43 | 000,000,000 | R--D | M] -- C:\Program Files
[2013/02/15 21:13:29 | 000,000,000 | -HSD | M] -- C:\RECYCLER
[2012/10/01 20:34:53 | 000,000,000 | ---D | M] -- C:\SecuROM
[2013/02/16 00:51:47 | 000,000,000 | ---D | M] -- C:\SpyKiller
[2012/01/07 18:47:34 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2013/03/13 11:00:03 | 000,000,000 | ---D | M] -- C:\Temp
[2013/06/12 21:27:58 | 000,000,000 | ---D | M] -- C:\WINDOWS
 
[color=#A23BEC]< %systemdrive%\*.exe >[/color]
 
[color=#A23BEC]< %programfiles%\*. >[/color]
[2013/02/17 00:41:58 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2012/01/09 15:35:47 | 000,000,000 | ---D | M] -- C:\Program Files\AMD APP
[2012/05/30 23:56:10 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update
[2012/01/09 15:35:10 | 000,000,000 | ---D | M] -- C:\Program Files\ATI
[2012/01/09 15:35:38 | 000,000,000 | ---D | M] -- C:\Program Files\ATI Technologies
[2012/01/09 13:21:04 | 000,000,000 | ---D | M] -- C:\Program Files\AVAST Software
[2013/01/23 23:03:56 | 000,000,000 | ---D | M] -- C:\Program Files\BearShare Applications
[2013/02/22 23:27:40 | 000,000,000 | ---D | M] -- C:\Program Files\BRS
[2012/12/01 00:37:23 | 000,000,000 | ---D | M] -- C:\Program Files\Canal+
[2013/02/17 01:11:25 | 000,000,000 | ---D | M] -- C:\Program Files\CCleaner
[2012/01/07 18:43:23 | 000,000,000 | ---D | M] -- C:\Program Files\ComPlus Applications
[2012/04/28 18:35:00 | 000,000,000 | ---D | M] -- C:\Program Files\directx
[2013/02/17 00:59:34 | 000,000,000 | ---D | M] -- C:\Program Files\EA SPORTS
[2013/06/12 21:23:44 | 000,000,000 | ---D | M] -- C:\Program Files\Fichiers communs
[2012/05/24 22:52:17 | 000,000,000 | ---D | M] -- C:\Program Files\GameShadow
[2012/05/24 22:51:40 | 000,000,000 | ---D | M] -- C:\Program Files\GameSpy Arcade
[2013/01/24 02:02:14 | 000,000,000 | ---D | M] -- C:\Program Files\GoforFiles
[2013/04/13 09:00:39 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2012/01/17 23:32:48 | 000,000,000 | ---D | M] -- C:\Program Files\Hewlett-Packard
[2012/01/16 21:13:29 | 000,000,000 | ---D | M] -- C:\Program Files\HP
[2013/06/09 13:51:09 | 000,000,000 | ---D | M] -- C:\Program Files\Image Converter
[2012/09/07 22:09:18 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2012/01/07 18:50:14 | 000,000,000 | ---D | M] -- C:\Program Files\Intel
[2013/05/15 23:50:03 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2013/04/28 20:30:18 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2013/01/26 20:25:49 | 000,000,000 | ---D | M] -- C:\Program Files\JDownloader
[2012/05/24 22:52:57 | 000,000,000 | ---D | M] -- C:\Program Files\L'Entraîneur 2007
[2013/06/08 13:28:04 | 000,000,000 | ---D | M] -- C:\Program Files\ma-config.com
[2013/04/18 22:34:45 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013/02/10 22:59:32 | 000,000,000 | ---D | M] -- C:\Program Files\McAfee Security Scan
[2013/01/28 04:15:25 | 000,000,000 | ---D | M] -- C:\Program Files\Messenger
[2012/01/09 12:46:53 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Analysis Services
[2012/03/10 08:45:49 | 000,000,000 | ---D | M] -- C:\Program Files\microsoft frontpage
[2013/02/22 23:26:59 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Games for Windows - LIVE
[2012/03/11 08:50:25 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2013/03/14 21:27:53 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2012/08/15 00:30:24 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Xbox 360 Accessories
[2012/01/09 17:44:55 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2013/01/28 04:03:03 | 000,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2013/06/09 13:51:59 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2013/05/20 18:32:57 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Maintenance Service
[2012/01/09 15:46:09 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2012/01/07 19:01:12 | 000,000,000 | ---D | M] -- C:\Program Files\MSECache
[2012/01/07 18:42:17 | 000,000,000 | ---D | M] -- C:\Program Files\MSN
[2012/01/07 18:42:47 | 000,000,000 | ---D | M] -- C:\Program Files\MSN Gaming Zone
[2013/01/28 08:55:00 | 000,000,000 | ---D | M] -- C:\Program Files\MSXML 4.0
[2012/01/07 18:44:20 | 000,000,000 | ---D | M] -- C:\Program Files\NetMeeting
[2012/01/07 18:42:55 | 000,000,000 | ---D | M] -- C:\Program Files\Online Services
[2013/02/22 23:27:35 | 000,000,000 | ---D | M] -- C:\Program Files\OpenAL
[2012/05/29 18:51:54 | 000,000,000 | ---D | M] -- C:\Program Files\Oracle
[2012/09/23 17:56:26 | 000,000,000 | ---D | M] -- C:\Program Files\Ord-ixSofts
[2013/01/28 04:03:23 | 000,000,000 | ---D | M] -- C:\Program Files\Outlook Express
[2012/09/18 20:22:14 | 000,000,000 | ---D | M] -- C:\Program Files\Paint.NET
[2012/08/15 00:17:07 | 000,000,000 | ---D | M] -- C:\Program Files\PC Drivers HeadQuarters
[2012/01/17 23:38:11 | 000,000,000 | ---D | M] -- C:\Program Files\PDFCreator
[2013/05/08 18:42:28 | 000,000,000 | ---D | M] -- C:\Program Files\PMU
[2013/03/23 18:58:38 | 000,000,000 | ---D | M] -- C:\Program Files\QuickRoute
[2013/04/01 19:08:49 | 000,000,000 | ---D | M] -- C:\Program Files\QuickTime
[2012/01/07 18:52:32 | 000,000,000 | ---D | M] -- C:\Program Files\Realtek
[2012/01/09 15:46:05 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2012/01/07 18:44:45 | 000,000,000 | ---D | M] -- C:\Program Files\Services en ligne
[2013/01/24 01:03:05 | 000,000,000 | ---D | M] -- C:\Program Files\Sony
[2012/09/07 22:11:55 | 000,000,000 | ---D | M] -- C:\Program Files\Sony Ericsson
[2012/09/08 00:06:52 | 000,000,000 | ---D | M] -- C:\Program Files\Sony Media Go Install
[2012/09/23 13:34:36 | 000,000,000 | ---D | M] -- C:\Program Files\Trusteer
[2012/01/07 18:48:29 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2013/01/28 02:04:18 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN
[2013/01/26 20:11:42 | 000,000,000 | ---D | M] -- C:\Program Files\WBFS
[2012/12/01 00:15:51 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Connect 2
[2012/12/01 00:15:50 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2012/01/07 18:42:40 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2012/01/07 18:44:48 | 000,000,000 | -H-D | M] -- C:\Program Files\WindowsUpdate
[2013/01/23 22:10:50 | 000,000,000 | ---D | M] -- C:\Program Files\WinRAR
[2012/01/07 18:45:40 | 000,000,000 | ---D | M] -- C:\Program Files\xerox
 
[color=#A23BEC]< MD5 for: EVENTLOG.DLL  >[/color]
[2008/04/14 14:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=4EC800BDF80521B0207BD2301DFC7D14 -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2008/04/14 14:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=4EC800BDF80521B0207BD2301DFC7D14 -- C:\WINDOWS\system32\eventlog.dll
 
[color=#A23BEC]< MD5 for: EXPLORER.EXE  >[/color]
[2013/06/12 07:27:33 | 000,051,928 | ---- | M] () MD5=E887F98CD5B28446E6D51A88336F68C8 -- C:\WINDOWS\Temp\44e15807-673e-4087-9e78-63bddab22277\explorer.exe
[2013/06/12 07:25:30 | 000,051,928 | ---- | M] () MD5=E887F98CD5B28446E6D51A88336F68C8 -- C:\WINDOWS\Temp\6a3f2674-5545-4ec6-8deb-77ccb06c9083\explorer.exe
[2013/06/12 07:25:14 | 000,051,928 | ---- | M] () MD5=E887F98CD5B28446E6D51A88336F68C8 -- C:\WINDOWS\Temp\7b8ced2d-b78e-42b2-9a8a-da92be476fdc\explorer.exe
[2013/06/12 07:24:47 | 000,051,928 | ---- | M] () MD5=E887F98CD5B28446E6D51A88336F68C8 -- C:\WINDOWS\Temp\c9266694-1e66-410d-b5d4-d0ea8acbd6e3\explorer.exe
[2008/04/14 14:00:00 | 001,037,824 | ---- | M] (Microsoft Corporation) MD5=F2317622D29F9FF0F88AEECD5F60F0DD -- C:\WINDOWS\explorer.exe
[2008/04/14 14:00:00 | 001,037,824 | ---- | M] (Microsoft Corporation) MD5=F2317622D29F9FF0F88AEECD5F60F0DD -- C:\WINDOWS\system32\dllcache\explorer.exe
 
[color=#A23BEC]< MD5 for: NETLOGON.DLL  >[/color]
[2008/04/14 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=04821179C3171554C1BD1F9888A113E2 -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2008/04/14 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=04821179C3171554C1BD1F9888A113E2 -- C:\WINDOWS\system32\netlogon.dll
 
[color=#A23BEC]< MD5 for: USERINIT.EXE  >[/color]
[2008/04/14 14:00:00 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=E74DDB12188C2FF57A78624DBF7332FC -- C:\WINDOWS\system32\dllcache\userinit.exe
[2008/04/14 14:00:00 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=E74DDB12188C2FF57A78624DBF7332FC -- C:\WINDOWS\system32\userinit.exe
 
[color=#A23BEC]< MD5 for: WINLOGON.EXE  >[/color]
[2013/04/04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2008/04/14 14:00:00 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=DD73D6B9F6B4CB630CF35B438B540174 -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008/04/14 14:00:00 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=DD73D6B9F6B4CB630CF35B438B540174 -- C:\WINDOWS\system32\winlogon.exe

< End of report >