~ Rapport de ZHPDiag v2014.1.12.13 - Nicolas Coolman (12/01/2014) ~ Lancé par user (10/01/2014 09:45:58) ~ Adresse du Site Web http://nicolascoolman.webs.com ~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/ ~ Traduit par Nicolas Coolman ~ Etat de la version : ~ Liste blanche : Désactivée par l'utilisateur ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Not Found ---\\ Navigateurs Internet MSIE: Internet Explorer v7.0.5730.11 MFIE: Mozilla Firefox 26.0 (Defaut) GCIE: Google Chrome v31.0.1650.63 OBIE: Safari v3.525.21.0 ---\\ Informations sur les produits Windows ~ Langage: Français Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600) Windows Automatic Updates : OK Windows Genuine Advantage : OK ---\\ Logiciels de protection du système Avira Free Antivirus v14.0.2.286 Malwarebytes Anti-Malware version 1.75.0.1300 ---\\ Logiciels d'optimisation du système CCleaner v2.36 =>Piriform Ltd ---\\ Logiciels de partage PeerToPeer ---\\ Surveillance de Logiciels Adobe Flash Player 11 Plugin Adobe Reader 8.3.1 - Français Java 7 Update 45 ---\\ Informations sur le système ~ Processor: x86 Family 15 Model 79 Stepping 2, AuthenticAMD ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 478 MB (17% free) System Restore: Activé (Enable) System drive C: has 2 GB (0%) free of 373 GB ---\\ Mode de connexion au système ~ Computer Name: USER-0935D4567F ~ User Name: user ~ All Users Names: user, SUPPORT_388945a0, HelpAssistant, ASPNET, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Documents and Settings\user\Application Data\ZHP\ ~ %AppData% : C:\Documents and Settings\user\Application Data\ ~ %Desktop% : C:\Documents and Settings\user\Bureau\ ~ %Favorites% : C:\Documents and Settings\user\Favoris\ ~ %LocalAppData% : C:\Documents and Settings\user\Local Settings\Application Data\ ~ %StartMenu% : C:\Documents and Settings\user\Menu Démarrer\ ~ %Windir% : C:\WINDOWS\ ~ %System% : C:\WINDOWS\system32\ ---\\ Enumération des unités disques A: Floppy drive, Flash card reader, USB Key (Not Inserted) C: Hard drive, Flash drive, Thumb drive (Free 2 Go of 373 Go) D: CD-ROM drive (Not Inserted) E: Floppy drive, Flash card reader, USB Key (Free 1 Go of 2 Go) ---\\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date ~ Security Center: 44 Scanned in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824] [MD5.56A4B6CCE17EF57E9D5A2E56E062BE83] - (.Microsoft Corporation - Internet Extensions for Win32.) (.25/07/2013 - 19:07:52.) -- C:\WINDOWS\system32\wininet.dll [841216] [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000] [MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496] [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 19:40:30.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512] [MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 20:14:21.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744] [MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 19:40:46.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976] [MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 02:57:38.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672] [MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 17:36:05.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384] [MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 03:00:52.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144] [MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 19:40:58.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112] [MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 19:57:15.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832] [MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 20:19:42.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264] [MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320] [MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 20:21:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816] [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 20:15:53.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976] [MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 03:09:40.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384] [MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 20:19:43.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328] [MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 19:32:51.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224] [MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/04/2008 - 02:57:34.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752] [MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 02:56:04.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376] ~ Generic Processes: Scanned in 00mn 01s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/644 ~ Mes musiques (My Musics) : 1/102 ~ Mes Videos (My Videos) : 2/4 ~ Mes Favoris (My Favorites) : 1/4 ~ Mes Documents (My Documents) : 1/832 ~ Mon Bureau (My Desktop) : 0/1502 ~ Menu demarrer (Programs) : 1/37 ~ Hidden Files: Scanned in 00mn 19s ---\\ Processus lancés [MD5.FE79366FECD444A16CCA9979134DBEA8] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376] [PID.1676] [MD5.115332A83AC2726FA974D30DB4BFD8DE] - (.Analog Devices, Inc. - SMax4PNP.) -- C:\Program Files\Analog Devices\Core\smax4pnp.exe [925696] [PID.196] [MD5.617FA5BE646B5E8D6670FD4710ACD2D3] - (.Adobe Systems Incorporated - Adobe Photoshop Album Starter Edition 3.0 c.) -- C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe [57344] [PID.188] [MD5.9ACE8ECDB1EBC519F48AA65DE5875573] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [202256] [PID.224] [MD5.407811B64B588FE80FA2E27E783B41EA] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421160] [PID.544] [MD5.AC116F16A7716A720A45D7EA47CFD983] - (.Hewlett-Packard Co. - Hewlett-Packard Product Assistant.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152] [PID.592] [MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [254336] [PID.632] [MD5.FDE9C7030FB1E9E2715E113EE6A10F90] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376] [PID.1032] [MD5.DD231039B13EC2ABDE315D76E658EF0E] - (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600] [PID.1084] [MD5.70D7BE78061126DD0C3ACCDB7E129017] - (.Apple Inc. - Apple Mobile Device Service.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [144672] [PID.1216] [MD5.90B0AEA1FFA2CAC78C2CB64BDEFE3C4B] - (.Orange - Executable Orange Inside.) -- C:\Documents and Settings\user\Application Data\Orange\OrangeInside\one\OrangeInside.exe [1526272] [PID.1372] [MD5.143ECB242AF6ECE366AB477828E29D44] - (...) -- C:\Program Files\Orange\Orange Installer\OrangeInstaller.exe [561320] [PID.1420] [MD5.80A79264302910C7C24BA7E44267EFEF] - (.Oracle Corporation - Java Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe [182696] [PID.1820] [MD5.B03E3F64B70F8031E65EB26DA23DE91A] - (.Microsoft Corporation - MsCamSvc.exe.) -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe [135536] [PID.1308] [MD5.F80EEC5E1D6CDF82CB974DAADA0C57DD] - (.Microsoft Corporation - SQL Server Windows NT.) -- C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [7520337] [PID.1508] [MD5.9D84376931440F3679BEEF2A414FA493] - (.HP - PML Driver.) -- C:\WINDOWS\system32\HPZipm12.exe [69632] [PID.460] [MD5.6F1E9AB820B3DD8BD38C0190A206205D] - (.Avira Operations GmbH & Co. KG - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [431672] [PID.2972] [MD5.32CDEDD15E2D1A557CD54552AE78FF86] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [820008] [PID.2776] [MD5.B4E9F15D76BFAFE5A77E148BCC63E0AF] - (...) -- C:\Program Files\VideoLAN\VLC\vlc.exe [107008] [PID.1256] [MD5.831347571C0F5006CE3913D32F21AB69] - (.Microsoft Corporation - Contrôle du volume.) -- C:\WINDOWS\system32\SNDVOL32.exe [139264] [PID.1248] [MD5.045795EEAF3E00EAA83B15DEDF58D140] - (.Pas de propriétaire - MegaUploader.) -- C:\Program Files\MegaUploader\MegaUploader.exe [1580536] [PID.3100] [MD5.1EEA6C1B35191DC177EA83672B9C3FC0] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [275568] [PID.4032] [MD5.0DD74786D22EDFF0CE5B8E1B1E398618] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [18544] [PID.3172] [MD5.4C9D9C380E70FF2103E5C33EDF7599AD] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8334336] [PID.2944] ~ Processes Running: Scanned in 00mn 03s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences G1 - GCS: Preference [User Data\Default] None G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Googleu00A0Store v.0.2 (Activé) G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Documents Google v.0.5 (Activé) G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Googleu00A0Drive v.6.3 (Activé) G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.6 (Activé) G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.20 (Activé) G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé) G2 - GCE: Preference [User Data\Default] [gfdkimpbcpahaombhbimeihdjnejgicl] Feedback v.1.0 (Activé) G2 - GCE: Preference [User Data\Default] [jafdhbipfdlldljdanpnlipdinjcjjid] Portail Orange v.1.0 (Désactivé) G2 - GCE: Preference [User Data\Default] [jfmjfhklogoienhpfnppmbcbjfjnkonk] RealPlayer HTML5Video Downloader Extension v.1.2 (Désactivé) G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Googleu00A0Wallet v.0.0.6.0 (Activé) G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé) ~ Google Browser: 15 Scanned in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\prefs.js C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\phldj2i4.default-1383691851078\prefs.js (.not file.) P2 - FPN:Firefox Plugin Navigator . (.DivX,Inc. - DivX Web Player version 1.4.2.7.) -- C:\Program Files\Mozilla Firefox\Plugins\npdivx32.dll P2 - FPN:Firefox Plugin Navigator . (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\Mozilla Firefox\Plugins\npDivxPlayerPlugin.dll P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - 1.9.0009.1.) -- C:\Program Files\Mozilla Firefox\Plugins\npLegitCheckPlugin.dll P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - 1.6.0028.1.) -- C:\Program Files\Mozilla Firefox\Plugins\npOGAPlugin.dll P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 8.3.1.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Mozilla Firefox\Plugins\nppl3260.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Mozilla Firefox\Plugins\nprjplug.dll P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - 6.0.12.775.) -- C:\Program Files\Mozilla Firefox\Plugins\nprpjplug.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 1.4.2.7.) -- C:\Program Files\DivX\DivX Web Player\npdivx32.dll P2 - FPN: [HKLM] [@divx.com/DivX Content Upload Plugin,version=1.0.0] - (.DivX,Inc. - DivX® Content Upload Plugin.) -- C:\Program Files\DivX\DivX Content Uploader\npUpload.dll P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll P2 - FPN: [HKLM] [@google.com/npPicasa2,version=2.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Picasa2\npPicasa2.dll P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.45.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.45.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.45.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20513.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@pack.google.com/Google Updater;version=14] - (.Google - Google Updater plugin
http://pack.) -- C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.775] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.775] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=1.0.0.0] - (.RealNetworks, Inc. - RealPlayer(tm) HTML5VideoShim Plug-In.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.775] - (.RealNetworks, Inc. - 6.0.12.775.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll ~ Firefox Browser: 32 Scanned in 00mn 02s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2 ~ IE Browser: 8 Scanned in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 3 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll =>Toolbar.Google O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll ~ BHO: 10 Scanned in 00mn 02s ---\\ Autres liens utilisateurs (O4) O4 - GS\Program [AllUsers]: Adobe Photoshop Album Starter Edition 3.0.lnk . (.Adobe Systems Incorporated - Adobe Photoshop Album Starter Edition 3.0.) -- C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\Photoshop Album Starter Edition.exe O4 - GS\Program [AllUsers]: Adobe Reader 8.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A83000000003}\SC_Reader.exe O4 - GS\Program [AllUsers]: Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{C41300B9-185D-475E-BFEC-39EF732F19B1}\AppleSoftwareUpdateIco.exe =>.Apple Inc O4 - GS\Program [AllUsers]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O4 - GS\Program [AllUsers]: Safari.lnk . (...) -- C:\WINDOWS\Installer\{C9D96682-5A4D-45FA-BA3E-DDCB2B0CB868}\SafariIco.exe O4 - GS\Program [AllUsers]: Visionneuse Microsoft PowerPoint .lnk . (...) -- C:\WINDOWS\Installer\{95140000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe O4 - GS\Program [AllUsers]: Windows Movie Maker.lnk . (.Microsoft Corporation - Windows Movie Maker.) -- C:\Program Files\Movie Maker\moviemk.exe =>.Microsoft Corporation O4 - GS\Program [user]: Assistance à distance.lnk . (.Microsoft Corporation - Assistance à distance Microsoft.) -- C:\WINDOWS\system32\rcimlby.exe =>.Microsoft Corporation O4 - GS\Program [user]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\Program [user]: Outlook Express.lnk . (.Microsoft Corporation - Outlook Express.) -- C:\Program Files\Outlook Express\msimn.exe =>.Microsoft Corporation O4 - GS\Program [user]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) -- C:\Program Files\Windows Media Player\wmplayer.exe =>.Microsoft Corporation ~ Global Startup: 12 Scanned in 00mn 01s ---\\ Applications lancées au démarrage du sytème (O4) O4 - GS\Program [user]: OpenOffice.org 2.1.lnk . (...) -- C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] . (.Windows (R) Server 2003 DDK provider - High Definition Audio Property Page Shortcu.) -- C:\WINDOWS\system32\HDAShCut.exe O4 - HKLM\..\Run: [SoundMAXPnP] . (.Analog Devices, Inc. - SMax4PNP.) -- C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] . (.Adobe Systems Incorporated - Adobe Photoshop Album Starter Edition 3.0 c.) -- C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe =>.RealNetworks, Inc O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKLM\..\Run: [LifeCam] . (.Microsoft Corporation - LifeExp.exe.) -- C:\Program Files\Microsoft LifeCam\LifeExp.exe O4 - HKLM\..\Run: [MSConfig] . (.Microsoft Corporation - Utilitaire de configuration système.) -- C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.exe O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe O4 - HKLM\..\Run: [NeroFilterCheck] . (.Nero AG - NeroCheck.) -- C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard Co. - Hewlett-Packard Product Assistant.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Co O4 - HKLM\..\Run: [Google Desktop Search] . (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe =>.Oracle Corporation O4 - HKLM\..\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [orangeinside] . (.Orange - Executable Orange Inside.) -- C:\Documents and Settings\user\Application Data\Orange\OrangeInside\one\OrangeInside.exe O4 - HKCU\..\Run: [Orange Installer] . (...) -- C:\Program Files\Orange\Orange Installer\OrangeInstaller.exe O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe =>P2P.BitTorrent O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-21-343818398-1563985344-839522115-1004\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe O4 - HKUS\S-1-5-21-343818398-1563985344-839522115-1004\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-21-343818398-1563985344-839522115-1004\..\Run: [orangeinside] . (.Orange - Executable Orange Inside.) -- C:\Documents and Settings\user\Application Data\Orange\OrangeInside\one\OrangeInside.exe O4 - HKUS\S-1-5-21-343818398-1563985344-839522115-1004\..\Run: [Orange Installer] . (...) -- C:\Program Files\Orange\Orange Installer\OrangeInstaller.exe O4 - HKUS\S-1-5-21-343818398-1563985344-839522115-1004\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe =>P2P.BitTorrent ~ Application: Scanned in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -- Clé orpheline ~ IE Extra Buttons: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation ~ Winsock: 3 Scanned in 00mn 00s ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} ((no name)) - http://download.microsoft.com/download/8/b/d/8bd77752-5704-4d68-a152-f7252adaa4f2/LegitCheckControl.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab ~ Objets ActiveX: Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{60BFEBE5-83C3-4A28-9027-184A4EBC846B}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{60BFEBE5-83C3-4A28-9027-184A4EBC846B}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS3\Services\Tcpip\..\{60BFEBE5-83C3-4A28-9027-184A4EBC846B}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll ~ Winlogon: Scanned in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll ~ SSODL: 5 Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc O23 - Service: Google Software Updater (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation - Java Quick Starter Service.) - C:\Program Files\Java\jre7\bin\jqs.exe O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 82.05.) - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 (Pml Driver HPZ12) . (.HP - PML Driver.) - C:\WINDOWS\system32\HPZipm12.exe ~ Services: 10 Scanned in 00mn 08s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Desktop Component 0: (no name) - file:http://omega.xetaz.net/adimage.php?filename=120x60-1.gif&contenttype=gif O24 - Desktop Component 1: (no name) - file:http://growguide.info/GrowGuideV3/images/blank.gif O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Desktop Component: 4 Scanned in 00mn 00s ---\\ Enumère les données de BootExecute (BEX) (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ BEX: 1 Scanned in 00mn 00s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job [284] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Google Software Updater.job [1000] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1048] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1052] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\HPpromotions journeysoftware.job [364] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-343818398-1563985344-839522115-1004.job [276] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-343818398-1563985344-839522115-1004.job [284] ~ Scheduled Task: 8 Scanned in 00mn 00s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: IE7 Uninstall Stub - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe =>.Microsoft Corporation O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe =>.Microsoft Corporation O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.6.0_07\bin\regutils.dll O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll =>.Microsoft Corporation O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll =>.Microsoft Corporation O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp11.inf =>.Microsoft Corporation O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe O40 - ASIC: Adobe Flash Player 9 ActiveX - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.9 r900.) -- C:\WINDOWS\system32\Macromed\Flash\Flash32_11_9_900_170.ocx O40 - ASIC: Installed Component - S-1-5-21-343818398-1563985344-839522115-1004 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexadécimal CLSID O40 - ASIC: Installed Component - S-1-5-21-343818398-1563985344-839522115-1004 - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS -- Not Hexadécimal CLSID ~ Active Setup: 22 Scanned in 00mn 01s ---\\ Pilotes lancés au démarrage du système (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys O41 - Driver: (AmdK8) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys O41 - Driver: (avipbb) . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - C:\WINDOWS\system32\DRIVERS\avipbb.sys O41 - Driver: (avkmgr) . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - C:\WINDOWS\system32\DRIVERS\avkmgr.sys O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys O41 - Driver: (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\processr.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys O41 - Driver: Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (WS2IFSL) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\WINDOWS\system32\drivers\ws2ifsl.sys ~ Drivers: 75 Scanned in 00mn 01s ---\\ Logiciels installés (O42) O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {A0087DDE-69D0-11E2-AD57-43CA6188709B} O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader 8.3.1 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A83000000003} O42 - Logiciel: Adobe® Photoshop® Album Starter Edition 3.0 - (.Adobe Systems, Inc..) [HKLM] -- {4BDFD2CE-6329-42E4-9801-9B3D1F10D79B} O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {DAEAFD68-BB4A-4507-A241-C8804D2EA66D} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {CCA1EEA3-555E-4D05-AC46-4B49C6C5D887} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {C41300B9-185D-475E-BFEC-39EF732F19B1} =>.Apple Inc O42 - Logiciel: Assistance Livebox - (.Orange.) [HKLM] -- Assistance Livebox O42 - Logiciel: Athlon 64 Processor Driver - (...) [HKLM] -- {C151CE54-E7EA-4804-854B-F515368B0798} O42 - Logiciel: AusLogics Disk Defrag - (.AusLogics, Inc..) [HKLM] -- {DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1 O42 - Logiciel: Avira Free Antivirus v14.0.2.286 - (.Avira.) [HKLM] -- Avira AntiVir Desktop O42 - Logiciel: BurnInTest v5.1 Pro - (.Passmark Software.) [HKLM] -- BurnInTest_is1 O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>Piriform Ltd O42 - Logiciel: DVD Decoder Pak for Windows XP - (.roddy2000@hotbox.ru.) [HKLM] -- {92C5DB3D-9D6F-4324-BB11-57825F4C2635} O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9} O42 - Logiciel: DivX Player - (.DivXNetworks, Inc..) [HKLM] -- {8ADFC4160D694100B5B8A22DE9DCABD9} O42 - Logiciel: DivX Web Player - (.DivX,Inc..) [HKLM] -- {B7050CBDB2504B34BC2A9CA0A692CC29} O42 - Logiciel: Free PDF to Word Converter 1.5 - (.Free-PDF-to-Word.com.) [HKLM] -- Free PDF to Word Converter_is1 O42 - Logiciel: GTK+ 2.4.14 runtime environment - (.Tor Lillqvist.) [HKLM] -- WinGTK-2_is1 O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop O42 - Logiciel: Google Toolbar for Firefox - (.Google.) [HKLM] -- {2CCBABCB-6427-4A55-B091-49864623C43F} =>Toolbar.Google O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: HP PSC & OfficeJet 5.3.A - (.HP.) [HKLM] -- {3E386744-10FA-44b2-98C9-DF7A270DECB3} O42 - Logiciel: HP Software Update - (.Hewlett-Packard.) [HKLM] -- {15EE79F4-4ED1-4267-9B0F-351009325D7D} =>.Hewlett-Packard Co O42 - Logiciel: HP Solution Center & Imaging Support Tools 5.3 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2 O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399 O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5 O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5 O42 - Logiciel: Image Resizer Powertoy for Windows XP - (.Microsoft Corporation.) [HKLM] -- {1CB92574-96F2-467B-B793-5CEB35C40C29} O42 - Logiciel: InterActual Player - (...) [HKLM] -- InterActual Player O42 - Logiciel: J2SE Runtime Environment 5.0 Update 11 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150110} O42 - Logiciel: Java 7 Update 45 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217045FF} O42 - Logiciel: Java(TM) 6 Update 2 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160020} O42 - Logiciel: Java(TM) 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070} O42 - Logiciel: K-Lite Mega Codec Pack 4.6.2 - (...) [HKLM] -- KLiteCodecPack_is1 O42 - Logiciel: Lecteur Windows Media 11 - (...) [HKLM] -- Windows Media Player =>.Microsoft Corporation O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: MadOnion.com/3DMark2001 SE - (...) [HKLM] -- {91B323B5-A79C-4D23-BD6D-046C565F9BCF} O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: MegaUploader 0.7 - (.Andres_age.) [HKLM] -- {F8998339-B2FD-4E93-9A5D-623760D305A1}}_is1 O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1 O42 - Logiciel: Microsoft Corporation - (.Microsoft Corporation.) [HKLM] -- {B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800} O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 - (.Microsoft Corporation.) [HKLM] -- Wdf01009 O42 - Logiciel: Microsoft LifeCam - (.Microsoft Corporation.) [HKLM] -- {BD71B413-9FEE-49BB-A6D1-2C0BFB99BDFE} O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000 O42 - Logiciel: Mozilla Firefox 26.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 26.0 (x86 fr) O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService O42 - Logiciel: Multimedia Tools - Audacity - (...) [HKLM] -- Multimedia Tools - Audacity O42 - Logiciel: NVIDIA Drivers - (...) [HKLM] -- NVIDIA Drivers O42 - Logiciel: Nero 7 Essentials - (.Nero AG.) [HKLM] -- {46532C8D-D707-4D35-B1C1-04811B8F1036} O42 - Logiciel: Notification Mail - (.Orange.) [HKLM] -- MailNotifier O42 - Logiciel: OpenOffice.org 2.1 - (.OpenOffice.org.) [HKLM] -- {E5430A11-6799-41E0-A9D5-F68BDC67AAD8} O42 - Logiciel: Orange Inside - (.Orange.) [HKCU] -- Orange Inside O42 - Logiciel: Orange Installer - (.Orange.) [HKLM] -- Orange Installer O42 - Logiciel: Philips Intelligent Agent - (.Philips.) [HKLM] -- Philips Intelligent Agent_is1 O42 - Logiciel: Picasa 2 - (.Google, Inc..) [HKLM] -- Picasa2 O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {E7004147-2CCA-431C-AA05-2AB166B9785D} O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0 O42 - Logiciel: RealUpgrade 1.0 - (.RealNetworks, Inc..) [HKLM] -- {F4F4F84E-804F-4E9A-84D7-C34283F0088F} O42 - Logiciel: Recuva - (.Piriform.) [HKLM] -- Recuva O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {C9D96682-5A4D-45FA-BA3E-DDCB2B0CB868} O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: SoundMAX - (.Analog Devices.) [HKLM] -- {F0A37341-D692-11D4-A984-009027EC0A9C} O42 - Logiciel: VLC media player 1.1.7 - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN O42 - Logiciel: Visionneuse Microsoft PowerPoint - (.Microsoft Corporation.) [HKLM] -- {95140000-00AF-040C-0000-0000000FF1CE} O42 - Logiciel: WinPcap 4.1.2 - (.CACE Technologies.) [HKLM] -- WinPcapInst O42 - Logiciel: WinRAR 5.00 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- WGA O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7 O42 - Logiciel: Windows Media Format 11 runtime - (...) [HKLM] -- Windows Media Format Runtime O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11 O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11 =>.Microsoft Corporation O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {2CE5A2E7-3437-4CE7-BCF4-85ED6EEFF9E4} O42 - Logiciel: jv16 PowerTools 1.3 - (...) [HKLM] -- jv16 PowerTools_is1 O42 - Logiciel: msvcrt_installer - (.SAH.) [HKLM] -- {6068A42A-C1CF-45F2-9859-5DB16287FE5D} O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent =>P2P.BitTorrent ~ Logic: 89 Scanned in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\AC3Filter] [HKCU\Software\ALWIL Software] [HKCU\Software\ANI] [HKCU\Software\ASUS] [HKCU\Software\AVAST Software] [HKCU\Software\Adobe] [HKCU\Software\Analog Devices] [HKCU\Software\AnyBizSoft] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\ArcSoft] [HKCU\Software\Audacity] [HKCU\Software\AusLogics] [HKCU\Software\Avg] [HKCU\Software\Avira] [HKCU\Software\Binary Noise] [HKCU\Software\BitTorrent] =>P2P.BitTorrent [HKCU\Software\Bugsplat] [HKCU\Software\CDDB] [HKCU\Software\Classes] [HKCU\Software\ClearProg] [HKCU\Software\Clients] [HKCU\Software\CoreVorbis] [HKCU\Software\Cyberlink] [HKCU\Software\Digital River] [HKCU\Software\DivXNetworks] [HKCU\Software\FRANCE TELECOM] [HKCU\Software\Fabrice BRUCHON] [HKCU\Software\Facebook] [HKCU\Software\Fnac VOD] [HKCU\Software\Fnac] [HKCU\Software\FriendFinder] [HKCU\Software\GSpot Appliance Corp] [HKCU\Software\Gabest] [HKCU\Software\Google] [HKCU\Software\HP] [HKCU\Software\Haali] [HKCU\Software\Heidi Computers Ltd] [HKCU\Software\Hewlett-Packard] [HKCU\Software\HookNetwork] [HKCU\Software\IADirectShow] [HKCU\Software\IM Providers] [HKCU\Software\Intel] [HKCU\Software\InterActual Technologies] [HKCU\Software\JEDI-VCL] [HKCU\Software\JavaSoft] [HKCU\Software\Jetico] [HKCU\Software\Kazaa] [HKCU\Software\Lavalys] [HKCU\Software\Leadertech] [HKCU\Software\Local AppWizard-Generated Applications] [HKCU\Software\Macromedia] [HKCU\Software\MadOnion.com] [HKCU\Software\MainConcept (HCW)] [HKCU\Software\MainConcept] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MediaInfo] [HKCU\Software\Monitored] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\NVIDIA Corporation] [HKCU\Software\Native Instruments] [HKCU\Software\Nero] [HKCU\Software\Netscape] [HKCU\Software\ORANGE] [HKCU\Software\OrangeInside] [HKCU\Software\PC SOFT] [HKCU\Software\PGWARE] [HKCU\Software\Panasonic] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\Propellerhead Software] [HKCU\Software\RealNetworks] [HKCU\Software\RegisteredApplications] [HKCU\Software\Safer Networking Limited] [HKCU\Software\Screenshot Studio for Firefox] [HKCU\Software\SkypeRS] [HKCU\Software\Skype] [HKCU\Software\Trolltech] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VSO] [HKCU\Software\Veoh] [HKCU\Software\VirginMega] [HKCU\Software\WebToGo] [HKCU\Software\Wget] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\Windows Live] [HKCU\Software\Yahoo] [HKCU\Software\ahead] [HKCU\Software\eMule] [HKCU\Software\ej-technologies] [HKCU\Software\fnacVOD] [HKCU\Software\kde.org] [HKCU\Software\keyhole.com] [HKCU\Software\settings] [HKLM\Software\881FCE2C] [HKLM\Software\ACE Compression Software] [HKLM\Software\ALWIL Software] [HKLM\Software\AMD] [HKLM\Software\ANI] [HKLM\Software\ASUS] [HKLM\Software\AVAST Software] [HKLM\Software\AVG] [HKLM\Software\Adobe] [HKLM\Software\AdwCleaner] [HKLM\Software\Alpha Networks] [HKLM\Software\Analog Devices] [HKLM\Software\Andrea Electronics] [HKLM\Software\AnyBizSoft] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\Arobas Music] [HKLM\Software\Audible] [HKLM\Software\Avira] [HKLM\Software\BitDefender Parental Control] [HKLM\Software\Brooktree] [HKLM\Software\BrowserChoice] [HKLM\Software\Bunndle] [HKLM\Software\C07ft5Y] [HKLM\Software\CDDB] [HKLM\Software\Canal+ Active] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Codec Tweak Tool] [HKLM\Software\Cyberlink] [HKLM\Software\D-Link] [HKLM\Software\DivXNetworks] [HKLM\Software\FRANCE TELECOM] [HKLM\Software\FX - Video Converter] [HKLM\Software\Futuremark] [HKLM\Software\GEAR Software] [HKLM\Software\GTK] [HKLM\Software\Gabest] [HKLM\Software\Gemplus] [HKLM\Software\Google] [HKLM\Software\HP] [HKLM\Software\HaaliMkx] [HKLM\Software\Hauppauge] [HKLM\Software\Hewlett-Packard] [HKLM\Software\InstallShield] [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\InterActual Technologies] [HKLM\Software\InterVideo] [HKLM\Software\JavaSoft] [HKLM\Software\Jetico] [HKLM\Software\JreMetrics] [HKLM\Software\KLCodecPack] [HKLM\Software\Khronos] [HKLM\Software\Licenses] [HKLM\Software\MDC] [HKLM\Software\Macromedia] [HKLM\Software\MadOnion.com] [HKLM\Software\Malwarebytes' Anti-Malware (Trial)] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\McAfee.com] [HKLM\Software\MegaUploader] [HKLM\Software\MeuhMeuhTV] [HKLM\Software\MimarSinan] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\NVIDIA Corporation] [HKLM\Software\Native Instruments] [HKLM\Software\Nero] [HKLM\Software\ODBC] [HKLM\Software\OpenOffice.org] [HKLM\Software\Orange] [HKLM\Software\Panasonic] [HKLM\Software\Panda Software] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Program Groups] [HKLM\Software\Propellerhead Software] [HKLM\Software\RealNetworks] [HKLM\Software\RegisteredApplications] [HKLM\Software\RichFX] [HKLM\Software\S3R521] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Sagem] [HKLM\Software\Save_Uninstall] [HKLM\Software\Schlumberger] [HKLM\Software\Sensaura] [HKLM\Software\Skype] [HKLM\Software\Sony Corporation] [HKLM\Software\Sony Media Software] [HKLM\Software\Staccato] [HKLM\Software\Sun Microsystems] [HKLM\Software\VSO] [HKLM\Software\VideoLAN] [HKLM\Software\WinPcap] [HKLM\Software\WinRAR] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\Windows] [HKLM\Software\Wow6432Node] [HKLM\Software\X-AVCSD] [HKLM\Software\Xing Technology Corp.] [HKLM\Software\XnView] [HKLM\Software\Yahoo] [HKLM\Software\ahead] [HKLM\Software\ej-technologies] [HKLM\Software\knight] [HKLM\Software\mozilla.org] [HKLM\Software\webtogo] [HKLM\Software\x264 Video Codec] ~ Key Software: 387 Scanned in 00mn 01s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 08/11/2013 - 18:05:12 - [0] ----D C:\Program Files\7-Zip O43 - CFD: 11/03/2012 - 19:54:23 - [138,656] ----D C:\Program Files\Adobe O43 - CFD: 03/11/2013 - 15:21:21 - [0] ----D C:\Program Files\Alwil Software O43 - CFD: 01/02/2007 - 18:54:29 - [0,119] ----D C:\Program Files\AMD O43 - CFD: 01/02/2007 - 18:53:15 - [4,261] ----D C:\Program Files\Analog Devices O43 - CFD: 19/10/2010 - 17:51:38 - [2,200] ----D C:\Program Files\Apple Software Update =>.Apple Inc O43 - CFD: 25/11/2008 - 23:47:42 - [0] ----D C:\Program Files\ArcSoft O43 - CFD: 12/06/2013 - 01:00:30 - [0,444] ----D C:\Program Files\Athan O43 - CFD: 22/08/2007 - 12:08:53 - [5,836] ----D C:\Program Files\AusLogics Disk Defrag O43 - CFD: 03/11/2013 - 16:01:05 - [259,118] ----D C:\Program Files\Avira O43 - CFD: 03/11/2013 - 15:15:21 - [0] ----D C:\Program Files\Bitdefender O43 - CFD: 01/02/2007 - 19:32:51 - [4,390] ----D C:\Program Files\BurnInTest O43 - CFD: 19/10/2010 - 16:14:09 - [2,881] ----D C:\Program Files\CCleaner =>Piriform Ltd O43 - CFD: 01/02/2007 - 18:30:52 - [0] ----D C:\Program Files\ComPlus Applications O43 - CFD: 09/10/2007 - 14:12:05 - [0] ----D C:\Program Files\D-Link O43 - CFD: 20/02/2009 - 13:57:05 - [54,972] ----D C:\Program Files\DivX O43 - CFD: 02/11/2013 - 09:50:11 - [540,283] ----D C:\Program Files\Fichiers communs O43 - CFD: 29/10/2010 - 15:04:46 - [1,447] ----D C:\Program Files\Free PDF to Word Converter O43 - CFD: 19/07/2013 - 00:40:39 - [0,001] ----D C:\Program Files\GIMP-2.0 O43 - CFD: 06/11/2013 - 06:54:20 - [496,313] ----D C:\Program Files\Google O43 - CFD: 10/11/2007 - 14:49:55 - [2,093] ----D C:\Program Files\Hewlett-Packard O43 - CFD: 10/11/2007 - 14:53:56 - [178,525] ----D C:\Program Files\HP O43 - CFD: 24/07/2011 - 19:23:32 - [16,489] --H-D C:\Program Files\InstallShield Installation Information O43 - CFD: 05/02/2008 - 12:24:07 - [6,970] ----D C:\Program Files\InterActual O43 - CFD: 10/07/2013 - 05:20:45 - [3,719] ----D C:\Program Files\Internet Explorer O43 - CFD: 19/10/2010 - 17:53:49 - [1,770] ----D C:\Program Files\iPod O43 - CFD: 19/10/2010 - 17:54:19 - [119,032] ----D C:\Program Files\iTunes O43 - CFD: 26/10/2013 - 20:19:33 - [308,514] ----D C:\Program Files\Java O43 - CFD: 18/03/2008 - 22:49:35 - [2,731] ----D C:\Program Files\jv16 PowerTools O43 - CFD: 16/10/2010 - 18:28:35 - [41,815] ----D C:\Program Files\K-Lite Codec Pack O43 - CFD: 13/04/2009 - 16:13:29 - [0] ----D C:\Program Files\Lavasoft O43 - CFD: 01/02/2007 - 19:31:27 - [93,905] ----D C:\Program Files\MadOnion.com O43 - CFD: 01/11/2013 - 16:20:07 - [13,251] ----D C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 10/01/2014 - 02:18:07 - [2,566] ----D C:\Program Files\MegaUploader O43 - CFD: 12/03/2008 - 12:03:46 - [0,764] ----D C:\Program Files\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 01/02/2007 - 18:34:05 - [0] ----D C:\Program Files\microsoft frontpage O43 - CFD: 30/12/2011 - 13:09:44 - [30,381] ----D C:\Program Files\Microsoft LifeCam O43 - CFD: 15/12/2010 - 11:42:11 - [32,718] ----D C:\Program Files\Microsoft Office O43 - CFD: 26/06/2013 - 07:33:21 - [40,851] ----D C:\Program Files\Microsoft Silverlight O43 - CFD: 23/01/2009 - 20:52:54 - [13,114] ----D C:\Program Files\Microsoft SQL Server O43 - CFD: 28/08/2008 - 20:19:09 - [1,745] ----D C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 10/06/2013 - 15:20:38 - [0,023] ----D C:\Program Files\Microsoft.NET O43 - CFD: 05/02/2012 - 15:14:42 - [15,353] ----D C:\Program Files\Movie Maker O43 - CFD: 25/11/2013 - 09:24:04 - [58,767] ----D C:\Program Files\Mozilla Firefox O43 - CFD: 25/11/2013 - 16:21:14 - [0,216] ----D C:\Program Files\Mozilla Maintenance Service O43 - CFD: 25/10/2010 - 01:49:12 - [0,025] ----D C:\Program Files\MSBuild O43 - CFD: 14/12/2008 - 17:18:34 - [64,741] ----D C:\Program Files\MSECache O43 - CFD: 01/02/2007 - 18:30:10 - [8,341] ----D C:\Program Files\MSN Gaming Zone O43 - CFD: 12/03/2008 - 12:01:39 - [0] ----D C:\Program Files\MSXML 4.0 O43 - CFD: 21/10/2010 - 10:22:15 - [34,633] ----D C:\Program Files\MultimediaTools O43 - CFD: 11/07/2008 - 16:00:45 - [500,208] ----D C:\Program Files\Nero O43 - CFD: 06/09/2008 - 09:25:28 - [3,133] ----D C:\Program Files\NetMeeting O43 - CFD: 09/06/2013 - 04:39:17 - [75,346] ----D C:\Program Files\NVIDIA Corporation O43 - CFD: 01/02/2007 - 18:30:19 - [0,002] ----D C:\Program Files\Online Services O43 - CFD: 01/02/2007 - 15:00:50 - [251,627] ----D C:\Program Files\OpenOffice.org 2.1 O43 - CFD: 08/06/2013 - 22:53:12 - [237,460] ----D C:\Program Files\Orange O43 - CFD: 16/12/2010 - 20:24:36 - [4,176] ----D C:\Program Files\Outlook Express =>.Microsoft Corporation O43 - CFD: 11/07/2008 - 16:06:58 - [2,295] ----D C:\Program Files\Philips O43 - CFD: 08/10/2008 - 18:00:24 - [35,347] ----D C:\Program Files\Picasa2 O43 - CFD: 22/05/2011 - 16:24:17 - [1,442] ----D C:\Program Files\POP Peeper O43 - CFD: 19/10/2010 - 17:53:18 - [72,801] ----D C:\Program Files\QuickTime O43 - CFD: 17/10/2010 - 11:52:52 - [86,518] ----D C:\Program Files\Real O43 - CFD: 01/01/2014 - 17:38:33 - [5,014] ----D C:\Program Files\Recuva O43 - CFD: 25/10/2010 - 01:49:06 - [34,730] ----D C:\Program Files\Reference Assemblies O43 - CFD: 12/11/2008 - 14:58:38 - [60,010] ----D C:\Program Files\Safari O43 - CFD: 11/07/2008 - 16:18:07 - [49,633] ----D C:\Program Files\Securitoo O43 - CFD: 01/02/2007 - 18:32:41 - [0,001] ----D C:\Program Files\Services en ligne O43 - CFD: 07/10/2009 - 14:53:31 - [55,130] ----D C:\Program Files\Sony O43 - CFD: 23/01/2009 - 13:04:46 - [106,033] ----D C:\Program Files\Sony Setup O43 - CFD: 19/07/2013 - 03:52:50 - [11,179] ----D C:\Program Files\Spybot - Search & Destroy O43 - CFD: 19/07/2013 - 04:51:56 - [0] ----D C:\Program Files\Trend Micro O43 - CFD: 23/01/2009 - 20:47:57 - [0] --H-D C:\Program Files\Uninstall Information O43 - CFD: 13/10/2008 - 16:56:09 - [81,453] ----D C:\Program Files\VideoLAN O43 - CFD: 12/06/2013 - 01:06:30 - [0] ----D C:\Program Files\Windows Live O43 - CFD: 12/04/2009 - 17:39:41 - [3,419] ----D C:\Program Files\Windows Media Connect 2 O43 - CFD: 20/02/2009 - 15:12:06 - [20,617] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation O43 - CFD: 06/09/2008 - 09:25:25 - [3,760] ----D C:\Program Files\Windows NT O43 - CFD: 01/02/2007 - 18:32:44 - [0] --H-D C:\Program Files\WindowsUpdate O43 - CFD: 08/06/2013 - 22:50:46 - [0,180] ----D C:\Program Files\WinPcap O43 - CFD: 08/11/2013 - 05:40:18 - [4,837] ----D C:\Program Files\WinRAR O43 - CFD: 14/07/2013 - 22:10:48 - [18,339] ----D C:\Program Files\x264 Video Codec O43 - CFD: 01/02/2007 - 18:34:05 - [0] ----D C:\Program Files\xerox O43 - CFD: 12/10/2011 - 21:16:56 - [0,146] ----D C:\Program Files\Yahoo! O43 - CFD: 10/01/2014 - 09:44:23 - [17,252] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman O43 - CFD: 16/10/2011 - 08:47:23 - [11,959] ----D C:\Program Files\Fichiers communs\Adobe O43 - CFD: 08/06/2013 - 22:50:16 - [45,604] ----D C:\Program Files\Fichiers communs\Adobe AIR O43 - CFD: 11/07/2008 - 16:04:46 - [113,607] ----D C:\Program Files\Fichiers communs\Ahead O43 - CFD: 19/10/2010 - 17:53:48 - [76,319] ----D C:\Program Files\Fichiers communs\Apple O43 - CFD: 25/11/2008 - 23:47:39 - [0] ----D C:\Program Files\Fichiers communs\ArcSoft O43 - CFD: 03/11/2013 - 12:10:59 - [5,058] ----D C:\Program Files\Fichiers communs\Bitdefender O43 - CFD: 09/06/2007 - 11:34:13 - [13,087] ----D C:\Program Files\Fichiers communs\GTK O43 - CFD: 10/11/2007 - 14:49:02 - [0,260] ----D C:\Program Files\Fichiers communs\Hewlett-Packard O43 - CFD: 01/02/2007 - 19:31:18 - [15,257] ----D C:\Program Files\Fichiers communs\InstallShield O43 - CFD: 26/10/2013 - 20:20:57 - [57,765] ----D C:\Program Files\Fichiers communs\Java O43 - CFD: 17/07/2013 - 02:24:09 - [119,295] ----D C:\Program Files\Fichiers communs\Microsoft Shared O43 - CFD: 01/02/2007 - 18:31:44 - [0,271] ----D C:\Program Files\Fichiers communs\MSSoap O43 - CFD: 01/02/2007 - 19:22:57 - [0] ----D C:\Program Files\Fichiers communs\ODBC O43 - CFD: 17/10/2010 - 11:53:06 - [19,964] ----D C:\Program Files\Fichiers communs\Real O43 - CFD: 01/02/2007 - 18:31:49 - [0,008] ----D C:\Program Files\Fichiers communs\Services O43 - CFD: 01/02/2007 - 19:22:54 - [3,612] ----D C:\Program Files\Fichiers communs\SpeechEngines O43 - CFD: 06/09/2008 - 09:25:23 - [6,496] ----D C:\Program Files\Fichiers communs\System O43 - CFD: 17/10/2010 - 15:09:57 - [0] ----D C:\Program Files\Fichiers communs\Windows Live O43 - CFD: 28/08/2008 - 20:15:37 - [51,386] -SH-D C:\Program Files\Fichiers communs\WindowsLiveInstaller O43 - CFD: 17/10/2010 - 11:52:49 - [0,336] ----D C:\Program Files\Fichiers communs\xing shared O43 - CFD: 12/10/2012 - 17:43:44 - [10,213] ----D C:\Documents and Settings\All Users\Application Data\Adobe O43 - CFD: 11/07/2008 - 16:05:24 - [0] ----D C:\Documents and Settings\All Users\Application Data\Ahead O43 - CFD: 22/12/2010 - 13:17:42 - [43,577] ----D C:\Documents and Settings\All Users\Application Data\Alwil Software O43 - CFD: 22/03/2008 - 00:39:21 - [36,522] ----D C:\Documents and Settings\All Users\Application Data\Apple O43 - CFD: 22/03/2008 - 00:40:37 - [112,311] ----D C:\Documents and Settings\All Users\Application Data\Apple Computer O43 - CFD: 07/10/2009 - 14:52:09 - [121,286] ----D C:\Documents and Settings\All Users\Application Data\avg8 O43 - CFD: 03/11/2013 - 16:04:29 - [313,073] ----D C:\Documents and Settings\All Users\Application Data\Avira O43 - CFD: 02/11/2013 - 14:49:26 - [8,199] ----D C:\Documents and Settings\All Users\Application Data\BDLogging O43 - CFD: 17/02/2009 - 18:15:42 - [2,520] ----D C:\Documents and Settings\All Users\Application Data\Downloaded Installations O43 - CFD: 17/10/2010 - 11:58:03 - [0,020] ----D C:\Documents and Settings\All Users\Application Data\Google O43 - CFD: 04/10/2011 - 15:09:41 - [0,014] ----D C:\Documents and Settings\All Users\Application Data\Google Updater O43 - CFD: 10/11/2007 - 14:53:55 - [0,003] ----D C:\Documents and Settings\All Users\Application Data\HP O43 - CFD: 07/10/2008 - 20:43:10 - [106,919] ----D C:\Documents and Settings\All Users\Application Data\Installations O43 - CFD: 04/10/2013 - 10:52:51 - [8,061] ----D C:\Documents and Settings\All Users\Application Data\Malwarebytes O43 - CFD: 12/10/2012 - 17:44:39 - [0,005] ----D C:\Documents and Settings\All Users\Application Data\McAfee O43 - CFD: 06/01/2014 - 06:00:14 - [0,353] ----D C:\Documents and Settings\All Users\Application Data\MegaUploader O43 - CFD: 13/07/2013 - 22:05:14 - [6,294] -S--D C:\Documents and Settings\All Users\Application Data\Microsoft O43 - CFD: 25/04/2012 - 11:22:44 - [0] ----D C:\Documents and Settings\All Users\Application Data\Mozilla O43 - CFD: 11/07/2008 - 16:00:45 - [4,715] ----D C:\Documents and Settings\All Users\Application Data\Nero O43 - CFD: 02/02/2007 - 16:23:04 - [0] ----D C:\Documents and Settings\All Users\Application Data\nView_Profiles O43 - CFD: 29/11/2009 - 15:02:07 - [3,216] ----D C:\Documents and Settings\All Users\Application Data\Propellerhead Software O43 - CFD: 22/12/2010 - 13:21:20 - [0,900] ----D C:\Documents and Settings\All Users\Application Data\Real O43 - CFD: 12/06/2013 - 01:10:43 - [72,012] ----D C:\Documents and Settings\All Users\Application Data\Skype O43 - CFD: 10/11/2007 - 14:52:49 - [0] ----D C:\Documents and Settings\All Users\Application Data\Sonic O43 - CFD: 23/01/2009 - 20:54:04 - [0] ----D C:\Documents and Settings\All Users\Application Data\Sony O43 - CFD: 19/07/2013 - 03:56:48 - [0,154] ----D C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy O43 - CFD: 27/10/2010 - 10:29:58 - [0] ----D C:\Documents and Settings\All Users\Application Data\Sun O43 - CFD: 27/04/2011 - 18:53:06 - [0] -SH-D C:\Documents and Settings\All Users\Application Data\System Restore O43 - CFD: 18/07/2013 - 22:48:32 - [0] ---AD C:\Documents and Settings\All Users\Application Data\TEMP O43 - CFD: 01/02/2007 - 13:39:45 - [0,011] ----D C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage O43 - CFD: 02/02/2007 - 22:17:09 - [0,065] ----D C:\Documents and Settings\All Users\Application Data\Windows Live Toolbar O43 - CFD: 29/12/2008 - 16:35:29 - [1,851] ----D C:\Documents and Settings\All Users\Application Data\WLInstaller O43 - CFD: 12/10/2011 - 21:16:51 - [0,005] ----D C:\Documents and Settings\All Users\Application Data\Yahoo! O43 - CFD: 19/10/2010 - 17:54:19 - [0,518] ----D C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521} O43 - CFD: 11/03/2012 - 19:53:50 - [25,417] ----D C:\Documents and Settings\user\Application Data\Adobe O43 - CFD: 04/05/2007 - 08:57:25 - [0,001] ----D C:\Documents and Settings\user\Application Data\AdobeAUM O43 - CFD: 06/09/2008 - 18:12:06 - [0] ----D C:\Documents and Settings\user\Application Data\AdobeUM O43 - CFD: 03/07/2009 - 17:15:48 - [0,121] ----D C:\Documents and Settings\user\Application Data\Ahead O43 - CFD: 20/10/2010 - 14:12:05 - [2,013] ----D C:\Documents and Settings\user\Application Data\Apple Computer O43 - CFD: 06/09/2008 - 18:34:23 - [0] ----D C:\Documents and Settings\user\Application Data\ArcSoft O43 - CFD: 03/11/2013 - 16:14:41 - [0] ----D C:\Documents and Settings\user\Application Data\Avira O43 - CFD: 20/09/2008 - 22:41:06 - [2,562] ----D C:\Documents and Settings\user\Application Data\Azureus =>P2P.Azureus O43 - CFD: 05/06/2011 - 20:44:06 - [1,345] ----D C:\Documents and Settings\user\Application Data\BitTorrent =>P2P.BitTorrent O43 - CFD: 27/04/2011 - 19:24:55 - [0] ----D C:\Documents and Settings\user\Application Data\Capturino O43 - CFD: 18/02/2009 - 23:05:34 - [0,019] ----D C:\Documents and Settings\user\Application Data\codeblocks O43 - CFD: 12/04/2009 - 14:59:58 - [0] ----D C:\Documents and Settings\user\Application Data\Dev-Cpp O43 - CFD: 03/07/2008 - 23:39:23 - [0,013] ----D C:\Documents and Settings\user\Application Data\DivX O43 - CFD: 03/10/2010 - 16:41:18 - [0,016] ----D C:\Documents and Settings\user\Application Data\dvdcss O43 - CFD: 27/04/2011 - 18:53:25 - [1,120] ----D C:\Documents and Settings\user\Application Data\FireShot O43 - CFD: 26/02/2007 - 22:43:19 - [0,021] ----D C:\Documents and Settings\user\Application Data\Google O43 - CFD: 08/03/2011 - 17:39:49 - [0] ----D C:\Documents and Settings\user\Application Data\gtk-2.0 O43 - CFD: 02/02/2007 - 16:50:54 - [0] ----D C:\Documents and Settings\user\Application Data\Help O43 - CFD: 11/11/2007 - 12:18:51 - [0,067] ----D C:\Documents and Settings\user\Application Data\HP O43 - CFD: 01/02/2007 - 18:42:29 - [0] ----D C:\Documents and Settings\user\Application Data\Identities O43 - CFD: 31/03/2007 - 10:45:26 - [0,031] ----D C:\Documents and Settings\user\Application Data\Jetico Personal Firewall O43 - CFD: 20/03/2007 - 19:43:23 - [0,001] ----D C:\Documents and Settings\user\Application Data\Leadertech O43 - CFD: 02/02/2007 - 17:14:11 - [0,059] ----D C:\Documents and Settings\user\Application Data\Macromedia O43 - CFD: 04/10/2013 - 10:54:00 - [0,041] ----D C:\Documents and Settings\user\Application Data\Malwarebytes O43 - CFD: 20/07/2011 - 12:25:13 - [0] ----D C:\Documents and Settings\user\Application Data\Media Player Classic O43 - CFD: 16/10/2012 - 17:30:01 - [9,228] -S--D C:\Documents and Settings\user\Application Data\Microsoft O43 - CFD: 26/08/2008 - 10:23:58 - [25,107] ----D C:\Documents and Settings\user\Application Data\Mozilla O43 - CFD: 07/09/2008 - 15:11:18 - [0] ----D C:\Documents and Settings\user\Application Data\MSNInstaller O43 - CFD: 10/01/2014 - 03:03:45 - [4,379] ----D C:\Documents and Settings\user\Application Data\OpenOffice.org2 O43 - CFD: 08/06/2013 - 18:17:23 - [3,016] ----D C:\Documents and Settings\user\Application Data\Orange O43 - CFD: 06/09/2008 - 15:41:40 - [0] ----D C:\Documents and Settings\user\Application Data\Panasonic O43 - CFD: 19/05/2011 - 21:26:25 - [0,671] ----D C:\Documents and Settings\user\Application Data\Participatory Culture Foundation O43 - CFD: 19/05/2011 - 23:32:12 - [0,400] ----D C:\Documents and Settings\user\Application Data\PCF-VLC O43 - CFD: 29/11/2009 - 15:06:03 - [0,010] ----D C:\Documents and Settings\user\Application Data\Propellerhead Software O43 - CFD: 02/11/2013 - 10:04:49 - [0] ----D C:\Documents and Settings\user\Application Data\QuickScan O43 - CFD: 17/10/2010 - 11:54:45 - [46,183] ----D C:\Documents and Settings\user\Application Data\Real O43 - CFD: 09/06/2013 - 19:33:02 - [31,156] ----D C:\Documents and Settings\user\Application Data\Skype O43 - CFD: 23/01/2009 - 20:54:04 - [0] ----D C:\Documents and Settings\user\Application Data\Sony O43 - CFD: 20/02/2007 - 22:08:54 - [8,627] ----D C:\Documents and Settings\user\Application Data\Sun O43 - CFD: 10/01/2014 - 03:03:38 - [16,590] ----D C:\Documents and Settings\user\Application Data\uTorrent =>P2P.µTorrent O43 - CFD: 11/03/2012 - 19:54:41 - [0,001] ----D C:\Documents and Settings\user\Application Data\VirginMega.DownloadManager.v3.4AE6D9B37411D7D7A2C457954142B8FA4EE6E198.1 O43 - CFD: 31/12/2013 - 17:02:24 - [6,236] ----D C:\Documents and Settings\user\Application Data\vlc O43 - CFD: 03/02/2011 - 21:33:56 - [0,005] ----D C:\Documents and Settings\user\Application Data\VSO O43 - CFD: 08/11/2013 - 05:41:48 - [0] ----D C:\Documents and Settings\user\Application Data\WinRAR O43 - CFD: 21/02/2010 - 22:27:37 - [0,328] ----D C:\Documents and Settings\user\Application Data\XnView O43 - CFD: 30/07/2011 - 10:37:43 - [0,035] ----D C:\Documents and Settings\user\Application Data\Yahoo! O43 - CFD: 10/01/2014 - 09:46:33 - [0,017] ----D C:\Documents and Settings\user\Application Data\ZHP =>.Nicolas Coolman O43 - CFD: 11/03/2012 - 19:53:42 - [0,355] ----D C:\Documents and Settings\user\Local Settings\Application Data\Adobe O43 - CFD: 23/08/2008 - 23:18:51 - [9,680] ----D C:\Documents and Settings\user\Local Settings\Application Data\Ahead O43 - CFD: 22/03/2008 - 00:39:45 - [0] ----D C:\Documents and Settings\user\Local Settings\Application Data\Apple O43 - CFD: 06/02/2007 - 13:12:15 - [91,749] ----D C:\Documents and Settings\user\Local Settings\Application Data\Apple Computer O43 - CFD: 23/01/2009 - 20:54:20 - [0,050] ----D C:\Documents and Settings\user\Local Settings\Application Data\ApplicationHistory O43 - CFD: 06/09/2008 - 15:37:29 - [0] ----D C:\Documents and Settings\user\Local Settings\Application Data\ArcSoft O43 - CFD: 12/06/2013 - 03:04:03 - [0,059] ----D C:\Documents and Settings\user\Local Settings\Application Data\Facebook O43 - CFD: 14/09/2007 - 14:26:06 - [0,001] ----D C:\Documents and Settings\user\Local Settings\Application Data\Glowria O43 - CFD: 13/03/2012 - 13:59:30 - [1371,934] ----D C:\Documents and Settings\user\Local Settings\Application Data\Google O43 - CFD: 02/02/2007 - 16:50:54 - [0] ----D C:\Documents and Settings\user\Local Settings\Application Data\Help O43 - CFD: 11/11/2007 - 12:13:59 - [0,174] ----D C:\Documents and Settings\user\Local Settings\Application Data\HP O43 - CFD: 09/02/2007 - 22:38:32 - [1,664] ----D C:\Documents and Settings\user\Local Settings\Application Data\Identities O43 - CFD: 11/11/2007 - 12:14:08 - [0,001] ----D C:\Documents and Settings\user\Local Settings\Application Data\IsolatedStorage O43 - CFD: 21/06/2013 - 00:23:56 - [6,239] ----D C:\Documents and Settings\user\Local Settings\Application Data\MegaDownloader O43 - CFD: 12/07/2013 - 16:17:47 - [0,772] ----D C:\Documents and Settings\user\Local Settings\Application Data\MegaUploader O43 - CFD: 01/11/2013 - 17:03:36 - [211,559] ----D C:\Documents and Settings\user\Local Settings\Application Data\Microsoft O43 - CFD: 06/02/2007 - 13:09:24 - [17,682] ----D C:\Documents and Settings\user\Local Settings\Application Data\Mozilla O43 - CFD: 08/06/2013 - 22:47:35 - [0] ----D C:\Documents and Settings\user\Local Settings\Application Data\Orange O43 - CFD: 17/10/2010 - 11:54:21 - [0] ----D C:\Documents and Settings\user\Local Settings\Application Data\Real O43 - CFD: 06/02/2011 - 16:28:46 - [0,001] ----D C:\Documents and Settings\user\Local Settings\Application Data\Stefan_Wobbe O43 - CFD: 01/11/2013 - 22:04:21 - [6,912] ----D C:\Documents and Settings\user\Local Settings\Application Data\Sun O43 - CFD: 17/10/2012 - 00:04:58 - [0] ----D C:\Documents and Settings\user\Local Settings\Application Data\Temp O43 - CFD: 04/02/2012 - 21:28:43 - [0] ----D C:\Documents and Settings\user\Local Settings\Application Data\WMTools Downloaded Files O43 - CFD: 01/02/2007 - 14:19:54 - [0,014] R---D C:\Documents and Settings\user\Menu Démarrer\Programmes\Accessoires O43 - CFD: 21/10/2010 - 10:22:25 - [0,005] ----D C:\Documents and Settings\user\Menu Démarrer\Programmes\Audacity O43 - CFD: 19/10/2010 - 16:14:03 - [0,001] ----D C:\Documents and Settings\user\Menu Démarrer\Programmes\CCleaner =>Piriform Ltd O43 - CFD: 23/10/2013 - 23:42:16 - [0,001] R---D C:\Documents and Settings\user\Menu Démarrer\Programmes\Démarrage O43 - CFD: 08/06/2013 - 18:17:25 - [0] ----D C:\Documents and Settings\user\Menu Démarrer\Programmes\My Application O43 - CFD: 08/06/2013 - 22:51:06 - [0,002] ----D C:\Documents and Settings\user\Menu Démarrer\Programmes\Orange O43 - CFD: 08/11/2013 - 05:40:23 - [0,003] ----D C:\Documents and Settings\user\Menu Démarrer\Programmes\WinRAR ~ Program Folder: 215 Scanned in 00mn 52s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.F3D4515F48B716BB92E05F0A6772F8F5] - 01/01/2014 - 17:28:16 -SHA- . (...) -- C:\WINDOWS\Thumbs.db [7680] O44 - LFC:[MD5.88B53B6925E6FD9FB8BF922030D0D6EB] - 04/01/2014 - 03:23:36 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [13646] O44 - LFC:[MD5.DCC78B14C94A442C60981A7095B4A730] - 09/01/2014 - 16:41:57 ---A- . (...) -- C:\WINDOWS\NeroDigital.ini [69] O44 - LFC:[MD5.A799506640665CB7860E6CC60ED17742] - 10/01/2014 - 02:59:46 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [3746] O44 - LFC:[MD5.02E518D8849C7D3A372DB19699F7E1CC] - 10/01/2014 - 03:00:01 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32346] O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 10/01/2014 - 03:01:40 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 10/01/2014 - 03:02:15 ---A- . (...) -- C:\WINDOWS\system.ini [227] O44 - LFC:[MD5.2B522BB1E8F0456987004B905D9FE9F0] - 10/01/2014 - 03:02:15 ---A- . (...) -- C:\WINDOWS\win.ini [542] O44 - LFC:[MD5.B634F3171C10EB6D7CF238340C869FAF] - 10/01/2014 - 03:02:16 RSHA- . (...) -- C:\boot.ini [356] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 10/01/2014 - 03:07:34 ---A- . (...) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.298BD74AB8CFEE1A521BC64367715C68] - 10/01/2014 - 03:08:48 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159] O44 - LFC:[MD5.479A7F5F24B54B2D8A404C634016D157] - 10/01/2014 - 03:08:49 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.D940689BFDFC739CE8A49130A16EF773] - 10/01/2014 - 09:30:19 ---A- . (...) -- C:\DelFix.txt [415] ~ Files: 14 Scanned in 02mn 49s ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.04088EA9A2A18211EE5044924446169A] - 09/01/2014 - 10:08:35 ---A- - C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf O45 - LFCP:[MD5.4800FC018068796781B6D1739BDBF4CD] - 09/01/2014 - 10:52:09 ---A- - C:\WINDOWS\Prefetch\MSCAMS32.EXE-0322BB5E.pf O45 - LFCP:[MD5.A7450D3D47BDE34021A0FC104E501B23] - 09/01/2014 - 10:52:10 ---A- - C:\WINDOWS\Prefetch\SQLSERVR.EXE-0C6A2F6A.pf O45 - LFCP:[MD5.792DFC9F3FDDE40A30D329B6B4BD088F] - 09/01/2014 - 14:11:18 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATERSERVICE.EXE-3AB369BE.pf O45 - LFCP:[MD5.5D82DBF70905D714E72DD36DF7915502] - 09/01/2014 - 19:36:33 ---A- - C:\WINDOWS\Prefetch\Layout.ini O45 - LFCP:[MD5.DD75493C140978D6A9247610D3908B17] - 09/01/2014 - 19:36:55 ---A- - C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf O45 - LFCP:[MD5.8CAB4F97A1961AA6A3D8AA5CA8C7AC87] - 09/01/2014 - 19:37:00 ---A- - C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf O45 - LFCP:[MD5.E2BDE39E8EED899C8E6231FDB891C6D0] - 09/01/2014 - 20:17:07 ---A- - C:\WINDOWS\Prefetch\GOOGLECRASHHANDLER.EXE-28839C5E.pf O45 - LFCP:[MD5.6C81C7A87BA98D703CAE8EF5DF20DCD4] - 09/01/2014 - 23:45:28 ---A- - C:\WINDOWS\Prefetch\DLLHOST.EXE-205D880D.pf O45 - LFCP:[MD5.0F980B93255CA80A0D9C8976E8F52B2A] - 09/01/2014 - 23:45:32 ---A- - C:\WINDOWS\Prefetch\SOFTWAREUPDATE.EXE-1415D1B8.pf O45 - LFCP:[MD5.D64130C717567A7610D96A0610AB23B8] - 10/01/2014 - 01:59:54 ---A- - C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEFA0.pf O45 - LFCP:[MD5.AD5216EAA5A848EA06A895C2621A9F87] - 10/01/2014 - 02:15:34 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf O45 - LFCP:[MD5.EEA19699058FEE6AD8537F74A03D0B1B] - 10/01/2014 - 02:17:55 ---A- - C:\WINDOWS\Prefetch\MEGAUPLOADER_V0.7.EXE-2195B445.pf O45 - LFCP:[MD5.C210FC437288BE5B82D5E50F18975308] - 10/01/2014 - 02:18:03 ---A- - C:\WINDOWS\Prefetch\MEGAUPLOADER_V0.7.TMP-2D443CB2.pf O45 - LFCP:[MD5.1D50D8E3838F33AA43745AD1BA5D5F53] - 10/01/2014 - 02:26:44 ---A- - C:\WINDOWS\Prefetch\ADWCLEANER(1).EXE-0D7B7193.pf O45 - LFCP:[MD5.B6AEE92F1F442B5A47AD1B30166F905A] - 10/01/2014 - 02:45:24 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-38767B4D.pf O45 - LFCP:[MD5.1C53451D4AF4E113A298C3C788D1B538] - 10/01/2014 - 02:59:23 ---A- - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf O45 - LFCP:[MD5.2761911882BF6E742B2F70850CE68B84] - 10/01/2014 - 03:03:47 ---A- - C:\WINDOWS\Prefetch\HPZIPM12.EXE-145E7369.pf O45 - LFCP:[MD5.C4222120F00AA95B6A61DDE96DE48E33] - 10/01/2014 - 03:03:47 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf O45 - LFCP:[MD5.A1AC77C2B69B24289795C55ED128ADBB] - 10/01/2014 - 03:03:47 ---A- - C:\WINDOWS\Prefetch\NVSVC32.EXE-1F9EED18.pf O45 - LFCP:[MD5.1CBE316B5C332ACF9356248870E5D4D6] - 10/01/2014 - 03:06:28 ---A- - C:\WINDOWS\Prefetch\AVSHADOW.EXE-0F67375E.pf O45 - LFCP:[MD5.7210E1D956B57E0F0CBAEAB86ABCC589] - 10/01/2014 - 03:08:10 ---A- - C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf O45 - LFCP:[MD5.6F991365F54C652A892A8978C570FB85] - 10/01/2014 - 03:08:23 ---A- - C:\WINDOWS\Prefetch\IPODSERVICE.EXE-3192DE38.pf O45 - LFCP:[MD5.3B7A4648F2C9FCB9DDACBE9859EBA419] - 10/01/2014 - 03:08:34 ---A- - C:\WINDOWS\Prefetch\NMINDEXSTORESVR.EXE-22A7DEEF.pf O45 - LFCP:[MD5.4D01B66C2A7D35FF67B86AF2AF6D13AA] - 10/01/2014 - 03:09:11 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf O45 - LFCP:[MD5.230F548524D1C00F8388AE86FA88E62D] - 10/01/2014 - 03:11:28 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-E0603309.pf O45 - LFCP:[MD5.0310DAC831BD60359BF93E98E74288F5] - 10/01/2014 - 03:16:56 ---A- - C:\WINDOWS\Prefetch\ADWCLEANER(2).EXE-19644F49.pf O45 - LFCP:[MD5.DE4253675D50A41CB506B8298EA146A7] - 10/01/2014 - 03:17:08 ---A- - C:\WINDOWS\Prefetch\JAVA.EXE-1E21D4DA.pf O45 - LFCP:[MD5.158CBB06436EB6AD68BFDF6177575433] - 10/01/2014 - 03:33:07 ---A- - C:\WINDOWS\Prefetch\VLC.EXE-22DF01AA.pf O45 - LFCP:[MD5.7772D73B226B32A6C0826B89AF0ABFBB] - 10/01/2014 - 03:34:03 ---A- - C:\WINDOWS\Prefetch\SNDVOL32.EXE-383480B7.pf O45 - LFCP:[MD5.DE21B30B5836CF7D78F01F681F9F0EB2] - 10/01/2014 - 04:20:55 ---A- - C:\WINDOWS\Prefetch\MEGAUPLOADER.EXE-04D4B6BE.pf O45 - LFCP:[MD5.6EA9A38A3B4D697101BBC33459270DF7] - 10/01/2014 - 04:21:38 ---A- - C:\WINDOWS\Prefetch\WMIAPSRV.EXE-1E2270A5.pf O45 - LFCP:[MD5.83DCE9E02A1BA8E7F871EB1EF583D209] - 10/01/2014 - 04:21:51 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf O45 - LFCP:[MD5.1CB2531B9C11029FE56FCF8371F36FFE] - 10/01/2014 - 04:42:33 ---A- - C:\WINDOWS\Prefetch\UPDRGUI.EXE-027FAE5A.pf O45 - LFCP:[MD5.96A0698EAE571E93FBC7FEE2B78D6FBA] - 10/01/2014 - 04:42:36 ---A- - C:\WINDOWS\Prefetch\PLUGIN-HANG-UI.EXE-27E3447E.pf O45 - LFCP:[MD5.C7F5D509A5D10E022CDBEA16D4224F9E] - 10/01/2014 - 04:44:46 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-2577D203.pf O45 - LFCP:[MD5.177ECA827C999C50CC038B504E68B07C] - 10/01/2014 - 08:00:11 ---A- - C:\WINDOWS\Prefetch\HPPROMO.EXE-22E5D733.pf O45 - LFCP:[MD5.9D544B9D9F94289F0D7656C0F127FA0A] - 10/01/2014 - 08:43:29 ---A- - C:\WINDOWS\Prefetch\MBAMGUI.EXE-1286D63B.pf O45 - LFCP:[MD5.00925E4E7990E6A7127313E95EE252A9] - 10/01/2014 - 08:45:40 ---A- - C:\WINDOWS\Prefetch\WINRAR.EXE-39C6DAD9.pf O45 - LFCP:[MD5.447EE722E29C7E0F78597795EF62C721] - 10/01/2014 - 08:48:04 ---A- - C:\WINDOWS\Prefetch\MBAM.EXE-0BEE0439.pf O45 - LFCP:[MD5.218E85A394DB3D97FAA8323FAF4CD43D] - 10/01/2014 - 08:49:12 ---A- - C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf O45 - LFCP:[MD5.9084CBC35184600D89B123E1AC29FD46] - 10/01/2014 - 09:04:30 ---A- - C:\WINDOWS\Prefetch\IPMGUI.EXE-1C3915CE.pf O45 - LFCP:[MD5.D6C65F12191E9D97CF97279CBD2415AC] - 10/01/2014 - 09:06:11 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-06157C0F.pf O45 - LFCP:[MD5.ED885A2B7EB50B8A7D4D877E410453F3] - 10/01/2014 - 09:06:27 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-3715295A.pf O45 - LFCP:[MD5.C7476D92598066A8DD513226BB945864] - 10/01/2014 - 09:06:47 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-DF9E35B6.pf O45 - LFCP:[MD5.FCE4049F298ABDFA8611B40984581247] - 10/01/2014 - 09:08:17 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-2E34A69E.pf O45 - LFCP:[MD5.22068B6B79AFFED3DDB5B82AE2A109B3] - 10/01/2014 - 09:17:12 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-1E123D86.pf O45 - LFCP:[MD5.C317734E4FFDC4F8495199FCC2A248A7] - 10/01/2014 - 09:17:45 ---A- - C:\WINDOWS\Prefetch\ADWCLEANER(3).EXE-164D9D08.pf O45 - LFCP:[MD5.005C293F49201D68A7AAAEDB223E5688] - 10/01/2014 - 09:22:02 ---A- - C:\WINDOWS\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-34BC5027.pf O45 - LFCP:[MD5.135FAC115D20510A5D4EE34CC6F4C034] - 10/01/2014 - 09:22:11 ---A- - C:\WINDOWS\Prefetch\REALPLAY.EXE-1BF219BD.pf O45 - LFCP:[MD5.B09CBE6176CF488BCC1372FE150C3411] - 10/01/2014 - 09:30:19 ---A- - C:\WINDOWS\Prefetch\DELFIX.EXE-2CA52D89.pf O45 - LFCP:[MD5.6DF262A03AA6BFB77FCB8081FB824976] - 10/01/2014 - 09:30:19 ---A- - C:\WINDOWS\Prefetch\PING.EXE-31216D26.pf O45 - LFCP:[MD5.C2EF8FB7A6C7069A4FBA8073C115DE5D] - 10/01/2014 - 09:31:46 ---A- - C:\WINDOWS\Prefetch\ADWCLEANER.EXE-3841E37E.pf O45 - LFCP:[MD5.8040C30205451528D36462907C1C3EFC] - 10/01/2014 - 09:34:46 ---A- - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf O45 - LFCP:[MD5.050A7611D925526721ACD6C2FF2280CF] - 10/01/2014 - 09:40:51 ---A- - C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf O45 - LFCP:[MD5.E7220445A174F18695A05F200FB10ED1] - 10/01/2014 - 09:41:54 ---A- - C:\WINDOWS\Prefetch\PLUGIN-CONTAINER.EXE-15EDC9DD.pf O45 - LFCP:[MD5.42AAD6DDD2EAA10BEECEF71759BC3BF8] - 10/01/2014 - 09:44:05 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.EXE-1535B969.pf O45 - LFCP:[MD5.1619ACB9AE8FA8F1C038515476E62610] - 10/01/2014 - 09:44:06 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.TMP-28384AC8.pf O45 - LFCP:[MD5.9D35C0448D7F5BC2455731608381FC99] - 10/01/2014 - 09:45:32 ---A- - C:\WINDOWS\Prefetch\DUMPREP.EXE-1B46F901.pf O45 - LFCP:[MD5.B2CEB92D2B2AA0E87AD503D85B7B223E] - 10/01/2014 - 09:45:39 ---A- - C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf O45 - LFCP:[MD5.E11B807CD5E2C0AEF87ABAD7C593409A] - 10/01/2014 - 09:45:43 ---A- - C:\WINDOWS\Prefetch\ZHPHEP.EXE-07C98D09.pf O45 - LFCP:[MD5.B21C058EF8785CC02155C0301C719015] - 10/01/2014 - 09:45:54 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-021B7932.pf O45 - LFCP:[MD5.B8B4CB54910F5F58E348218DF2B3E773] - 10/01/2014 - 09:46:28 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf O45 - LFCP:[MD5.E66F54F5E469C44061062CCFA4F92B03] - 10/01/2014 - 09:46:28 ---A- - C:\WINDOWS\Prefetch\PV.EXE-215F4419.pf O45 - LFCP:[MD5.A95A34C9E88C0C9C32A1E516F3BD032B] - 10/01/2014 - 09:46:41 ---A- - C:\WINDOWS\Prefetch\SUBINACL.EXE-17974576.pf ~ Prefetcher: 65 Scanned in 00mn 04s ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll ~ ShellExecuteHooks: Scanned in 00mn 00s ---\\ Export de clé d'application autorisée (O47) O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" [Enabled] .(.Hewlett-Packard Co..) -- C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" [Enabled] .(.Hewlett-Packard Co..) -- C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" [Enabled] .(.Hewlett-Packard Co..) -- C:\Program Files\HP\Digital Imaging\bin\hposid01.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe" [Enabled] .(..) -- C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" [Enabled] .(.Hewlett-Packard.) -- C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" [Enabled] .(.Hewlett-Packard Co..) -- C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" [Enabled] .(.Hewlett-Packard Co..) -- C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" [Enabled] .(.Hewlett-Packard Co..) -- C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe O47 - AAKE:Key Export SP - "C:\Program Files\VideoLAN\VLC\vlc.exe" [Disabled] .(.Pas de propriétaire.) -- C:\Program Files\VideoLAN\VLC\vlc.exe O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Inc..) -- C:\Program Files\iTunes\iTunes.exe O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft LifeCam\LifeCam.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Microsoft LifeCam\LifeCam.exe O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft LifeCam\LifeEnC2.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Microsoft LifeCam\LifeEnC2.exe O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft LifeCam\LifeExp.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Microsoft LifeCam\LifeExp.exe O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft LifeCam\LifeTray.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Microsoft LifeCam\LifeTray.exe O47 - AAKE:Key Export SP - "C:\Program Files\Orange\Assistance Livebox\dist\ST2.exe" [Enabled] .(.Orange.) -- C:\Program Files\Orange\Assistance Livebox\dist\ST2.exe O47 - AAKE:Key Export SP - "C:\Program Files\Orange\Orange Installer\OrangeInstaller.exe" [Enabled] .(.Pas de propriétaire.) -- C:\Program Files\Orange\Orange Installer\OrangeInstaller.exe O47 - AAKE:Key Export SP - "C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe" [Enabled] .(.BitTorrent Inc..) -- C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe =>P2P.BitTorrent ~ Keys Export: 17 Scanned in 00mn 06s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll ~ LSA: 6 Scanned in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) -- C:\WINDOWS\system32\Drivers\Wdf01000.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) -- C:\WINDOWS\system32\Drivers\Wdf01000.sys ~ CSB: 23 Scanned in 00mn 00s ---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.yv12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\WINDOWS\system32\yv12vfw.dll O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\system32\ac3acm.acm O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\WINDOWS\system32\lameACM.acm O52 - TDSD: \Drivers32\"VIDC.DIVX"="divx.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\system32\divx.dll O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC-3 ACM Codec" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\system32\ac3acm.acm ~ TDSD: 17 Scanned in 00mn 01s ---\\ Enumération des clés de registre StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\MailNotifier [Key] . (.Orange - MailNotifier.) -- C:\Program Files\Orange\MailNotifier\MailNotifier.exe O53 - SMSR:HKLM\...\startupreg\uTorrent [Key] . (.BitTorrent Inc. - µTorrent.) -- C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe =>P2P.BitTorrent ~ SMSR Keys: 2 Scanned in 00mn 00s ---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll ~ MSCP: 6 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "HideLegacyLogonScripts"=0 O55 - MWPS:[HKLM\...\Policies\System] - "HideLogoffScripts"=0 O55 - MWPS:[HKLM\...\Policies\System] - "RunLogonScriptSync"=1 O55 - MWPS:[HKLM\...\Policies\System] - "RunStartupScriptSync"=0 O55 - MWPS:[HKLM\...\Policies\System] - "HideStartupScripts"=0 O55 - MWPS:[HKCU\...\Policies\System] - "HideLegacyLogonScripts"=0 O55 - MWPS:[HKCU\...\Policies\System] - "HideLogoffScripts"=0 O55 - MWPS:[HKCU\...\Policies\System] - "HideStartupScripts"=0 O55 - MWPS:[HKCU\...\Policies\System] - "RunLogonScriptSync"=1 O55 - MWPS:[HKCU\...\Policies\System] - "RunStartupScriptSync"=0 ~ MWPS: 15 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=227 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=67108863 O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1 ~ MWPE Keys: 3 Scanned in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:[MD5.D392183CC5379E302E50CEBA635248EB] - 05/10/2005 - 10:21:10 R--A- . (.Analog Devices, Inc. - High Definition Audio Function Driver(Release Candidate 1).) -- C:\WINDOWS\system32\Drivers\ADIHdAud.sys [141312] O58 - SDL:[MD5.9F59AE2DE835641FBB0C6AFD80D8FA9B] - 04/03/2005 - 13:53:00 R--A- . (.Andrea Electronics Corporation - Andrea Audio Noise Cancellation Driver.) -- C:\WINDOWS\system32\Drivers\aeaudio.sys [127872] O58 - SDL:[MD5.A7B8A3A79D35215D798A300DF49ED23F] - 23/02/2005 - 13:58:56 ---A- . (.Arcsoft, Inc. - Arcsoft(R) ASPI Shell.) -- C:\WINDOWS\system32\Drivers\afc.sys [11776] O58 - SDL:[MD5.95B4FB835E28AA1336CEEB07FD5B9398] - 13/04/2008 - 19:36:39 ----- . (.Advanced Micro Devices, Inc. - AMD Win2000 AGP Filter.) -- C:\WINDOWS\system32\Drivers\amdagp.sys [43008] O58 - SDL:[MD5.62271FF14BAA810323AC816C5D355BA9] - 09/03/2005 - 15:53:00 ---A- . (.Advanced Micro Devices - AMD Processor Driver.) -- C:\WINDOWS\system32\Drivers\AmdK8.sys [43008] O58 - SDL:[MD5.D48659BB24C48345D926ECB45C1EBDF5] - 13/08/2004 - 03:56:20 ----- . (.Pas de propriétaire - ATK0110 ACPI Utility.) -- C:\WINDOWS\system32\Drivers\ASACPI.sys [5810] O58 - SDL:[MD5.DE91D0D73C3E61E6826D98FAC2FAC729] - 27/04/2004 - 08:26:48 ---A- . (...) -- C:\WINDOWS\system32\Drivers\ASUSHWIO.SYS [5824] O58 - SDL:[MD5.E2FEE0486D68BF85355D3EDA1A24FF68] - 30/10/2012 - 23:51:56 ---A- . (.AVAST Software - avast! Keyboard Filter Driver.) -- C:\WINDOWS\system32\Drivers\aswKbd.sys [20624] O58 - SDL:[MD5.FAF091AA45A6A6CF3CF94FE065950956] - 22/06/2013 - 11:57:03 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswSnx.sys.sum [175] O58 - SDL:[MD5.3FFBEE694566CADB0A64D8A1ACD7DBCE] - 22/06/2013 - 11:57:03 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswSP.sys.sum [175] O58 - SDL:[MD5.22EA82FFE8CA4965C1994F24C35DC202] - 22/06/2013 - 11:57:03 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswVmm.sys.sum [175] O58 - SDL:[MD5.D649C57DA6FA762C64013747E5D7D2D6] - 03/08/2004 - 21:29:30 ----- . (.ATI Technologies Inc. - ATI WDM BT829 MiniDriver (A).) -- C:\WINDOWS\system32\Drivers\ati1btxx.sys [56623] O58 - SDL:[MD5.60B6AA2DC1521DA343F781B70EB7895A] - 03/08/2004 - 21:29:30 ----- . (.ATI Technologies Inc. - ATI Specialized MVD VBI Codec.) -- C:\WINDOWS\system32\Drivers\ati1mdxx.sys [11615] O58 - SDL:[MD5.6FDC61E8E8E17F6ECC2D9A10FA8DF347] - 03/08/2004 - 21:29:30 ----- . (.ATI Technologies Inc. - ATI Specialized PCD VBI Codec.) -- C:\WINDOWS\system32\Drivers\ati1pdxx.sys [12047] O58 - SDL:[MD5.9D318099BF3876A4AF4BC75966D27603] - 03/08/2004 - 21:29:32 ----- . (.ATI Technologies Inc. - ATI Rage Theater Audio WDM Minidriver.) -- C:\WINDOWS\system32\Drivers\ati1raxx.sys [30671] O58 - SDL:[MD5.BCAF267B10620F8C93F6E87AB726E145] - 03/08/2004 - 21:29:32 ----- . (.ATI Technologies Inc. - ATI WDM Rage Theater MiniDriver.) -- C:\WINDOWS\system32\Drivers\ati1rvxx.sys [63663] O58 - SDL:[MD5.DAC7D785CF62F5BD41441E9D6F5A6EFE] - 03/08/2004 - 21:29:32 ----- . (.ATI Technologies Inc. - ATI WDM TV Sound MiniDriver.) -- C:\WINDOWS\system32\Drivers\ati1snxx.sys [26367] O58 - SDL:[MD5.F7706DAE7D101F1B19CE552D772EBFCE] - 03/08/2004 - 21:29:32 ----- . (.ATI Technologies Inc. - ATI WDM Teletext Decoder.) -- C:\WINDOWS\system32\Drivers\ati1ttxx.sys [21343] O58 - SDL:[MD5.6F714B4720DD80FFA9F8D2731594EA4C] - 03/08/2004 - 21:29:32 ----- . (.ATI Technologies Inc. - ATI WDM TVTuner MiniDriver.) -- C:\WINDOWS\system32\Drivers\ati1tuxx.sys [36463] O58 - SDL:[MD5.67FFBC158DD4D27BA3FC92C6ACD87F73] - 03/08/2004 - 21:29:32 ----- . (.ATI Technologies Inc. - ATI WDM CrossBar MiniDriver.) -- C:\WINDOWS\system32\Drivers\ati1xbxx.sys [29455] O58 - SDL:[MD5.0D8CAB1F08F7D3C4DE228B49E12E596A] - 03/08/2004 - 21:29:32 ----- . (.ATI Technologies Inc. - ATI WDM TVAUDIO_CrossBar MiniDriver.) -- C:\WINDOWS\system32\Drivers\ati1xsxx.sys [34735] O58 - SDL:[MD5.A2F791E99FD6EECEBCCFB1953A1D6F24] - 19/08/2004 - 14:53:40 ----- . (.ATI Technologies Inc. - Pilote de miniport ATI RAGE 128.) -- C:\WINDOWS\system32\Drivers\ati2mtaa.sys [327168] O58 - SDL:[MD5.417352592432F5368A8296F7FB73BECF] - 19/08/2004 - 14:53:42 ----- . (.ATI Technologies Inc. - Pilote de miniport ATI RAGE 128.) -- C:\WINDOWS\system32\Drivers\ati2mtag.sys [701440] O58 - SDL:[MD5.993E7BD6438FE989E328C6B4BCA246A9] - 03/08/2004 - 21:29:28 ----- . (.ATI Technologies Inc. - ATI WDM BT829 MiniDriver (A).) -- C:\WINDOWS\system32\Drivers\atinbtxx.sys [57856] O58 - SDL:[MD5.ED4C2BF8403F4437987C0BA09CF48716] - 03/08/2004 - 21:29:30 ----- . (.ATI Technologies Inc. - ATI Specialized MVD VBI Codec RT2.) -- C:\WINDOWS\system32\Drivers\atinmdxx.sys [13824] O58 - SDL:[MD5.E90AC2B14E98F1A4372E5891B4278784] - 03/08/2004 - 21:29:30 ----- . (.ATI Technologies Inc. - ATI Specialized PCD VBI Codec RT2.) -- C:\WINDOWS\system32\Drivers\atinpdxx.sys [14336] O58 - SDL:[MD5.DA36687D701C833430605A298731410B] - 03/08/2004 - 21:29:30 ----- . (.ATI Technologies Inc. - ATI Rage Theater Audio WDM Minidriver.) -- C:\WINDOWS\system32\Drivers\atinraxx.sys [52224] O58 - SDL:[MD5.A7A01B907DB63898D40B0A14248FF9A2] - 03/08/2004 - 21:29:32 ----- . (.ATI Technologies Inc. - ATI WDM Rage Theater MiniDriver RT2.) -- C:\WINDOWS\system32\Drivers\atinrvxx.sys [104960] O58 - SDL:[MD5.CEDDEE2E0591894D19654D458FD3B9BE] - 03/08/2004 - 21:29:32 ----- . (.ATI Technologies Inc. - ATI WDM TV Sound MiniDriver.) -- C:\WINDOWS\system32\Drivers\atinsnxx.sys [28672] O58 - SDL:[MD5.D80A8F6C0A717446496C3A06D33B0D9C] - 03/08/2004 - 21:29:32 ----- . (.ATI Technologies Inc. - ATI WDM Teletext Decoder.) -- C:\WINDOWS\system32\Drivers\atinttxx.sys [13824] O58 - SDL:[MD5.EDD66332608D27F4FD5069BCD0BC5164] - 03/08/2004 - 21:29:32 ----- . (.ATI Technologies Inc. - ATI WDM TVTuner MiniDriver.) -- C:\WINDOWS\system32\Drivers\atintuxx.sys [73216] O58 - SDL:[MD5.3E7D485CBD0B0D9F6EA2AD9442411831] - 03/08/2004 - 21:29:32 ----- . (.ATI Technologies Inc. - ATI WDM CrossBar MiniDriver.) -- C:\WINDOWS\system32\Drivers\atinxbxx.sys [31744] O58 - SDL:[MD5.77B575D7AAB35D5908AE6CE681608D62] - 03/08/2004 - 21:29:32 ----- . (.ATI Technologies Inc. - ATI WDM TVAUDIO_CrossBar MiniDriver RT2.) -- C:\WINDOWS\system32\Drivers\atinxsxx.sys [63488] O58 - SDL:[MD5.B8C10FF9369394EB84993F331810CF29] - 24/11/2013 - 18:00:12 ---A- . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\WINDOWS\system32\Drivers\avgntflt.sys [90400] O58 - SDL:[MD5.4189E5AB2CAD6F395D87DAAE73EB090F] - 24/11/2013 - 18:00:12 ---A- . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\Drivers\avipbb.sys [135648] O58 - SDL:[MD5.D8C712305F73CD34D1B344810E522728] - 12/11/2013 - 02:16:20 ---A- . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\WINDOWS\system32\Drivers\avkmgr.sys [37352] O58 - SDL:[MD5.1FB582B783650AD538560E0C279C3078] - 15/03/2006 - 16:35:06 ----- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 SPR Protocol Driver.) -- C:\WINDOWS\system32\Drivers\AWISp50.sys [17664] O58 - SDL:[MD5.BF79E659C506674C0497CC9C61F1A165] - 30/01/2007 - 06:03:34 ----- . (.Sonic Solutions - CDR4 CD and DVD Place Holder Driver (see PxHelp).) -- C:\WINDOWS\system32\Drivers\cdr4_xp.sys [2432] O58 - SDL:[MD5.2C41CD49D82D5FD85C72D57B6CA25471] - 30/01/2007 - 06:03:34 ----- . (.Sonic Solutions - CDRAL Place Holder Driver (see PxHelp).) -- C:\WINDOWS\system32\Drivers\cdralw2k.sys [2560] O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 02/03/2006 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\Drivers\cinemst2.sys [262528] O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 02/03/2006 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\Drivers\cpqdap01.sys [11776] O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 12:17:00 ----- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys [26600] O58 - SDL:[MD5.A9157AFE4B6F32DCCE9BD18FECD53A0D] - 06/07/2009 - 14:30:58 ----- . (.Hauppauge Computer Works, Inc. - HCW 95xxx/68xxx/112xxx BDA Drivers.) -- C:\WINDOWS\system32\Drivers\hcw95bda.sys [573440] O58 - SDL:[MD5.EB77F3C96C62E65CC25F04220B9A204A] - 06/07/2009 - 14:33:40 ----- . (.Hauppauge Computer Works, Inc. - hcw95bda HID Remote Control driver.) -- C:\WINDOWS\system32\Drivers\hcw95rc.sys [15616] O58 - SDL:[MD5.573C7D0A32852B48F3058CFD8026F511] - 13/04/2008 - 17:36:05 ----- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\hdaudbus.sys [144384] O58 - SDL:[MD5.F58D2900C66A1E773E3375098E0E9337] - 27/10/2004 - 15:21:30 ----- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Function Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\Hdaudio.sys [145920] O58 - SDL:[MD5.9F1D80908658EB7F1BF70809E0B51470] - 08/03/2005 - 06:52:26 ----- . (.HP - IEEE-1284.4-1999 Driver (Windows 2000).) -- C:\WINDOWS\system32\Drivers\HPZid412.sys [51120] O58 - SDL:[MD5.F7E3E9D50F9CD3DE28085A8FDAA0A1C3] - 08/03/2005 - 06:52:27 ----- . (.HP - IEEE-1284.4-1999 Print Class Driver.) -- C:\WINDOWS\system32\Drivers\HPZipr12.sys [16496] O58 - SDL:[MD5.CF1B7951B4EC8D13F3C93B74BB2B461B] - 08/03/2005 - 06:52:28 ----- . (.HP - 1284.4<->Usb Datalink Driver (Windows 2000).) -- C:\WINDOWS\system32\Drivers\HPZius12.sys [21744] O58 - SDL:[MD5.970178E8E003EB1481293830069624B9] - 03/08/2004 - 21:41:48 ----- . (.Conexant Systems, Inc. - HSF_HWB2 WDM driver.) -- C:\WINDOWS\system32\Drivers\hsfbs2s2.sys [220032] O58 - SDL:[MD5.1225EBEA76AAC3C84DF6C54FE5E5D8BE] - 03/08/2004 - 21:41:50 ----- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\WINDOWS\system32\Drivers\hsfcxts2.sys [685056] O58 - SDL:[MD5.EBB354438A4C5A3327FB97306260714A] - 03/08/2004 - 21:41:56 ----- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\WINDOWS\system32\Drivers\hsfdpsp2.sys [1041536] O58 - SDL:[MD5.8B8771461B3E0D703692819A09946A23] - 12/10/2007 - 09:32:58 ---A- . (.Ahead Software AG - NERO IMAGEDRIVE SCSI miniport.) -- C:\WINDOWS\system32\Drivers\imagedrv.sys [11304] O58 - SDL:[MD5.99B8B08559E59E0963B48D325A6C2A9D] - 12/10/2007 - 09:33:00 ---A- . (.Ahead Software AG - Nero Image Server.) -- C:\WINDOWS\system32\Drivers\imagesrv.sys [132904] O58 - SDL:[MD5.4470E3C1E0C3378E4CAB137893C12C3A] - 04/04/2013 - 14:50:32 ----- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\mbam.sys [22856] O58 - SDL:[MD5.195741AEE20369980796B557358CD774] - 03/08/2004 - 21:41:56 ----- . (.Conexant - Diagnostic Interface DRIVER.) -- C:\WINDOWS\system32\Drivers\mdmxsdk.sys [11868] O58 - SDL:[MD5.C53775780148884AC87C455489A0C070] - 03/08/2004 - 21:41:40 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\mtlmnt5.sys [126686] O58 - SDL:[MD5.54886A652BF5685192141DF304E923FD] - 03/08/2004 - 21:41:38 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\mtlstrm.sys [1309184] O58 - SDL:[MD5.6DDA78A0BE692B61B668FAB860F276CF] - 03/08/2004 - 21:29:38 ----- . (.Matrox Graphics Inc. - Matrox Parhelia Miniport Driver.) -- C:\WINDOWS\system32\Drivers\mtxparhm.sys [452736] O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 02/03/2006 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\nikedrv.sys [12032] O58 - SDL:[MD5.B48DC6ABCD3AEFF8618350CCBDC6B09A] - 11/02/2011 - 22:23:34 ----- . (.CACE Technologies, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\WINDOWS\system32\Drivers\npf.sys [35088] O58 - SDL:[MD5.576B34CEAE5B7E5D9FD2775E93B3DB53] - 03/08/2004 - 21:41:40 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\ntmtlfax.sys [180360] O58 - SDL:[MD5.7C56F3FD65B2BDB315CA3605A5392D7B] - 08/02/2013 - 04:02:44 ----- . (.NVIDIA Corporation - NVIDIA Windows XP Miniport Driver, Version 307.83.) -- C:\WINDOWS\system32\Drivers\nv4_mini.sys [12648960] O58 - SDL:[MD5.3AC5EEDD35B7437D53960F3998BFA462] - 27/01/2006 - 07:04:16 ----- . (.NVIDIA Corporation - NVIDIA® nForce(TM) IDE Performance Driver.) -- C:\WINDOWS\system32\Drivers\nvata.sys [99584] O58 - SDL:[MD5.B9333604527E02CD2223F200C0BAE7E0] - 17/02/2006 - 03:28:30 ----- . (.NVIDIA Corporation - NVIDIA Networking Function Driver..) -- C:\WINDOWS\system32\Drivers\NVENETFD.sys [34176] O58 - SDL:[MD5.5E9E55F7EE644C7C5FD78A206FBE37AB] - 17/02/2006 - 03:28:32 ----- . (.NVIDIA Corporation - NVIDIA Networking Bus Driver..) -- C:\WINDOWS\system32\Drivers\nvnetbus.sys [13056] O58 - SDL:[MD5.ED1321CF9B80FF6250D34D32713C7A5C] - 17/02/2006 - 03:28:14 R--A- . (.NVIDIA Corporation - NVIDIA Network Resource Manager..) -- C:\WINDOWS\system32\Drivers\nvnrm.sys [305152] O58 - SDL:[MD5.EEA04A90432126944B3916239F43F411] - 17/02/2006 - 03:28:02 R--A- . (.NVIDIA Corporation - NVIDIA Networking Soft-NPU Driver..) -- C:\WINDOWS\system32\Drivers\nvsnpu.sys [222592] O58 - SDL:[MD5.F69FBB8128905B6644F40A3CD20648B3] - 17/02/2006 - 03:28:22 R--A- . (.NVIDIA Corporation - NVIDIA Networking Protocol Driver..) -- C:\WINDOWS\system32\Drivers\nvtcp.sys [101632] O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 02/03/2006 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\Drivers\ptilink.sys [17792] O58 - SDL:[MD5.D86B4A68565E444D76457F14172C875A] - 21/03/2008 - 21:30:04 ----- . (.Sonic Solutions - Px Engine Device Driver for Windows 2000/XP.) -- C:\WINDOWS\system32\Drivers\PxHelp20.sys [43528] O58 - SDL:[MD5.E9AAA0092D74A9D371659C4C38882E12] - 03/08/2004 - 21:41:40 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\recagent.sys [13776] O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 02/03/2006 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\Drivers\rio8drv.sys [12032] O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 02/03/2006 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\riodrv.sys [12032] O58 - SDL:[MD5.620C5A44F34DF1BCE2A63A66534F0DF7] - 04/06/2005 - 19:07:56 ----- . (.Ralink Technology Inc. - Ralink 802.11 Wireless Adapter Driver.) -- C:\WINDOWS\system32\Drivers\rt61.sys [319104] O58 - SDL:[MD5.0DBCC071A268E0340A2BA6BDD98BACE4] - 03/08/2004 - 21:29:52 ----- . (.S3 Graphics, Inc. - S3 ProSavage(DDR) & Twister Miniport Driver.) -- C:\WINDOWS\system32\Drivers\s3gnbm.sys [166912] O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/11/2007 - 11:25:54 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\Drivers\secdrv.sys [20480] O58 - SDL:[MD5.ECA77BEEB2BE8D573CF1B265E44FBFBD] - 11/08/2005 - 06:49:28 ----- . (.Sensaura - Sensaura WDM 3D Audio Driver.) -- C:\WINDOWS\system32\Drivers\senfilt.sys [393088] O58 - SDL:[MD5.6B33D0EBD30DB32E27D1D78FE946A754] - 13/04/2008 - 19:36:39 ----- . (.Silicon Integrated Systems Corporation - SiS NT AGP Filter.) -- C:\WINDOWS\system32\Drivers\sisagp.sys [40960] O58 - SDL:[MD5.D9673011648A71ED1E1F77B831BC85E6] - 03/08/2004 - 21:41:42 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slnt7554.sys [129535] O58 - SDL:[MD5.2C1779C0FEB1F4A6033600305EBA623A] - 03/08/2004 - 21:41:44 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slntamr.sys [404990] O58 - SDL:[MD5.F9B8E30E82EE95CF3E1D3E495599B99C] - 03/08/2004 - 21:41:46 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slnthal.sys [95424] O58 - SDL:[MD5.DB56BB2C55723815CF549D7FC50CFCEB] - 03/08/2004 - 21:41:46 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slwdmsup.sys [13240] O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 03/11/2013 - 15:58:56 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\Drivers\ssmdrv.sys [28520] O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 02/03/2006 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\Drivers\tsbvcap.sys [21376] O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 02/03/2006 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\Drivers\vdmindvd.sys [58112] O58 - SDL:[MD5.5E8B60606FC4173B69CDECD964F22D28] - 20/02/2006 - 17:59:27 ----- . (.MCCI - Sony Ericsson W810 Driver Driver.) -- C:\WINDOWS\system32\Drivers\w810bus.sys [58288] O58 - SDL:[MD5.81144FEC069AEBDEB006BCBC8D9F4074] - 20/02/2006 - 17:59:28 R--A- . (.MCCI - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\Drivers\w810cm.sys [6176] O58 - SDL:[MD5.81144FEC069AEBDEB006BCBC8D9F4074] - 20/02/2006 - 17:59:28 R--A- . (.MCCI - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\Drivers\w810cmnt.sys [6176] O58 - SDL:[MD5.BF609636068F17246F94B490C5812483] - 20/02/2006 - 17:59:36 ----- . (.MCCI - Sony Ericsson W810 USB WMC OBEX Interface Device Driver.) -- C:\WINDOWS\system32\Drivers\w810obex.sys [83344] O58 - SDL:[MD5.77D236E2F152D8C3F137696CA4494466] - 20/02/2006 - 17:59:41 R--A- . (.MCCI - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\Drivers\w810wh.sys [5808] O58 - SDL:[MD5.77D236E2F152D8C3F137696CA4494466] - 20/02/2006 - 17:59:41 R--A- . (.MCCI - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\Drivers\w810whnt.sys [5808] O58 - SDL:[MD5.0308AEF61941E4AF478FA1A0F83812F5] - 03/08/2004 - 21:29:40 ----- . (.Intel(R) Corporation - Digital Display Minidriver for Intel(R) Graphics Driver.) -- C:\WINDOWS\system32\Drivers\wadv07nt.sys [11807] O58 - SDL:[MD5.714038A8AA5DE08E12062202CD7EAEB5] - 03/08/2004 - 21:29:40 ----- . (.Intel(R) Corporation - Digital Display Minidriver for Intel(R) Graphics Driver.) -- C:\WINDOWS\system32\Drivers\wadv08nt.sys [11295] O58 - SDL:[MD5.7BB3AA595E4507A788DE1CDC63F4C8C4] - 03/08/2004 - 21:29:42 ----- . (.Intel(R) Corporation - Digital Display Minidriver for Intel(R) Graphics Driver.) -- C:\WINDOWS\system32\Drivers\wadv09nt.sys [11871] O58 - SDL:[MD5.36E6C405B6143D09687F4056FD9A0D10] - 03/08/2004 - 21:29:42 ----- . (.Intel(R) Corporation - Digital Display Minidriver for Intel(R) Graphics Driver.) -- C:\WINDOWS\system32\Drivers\wadv11nt.sys [11935] O58 - SDL:[MD5.352FA0E98BC461CE1CE5D41F64DB558D] - 03/08/2004 - 21:29:46 ----- . (.Intel(R) Corporation - Digital Display Minidriver for Intel(R) Graphics Driver.) -- C:\WINDOWS\system32\Drivers\watv06nt.sys [22271] O58 - SDL:[MD5.791CC45DE6E50445BE72E8AD6401FF45] - 03/08/2004 - 21:29:46 ----- . (.Intel(R) Corporation - Digital Display Minidriver for Intel(R) Graphics Driver.) -- C:\WINDOWS\system32\Drivers\watv10nt.sys [25471] O58 - SDL:[MD5.D6EFAF429FD30C5DF613D220E344CCE7] - 13/02/2009 - 20:02:52 ----- . (.Western Digital Technologies - WD SCSI Architecture Model (SAM) driver.) -- C:\WINDOWS\system32\Drivers\wdcsam.sys [11520] O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037] O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097] O58 - SDL:[MD5.EB77F3C96C62E65CC25F04220B9A204A] - 06/07/2009 - 14:33:40 R--A- . (.Hauppauge Computer Works, Inc. - hcw95bda HID Remote Control driver.) -- C:\WINDOWS\system32\hcw95rc.sys [15616] O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912] O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809] O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537] O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916] O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146] O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370] O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274] O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146] O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000] O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560] O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648] O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424] O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 02/03/2006 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560] O58 - SDL:[MD5.B670C5D89F0726B7A2A7DFB4E968CDF8] - 23/09/2003 - 09:38:34 ----- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 MPR Protocol Driver.) -- C:\WINDOWS\system32\pcampr5.sys [34688] O58 - SDL:[MD5.ECD2F9D67B06606064DAF6961A6D5EFE] - 01/03/2006 - 17:53:54 ----- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) -- C:\WINDOWS\system32\pcandis5.sys [32128] O58 - SDL:[MD5.354585D8E53F2FF9B8AD5E1E2EF68CEF] - 07/03/2005 - 18:44:16 ---A- . (.Matsushita Electric Industrial Co., Ltd. - Phoebe Photo Distribution Manager.) -- C:\WINDOWS\system32\PhDi2.sys [45056] ~ Drivers: 15 Scanned in 00mn 06s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 07/01/2014 - 09:51:02 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Adobe\Acrobat\8.0\JavaScripts\glob.js [0] O61 - LFC: 07/01/2014 - 09:51:02 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Adobe\Acrobat\8.0\JavaScripts\glob.settings.js [10] O61 - LFC: 07/01/2014 - 09:51:04 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Adobe\Photoshop Album\3.0\jpegviewer.xml [292] O61 - LFC: 07/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#audienceinsights.net\settings.sol [90] O61 - LFC: 07/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol [81] O61 - LFC: 07/01/2014 - 09:51:29 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Microsoft\Windows\Themes\Custom.theme [7767] O61 - LFC: 07/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\bookmarkbackups\bookmarks-2014-01-07_867.json [406820] O61 - LFC: 07/01/2014 - 09:51:52 ----- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\CoPland DIR CUT French DVDRip Divx.torrent [14975] =>P2P.µTorrent O61 - LFC: 07/01/2014 - 09:51:54 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\dlimagecache\1FDF844D51EFA03B4400A1AD2D7156C7CAE5B4EA [12167] =>P2P.µTorrent O61 - LFC: 07/01/2014 - 09:51:59 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\dlimagecache\B8C49D536290EDE3E86F422F021447623F0EE0CC [22075] =>P2P.µTorrent O61 - LFC: 07/01/2014 - 09:52:02 ----- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\La.Dilettante.FRENCH.DVDRIP.XVID-PARADIS.1.torrent [15866] =>P2P.µTorrent O61 - LFC: 07/01/2014 - 09:52:02 ----- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\Les.Bronzes.Font.Du.Ski.1979.FRENCH.BRRIP.XviD.AC3-FoX.torrent [29090] =>P2P.µTorrent O61 - LFC: 07/01/2014 - 09:52:05 ----- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\You Dont.Know.Jack.2010.FRENCH.DVDRiP.XViD-SLiM.torrent [15040] =>P2P.µTorrent O61 - LFC: 07/01/2014 - 09:52:08 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\bookmarkbackups\bookmarks-2014-01-07_867.json [406820] O61 - LFC: 07/01/2014 - 09:52:31 -SHA- . (...) -- C:\Documents and Settings\user\Bureau\Documents and Settings\user\Local Settings\Application Data\Ahead\.thumbnails\normal\Thumbs.db [24064] O61 - LFC: 07/01/2014 - 09:52:33 ---A- . (...) -- C:\Documents and Settings\user\Bureau\FILMS\farenheit 911.avi [734001152] O61 - LFC: 07/01/2014 - 09:52:54 ---A- . (...) -- C:\Documents and Settings\user\Bureau\La.Dilettante.FRENCH.DVDRIP.XVID-PARADIS\La.Dilettante.FRENCH.DVDRIP.XVID-PARADIS.avi [738273698] O61 - LFC: 07/01/2014 - 09:52:54 ---A- . (...) -- C:\Documents and Settings\user\Bureau\La.Dilettante.FRENCH.DVDRIP.XVID-PARADIS\La.Dilettante.FRENCH.DVDRIP.XVID-PARADIS.nfo [3742] O61 - LFC: 07/01/2014 - 09:52:54 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Le Magasin Des Suicides 2012 FRENCH DvDRiP Xvid-UTT.avi [744277226] O61 - LFC: 07/01/2014 - 09:52:54 -SHA- . (...) -- C:\Documents and Settings\user\Bureau\La.Dilettante.FRENCH.DVDRIP.XVID-PARADIS\Thumbs.db [3072] O61 - LFC: 07/01/2014 - 09:53:24 ---A- . (...) -- C:\Documents and Settings\user\Bureau\You Dont.Know.Jack.2010.FRENCH.DVDRiP.XViD-SLiM\slim-ydkj.nfo [5341] O61 - LFC: 07/01/2014 - 09:53:24 ---A- . (...) -- C:\Documents and Settings\user\Cookies\KZ0349Z3.txt [317] O61 - LFC: 07/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Thumbnails [0] O61 - LFC: 07/01/2014 - 09:54:54 -SHA- . (...) -- C:\Documents and Settings\user\Local Settings\Historique\History.IE5\MSHist012014010720140108\index.dat [32768] O61 - LFC: 08/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#opf.ooyala.com\settings.sol [84] O61 - LFC: 08/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#player.ooyala.com\settings.sol [87] O61 - LFC: 08/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#t.publicidees.com\settings.sol [87] O61 - LFC: 08/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#trackpm.shop2market.com\settings.sol [93] O61 - LFC: 08/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#u.videostep.com\settings.sol [85] O61 - LFC: 08/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#videofiles.tukif.com\settings.sol [90] O61 - LFC: 08/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.tripadvisor.fr\settings.sol [88] O61 - LFC: 08/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\bookmarkbackups\bookmarks-2014-01-08_867.json [406820] O61 - LFC: 08/01/2014 - 09:51:53 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\dlimagecache\056C46EC4D23B71A74098B3A109FD433A030F6CC [10527] =>P2P.µTorrent O61 - LFC: 08/01/2014 - 09:51:53 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\dlimagecache\0C7F9BCA44A56F139D452205534E54B97B293604 [11076] =>P2P.µTorrent O61 - LFC: 08/01/2014 - 09:51:58 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\dlimagecache\97C23FD9DF62575A9C3CE3EBE1390CDEBE69D76C [20046] =>P2P.µTorrent O61 - LFC: 08/01/2014 - 09:52:08 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\bookmarkbackups\bookmarks-2014-01-08_867.json [406820] O61 - LFC: 08/01/2014 - 09:52:29 R--A- . (...) -- C:\Documents and Settings\user\Bureau\CoPland DIR CUT French DVDRip Divx\COPLAND DIR CUT .avi [734584832] O61 - LFC: 08/01/2014 - 09:52:30 -SHA- . (...) -- C:\Documents and Settings\user\Bureau\CoPland DIR CUT French DVDRip Divx\Thumbs.db [3072] O61 - LFC: 08/01/2014 - 09:52:38 -SHA- . (...) -- C:\Documents and Settings\user\Bureau\FILMS\WALT DYSNEY\Thumbs.db [25088] O61 - LFC: 08/01/2014 - 09:53:24 ---A- . (...) -- C:\Documents and Settings\user\Bureau\You Dont.Know.Jack.2010.FRENCH.DVDRiP.XViD-SLiM\slim-ydkj.avi [1467465728] O61 - LFC: 08/01/2014 - 09:53:24 -SHA- . (...) -- C:\Documents and Settings\user\Bureau\You Dont.Know.Jack.2010.FRENCH.DVDRiP.XViD-SLiM\Thumbs.db [3072] O61 - LFC: 08/01/2014 - 09:54:55 -SHA- . (...) -- C:\Documents and Settings\user\Local Settings\Historique\History.IE5\MSHist012014010820140109\index.dat [32768] O61 - LFC: 09/01/2014 - 09:51:02 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Adobe\Acrobat\8.0\TMDocs.sav [36] O61 - LFC: 09/01/2014 - 09:51:02 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Adobe\Acrobat\8.0\TMGrpPrm.sav [54] O61 - LFC: 09/01/2014 - 09:51:25 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\#SharedObjects\DUR798GV\player.kpsule.me\ads\format\mediumrect.swf\__kta.sol [559] O61 - LFC: 09/01/2014 - 09:51:25 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\#SharedObjects\DUR798GV\s.ytimg.com\soundData.sol [49] O61 - LFC: 09/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#player.kpsule.me\settings.sol [86] O61 - LFC: 09/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.bonporn.com\settings.sol [85] O61 - LFC: 09/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.franceinfo.fr\settings.sol [87] O61 - LFC: 09/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol [1839] O61 - LFC: 09/01/2014 - 09:51:32 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Crash Reports\pending\0650f68b-93e1-4623-ada0-fdd039015b1f-browser.dmp [96948] O61 - LFC: 09/01/2014 - 09:51:32 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Crash Reports\pending\0650f68b-93e1-4623-ada0-fdd039015b1f.dmp [35087] O61 - LFC: 09/01/2014 - 09:51:32 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Crash Reports\pending\0650f68b-93e1-4623-ada0-fdd039015b1f.extra [3304] O61 - LFC: 09/01/2014 - 09:51:32 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Crash Reports\pending\aefdaa74-83e8-4198-8c7d-46ffe3610e9e-browser.dmp [106716] O61 - LFC: 09/01/2014 - 09:51:32 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Crash Reports\pending\aefdaa74-83e8-4198-8c7d-46ffe3610e9e.dmp [36963] O61 - LFC: 09/01/2014 - 09:51:33 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Crash Reports\pending\aefdaa74-83e8-4198-8c7d-46ffe3610e9e.extra [3352] O61 - LFC: 09/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\bookmarkbackups\bookmarks-2014-01-09_867.json [407794] O61 - LFC: 09/01/2014 - 09:51:52 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\dht.dat.old [4378] =>P2P.µTorrent O61 - LFC: 09/01/2014 - 09:51:52 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\dht_feed.dat.old [2] =>P2P.µTorrent O61 - LFC: 09/01/2014 - 09:51:59 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\dlimagecache\BF1522AC65872D0B2E19ACC0261457DF5282EFF8 [20988] =>P2P.µTorrent O61 - LFC: 09/01/2014 - 09:52:02 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\resume.dat.old [99] =>P2P.µTorrent O61 - LFC: 09/01/2014 - 09:52:02 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\rss.dat.old [99] =>P2P.µTorrent O61 - LFC: 09/01/2014 - 09:52:08 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\bookmarkbackups\bookmarks-2014-01-09_867.json [407794] O61 - LFC: 09/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\Telemetry.FailedProfileLocks.txt [1] O61 - LFC: 09/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\storage\persistent\moz-safe-about+home\idb\818200132aebmoouht.sqlite [524288] O61 - LFC: 09/01/2014 - 09:54:55 -SHA- . (...) -- C:\Documents and Settings\user\Local Settings\Historique\History.IE5\MSHist012014010920140110\index.dat [32768] O61 - LFC: 09/01/2014 - 09:55:01 ---A- . (...) -- C:\Documents and Settings\user\Mes documents\Téléchargements\Cucurbit seed production - text.pdf [178567] O61 - LFC: 09/01/2014 - 09:55:02 ---A- . (...) -- C:\Documents and Settings\user\Recent\COPLAND DIR CUT .avi.lnk [838] O61 - LFC: 09/01/2014 - 09:55:02 ---A- . (...) -- C:\Documents and Settings\user\Recent\CoPland DIR CUT French DVDRip Divx.lnk [537] O61 - LFC: 09/01/2014 - 09:55:02 ---A- . (...) -- C:\Documents and Settings\user\Recent\Cobra 31 ep.lnk [494] O61 - LFC: 09/01/2014 - 09:55:02 ---A- . (...) -- C:\Documents and Settings\user\Recent\FILMS.lnk [388] O61 - LFC: 09/01/2014 - 09:55:02 ---A- . (...) -- C:\Documents and Settings\user\Recent\cobra-19au24.mp4.lnk [741] O61 - LFC: 09/01/2014 - 09:55:02 ---A- . (...) -- C:\Documents and Settings\user\Recent\cobra-25au31.mp4.lnk [741] O61 - LFC: 09/01/2014 - 09:55:02 ---A- . (...) -- C:\Documents and Settings\user\Recent\farenheit 911.avi.lnk [532] O61 - LFC: 09/01/2014 - 09:55:03 ---A- . (...) -- C:\Documents and Settings\user\Recent\ZHPFixReport.txt.lnk [527] =>.Nicolas Coolman O61 - LFC: 09/01/2014 - 09:55:03 ---A- . (...) -- C:\Documents and Settings\user\Recent\[forum.mega-search.ws]187_Code_Meurtre_DVDRIP.avi.lnk [776] O61 - LFC: 10/01/2014 - 09:51:16 ---A- . (...) -- C:\Documents and Settings\user\Application Data\dvdcss\CACHEDIR.TAG [199] O61 - LFC: 10/01/2014 - 09:51:25 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\#SharedObjects\DUR798GV\audienceinsights.net\pus.sol [68] O61 - LFC: 10/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\#SharedObjects\DUR798GV\videofiles.tukif.com\com.longtailvideo.jwplayer.sol [58] O61 - LFC: 10/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\#SharedObjects\DUR798GV\www.gaytag.net\analytics.sol [419] O61 - LFC: 10/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\#SharedObjects\DUR798GV\www.gaytag.net\com.jeroenwijering.sol [64] O61 - LFC: 10/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\#SharedObjects\DUR798GV\www.videopourgay.com\com.jeroenwijering.sol [64] O61 - LFC: 10/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.gaytag.net\settings.sol [84] O61 - LFC: 10/01/2014 - 09:51:26 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.videopourgay.com\settings.sol [90] O61 - LFC: 10/01/2014 - 09:51:33 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\addons.json [4257] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\bookmarkbackups\bookmarks-2014-01-10_871.json [410050] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\cert8.db [65536] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\content-prefs.sqlite [229376] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\cookies.sqlite [1572864] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\cookies.sqlite-shm [32768] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\cookies.sqlite-wal [885416] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\extensions.json [3258] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\formhistory.sqlite [86016] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\healthreport.sqlite [1146880] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\healthreport.sqlite-shm [32768] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\healthreport.sqlite-wal [1246128] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\key3.db [16384] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\localstore.rdf [1122] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\mimeTypes.rdf [3772] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\permissions.sqlite [65536] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\places.sqlite [10485760] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\places.sqlite-shm [32768] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\places.sqlite-wal [1326672] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\pluginreg.dat [11598] O61 - LFC: 10/01/2014 - 09:51:34 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\prefs.js [4728] O61 - LFC: 10/01/2014 - 09:51:35 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\search.json [11641] O61 - LFC: 10/01/2014 - 09:51:35 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\secmod.db [16384] O61 - LFC: 10/01/2014 - 09:51:35 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\sessionstore.bak [1076] O61 - LFC: 10/01/2014 - 09:51:35 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\sessionstore.bak-20131205075310 [801] O61 - LFC: 10/01/2014 - 09:51:37 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\sessionstore.js [23257] O61 - LFC: 10/01/2014 - 09:51:37 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\storage\persistent\moz-safe-about+home\.metadata [0] O61 - LFC: 10/01/2014 - 09:51:37 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\storage\persistent\moz-safe-about+home\idb\818200132aebmoouht.sqlite [524288] O61 - LFC: 10/01/2014 - 09:51:37 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\times.json [29] O61 - LFC: 10/01/2014 - 09:51:37 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\urlclassifierkey3.txt [154] O61 - LFC: 10/01/2014 - 09:51:37 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\webapps\webapps.json [2] O61 - LFC: 10/01/2014 - 09:51:37 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\webappsstore.sqlite [98304] O61 - LFC: 10/01/2014 - 09:51:37 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\webappsstore.sqlite-shm [32768] O61 - LFC: 10/01/2014 - 09:51:37 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\webappsstore.sqlite-wal [196784] O61 - LFC: 10/01/2014 - 09:51:39 ---A- . (...) -- C:\Documents and Settings\user\Application Data\OpenOffice.org2\user\registry\data\org\openoffice\Office\Common.xcu [460] O61 - LFC: 10/01/2014 - 09:51:39 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Orange\OrangeInside\crypv.oi [310] O61 - LFC: 10/01/2014 - 09:51:40 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Orange\OrangeInside\WebTrendslogstats.txt [2] O61 - LFC: 10/01/2014 - 09:51:42 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Real\RealPlayer\WatchFolders\fldrscan.out [321453] O61 - LFC: 10/01/2014 - 09:51:42 ---A- . (...) -- C:\Documents and Settings\user\Application Data\Real\rnadmin\rnsystem.dat [1753] O61 - LFC: 10/01/2014 - 09:51:52 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\dht.dat [1570] =>P2P.µTorrent O61 - LFC: 10/01/2014 - 09:51:52 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\dht_feed.dat [2] =>P2P.µTorrent O61 - LFC: 10/01/2014 - 09:51:54 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\dlimagecache\2AB364AFD6392C4B211EE4D2A091A7EC75B2085C [1150] =>P2P.µTorrent O61 - LFC: 10/01/2014 - 09:51:56 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\dlimagecache\5108DF53CC447C7C85D4E98DC2487135DCD5C35B [1150] =>P2P.µTorrent O61 - LFC: 10/01/2014 - 09:52:02 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\resume.dat [99] =>P2P.µTorrent O61 - LFC: 10/01/2014 - 09:52:02 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\rss.dat [99] =>P2P.µTorrent O61 - LFC: 10/01/2014 - 09:52:02 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\settings.dat [222418] =>P2P.µTorrent O61 - LFC: 10/01/2014 - 09:52:02 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\settings.dat.old [222476] =>P2P.µTorrent O61 - LFC: 10/01/2014 - 09:52:05 ---A- . (...) -- C:\Documents and Settings\user\Application Data\uTorrent\updates.dat [779] =>P2P.µTorrent O61 - LFC: 10/01/2014 - 09:52:05 ---A- . (...) -- C:\Documents and Settings\user\Application Data\vlc\ml.xspf [304] O61 - LFC: 10/01/2014 - 09:52:06 ---A- . (...) -- C:\Documents and Settings\user\Application Data\ZHP\Log.txt [19105] =>.Nicolas Coolman O61 - LFC: 10/01/2014 - 09:52:06 ---A- . (...) -- C:\Documents and Settings\user\Application Data\ZHP\TestsZHPDiag.txt [3235] =>.Nicolas Coolman O61 - LFC: 10/01/2014 - 09:52:07 ---A- . (...) -- C:\Documents and Settings\user\Bureau\adwcleaner.exe [1236282] O61 - LFC: 10/01/2014 - 09:52:08 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\addons.json [7112] O61 - LFC: 10/01/2014 - 09:52:08 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\blocklist.xml [99529] O61 - LFC: 10/01/2014 - 09:52:08 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\bookmarkbackups\bookmarks-2014-01-10_871.json [410050] O61 - LFC: 10/01/2014 - 09:52:08 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\cert8.db [163840] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\content-prefs.sqlite [229376] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\cookies.sqlite [1572864] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\formhistory.sqlite [86016] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\healthreport.sqlite [1146880] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\healthreport\state.json [123] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\key3.db [16384] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\localstore.rdf [4356] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\parent.lock [0] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\permissions.sqlite [65536] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\places.sqlite [10485760] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\prefs.js [8011] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\search-metadata.json [318] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\search.json [11635] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\sessionstore.bak [25979] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\sessionstore.js [33741] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\storage\persistent\chrome\idb\3975583312M8EAGAAS_J6nbD20.sqlite [589824] O61 - LFC: 10/01/2014 - 09:52:09 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\storage\persistent\chrome\idb\476421941MwElGnAX_O_y3BM1.sqlite [524288] O61 - LFC: 10/01/2014 - 09:52:10 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\urlclassifierkey3.txt [154] O61 - LFC: 10/01/2014 - 09:52:10 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\webapps\webapps.json [2] O61 - LFC: 10/01/2014 - 09:52:10 ---A- . (...) -- C:\Documents and Settings\user\Bureau\Anciennes données de Firefox\vbo7n6sf.default-1388593239562\webappsstore.sqlite [425984] O61 - LFC: 10/01/2014 - 09:52:55 ---A- . (.Andres_age.) -- C:\Documents and Settings\user\Bureau\MegaUploader_v0.7.exe [1525275] O61 - LFC: 10/01/2014 - 09:53:24 ---A- . (...) -- C:\Documents and Settings\user\Bureau\ZHPDiag.lnk [1555] =>.Nicolas Coolman O61 - LFC: 10/01/2014 - 09:53:24 ---A- . (...) -- C:\Documents and Settings\user\Bureau\ZHPFix.lnk [1660] =>.Nicolas Coolman O61 - LFC: 10/01/2014 - 09:53:24 ---A- . (...) -- C:\Documents and Settings\user\Cookies\KAOQBIXE.txt [147] O61 - LFC: 10/01/2014 - 09:53:24 -SHA- . (...) -- C:\Documents and Settings\user\Cookies\index.dat [32768] O61 - LFC: 10/01/2014 - 09:53:32 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Certificate Revocation Lists [267844] O61 - LFC: 10/01/2014 - 09:53:32 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\chrome_shutdown_ms.txt [6] O61 - LFC: 10/01/2014 - 09:53:33 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Archived History [57344] O61 - LFC: 10/01/2014 - 09:53:33 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Archived History-journal [512] O61 - LFC: 10/01/2014 - 09:53:33 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies [26624] O61 - LFC: 10/01/2014 - 09:53:33 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies-journal [16384] O61 - LFC: 10/01/2014 - 09:53:33 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Current Session [38617] O61 - LFC: 10/01/2014 - 09:53:33 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Current Tabs [20365] O61 - LFC: 10/01/2014 - 09:53:33 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\000010.ldb [196] O61 - LFC: 10/01/2014 - 09:53:33 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\CURRENT [16] O61 - LFC: 10/01/2014 - 09:53:33 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\LOG [144] O61 - LFC: 10/01/2014 - 09:53:33 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\LOG.old [261] O61 - LFC: 10/01/2014 - 09:53:33 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000012 [425] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Favicons [28672] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Favicons-journal [16384] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\Origins\CURRENT [16] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\Origins\LOG [144] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\Origins\MANIFEST-000011 [107] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\GPUCache\data_0 [45056] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\GPUCache\data_1 [270336] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\GPUCache\data_2 [1056768] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\GPUCache\data_3 [8192] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\GPUCache\index [262512] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\History [110592] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\History Provider Cache [11088] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\History-journal [16384] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Last Session [66042] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Last Tabs [25495] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_dub118.mail.live.com_0.localstorage [3072] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_dub118.mail.live.com_0.localstorage-journal [3608] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_www.google.fr_0.localstorage [3072] O61 - LFC: 10/01/2014 - 09:53:36 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_www.google.fr_0.localstorage-journal [3608] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Network Action Predictor [29696] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Network Action Predictor-journal [16384] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Origin Bound Certs [12288] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Origin Bound Certs-journal [10832] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences [76074] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\QuotaManager [13312] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\QuotaManager-journal [8768] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\000028.ldb [144] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\000030.ldb [16621] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\000033.ldb [125689] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\CURRENT [16] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\LOG [267] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\LOG.old [266] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000032 [201] =>.Google Inc O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Shortcuts [12288] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Shortcuts-journal [12824] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\TransportSecurity [8] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Visited Links [131072] O61 - LFC: 10/01/2014 - 09:53:37 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data [77824] O61 - LFC: 10/01/2014 - 09:53:38 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data-journal [12848] O61 - LFC: 10/01/2014 - 09:53:38 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Local State [52436] O61 - LFC: 10/01/2014 - 09:53:39 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\PnaclTranslationCache\data_0 [8192] O61 - LFC: 10/01/2014 - 09:53:39 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\PnaclTranslationCache\data_1 [270336] O61 - LFC: 10/01/2014 - 09:53:39 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\PnaclTranslationCache\data_2 [8192] O61 - LFC: 10/01/2014 - 09:53:39 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\PnaclTranslationCache\data_3 [8192] O61 - LFC: 10/01/2014 - 09:53:39 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\PnaclTranslationCache\index [262512] O61 - LFC: 10/01/2014 - 09:53:39 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Bloom [9375560] O61 - LFC: 10/01/2014 - 09:53:39 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set [1623320] O61 - LFC: 10/01/2014 - 09:53:39 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Cookies [6144] O61 - LFC: 10/01/2014 - 09:53:39 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Cookies-journal [4640] O61 - LFC: 10/01/2014 - 09:53:39 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Csd Whitelist [135496] O61 - LFC: 10/01/2014 - 09:53:40 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Download [1085448] O61 - LFC: 10/01/2014 - 09:53:40 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Download Whitelist [19504] O61 - LFC: 10/01/2014 - 09:53:40 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Extension Blacklist [6928] O61 - LFC: 10/01/2014 - 09:54:43 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\MegaUploader\Config\Configuration.xml [4481] O61 - LFC: 10/01/2014 - 09:54:43 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\MegaUploader\Config\UploadList.xml [3748] O61 - LFC: 10/01/2014 - 09:54:43 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\MegaUploader\Internal\Buffer.dat [0] O61 - LFC: 10/01/2014 - 09:54:43 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\MegaUploader\Log\Log_20140110.txt [7167] O61 - LFC: 10/01/2014 - 09:54:44 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_360.wmdb [5459968] O61 - LFC: 10/01/2014 - 09:54:44 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Media Player\wmpfolders.wmdb [80974] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\0\29\783F8d01 [22300] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\0\34\7ECD8d01 [38930] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\0\57\2799Dd01 [33715] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\0\D4\05195d01 [34457] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\1\44\882FCd01 [65185] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\1\5F\A0AA5d01 [36095] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\1\62\8FB48d01 [33684] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\1\BC\FDEA1d01 [25318] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\1\C2\AC2BFd01 [18208] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\2\85\C3003d01 [82591] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\2\8F\FC2FFd01 [18515] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\2\9E\80BE0d01 [22605] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\2\A5\B56D1d01 [55772] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\3\AF\BB0ADd01 [43034] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\3\DA\271C2d01 [52112] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\3\DC\7FBF8d01 [33430] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\3\E2\6BE4Ed01 [18291] O61 - LFC: 10/01/2014 - 09:54:50 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\4\37\A0ED9d01 [28960] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\4\50\9622Bd01 [21267] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\4\5B\B9534d01 [48070] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\4\75\E486Ad01 [28901] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\4\FF\230B9d01 [42452] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\5\15\7F10Fd01 [39717] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\5\2B\B5760d01 [68300] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\5\3B\0B8BEd01 [20746] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\5\57\B4735d01 [54705] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\5\82\0B55Ed01 [22192] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\5\90\164FFd01 [29185] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\5\C3\DFA20d01 [54614] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\5\FD\F2235d01 [73316] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\6\63\AE4B1d01 [334580] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\6\AD\CDD19d01 [44864] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\6\BC\4FCC6d01 [26182] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\6\BC\F22A8d01 [37484] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\7\30\B18CBd01 [23290] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\7\36\17AA6d01 [19268] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\7\3C\016A5d01 [34367] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\7\3E\7E147d01 [18576] O61 - LFC: 10/01/2014 - 09:54:51 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\7\5F\580F5d01 [21399] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\7\93\6748Bd01 [26182] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\7\B1\328BCd01 [16663] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\7\BB\4BE0Bd01 [21447] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\7\F7\F517Fd01 [60093] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\8\03\C2D5Fd01 [99529] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\8\19\1660Dd01 [67984] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\8\BA\968BFd01 [52480] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\8\CE\3B35Fd01 [68492] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\9\68\CBDADd01 [49931] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\9\DE\0F074d01 [36092] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\A\42\E0273d01 [45292] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\A\86\71A71d01 [26457] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\A\92\2E516d01 [48468] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\A\F5\3245Bd01 [60666] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\B\0A\85228d01 [26310] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\B\18\50880d01 [16835] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\B\26\8275Cd01 [30188] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\B\2E\4518Ad01 [46078] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\B\95\91D24d01 [623983] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\C\03\6E086d01 [32862] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\C\05\657B3d01 [39736] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\C\56\707C8d01 [22300] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\C\EE\F1936d01 [55752] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\C\F1\C17E1d01 [22300] O61 - LFC: 10/01/2014 - 09:54:52 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\D\CD\B7E33d01 [37903] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\E\17\467F6d01 [29123] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\E\1E\5D32Fd01 [65535] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\E\20\E5489d01 [26414] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\E\56\C99C0d01 [197564] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\E\95\A1C50d01 [70919] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\E\A3\ADA52d01 [34402] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\E\A6\1497Fd01 [54705] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\E\C1\4A437d01 [44392] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\E\C9\9D757d01 [26182] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\E\D3\5195Fd01 [18624] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\E\F8\3A59Bd01 [46228] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\F\2B\CA340d01 [21934] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\F\83\1A8F1d01 [36506] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\_CACHE_001_ [4194304] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\_CACHE_002_ [4194304] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\_CACHE_003_ [4194304] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\Cache\_CACHE_MAP_ [8468] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\safebrowsing\goog-malware-shavar.cache [12] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\safebrowsing\goog-malware-shavar.pset [345260] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\safebrowsing\goog-malware-shavar.sbstore [198229] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\safebrowsing\goog-phish-shavar.cache [12] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\safebrowsing\goog-phish-shavar.pset [263288] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\safebrowsing\goog-phish-shavar.sbstore [106370] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\safebrowsing\test-malware-simple.cache [44] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\safebrowsing\test-malware-simple.pset [16] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\safebrowsing\test-malware-simple.sbstore [232] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\safebrowsing\test-phish-simple.cache [44] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\safebrowsing\test-phish-simple.pset [16] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\safebrowsing\test-phish-simple.sbstore [232] O61 - LFC: 10/01/2014 - 09:54:53 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\startupCache\startupCache.4.little [983176] O61 - LFC: 10/01/2014 - 09:54:54 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\_CACHE_CLEAN_ [1] O61 - LFC: 10/01/2014 - 09:54:54 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\thumbnails\8a2f2e97318443dd723d512492586994.png [58994] O61 - LFC: 10/01/2014 - 09:54:54 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\ajwgtuvz.default-1389343252890\thumbnails\a30de70e958ff40849fd42ce66fb5b6f.png [60350] O61 - LFC: 10/01/2014 - 09:54:54 -SHA- . (...) -- C:\Documents and Settings\user\Local Settings\Historique\History.IE5\index.dat [49152] O61 - LFC: 10/01/2014 - 09:54:55 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Temp\120_9590\crl-set [267844] O61 - LFC: 10/01/2014 - 09:54:55 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Temp\120_9590\manifest.fingerprint [12] O61 - LFC: 10/01/2014 - 09:54:55 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Temp\120_9590\manifest.json [34] O61 - LFC: 10/01/2014 - 09:54:55 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Temp\preferences [0] O61 - LFC: 10/01/2014 - 09:54:55 ---A- . (...) -- C:\Documents and Settings\user\Local Settings\Temp\wmplog00.sqm [1550] O61 - LFC: 10/01/2014 - 09:54:55 -SHA- . (...) -- C:\Documents and Settings\user\Local Settings\Historique\History.IE5\MSHist012014011020140111\index.dat [32768] O61 - LFC: 10/01/2014 - 09:55:02 ---A- . (...) -- C:\Documents and Settings\user\Recent\Le Magasin Des Suicides 2012 FRENCH DvDRiP Xvid-UTT.avi.lnk [722] O61 - LFC: 10/01/2014 - 09:55:02 ---A- . (.Nicolas Coolman.) -- C:\Documents and Settings\user\Mes documents\Téléchargements\ZHPDiag2.exe [6865591] =>.Nicolas Coolman O61 - LFC: 10/01/2014 - 09:55:03 ---A- . (...) -- C:\Documents and Settings\user\Recent\partoches.zip.lnk [436] ~ 5 Fichiers temporaires (Temporary files) ~ 3 Fichiers cookies (Cookies files) ~ Files: 344 Scanned in 04mn 08s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Liste les services legacy du registre (LALS) (O64) O64 - Services: CurCS - 17/08/2011 - C:\WINDOWS\system32\drivers\afd.sys (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - 24/11/2013 - C:\Program Files\Avira\AntiVir Desktop\sched.exe (AntiVirSchedulerService) .(.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - LEGACY_ANTIVIRSCHEDULERSERVICE O64 - Services: CurCS - 12/11/2013 - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (AntiVirService) .(.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - LEGACY_ANTIVIRSERVICE O64 - Services: CurCS - 13/08/2010 - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Mobile Device) .(.Apple Inc. - Apple Mobile Device Service.) - LEGACY_APPLE_MOBILE_DEVICE O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\arp1394.sys (Arp1394) .(.Microsoft Corporation - IP/1394 Arp Client.) - LEGACY_ARP1394 O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV O64 - Services: CurCS - 24/11/2013 - C:\WINDOWS\system32\DRIVERS\avgntflt.sys (avgntflt) .(.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) - LEGACY_AVGNTFLT O64 - Services: CurCS - 24/11/2013 - C:\WINDOWS\system32\DRIVERS\avipbb.sys (avipbb) .(.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB O64 - Services: CurCS - 12/11/2013 - C:\WINDOWS\system32\DRIVERS\avkmgr.sys (avkmgr) .(.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - LEGACY_AVKMGR O64 - Services: CurCS - 15/03/2006 - C:\WINDOWS\system32\Drivers\AWISp50.sys (AWISp50) .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 SPR Protocol Driver.) - LEGACY_AWISP50 O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Browser) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BROWSER O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\drivers\fltmgr.sys (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\msgpc.sys (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (HidServ) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HIDSERV O64 - Services: CurCS - 20/10/2009 - C:\WINDOWS\system32\Drivers\HTTP.sys (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER O64 - Services: CurCS - 02/03/2006 - C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys (IpFilterDriver) .(.Microsoft Corporation - IP FILTER DRIVER.) - LEGACY_IPFILTERDRIVER O64 - Services: CurCS - 24/09/2010 - C:\Program Files\iPod\bin\iPodService.exe (iPod Service) .(.Apple Inc. - iPodService Module (32-bit).) - LEGACY_IPOD_SERVICE O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\ipsec.sys (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC O64 - Services: CurCS - 26/10/2013 - C:\Program Files\Java\jre7\bin\jqs.exe (JavaQuickStarterService) .(.Oracle Corporation - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (lanmanserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANSERVER O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (LanmanWorkstation) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANWORKSTATION O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS O64 - Services: CurCS - 04/04/2013 - C:\WINDOWS\system32\drivers\mbam.sys (MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\Drivers\mountmgr.sys (mountmgr) .(.Microsoft Corporation - Mount Manager.) - LEGACY_MOUNTMGR O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\mrxdav.sys (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - 15/07/2011 - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys (MRxSmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB O64 - Services: CurCS - 13/12/2010 - C:\Program Files\Microsoft LifeCam\MSCamS32.exe (MSCamSvc) .(.Microsoft Corporation - MsCamSvc.exe.) - LEGACY_MSCAMSVC O64 - Services: CurCS - 17/12/2002 - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (MSSQL$SONY_MEDIAMGR) .(.Microsoft Corporation - SQL Server Windows NT.) - LEGACY_MSSQL$SONY_MEDIAMGR O64 - Services: CurCS - 21/04/2011 - C:\WINDOWS\system32\Drivers\Mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\Drivers\NDIS.sys (NDIS) .(.Microsoft Corporation - NDIS 5.1 wrapper driver.) - LEGACY_NDIS O64 - Services: CurCS - 08/07/2011 - C:\WINDOWS\system32\DRIVERS\ndistapi.sys (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\ndisuio.sys (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\netbios.sys (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\netbt.sys (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA O64 - Services: CurCS - 11/02/2011 - C:\WINDOWS\system32\drivers\npf.sys (npf) .(.CACE Technologies, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) - LEGACY_NPF O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\Drivers\PartMgr.sys (PartMgr) .(.Microsoft Corporation - Partition Manager.) - LEGACY_PARTMGR O64 - Services: CurCS - 29/09/2004 - C:\WINDOWS\system32\HPZipm12.exe (Pml Driver HPZ12) .(.HP - PML Driver.) - LEGACY_PML_DRIVER_HPZ12 O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\lsass.exe (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\lsass.exe (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE O64 - Services: CurCS - 02/03/2006 - C:\WINDOWS\system32\DRIVERS\rasacd.sys (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\rdbss.sys (Rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS O64 - Services: CurCS - 02/03/2006 - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\lsass.exe (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION O64 - Services: CurCS - 17/08/2010 - C:\WINDOWS\system32\spoolsv.exe (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\sr.sys (sr) .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE O64 - Services: CurCS - 17/02/2011 - C:\WINDOWS\system32\DRIVERS\srv.sys (Srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV O64 - Services: CurCS - 03/11/2013 - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys (ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV O64 - Services: CurCS - 20/06/2008 - C:\WINDOWS\system32\DRIVERS\tcpip.sys (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\drivers\vga.sys (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\wanarp.sys (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT O64 - Services: CurCS - 02/03/2006 - C:\WINDOWS\system32\drivers\ws2ifsl.sys (WS2IFSL) .(.Microsoft Corporation - Winsock2 IFS Layer.) - LEGACY_WS2IFSL O64 - Services: CurCS - 28/09/2006 - C:\WINDOWS\system32\DRIVERS\WudfPf.sys (WudfPf) .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (WudfSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUDFSVC O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC ~ Legacy: 170 Scanned in 00mn 04s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe ~ FASS Keys: 10 Scanned in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Apple Inc. - Safari Web Browser.) -- C:\Program Files\Safari\Safari.exe O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Not Key.) ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://search.live.com ~ Keys: Scanned in 00mn 00s ---\\ Enumère les service demarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AppMgmt (AppMgmt) . (...) -- C:\WINDOWS\system32\appmgmts.dll [0] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496] O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [78336] O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464] O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576] O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [127488] O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040] O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [253952] O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504] O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840] O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096] O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792] O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [198144] O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248] O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560] O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll [18944] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\system32\ipnathlp.dll [332800] O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\system32\tapisrv.dll [249856] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176] O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [483840] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408] O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400] O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll [27136] O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll [293376] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [61440] ~ Services: 39 Scanned in 00mn 02s ---\\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.14BBAED9FEC50951565C3924562814ED] [SPRF][02/11/2013] (...) -- C:\Documents and Settings\All Users\Application Data\1383383015.bdinstall.bin [791082] [MD5.FD57E060EB9B06BF42AD034924D29693] [SPRF][03/11/2013] (...) -- C:\Documents and Settings\All Users\Application Data\1383476838.bdinstall.bin [247581] [MD5.8E58EBA5401EE7A8C9303BAA14EEAEA5] [SPRF][27/02/2007] (...) -- C:\Documents and Settings\user\Local Settings\Application Data\fusioncache.dat [127] [MD5.246FE58EFFD357B2078842708155E46C] [SPRF][10/01/2014] (...) -- C:\Documents and Settings\user\Bureau\adwcleaner.exe [1236282] [MD5.F597F4F1C2FA13ED5AA9B3312C3A322E] [SPRF][09/06/2013] (.Pas de propriétaire - Setup Application.) -- C:\Documents and Settings\user\Bureau\AthanBasic1.exe [8956776] [MD5.89BA71D0053C36428A64E89B4DF09BBE] [SPRF][27/04/2011] (...) -- C:\Documents and Settings\user\Bureau\capturino2.exe [5283077] [MD5.FEE1D58C6AD73F25EB0DAD4F690560AD] [SPRF][16/10/2012] (.Facebook Inc. - Setup.) -- C:\Documents and Settings\user\Bureau\FacebookVideoCallSetup_v1.2.205.0.exe [501248] [MD5.F4CD77A9AEC8811601FB682866A40FEB] [SPRF][29/12/2008] (.Pas de propriétaire - GIMP Setup.) -- C:\Documents and Settings\user\Bureau\gimp-2.6.3-i686-setup.exe [15769744] [MD5.C87E79C08989CDEBA8D4DAFE097CF71B] [SPRF][19/02/2009] (.Pas de propriétaire - K-Lite Mega Codec Pack Setup.) -- C:\Documents and Settings\user\Bureau\klmcodec462.exe [20504294] [MD5.D5276AD23B7CA15B547477E04B799253] [SPRF][10/01/2014] (.Andres_age - MegaUploader Setup.) -- C:\Documents and Settings\user\Bureau\MegaUploader_v0.7.exe [1525275] [MD5.68372C4D5AC151504AF0C5570290A672] [SPRF][17/10/2010] (.RealNetworks, Inc. - Shell executable of Setup program.) -- C:\Documents and Settings\user\Bureau\RealPlayerSPGold_fr.exe [27190768] [MD5.54ACBA9CFD7154C02CEACF6310CF3CFA] [SPRF][16/10/2010] (.Safer Networking Limited - Spybot - Search & Destroy.) -- C:\Documents and Settings\user\Bureau\setup-spybotsd162.exe [16409960] [MD5.09180D99A430E7E5AE364000B6609462] [SPRF][23/12/2011] (.Skype Technologies S.A. - Skype.) -- C:\Documents and Settings\user\Bureau\SkypeSetup.exe [980616] [MD5.AB11A6A7E1C011AD19BF674A01ACC2D5] [SPRF][10/07/2013] (.BitTorrent Inc. - µTorrent.) -- C:\Documents and Settings\user\Bureau\utorrent.exe [1130576] =>P2P.BitTorrent [MD5.1E74296920F0E207947B5FC0B6A75EF6] [SPRF][21/06/2008] (...) -- C:\Program Files\ffdsasetts.reg [1172] [MD5.21CFF59F73C09A1F1F5FF3D75EBFC589] [SPRF][21/06/2008] (...) -- C:\Program Files\ffdssetts.reg [1446] [MD5.FF8362D06B7671A508888224FB2A8864] [SPRF][21/06/2008] (...) -- C:\Program Files\ffdsvsetts.reg [31030] [MD5.A7B18B5709A331D7BAFE4AA2FA54AD34] [SPRF][21/06/2008] (...) -- C:\Program Files\mpc1.reg [596] [MD5.B9EB849EC191A7E0AE6B463902B1D9B5] [SPRF][21/06/2008] (...) -- C:\Program Files\mpc2.reg [680] [MD5.9981D5BBF4430D6C836A0BDC758187FE] [SPRF][21/06/2008] (...) -- C:\Program Files\mpc3.reg [3026] [MD5.AEF922CF4E6B33F04CCADE4F71FB7690] [SPRF][21/06/2008] (...) -- C:\Program Files\mpc4.reg [3444] [MD5.2EDBE7F0D4224E37E534778B740F0D88] [SPRF][21/06/2008] (...) -- C:\Program Files\mpc5.reg [16278] [MD5.F93A83DA2BE77E7637F1FAE3B346D0ED] [SPRF][21/06/2008] (...) -- C:\Program Files\mpc6.reg [18156] [MD5.E1BF5664C40AFBF6B0EEC20A56D6A7E9] [SPRF][21/06/2008] (...) -- C:\Program Files\mpc7.reg [3476] [MD5.732CACA8E848F6E721B093E51FC50B1D] [SPRF][09/01/2007] (.Microsoft® Corporation - Outil MSN Téléchargement de photos.) -- C:\WINDOWS\Downloaded Program Files\PURfr-fr.dll [110592] ~ Files: 25 Scanned in 00mn 10s ---\\ Enumère les codes produits des logiciels (PUC) (O90) O90 - PUC: "11A0345E99760E149A5D6FB8CD76AA8D" . (.OpenOffice.org 2.1.) -- C:\WINDOWS\Installer\{E5430A11-6799-41E0-A9D5-F68BDC67AAD8}\soffice.exe O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\WINDOWS\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon O90 - PUC: "243493A986A4ABE4586A555B954F7E00" . (.Microsoft .NET Framework 1.1 French Language Pack.) -- C:\WINDOWS\Installer\{9A394342-4A68-4EBA-85A6-55B559F4E700}\ndpsetup.ico O90 - PUC: "28669D9CD4A5AF54ABE3DDBCB2C08B86" . (.Safari.) -- C:\WINDOWS\Installer\{C9D96682-5A4D-45FA-BA3E-DDCB2B0CB868}\Installer.ico O90 - PUC: "314B17DBEEF9BB946A1DC2B0BF99DBEF" . (.Microsoft LifeCam.) -- C:\WINDOWS\Installer\{BD71B413-9FEE-49BB-A6D1-2C0BFB99BDFE}\LifeCamIcon.ico O90 - PUC: "3AEE1ACCE55550D4CA64B4946C5C8D78" . (.Apple Mobile Device Support.) -- C:\WINDOWS\Installer\{CCA1EEA3-555E-4D05-AC46-4B49C6C5D887}\Installer.ico O90 - PUC: "47529BC12F69B7647B39C5BE534CC092" . (.Image Resizer Powertoy for Windows XP.) -- C:\WINDOWS\Installer\{1CB92574-96F2-467B-B793-5CEB35C40C29}\ARPPRODUCTICON.exe O90 - PUC: "68AB67CA7DA76301B7448A0300000030" . (.Adobe Reader 8.3.1 - Français.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A83000000003}\SC_Reader.exe O90 - PUC: "7414007EACC2C134AA50A21B669B87D5" . (.QuickTime.) -- C:\WINDOWS\Installer\{E7004147-2CCA-431C-AA05-2AB166B9785D}\Installer.ico O90 - PUC: "7E2A5EC273437EC4CB4F58DEE6FE9F4E" . (.iTunes.) -- C:\WINDOWS\Installer\{2CE5A2E7-3437-4CE7-BCF4-85ED6EEFF9E4}\Installer.ico O90 - PUC: "86DFAEADA4BB70542A148C08D4E26AD6" . (.Apple Application Support.) -- C:\WINDOWS\Installer\{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}\WinInstall.ico O90 - PUC: "9B00314CD581E574FBCE93FE37F2911B" . (.Apple Software Update.) -- C:\WINDOWS\Installer\{C41300B9-185D-475E-BFEC-39EF732F19B1}\Installer.ico =>.Apple Inc O90 - PUC: "9F2FDFE0D6387BE43AD230B83D1FBFA2" . (.Security Update for CAPICOM (KB931906).) -- C:\WINDOWS\Installer\{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}\folder.ico O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\WINDOWS\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon O90 - PUC: "D8C23564707D53D41B1C4018B1F80163" . (.Nero 7 Essentials.) -- C:\WINDOWS\Installer\{46532C8D-D707-4D35-B1C1-04811B8F1036}\ARPPRODUCTICON.exe O90 - PUC: "EC2DFDB492364E248910B9D3F1017DB9" . (.Adobe® Photoshop® Album Starter Edition 3.0.) -- C:\WINDOWS\Installer\{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}\ARPPRODUCTICON.exe ~ Update Products: 68 Scanned in 00mn 00s ---\\ Enumère les données de la clé NameSpace (MNS) (O92) O92 - MNS: Nero Scout - {3d6be802-fc0d-4595-a304-e611f97089dc} ~ MNS: 1 Scanned in 00mn 00s ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) [MD5.ABE823B651DBC71E0D3B4F6BC1C500D6] [WIS][06/02/2007] (.Google - Installs the Google Toolbar for Firefox.) -- C:\Windows\Installer\3cd013f.msi [94208] =>Toolbar.Google [MD5.2AB240430A565018C8AB7F232CDB6D9E] [WIS][10/11/2007] (.eSupportQFolder - eSupportQFolder.) -- C:\Windows\Installer\800152.msi [121344] [MD5.3012773AFBD7408CED82A5190FB1F21A] [WIS][01/02/2007] (.roddy2000@hotbox.ru - DVD Decoder Pak for Windows XP.) -- C:\Windows\Installer\d0ae1.msi [220160] ~ WIS: 73 Scanned in 00mn 07s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 20/11/2013 257416 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Disabled 24/11/2013 1011768 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.exe SS - | Demand 14/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe SS - | Demand 12/03/2008 1831936 | (GoogleDesktopManager) . (.Google.) - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe SS - | Auto 06/11/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 06/11/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Auto 04/10/2011 194104 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Demand 04/04/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe SS - | Auto 04/04/2013 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe SS - | Auto 04/04/2013 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe SS - | Demand 25/11/2013 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe SS - | Demand 21/08/2007 800040 | (NBService) . (.Nero AG.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe SS - | Demand 10/07/1658 0 | (NMIndexingService) . (...) - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe SS - | Auto 24/01/2006 131139 | (NVSvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvsvc32.exe SR - | Auto 24/11/2013 440376 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe SR - | Auto 12/11/2013 440376 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe SR - | Auto 13/08/2010 144672 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Demand 24/09/2010 820008 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 26/10/2013 182696 | (JavaQuickStarterService) . (.Oracle Corporation.) - C:\Program Files\Java\jre7\bin\jqs.exe SR - | Auto 29/09/2004 69632 | (Pml Driver HPZ12) . (.HP.) - C:\WINDOWS\system32\HPZipm12.exe ~ Services: Scanned in 00mn 14s ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net ~ MBR: 1 Scanned in 00mn 02s ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by user at 10/01/2014 09:57:59 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 04s ---\\ Scan Additionnel (O88) Database Version : 13022 - (12/01/2014) Clés trouvées (Keys found) : 4 Valeurs trouvées (Values found) : 1 Dossiers trouvés (Folders found) : 3 Fichiers trouvés (Files found) : 3 [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] =>Toolbar.Google^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2CCBABCB-6427-4A55-B091-49864623C43F}] =>Toolbar.Google^ [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent] =>P2P.BitTorrent^ [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\uTorrent] =>P2P.BitTorrent^ [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:uTorrent =>P2P.BitTorrent^ C:\Documents and Settings\user\Application Data\Azureus =>P2P.Azureus^ C:\Documents and Settings\user\Application Data\BitTorrent =>P2P.BitTorrent^ C:\Documents and Settings\user\Application Data\uTorrent =>P2P.µTorrent^ [HKCU\Software\BitTorrent] =>P2P.BitTorrent^ C:\Documents and Settings\user\Bureau\utorrent.exe =>P2P.BitTorrent^ C:\Windows\Installer\3cd013f.msi =>Toolbar.Google^ ~ Additionnel Scan: 285059 Items scanned in 01mn 12s ---\\ Récapitulatif des détections trouvées sur votre station ~ MSI: 0 link(s) detected in 01mn 12s End of the scan (1994 lines in 13mn 20s)(0)