cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Rapport de ZHPDiag v1.3.5.92 par Nicolas Coolman, Update du 17/02/2013
Run by By.keita at 19/02/2013 21:50:05
State : Nouvelle version disponible
High Elevated Privileges : OK
UAC : Deactivate by program


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 17.0.1 v17.0.1
GCIE: Google Chrome v24.0.1312.57 (Defaut)

---\\ Windows Product Information
~ Langage: Fran�ais
Windows 7 Ultimate Edition, 32-bit (Build 7600)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : PMJBM
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: x86 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3563 MB (66% free)
System Restore: Activ� (Enable)
System drive C: has 149 GB (32%) free of 466 GB

---\\ Logged in mode
~ Computer Name: BYKEITA-PC
~ User Name: By.keita
~ All Users Names: By.keita, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\By.keita\AppData\Roaming\
~ %Desktop% : C:\Users\By.keita\Desktop\
~ %Favorites% : C:\Users\By.keita\Favorites\
~ %LocalAppData% : C:\Users\By.keita\AppData\Local\
~ %StartMenu% : C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 149 Go of 466 Go)
D:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particuli�re de fichiers g�n�riques
[MD5.15BC38A7492BEFE831966ADB477CF76F] - (.Microsoft Corporation - Explorateur Windows.) (.13/07/2009 - 20:14:20.) -- C:\Windows\Explorer.exe [2613248]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de d�marrage de Windows.) (.13/07/2009 - 20:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
[MD5.1D94FA7C81D2FFE494AF094619BA706F] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.09/05/2012 - 18:30:51.) -- C:\Windows\System32\wininet.dll [1127424]
[MD5.8EC6A4AB12B8F3759E21F8E3A388F2CF] - (.Microsoft Corporation - Application d�ouverture de session Windows.) (.13/07/2009 - 20:14:45.) -- C:\Windows\System32\Winlogon.exe [285696]
[MD5.58C94EAE54BF0C5E2B80B2E5E7744D4C] - (.Microsoft Corporation - Biblioth�que de licences.) (.13/07/2009 - 20:16:15.) -- C:\Windows\System32\sppcomapi.dll [193024]
[MD5.DDC040FDB01EF1712A6B13E52AFB104C] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.13/07/2009 - 18:12:38.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 20:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/07/2009 - 18:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
[MD5.BA6E70AA0E6091BC39DE29477D866A77] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/07/2009 - 18:11:26.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
[MD5.8E09E52EE2E3CEB199EF3DD99CF9E3FB] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.13/07/2009 - 18:14:17.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
[MD5.717A2207FD6F13AD3E664C7D5A43C7BF] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.13/07/2009 - 18:50:56.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.13/07/2009 - 18:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.13/07/2009 - 18:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
[MD5.F4A054BE78AF7F410129C4B64B07DC9B] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.13/07/2009 - 18:14:26.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123392]
[MD5.DD52A733BF4CA5AF84562A5E2F963B91] - (.Microsoft Corporation - MBT Transport driver.) (.13/07/2009 - 18:12:21.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
[MD5.3795DCD21F740EE799FB7223234215AF] - (.Microsoft Corporation - Pilote du syst�me de fichiers NT.) (.13/07/2009 - 20:20:44.) -- C:\Windows\system32\Drivers\ntfs.sys [1210432]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parall�le.) (.13/07/2009 - 18:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/07/2009 - 18:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
[MD5.C5FF95883FFEF704D50C40D21CFB3AB5] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/07/2009 - 19:02:58.) -- C:\Windows\system32\Drivers\rdpdr.sys [133120]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.13/07/2009 - 18:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
[MD5.CB39E896A2A83702D1737BFD402B3542] - (.Microsoft Corporation - TDI Translation Driver.) (.13/07/2009 - 18:12:11.) -- C:\Windows\system32\Drivers\tdx.sys [74240]
[MD5.58DF9D2481A56EDDE167E51B334D44FD] - (.Microsoft Corporation - Pilote de clich� instantan� du volume.) (.13/07/2009 - 20:19:10.) -- C:\Windows\system32\Drivers\volsnap.sys [245328]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cach�s (Cach�/Total)
~ Mes images (My Pictures) : 1/164
~ Mes musiques (My Musics) : 107/4478
~ Mes Videos (My Videos) : 1/4
~ Mes Favoris (My Favorites) : 1/26
~ Mes Documents (My Documents) : 6/3820
~ Mon Bureau (My Desktop) : 7/26
~ Menu demarrer (Programs) : 1/46
~ Scan Hidden Files in 00mn 11s



---\\ Processus lanc�s
[MD5.7853D2AB445C10F97610B2B05FA4CF0A] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [512360] [PID.2248]
[MD5.61D4B89D4209666849020B4B69791301] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [6318696] [PID.3148]
[MD5.9D197E4D8D7ED5302609808CD21D56C0] - (.Logicool Co. Ltd. - Logicool WingMan Event Monitor.) -- C:\Program Files\Logitech\Gaming Software\LWEMon.exe [153672] [PID.3320]
[MD5.C2C1407C129D67B412ED9CC5AF75D786] - (.www.IslamicFinder.org - Automatic Athan (Azan) five times a day f.) -- C:\Program Files\Athan\Athan.exe [1208320] [PID.1612]
[MD5.083649EF692A066880C9326020915AFE] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4297136] [PID.2516]
[MD5.12916E0642E92561C98B18A2A2D01B14] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848] [PID.3036]
[MD5.1E09DFA4048196C9D3CC40C485A39422] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [299008] [PID.3652]
[MD5.5B53F8D06792D714486218C563F86656] - (.MSI - Super-Charger.) -- C:\Program Files\MSI\Super-Charger\Super-Charger.exe [506384] [PID.3140]
[MD5.74CDE657245C114B98816E89B8D4CCD1] - (.ATI Technologies Inc. - Catalyst Control Center: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [299008] [PID.2688]
[MD5.F6987FF6C6D683F79FDCE707B071A997] - (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe [955392] [PID.2428]
[MD5.DEED42C533A452FC79E6C5E5132BDAEB] - (.L'Aventure Multimedia - Dictionnaire MediaDICO pour Windows.) -- C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\MediaDico36.exe [280576] [PID.3584]
[MD5.CF60E846B768BA0843AC04722785B55A] - (.Nonoh - Client to make VoIP calls..) -- C:\Program Files\Nonoh.net\Nonoh\nonoh.exe [23008656] [PID.3616]
[MD5.2F0EAAF91FC7A5C70D1F4BE9B18A1CF5] - (.Microsoft Corporation - Pense-b�te.) -- C:\Windows\System32\StikyNot.exe [354304] [PID.1048]
[MD5.ECE9413226D1C6778A9EE4DFC199C1D4] - (.Google - Google Drive.) -- C:\Program Files\Google\Drive\googledrivesync.exe [16328976] [PID.2892]
[MD5.8196DFA43EE314CD387C3F139A74A023] - (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.exe [718720] [PID.1004]
[MD5.9A8568C7642B79F43DCEB0BDF9F49050] - (.Druide informatique inc. - Gestionnaire Antidote.) -- C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe [542136] [PID.2520]
[MD5.497F27E279C0F921E2130BB89C1CB5CA] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [18705664] [PID.3196]
[MD5.D52A3D6664E8BD95F8FFC6A4C0D35669] - (.AMD - HydraDM.) -- C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [393216] [PID.4116]
[MD5.0654E4C1F597FC07D6FC7443D4F94840] - (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe [1248208] [PID.4220]
[MD5.5C2A59CA663F3C4AEED98C3BB7E5F050] - (.L'Aventure Multimedia - Reconnaissance Automatique de Caract�res.) -- C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\RAC36.exe [217171] [PID.4788]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] - (.Google Inc. - Programme d'installation de Google.) -- C:\Users\By.keita\AppData\Local\Google\Update\GoogleUpdate.exe [116648] [PID.1596]
[MD5.EA5B870671079786F335AC7C10846C4F] - (.Adobe Systems Incorporated - AAM Updates Notifier Application.) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe [295584] [PID.5020]
[MD5.F7DB6336DEFE82D7EAE25A6B656ED64A] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [5685760] [PID.1056]
~ Scan Processes Running in 00mn 01s



---\\ Google Chrome, D�marrage,Recherche,Extensions (G0,G1,G2)
C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Preferences
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.com
G0 - GCSP: Preference [User Data\Default] http://www.google.com
G1 - GCS: Preference [User Data\Default] None
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\By.keita\AppData\Roaming\Mozilla\Firefox\Profiles\7tdx18e3.default\prefs.js
M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\50356e49370ac@50356e49370e6.info] [] DownloadnSave v1.0 (.JustPlugIt.)
M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\coralietab@mozdev.org] [] IE Tab + v2.04.20110724 (.quaful@msn.com.)
M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\foxsplitter@piro.sakura.ne.jp] [] Fox Splitter v2.04.20110724 (.YUKI "Piro" Hiroshi">.)
M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\ietab@ip.cn] [] IE Tab Plus v2.0.0.0 (.quaful@msn.com.)
M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\jid1-yZwVFzbsyfMrqQ@jetpack] [] Lavasoft Search Plugin v0.6 (.Lavasoft.)
M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\{77b819fa-95ad-4f2c-ac7c-486b356188a9}] [] IE Tab v2.0.20120203 (.Hong Jen Yee (PCMan).)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_168.dll
P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf] - (.Foxit Corporation - Foxit Reader Plug-In For Firefox and Netscape.) -- C:\PROGRAM FILES\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.13.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.13.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.13.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
P2 - FPN: [HKLM] [@microsoft.com/SharePoint,version=14.0] - (.Microsoft Corporation - The plug-in allows you to open and edit files using Microsoft Office a.) -- C:\Program Files\Microsoft Office\Office14\NPSPWRAP.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.5] - (.VideoLAN - VLC media player Web Plugin 2.0.2.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.5.3".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\By.keita\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
P2 - FPN: [HKCU] [@talk.google.com/GoogleTalkPlugin] - (.Google - Version 3.13.2.11592.) -- C:\Users\By.keita\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
P2 - FPN: [HKCU] [@talk.google.com/O3DPlugin] - (.Pas de propri�taire - Google Talk Plugin Video Accelerator version:0.1.44.23.) -- C:\Users\By.keita\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [ubisoft.com/uplaypc] - (.Ubisoft - Uplay PC Plugin.) -- C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, D�marrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://allssearch.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Ubisoft - Uplay PC Plugin.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\Userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 96



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft� Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! WebRep - [HKLM]{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
~ Scan Toolbar in 00mn 00s



---\\ Applications d�marr�es par registre & par dossier (O4)
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
O4 - HKLM\..\Run: [Super-Charger] . (.MSI - Super-Charger.) -- C:\Program Files\MSI\Super-Charger\StartSuperCharger.exe
O4 - HKLM\..\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe
O4 - HKLM\..\Run: [Start WingMan Profiler] . (.Logicool Co. Ltd. - Logicool WingMan Event Monitor.) -- C:\Program Files\Logitech\Gaming Software\LWEMon.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] . (.Adobe Systems Incorporated - Adobe CS6 Service Manager.) -- C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe
O4 - HKLM\..\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [Athan] . (.www.IslamicFinder.org - Automatic Athan (Azan) five times a day f.) -- C:\Program Files\Athan\Athan.exe
O4 - HKLM\..\Run: [bdinstaller] . (.Bitdefender - Bitdefender Setup Launcher.) -- C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setuplauncher.exe
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst� Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}] C:\Users\BYA1F7~1.KEI\AppData\Local\Temp\cisC516.exe (.not file.)
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\By.keita\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKCU\..\Run: [MediaDICO36] . (.L'Aventure Multimedia - Pas de description.) -- C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\LanceMediaDICO36.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
O4 - HKCU\..\Run: [Nonoh] . (.Nonoh - Client to make VoIP calls..) -- C:\Program Files\Nonoh.net\Nonoh\nonoh.exe
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] . (.Microsoft Corporation - Pense-b�te.) -- C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files\Google\Drive\googledrivesync.exe
O4 - HKCU\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.exe
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\By.keita\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] . (.Druide informatique inc. - Gestionnaire Antidote.) -- C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [HydraVisionDesktopManager] . (.AMD - HydraDM.) -- C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_B7D67F305A96766D28B517DA4C64B651] . (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - HKUS\S-1-5-18\..\Run: [Gestionnaire Antidote.exe] . (.Druide informatique inc. - Gestionnaire Antidote.) -- C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\By.keita\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [MediaDICO36] . (.L'Aventure Multimedia - Pas de description.) -- C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\LanceMediaDICO36.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Nonoh] . (.Nonoh - Client to make VoIP calls..) -- C:\Program Files\Nonoh.net\Nonoh\nonoh.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [RESTART_STICKY_NOTES] . (.Microsoft Corporation - Pense-b�te.) -- C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files\Google\Drive\googledrivesync.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\By.keita\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Gestionnaire Antidote.exe] . (.Druide informatique inc. - Gestionnaire Antidote.) -- C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [HydraVisionDesktopManager] . (.AMD - HydraDM.) -- C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [GoogleChromeAutoLaunch_B7D67F305A96766D28B517DA4C64B651] . (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\Adobe Dreamweaver CS5.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Adobe\Adobe Dreamweaver CS5\Dreamweaver.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\Adobe Fireworks CS6.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Fireworks CS6\Fireworks.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\Adobe Photoshop CS6.lnk . (.Adobe Systems, Incorporated.) -- C:\Program Files\Adobe\Adobe Photoshop CS6\Photoshop.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\bf3 - Raccourci.lnk . (.EA Digital Illusions CE AB.) -- C:\Program Files\Battlefield 3\bf3.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\CDisplay.lnk . (.David Ayton.) -- C:\Program Files\CDisplay\CDisplay.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\FC3Updater - Raccourci.lnk . (.Ubisoft.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Updater.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\Glary Utilities.lnk . (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\Integrator.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\LMSOFT Web Creator Pro 5.lnk . (.LMSOFT.) -- C:\Program Files\LMSOFT\Web Creator Pro 5\WebCreatorPro5.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\LogoMaker.lnk . (.Studio V5 Corp..) -- C:\Program Files\Studio V5\LogoMaker\LogoMaker.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\pes2012 - Raccourci.lnk . (.Konami Digital Entertainment Co., Ltd..) -- C:\Program Files\KONAMI\Pro Evolution Soccer 2012\pes2012.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\Rayman Origins.lnk - Cl� orpheline
O4 - Global Startup: C:\Users\By.keita\Desktop\SUPER STREET FIGHTER IV ARCADE EDITION - Raccourci.lnk - Cl� orpheline
O4 - Global Startup: C:\Users\By.keita\Desktop\UpLauncher - Raccourci.lnk . (.Eden Games.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\XAMPP Control Panel.lnk . (...) -- C:\xampp\xampp-control.exe
O4 - Global Startup: C:\Users\By.keita\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BitTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files\BitTorrent\BitTorrent.exe
O4 - Global Startup: C:\Users\By.keita\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk . (...) -- C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe
O4 - Global Startup: C:\Users\By.keita\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Scan Global Startup in 00mn 00s



---\\ Invisibilit� de l'ic�ne d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ Scan IE Control Panel in 00mn 00s



---\\ Boutons situ�s sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer � OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office14\ONBttnIE.dll
O9 - Extra button: Notes &li�es OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office14\ONBTTN~1.dll
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d�affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Microsoft� Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corporation - Microsoft� Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Scan Winsock in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpDomain = no-domain-set-bellcanada
O17 - HKLM\System\CS1\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpDomain = no-domain-set-bellcanada
O17 - HKLM\System\CS2\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpDomain = no-domain-set-bellcanada
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Cl� de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non d�sactiv�s (O23)
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Intel(R) Management and Security Applica (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
~ Scan Services in 00mn 08s



---\\ Enum�ration Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ T�ches planifi�es en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000Core.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000UA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GlaryInitialize.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000Core.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000UA.job
[MD5.00000000000000000000000000000000] [APT] [Ad-Aware Antivirus Scheduled Scan] (...) -- C:\Program Files\AD-AWA~1\AdAwareLauncher.exe (.not file.)
[MD5.563CDCFEEAEF97163E206AF71A61AA6E] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
[MD5.1315C5C5C54CE2AA37A155F97027DB59] [APT] [AdobeAAMUpdater-1.0-Bykeita-PC-By.keita] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
[MD5.7F19838AC317C34FCED020BE529AF71E] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
[MD5.BE66B026CF488C87B4D0EA9E616FFA4A] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000Core] (.Facebook Inc..) -- C:\Users\By.keita\AppData\Local\Facebook\Update\FacebookUpdate.exe
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000UA] (.Facebook Inc..) -- C:\Users\By.keita\AppData\Local\Facebook\Update\FacebookUpdate.exe
[MD5.095516791C381206B134525B68A480D8] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\initialize.exe
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000Core] (.Google Inc..) -- C:\Users\By.keita\AppData\Local\Google\Update\GoogleUpdate.exe
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000UA] (.Google Inc..) -- C:\Users\By.keita\AppData\Local\Google\Update\GoogleUpdate.exe
[MD5.00000000000000000000000000000000] [APT] [{07BF5B6A-5D69-432F-AA40-D46B587E7543}] (...) -- D:\Autorun.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{EBA189EA-9942-459D-8156-F0C2B2022CC3}] (...) -- D:\Autorun.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{F94A5A03-6F68-4931-85B5-EEAFCB13CAD4}] (...) -- D:\Autorun.exe (.not file.)
~ Scan Scheduled Task in 00mn 02s



---\\ Composants install�s (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d�IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lanc�s au d�marrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-syst�me de mise en m�moire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: (SBRE) . (. - .) - C:\Windows\system32\drivers\SBREdrv.sys (.not file.)
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de p�riph�rique s�rie.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels install�s (O42)
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM] -- {A25FF1C0-80B6-4B8B-A551-DC525697A408}
O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM] -- {8A6EB60F-BC70-101B-CACE-9D7794767A3C}
O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM] -- {3825F8BD-F784-6FBB-A5CD-857559148007}
O42 - Logiciel: AMD Drag and Drop Transcoding - (.ATI Technologies Inc..) [HKLM] -- {B0228A47-8A56-6AA7-BE83-910BBDD19CB4}
O42 - Logiciel: AMD Media Foundation Decoders - (.Advanced Micro Devices, Inc..) [HKLM] -- {F47F1D92-F4DF-4113-80B0-B58F2EB10F28}
O42 - Logiciel: ATI AVIVO Codecs - (.ATI Technologies Inc..) [HKLM] -- {912CD7C9-BA8B-615B-4169-7D356461D6BC}
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- {77DCDCE3-2DED-62F3-8154-05E745472D07}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FE23D063-934D-4829-A0D8-00634CE79B4A}
O42 - Logiciel: Adobe Dreamweaver CS5 - (.Adobe Systems Incorporated.) [HKLM] -- {C79312BD-3E76-4474-A10C-1435D1856A4B}
O42 - Logiciel: Adobe Fireworks CS6 - (.Adobe Systems Incorporated.) [HKLM] -- {CA7C485C-7A89-11E1-B2C8-CD54B377BC52}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AF37176A-78CA-545B-34EF-8B6A21514DD1}
O42 - Logiciel: Adobe Photoshop CS6 - (.Adobe Systems Incorporated.) [HKLM] -- {74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}
O42 - Logiciel: Adobe Reader 9.5.3 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-A95000000001}
O42 - Logiciel: Alan Wake - (.Pas de propri�taire.) [HKLM] -- Alan Wake_is1
O42 - Logiciel: Angry Birds Space - (.Rovio.) [HKLM] -- {3F2A323E-60C4-41E8-8CCB-9715D1D750C3}
O42 - Logiciel: Antidote RX v7 - (.Druide informatique inc..) [HKLM] -- {A474EA56-5DBD-4181-8230-806A4762EA7F}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EB879750-CCBD-4013-BFD5-0294D4DA5BD0}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {EFC04D3F-A152-47E7-8517-EE0F6201AFEF}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: ArcGIS Desktop 10 - (.Environmental Systems Research Institute, Inc..) [HKLM] -- ArcGIS Desktop 10
O42 - Logiciel: ArcGIS Desktop 10 French Supplement - (.Environmental Systems Research Institute, Inc..) [HKLM] -- ArcGIS Desktop 10 French Supplement
O42 - Logiciel: ArcGIS Desktop 10 French Supplement - (.Environmental Systems Research Institute, Inc..) [HKLM] -- {1E3BD9C6-538D-411D-8EA7-9E7073A6AB3B}
O42 - Logiciel: Astroburn Lite - (.DT Soft Ltd.) [HKLM] -- Astroburn Lite
O42 - Logiciel: Athan Basic 4.3 - (.Pas de propri�taire.) [HKLM] -- Athan
O42 - Logiciel: Battlefield 3� - (.Electronic Arts.) [HKLM] -- {76285C16-411A-488A-BCE3-C83CB933D8CF}
O42 - Logiciel: BitTorrent - (.BitTorrent Inc..) [HKLM] -- BitTorrent
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: CDisplay 1.8 - (.dvd8n.) [HKLM] -- CDisplay_is1
O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM] -- {E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Lite
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU] -- Dropbox
O42 - Logiciel: Fable III - (.Microsoft Game Studios.) [HKLM] -- {4D53090A-CE35-42BD-B377-831000018301}
O42 - Logiciel: Facebook Video Calling 1.2.0.287 - (.Skype Limited.) [HKLM] -- {B92C5909-1D37-4C51-8397-A28BB28E5DC3}
O42 - Logiciel: Far Cry 3 - (.Ubisoft.) [HKLM] -- {E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}
O42 - Logiciel: Foxit Reader - (.Foxit Corporation.) [HKLM] -- Foxit Reader_is1
O42 - Logiciel: Free Video to MP3 Converter version 5.0.15.706 - (.DVDVideoSoft Ltd..) [HKLM] -- Free Video to MP3 Converter_is1
O42 - Logiciel: Free YouTube Download version 3.0.22.221 - (.DVDVideoSoft Ltd..) [HKLM] -- Free YouTube Download_is1
O42 - Logiciel: French App Name - (.Adobe Systems Incorporated.) [HKLM] -- com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: French App Name - (.Adobe Systems Incorporated.) [HKLM] -- {DE3A9DC5-9A5D-6485-9662-347162C7E4CA}
O42 - Logiciel: Glary Utilities 2.53.0.1726 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
O42 - Logiciel: Google Drive - (.Google, Inc..) [HKLM] -- {7A21C722-F259-4976-B7AA-6658E5FDEDAF}
O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM] -- {33286280-8617-11E1-8FF6-B8AC6F97B88E}
O42 - Logiciel: Google Talk Plugin - (.Google.) [HKLM] -- {D952C4F9-2488-3723-84BE-1BFA907DCAC9}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Grand Theft Auto IV - (.Rockstar Games Inc..) [HKLM] -- {5454083B-1308-4485-BF17-1110000B8301}
O42 - Logiciel: HydraVision - (.ATI Technologies Inc..) [HKLM] -- {1C284C44-B8E0-2ED3-8154-52133AAFF538}
O42 - Logiciel: Incomedia WebSite X5 v9 - Free - (.Incomedia s.r.l..) [HKLM] -- {9570A579-88E2-4B73-A28F-3ED8FCB8C0D8}_is1
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Java 7 Update 13 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217013FF}
O42 - Logiciel: JavaFX 2.1.1 - (.Oracle Corporation.) [HKLM] -- {1111706F-666A-4037-7777-211328764D10}
O42 - Logiciel: LMSOFT Web Creator Pro 5 - (.Pas de propri�taire.) [HKLM] -- Web Creator Pro 5
O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propri�taire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Logitech Gaming Software 5.10 - (.Logitech.) [HKLM] -- {60D32CDC-E3BE-4578-BA10-29322307CDDC}
O42 - Logiciel: LogoMaker 3.0 - (.Studio V5.) [HKLM] -- LogoMaker_is1
O42 - Logiciel: Malwarebytes Anti-Malware version 1.70.0.1100 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Micro Application - 36 Dictionnaires et Recueils de Correspondance - (.Pas de propri�taire.) [HKLM] -- {B410328C-0E8C-4DD2-9DB4-DE7766D0DFE0}
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}
O42 - Logiciel: Microsoft Games for Windows Marketplace - (.Microsoft Corporation.) [HKLM] -- {4CB0307C-565E-4441-86BE-0DF2E4FB828C}
O42 - Logiciel: Mozilla Firefox 17.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 17.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: Nonoh - (.Finarea S.A. Switzerland.) [HKLM] -- Nonoh_is1
O42 - Logiciel: Norton Internet Security - (.Symantec Corporation.) [HKLM] -- {7B15D70E-9449-4CFB-B9BC-798465B2BD5C}
O42 - Logiciel: Notepad++ - (.Pas de propri�taire.) [HKLM] -- Notepad++
O42 - Logiciel: PDF Settings CS6 - (.Adobe Systems Incorporated.) [HKLM] -- {BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}
O42 - Logiciel: PDFCreator - (.Frank Heind�rfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
O42 - Logiciel: Pro Evolution Soccer 2012 - (.KONAMI.) [HKLM] -- {E737A098-F161-4B6F-AF22-86AAE34F6FBD}
O42 - Logiciel: Rayman Origins - (.Ubisoft.) [HKLM] -- {DE491AB9-1D47-4FED-A8F5-4D4325B2EB4B}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: SIGIS� pour Windows� 95/98/NT/2000/XP/Vista/7 version 4.0 Gratu - (.Pas de propri�taire.) [HKLM] -- SIGIS� pour Windows� 95/98/NT/2000/XP/Vista/7_is1
O42 - Logiciel: Screenseven! GAME CENTER - (.Pas de propri�taire.) [HKLM] -- FranceGPlayer
O42 - Logiciel: Skype� 6.1 - (.Skype Technologies S.A..) [HKLM] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
O42 - Logiciel: Street Fighter X Tekken - (.CAPCOM U.S.A., INC.) [HKLM] -- {43430FA5-AF68-4A2D-A7D4-891000008200}
O42 - Logiciel: Super Street Fighter IV: Arcade Edition - (.CAPCOM U.S.A., INC.) [HKLM] -- GFWL_{43430FA0-49F0-4B13-B4C5-611000008100}
O42 - Logiciel: Super Street Fighter IV: Arcade Edition - (.CAPCOM U.S.A., INC.) [HKLM] -- {43430FA0-49F0-4B13-B4C5-611000008100}
O42 - Logiciel: Super-Charger - (.MSI.) [HKLM] -- {7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1
O42 - Logiciel: SuperCopier2 - (.Pas de propri�taire.) [HKLM] -- SuperCopier2
O42 - Logiciel: Test Drive Unlimited 2 - (.Atari.) [HKLM] -- Test Drive Unlimited 2_is1
O42 - Logiciel: Uplay - (.Ubisoft.) [HKLM] -- Uplay
O42 - Logiciel: VLC media player 2.0.5 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Winki - (.MSI.) [HKLM] -- {81CF5153-38CF-41e2-AC3C-3D477C987D96}_is1
O42 - Logiciel: XAMPP 1.8.0 - (.Pas de propri�taire.) [HKLM] -- xampp
O42 - Logiciel: ZTE Driver pour mobile - (.ZTE Corporation.) [HKLM] -- {D2D77DC2-8299-11D1-8949-444553540000}_is1
O42 - Logiciel: avast! Free Antivirus v7.0.1474.0 - (.AVAST Software.) [HKLM] -- avast

---\\ HKCU & HKLM Software Keys
[HKCU\Software\AMD]
[HKCU\Software\ATI]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Avast Software]
[HKCU\Software\BitTorrent]
[HKCU\Software\Bitdefender]
[HKCU\Software\CDisplay]
[HKCU\Software\Caphyon]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Convar]
[HKCU\Software\DSS]
[HKCU\Software\DT Soft]
[HKCU\Software\DVDVideoSoft]
[HKCU\Software\Dashlane]
[HKCU\Software\Druide informatique inc.]
[HKCU\Software\ESRI]
[HKCU\Software\Facebook]
[HKCU\Software\Foxit Software]
[HKCU\Software\GlarySoft]
[HKCU\Software\Google]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\Image-Line]
[HKCU\Software\JavaSoft]
[HKCU\Software\LAventure]
[HKCU\Software\LMSOFT]
[HKCU\Software\Licenses]
[HKCU\Software\LogMeIn]
[HKCU\Software\Logitech]
[HKCU\Software\LtdStrInfo]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NCH Software]
[HKCU\Software\NCH Swift Sound]
[HKCU\Software\Netscape]
[HKCU\Software\Nonoh]
[HKCU\Software\Norton]
[HKCU\Software\ODBC]
[HKCU\Software\OXXOgames]
[HKCU\Software\PDFCreator]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Rockstar Games]
[HKCU\Software\SFX TEAM]
[HKCU\Software\SecuROM]
[HKCU\Software\SkypeRS]
[HKCU\Software\Skype]
[HKCU\Software\SoftVoice]
[HKCU\Software\StudioV5]
[HKCU\Software\SubSystems]
[HKCU\Software\Summitsoft]
[HKCU\Software\Symantec]
[HKCU\Software\Trolltech]
[HKCU\Software\Ubisoft]
[HKCU\Software\Usbfix]
[HKCU\Software\Valve]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wintertree]
[HKCU\Software\ZebHelpProcess Helper]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\AVAST Software]
[HKLM\Software\Adobe]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Atari]
[HKLM\Software\Belarc]
[HKLM\Software\Bunndle]
[HKLM\Software\CAPCOM]
[HKLM\Software\Caphyon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DT Soft]
[HKLM\Software\DTS]
[HKLM\Software\DVDVideoSoft]
[HKLM\Software\Dolby]
[HKLM\Software\Druide informatique inc.]
[HKLM\Software\EA Games]
[HKLM\Software\ESRI]
[HKLM\Software\Electronic Arts]
[HKLM\Software\Even Balance]
[HKLM\Software\Foxit Software]
[HKLM\Software\GlarySoft]
[HKLM\Software\Google]
[HKLM\Software\IM Providers]
[HKLM\Software\Image-Line]
[HKLM\Software\Incomedia]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KONAMI]
[HKLM\Software\Khronos]
[HKLM\Software\Knowles]
[HKLM\Software\LMSOFT]
[HKLM\Software\Logitech]
[HKLM\Software\MSI]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Oracle]
[HKLM\Software\Outsim]
[HKLM\Software\PDFCreator]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Propellerhead Software]
[HKLM\Software\Python]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sigisco]
[HKLM\Software\Skype]
[HKLM\Software\SoftVoice]
[HKLM\Software\SonicFocus]
[HKLM\Software\Sonic]
[HKLM\Software\Symantec]
[HKLM\Software\Systweak]
[HKLM\Software\UBISOFT]
[HKLM\Software\VST]
[HKLM\Software\Vantage Software Technologies]
[HKLM\Software\VideoLAN]
[HKLM\Software\Volatile]
[HKLM\Software\WinRAR]
[HKLM\Software\Wow6432Node]
[HKLM\Software\mozilla.org]
[HKLM\Software\oxxogames]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 10/02/2013 - 18:50:16 - [0,014] ----D C:\Program Files\A-FF Find and Mount
O43 - CFD: 04/11/2012 - 11:28:06 - [618,665] ----D C:\Program Files\Ad-Aware Antivirus
O43 - CFD: 19/07/2012 - 22:28:15 - [1488,568] ----D C:\Program Files\Adobe
O43 - CFD: 15/07/2012 - 19:43:45 - [2,665] ----D C:\Program Files\Adobe Media Player
O43 - CFD: 06/02/2013 - 00:13:01 - [1,711] ----D C:\Program Files\AMD APP
O43 - CFD: 06/02/2013 - 00:13:56 - [0,397] ----D C:\Program Files\AMD AVT
O43 - CFD: 29/05/2012 - 16:46:40 - [2,316] ----D C:\Program Files\Apple Software Update
O43 - CFD: 10/05/2012 - 00:07:49 - [-1906,237] ----D C:\Program Files\ArcGIS
O43 - CFD: 26/10/2012 - 15:33:17 - [12,893] ----D C:\Program Files\Astroburn Lite
O43 - CFD: 23/05/2012 - 12:58:56 - [-1841,870] ----D C:\Program Files\Atari
O43 - CFD: 20/11/2012 - 11:37:19 - [18,843] ----D C:\Program Files\Athan
O43 - CFD: 09/05/2012 - 13:17:46 - [20,405] ----D C:\Program Files\ATI
O43 - CFD: 06/02/2013 - 00:10:26 - [65,298] ----D C:\Program Files\ATI Technologies
O43 - CFD: 30/10/2012 - 13:09:25 - [385,510] ----D C:\Program Files\AVAST Software
O43 - CFD: 12/05/2012 - 13:06:03 - [-255,437] ----D C:\Program Files\Battlefield 3
O43 - CFD: 02/06/2012 - 17:11:42 - [6,085] ----D C:\Program Files\BitTorrent
O43 - CFD: 29/05/2012 - 16:46:11 - [0,602] ----D C:\Program Files\Bonjour
O43 - CFD: 02/06/2012 - 13:06:39 - [1789,007] ----D C:\Program Files\Capcom
O43 - CFD: 30/09/2012 - 02:40:58 - [4,795] ----D C:\Program Files\CCleaner
O43 - CFD: 15/02/2013 - 14:09:16 - [1,953] ----D C:\Program Files\CDisplay
O43 - CFD: 04/07/2012 - 01:00:34 - [0,055] ----D C:\Program Files\Chrome
O43 - CFD: 18/02/2013 - 21:03:07 - [1380,536] ----D C:\Program Files\Common Files
O43 - CFD: 18/02/2013 - 15:25:19 - [0] ----D C:\Program Files\Comodo
O43 - CFD: 10/02/2013 - 18:50:44 - [0] ----D C:\Program Files\Convar
O43 - CFD: 09/05/2012 - 22:53:27 - [24,667] ----D C:\Program Files\DAEMON Tools Lite
O43 - CFD: 21/11/2012 - 02:39:21 - [149,919] ----D C:\Program Files\Druide
O43 - CFD: 14/07/2009 - 04:01:30 - [79,371] ----D C:\Program Files\DVD Maker
O43 - CFD: 20/07/2012 - 14:50:27 - [28,868] ----D C:\Program Files\DVDVideoSoft
O43 - CFD: 09/05/2012 - 12:49:18 - [0] ----D C:\Program Files\Fichiers communs
O43 - CFD: 29/05/2012 - 05:12:29 - [42,872] ----D C:\Program Files\Foxit Software
O43 - CFD: 05/02/2013 - 22:56:58 - [18,812] ----D C:\Program Files\Glary Utilities
O43 - CFD: 16/09/2012 - 02:00:36 - [86,057] ----D C:\Program Files\Google
O43 - CFD: 03/07/2012 - 20:35:24 - [0,150] ----D C:\Program Files\GreenTree Applications
O43 - CFD: 09/12/2012 - 10:52:16 - [7,970] ----D C:\Program Files\Image-Line
O43 - CFD: 31/12/2012 - 00:06:32 - [77,181] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 09/05/2012 - 13:03:17 - [8,854] ----D C:\Program Files\Intel
O43 - CFD: 09/05/2012 - 18:35:57 - [4,933] ----D C:\Program Files\Internet Explorer
O43 - CFD: 03/02/2013 - 10:08:57 - [121,959] ----D C:\Program Files\Java
O43 - CFD: 10/02/2013 - 17:39:09 - [-480,688] ----D C:\Program Files\KONAMI
O43 - CFD: 02/01/2013 - 18:16:26 - [6,577] ----D C:\Program Files\Lavalys
O43 - CFD: 15/06/2012 - 22:28:58 - [260,458] ----D C:\Program Files\LMSOFT
O43 - CFD: 15/05/2012 - 10:21:08 - [39,143] ----D C:\Program Files\Logitech
O43 - CFD: 18/02/2013 - 13:44:45 - [12,156] ----D C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 09/05/2012 - 17:07:23 - [246,034] ----D C:\Program Files\Micro Application
O43 - CFD: 09/05/2012 - 22:56:35 - [38,002] ----D C:\Program Files\Microsoft Analysis Services
O43 - CFD: 06/07/2012 - 23:14:34 - [140,965] ----D C:\Program Files\Microsoft Games
O43 - CFD: 29/07/2012 - 10:17:59 - [8,929] ----D C:\Program Files\Microsoft Games for Windows - LIVE
O43 - CFD: 09/05/2012 - 22:58:10 - [950,623] ----D C:\Program Files\Microsoft Office
O43 - CFD: 10/05/2012 - 00:11:34 - [0,054] ----D C:\Program Files\Microsoft SQL Server
O43 - CFD: 09/05/2012 - 22:58:09 - [1,722] ----D C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 09/05/2012 - 22:58:09 - [0,757] ----D C:\Program Files\Microsoft Sync Framework
O43 - CFD: 09/05/2012 - 22:58:26 - [0,312] ----D C:\Program Files\Microsoft Synchronization Services
O43 - CFD: 09/05/2012 - 22:57:26 - [1,314] ----D C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 27/10/2012 - 10:56:12 - [7,789] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 18/02/2013 - 14:44:00 - [87,250] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 05/01/2013 - 10:49:46 - [0,212] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 06/06/2012 - 23:28:50 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 09/05/2012 - 13:03:33 - [15,074] ----D C:\Program Files\MSI
O43 - CFD: 18/06/2012 - 05:25:26 - [42,699] ----D C:\Program Files\Nonoh.net
O43 - CFD: 15/07/2012 - 22:05:05 - [11,808] ----D C:\Program Files\Notepad++
O43 - CFD: 03/07/2012 - 20:35:33 - [33,205] ----D C:\Program Files\Oracle
O43 - CFD: 09/12/2012 - 10:51:59 - [3,453] ----D C:\Program Files\Outsim
O43 - CFD: 07/11/2012 - 03:31:29 - [32,619] ----D C:\Program Files\PDFCreator
O43 - CFD: 09/05/2012 - 13:03:11 - [36,376] ----D C:\Program Files\Realtek
O43 - CFD: 13/07/2009 - 23:52:30 - [36,805] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 03/06/2012 - 01:58:04 - [614,512] ----D C:\Program Files\Remedy Entertainment
O43 - CFD: 05/06/2012 - 08:41:06 - [35,145] ----D C:\Program Files\Rovio
O43 - CFD: 01/01/2013 - 15:46:42 - [4,793] ----D C:\Program Files\SIGISCO
O43 - CFD: 27/01/2013 - 14:31:15 - [18,091] R---D C:\Program Files\Skype
O43 - CFD: 10/02/2013 - 20:03:28 - [323,554] ----D C:\Program Files\Studio V5
O43 - CFD: 10/02/2013 - 20:21:54 - [1067,478] ----D C:\Program Files\Summitsoft
O43 - CFD: 09/05/2012 - 17:14:35 - [1,169] ----D C:\Program Files\SuperCopier2
O43 - CFD: 09/05/2012 - 13:02:14 - [0] --H-D C:\Program Files\Temp
O43 - CFD: 28/05/2012 - 00:22:30 - [83,428] ----D C:\Program Files\THQ
O43 - CFD: 31/12/2012 - 00:17:39 - [426,012] ----D C:\Program Files\Ubisoft
O43 - CFD: 13/07/2009 - 23:53:23 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 06/07/2012 - 23:05:48 - [94,578] ----D C:\Program Files\VideoLAN
O43 - CFD: 10/02/2013 - 18:48:32 - [0] ----D C:\Program Files\VstPlugins
O43 - CFD: 25/12/2012 - 10:00:42 - [57,691] ----D C:\Program Files\WebSite X5 v9 - Free
O43 - CFD: 14/07/2009 - 03:39:39 - [2,909] ----D C:\Program Files\Windows Defender
O43 - CFD: 14/07/2009 - 04:01:29 - [6,689] ----D C:\Program Files\Windows Journal
O43 - CFD: 14/07/2009 - 03:39:39 - [5,895] ----D C:\Program Files\Windows Mail
O43 - CFD: 14/07/2009 - 03:39:39 - [6,302] ----D C:\Program Files\Windows Media Player
O43 - CFD: 09/05/2012 - 12:49:18 - [11,630] ----D C:\Program Files\Windows NT
O43 - CFD: 14/07/2009 - 03:39:39 - [4,213] ----D C:\Program Files\Windows Photo Viewer
O43 - CFD: 13/07/2009 - 23:52:32 - [0,181] ----D C:\Program Files\Windows Portable Devices
O43 - CFD: 14/07/2009 - 03:39:39 - [6,558] ----D C:\Program Files\Windows Sidebar
O43 - CFD: 12/10/2012 - 12:38:50 - [4,875] ----D C:\Program Files\WinRAR
O43 - CFD: 19/02/2013 - 21:50:22 - [15,131] ----D C:\Program Files\ZHPDiag
O43 - CFD: 18/05/2012 - 08:47:40 - [8,086] ----D C:\Program Files\ZTE Handset USB Driver
O43 - CFD: 19/07/2012 - 22:27:32 - [720,701] ----D C:\Program Files\Common Files\Adobe
O43 - CFD: 19/07/2012 - 13:43:25 - [37,554] ----D C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 10/05/2012 - 06:37:38 - [8,219] ----D C:\Program Files\Common Files\AnswerWorks 4.0
O43 - CFD: 31/12/2012 - 11:53:27 - [84,043] ----D C:\Program Files\Common Files\Apple
O43 - CFD: 10/05/2012 - 00:50:29 - [99,039] ----D C:\Program Files\Common Files\ArcGIS
O43 - CFD: 09/05/2012 - 13:18:23 - [2,972] ----D C:\Program Files\Common Files\ATI Technologies
O43 - CFD: 25/10/2012 - 04:49:10 - [5,041] ----D C:\Program Files\Common Files\Bitdefender
O43 - CFD: 10/05/2012 - 00:48:22 - [14,559] ----D C:\Program Files\Common Files\Data Dynamics
O43 - CFD: 06/06/2012 - 23:28:12 - [0,095] ----D C:\Program Files\Common Files\DESIGNER
O43 - CFD: 20/07/2012 - 14:50:29 - [86,203] ----D C:\Program Files\Common Files\DVDVideoSoft
O43 - CFD: 12/05/2012 - 13:07:07 - [0,957] --H-D C:\Program Files\Common Files\EAInstaller
O43 - CFD: 09/05/2012 - 13:01:25 - [3,452] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 12/10/2012 - 15:00:25 - [1,184] ----D C:\Program Files\Common Files\Java
O43 - CFD: 15/05/2012 - 10:21:19 - [0,995] ----D C:\Program Files\Common Files\Logitech
O43 - CFD: 10/05/2012 - 01:04:08 - [0,827] ----D C:\Program Files\Common Files\Macrovision Shared
O43 - CFD: 01/11/2012 - 14:33:58 - [241,845] ----D C:\Program Files\Common Files\microsoft shared
O43 - CFD: 09/05/2012 - 13:03:20 - [0,155] ----D C:\Program Files\Common Files\postureAgent
O43 - CFD: 13/07/2009 - 21:37:05 - [0,003] ----D C:\Program Files\Common Files\Services
O43 - CFD: 27/01/2013 - 14:31:15 - [2,056] ----D C:\Program Files\Common Files\Skype
O43 - CFD: 13/07/2009 - 21:37:05 - [39,200] ----D C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 06/06/2012 - 23:24:59 - [10,222] ----D C:\Program Files\Common Files\System
O43 - CFD: 10/05/2012 - 00:48:13 - [21,216] ----D C:\Program Files\Common Files\Tom Sawyer Software
O43 - CFD: 01/11/2012 - 16:19:52 - [0,000] ----D C:\ProgramData\Ad-Aware Antivirus
O43 - CFD: 17/02/2013 - 21:49:10 - [531,293] ----D C:\ProgramData\Adobe
O43 - CFD: 06/02/2013 - 00:13:57 - [0,810] ----D C:\ProgramData\AMD
O43 - CFD: 29/05/2012 - 16:46:32 - [33,049] ----D C:\ProgramData\Apple
O43 - CFD: 29/05/2012 - 16:47:22 - [0,001] ----D C:\ProgramData\Apple Computer
O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 26/10/2012 - 15:33:16 - [0,001] ----D C:\ProgramData\Astroburn Lite
O43 - CFD: 06/02/2013 - 00:16:14 - [0,000] ----D C:\ProgramData\ATI
O43 - CFD: 30/10/2012 - 13:09:25 - [40,927] ----D C:\ProgramData\AVAST Software
O43 - CFD: 09/05/2012 - 12:49:18 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 07/10/2012 - 11:22:15 - [0] ----D C:\ProgramData\Caphyon
O43 - CFD: 18/02/2013 - 15:31:22 - [40,037] ----D C:\ProgramData\COMODO
O43 - CFD: 10/02/2013 - 12:12:21 - [0] ----D C:\ProgramData\Comodo Downloader
O43 - CFD: 09/05/2012 - 22:52:57 - [0,001] ----D C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 23/05/2012 - 17:31:44 - [0,106] -SH-D C:\ProgramData\DSS
O43 - CFD: 11/05/2012 - 17:19:22 - [0] ----D C:\ProgramData\EA Core
O43 - CFD: 11/05/2012 - 17:19:22 - [0,001] ----D C:\ProgramData\Electronic Arts
O43 - CFD: 23/10/2012 - 17:19:06 - [0,000] ----D C:\ProgramData\ESRI
O43 - CFD: 09/05/2012 - 12:49:18 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 10/05/2012 - 00:22:06 - [0,001] ----D C:\ProgramData\FLEXnet
O43 - CFD: 05/02/2013 - 14:56:30 - [154,500] ----D C:\ProgramData\KONAMI
O43 - CFD: 01/11/2012 - 14:33:59 - [0,665] ----D C:\ProgramData\Lavasoft
O43 - CFD: 10/05/2012 - 00:07:50 - [0,008] ----D C:\ProgramData\Macrovision
O43 - CFD: 18/02/2013 - 13:44:43 - [5,762] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 09/05/2012 - 12:49:18 - [0] --H-D C:\ProgramData\Menu D�marrer
O43 - CFD: 17/05/2012 - 23:55:57 - [275,930] -S--D C:\ProgramData\Microsoft
O43 - CFD: 06/06/2012 - 23:30:34 - [0,061] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 09/05/2012 - 12:49:18 - [0] --H-D C:\ProgramData\Mod�les
O43 - CFD: 15/07/2012 - 20:41:28 - [0,025] ----D C:\ProgramData\Mozilla
O43 - CFD: 08/02/2013 - 21:29:40 - [0] ----D C:\ProgramData\NCH Swift Sound
O43 - CFD: 30/10/2012 - 13:05:33 - [0,043] ---AD C:\ProgramData\Norton
O43 - CFD: 08/07/2012 - 15:51:34 - [16,809] ---AD C:\ProgramData\NortonInstaller
O43 - CFD: 18/02/2013 - 14:50:50 - [0,115] ----D C:\ProgramData\OptimizerPro1
O43 - CFD: 31/12/2012 - 00:24:52 - [0,099] ----D C:\ProgramData\Orbit
O43 - CFD: 11/05/2012 - 17:29:24 - [0] ----D C:\ProgramData\Origin
O43 - CFD: 19/07/2012 - 22:28:50 - [0,006] ----D C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 04/07/2012 - 01:01:56 - [0,000] ----D C:\ProgramData\Registry Helper
O43 - CFD: 29/07/2012 - 00:45:14 - [0,278] -SH-D C:\ProgramData\SecuROM
O43 - CFD: 27/01/2013 - 14:31:21 - [58,304] ----D C:\ProgramData\Skype
O43 - CFD: 11/05/2012 - 00:11:32 - [0] ----D C:\ProgramData\Solidshield
O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 10/02/2013 - 20:31:18 - [0] ----D C:\ProgramData\Summitsoft
O43 - CFD: 07/10/2012 - 10:20:54 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 09/05/2012 - 13:09:06 - [0] ----D C:\ProgramData\Symantec
O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 03/07/2012 - 20:35:35 - [0,074] ----D C:\ProgramData\YTD Video Downloader
O43 - CFD: 29/05/2012 - 16:47:49 - [0,004] ----D C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
O43 - CFD: 07/10/2012 - 17:17:06 - [0,234] ----D C:\Users\By.keita\AppData\Roaming\.spotflux
O43 - CFD: 03/11/2012 - 22:41:47 - [0,007] ----D C:\Users\By.keita\AppData\Roaming\Ad-Aware Antivirus
O43 - CFD: 19/07/2012 - 22:31:04 - [130,284] ----D C:\Users\By.keita\AppData\Roaming\Adobe
O43 - CFD: 31/08/2012 - 15:13:33 - [0,771] ----D C:\Users\By.keita\AppData\Roaming\Apple Computer
O43 - CFD: 09/05/2012 - 13:20:41 - [0] ----D C:\Users\By.keita\AppData\Roaming\ATI
O43 - CFD: 15/02/2013 - 14:11:56 - [5,857] ----D C:\Users\By.keita\AppData\Roaming\BitTorrent
O43 - CFD: 15/06/2012 - 22:44:40 - [0] ----D C:\Users\By.keita\AppData\Roaming\CACHE
O43 - CFD: 11/05/2012 - 23:05:09 - [0,000] ----D C:\Users\By.keita\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O43 - CFD: 26/10/2012 - 00:02:23 - [1,502] ----D C:\Users\By.keita\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 22/01/2013 - 17:15:17 - [31,763] ----D C:\Users\By.keita\AppData\Roaming\Dropbox
O43 - CFD: 28/06/2012 - 17:58:13 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Druide
O43 - CFD: 19/07/2012 - 15:25:26 - [0] ----D C:\Users\By.keita\AppData\Roaming\dvdcss
O43 - CFD: 20/07/2012 - 14:50:46 - [2,535] ----D C:\Users\By.keita\AppData\Roaming\DVDVideoSoft
O43 - CFD: 20/07/2012 - 12:46:10 - [0,000] ----D C:\Users\By.keita\AppData\Roaming\DVDVideoSoftIEHelpers
O43 - CFD: 29/10/2012 - 20:15:09 - [7,442] ----D C:\Users\By.keita\AppData\Roaming\ESRI
O43 - CFD: 12/06/2012 - 07:15:50 - [15,871] ----D C:\Users\By.keita\AppData\Roaming\Foxit Software
O43 - CFD: 29/05/2012 - 05:11:40 - [0] ----D C:\Users\By.keita\AppData\Roaming\GetRightToGo
O43 - CFD: 05/02/2013 - 23:26:40 - [0,067] ----D C:\Users\By.keita\AppData\Roaming\GlarySoft
O43 - CFD: 09/05/2012 - 12:55:14 - [0] ----D C:\Users\By.keita\AppData\Roaming\Identities
O43 - CFD: 30/10/2012 - 13:02:02 - [0,001] ----D C:\Users\By.keita\AppData\Roaming\LavasoftStatistics
O43 - CFD: 23/05/2012 - 17:29:38 - [0,319] ----D C:\Users\By.keita\AppData\Roaming\Lionhead Studios
O43 - CFD: 15/06/2012 - 22:39:53 - [0,025] ----D C:\Users\By.keita\AppData\Roaming\LMSOFT
O43 - CFD: 10/02/2013 - 20:06:52 - [0,000] ----D C:\Users\By.keita\AppData\Roaming\LogoMaker
O43 - CFD: 09/05/2012 - 13:06:43 - [0,044] ----D C:\Users\By.keita\AppData\Roaming\Macromedia
O43 - CFD: 18/02/2013 - 13:44:52 - [7,430] ----D C:\Users\By.keita\AppData\Roaming\Malwarebytes
O43 - CFD: 14/07/2009 - 04:00:32 - [0] ----D C:\Users\By.keita\AppData\Roaming\Media Center Programs
O43 - CFD: 21/01/2013 - 00:34:03 - [24,974] -S--D C:\Users\By.keita\AppData\Roaming\Microsoft
O43 - CFD: 05/02/2013 - 20:34:14 - [29,004] ----D C:\Users\By.keita\AppData\Roaming\Mozilla
O43 - CFD: 08/02/2013 - 21:35:56 - [0,105] ----D C:\Users\By.keita\AppData\Roaming\NCH Software
O43 - CFD: 04/08/2012 - 19:27:05 - [0,021] ----D C:\Users\By.keita\AppData\Roaming\Nonoh
O43 - CFD: 15/07/2012 - 22:06:52 - [0,407] ----D C:\Users\By.keita\AppData\Roaming\Notepad++
O43 - CFD: 11/05/2012 - 16:40:39 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Origin
O43 - CFD: 28/09/2012 - 15:26:46 - [0,060] ----D C:\Users\By.keita\AppData\Roaming\QuickScan
O43 - CFD: 05/06/2012 - 08:41:58 - [0,004] ----D C:\Users\By.keita\AppData\Roaming\Rovio
O43 - CFD: 20/01/2013 - 23:29:32 - [0,083] ----D C:\Users\By.keita\AppData\Roaming\ScreenSeven
O43 - CFD: 28/06/2012 - 23:28:08 - [0,010] R-H-D C:\Users\By.keita\AppData\Roaming\SecuROM
O43 - CFD: 22/08/2012 - 17:43:14 - [0] ----D C:\Users\By.keita\AppData\Roaming\SendSpace
O43 - CFD: 19/02/2013 - 21:45:00 - [9,278] ----D C:\Users\By.keita\AppData\Roaming\Skype
O43 - CFD: 07/10/2012 - 11:22:19 - [2,764] ----D C:\Users\By.keita\AppData\Roaming\Spotflux
O43 - CFD: 10/02/2013 - 19:01:09 - [0] ----D C:\Users\By.keita\AppData\Roaming\Summitsoft
O43 - CFD: 17/02/2013 - 02:11:10 - [0,389] ----D C:\Users\By.keita\AppData\Roaming\vlc
O43 - CFD: 15/10/2012 - 18:43:22 - [1,180] ----D C:\Users\By.keita\AppData\Roaming\WinRAR
O43 - CFD: 15/05/2012 - 18:47:54 - [0] ----D C:\Users\By.keita\AppData\Local\Activision
O43 - CFD: 19/02/2013 - 21:45:39 - [2,230] ----D C:\Users\By.keita\AppData\Local\Adobe
O43 - CFD: 29/05/2012 - 16:46:45 - [0] ----D C:\Users\By.keita\AppData\Local\Apple
O43 - CFD: 29/05/2012 - 16:48:08 - [15,538] ----D C:\Users\By.keita\AppData\Local\Apple Computer
O43 - CFD: 09/05/2012 - 12:49:26 - [0] ----D C:\Users\By.keita\AppData\Local\Application Data
O43 - CFD: 09/05/2012 - 13:43:31 - [1,507] ----D C:\Users\By.keita\AppData\Local\Apps
O43 - CFD: 09/05/2012 - 13:20:41 - [0,088] ----D C:\Users\By.keita\AppData\Local\ATI
O43 - CFD: 10/02/2013 - 12:12:37 - [6,925] ----D C:\Users\By.keita\AppData\Local\Comodo
O43 - CFD: 10/02/2013 - 19:50:18 - [86,013] ----D C:\Users\By.keita\AppData\Local\CrashDumps
O43 - CFD: 14/05/2012 - 20:22:23 - [0] ----D C:\Users\By.keita\AppData\Local\CrashRpt
O43 - CFD: 09/05/2012 - 13:43:54 - [0] ----D C:\Users\By.keita\AppData\Local\Deployment
O43 - CFD: 28/07/2012 - 23:00:24 - [0] ----D C:\Users\By.keita\AppData\Local\Diagnostics
O43 - CFD: 10/02/2013 - 20:19:38 - [1008,405] ----D C:\Users\By.keita\AppData\Local\Downloaded Installations
O43 - CFD: 14/02/2013 - 22:02:00 - [0,658] ----D C:\Users\By.keita\AppData\Local\ElevatedDiagnostics
O43 - CFD: 10/05/2012 - 07:00:41 - [1,898] ----D C:\Users\By.keita\AppData\Local\ESRI
O43 - CFD: 29/10/2012 - 20:45:35 - [7,390] ----D C:\Users\By.keita\AppData\Local\Facebook
O43 - CFD: 16/09/2012 - 02:00:37 - [1082,972] ----D C:\Users\By.keita\AppData\Local\Google
O43 - CFD: 09/05/2012 - 12:49:26 - [0] ----D C:\Users\By.keita\AppData\Local\Historique
O43 - CFD: 09/05/2012 - 18:37:34 - [0,576] ----D C:\Users\By.keita\AppData\Local\Hook Network
O43 - CFD: 23/12/2012 - 11:34:41 - [0,746] ----D C:\Users\By.keita\AppData\Local\Incomedia
O43 - CFD: 24/09/2012 - 10:31:22 - [0] ----D C:\Users\By.keita\AppData\Local\LogMeIn Rescue Applet
O43 - CFD: 31/07/2012 - 06:29:12 - [0] ----D C:\Users\By.keita\AppData\Local\Macromedia
O43 - CFD: 16/12/2012 - 19:51:17 - [406,812] ----D C:\Users\By.keita\AppData\Local\Microsoft
O43 - CFD: 03/06/2012 - 18:30:12 - [0,519] ----D C:\Users\By.keita\AppData\Local\Microsoft Games
O43 - CFD: 03/01/2013 - 08:33:18 - [0,069] ----D C:\Users\By.keita\AppData\Local\Microsoft Help
O43 - CFD: 15/07/2012 - 20:41:37 - [116,118] ----D C:\Users\By.keita\AppData\Local\Mozilla
O43 - CFD: 07/11/2012 - 03:29:48 - [0] ----D C:\Users\By.keita\AppData\Local\Programs
O43 - CFD: 31/12/2012 - 00:25:15 - [2,733] ----D C:\Users\By.keita\AppData\Local\PunkBuster
O43 - CFD: 07/07/2012 - 00:24:08 - [5,666] ----D C:\Users\By.keita\AppData\Local\Rockstar Games
O43 - CFD: 03/06/2012 - 02:23:28 - [0,248] ----D C:\Users\By.keita\AppData\Local\SKIDROW
O43 - CFD: 19/02/2013 - 21:51:38 - [273,674] ----D C:\Users\By.keita\AppData\Local\Temp
O43 - CFD: 09/05/2012 - 12:49:26 - [0] ----D C:\Users\By.keita\AppData\Local\Temporary Internet Files
O43 - CFD: 31/12/2012 - 11:46:42 - [0,000] ----D C:\Users\By.keita\AppData\Local\Ubisoft Game Launcher
O43 - CFD: 10/05/2012 - 16:31:24 - [195,076] ----D C:\Users\By.keita\AppData\Local\VirtualStore
O43 - CFD: 13/07/2009 - 23:42:04 - [0,014] R---D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 09/05/2012 - 12:55:22 - [0,000] R---D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 21/11/2012 - 02:39:00 - [0] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antidote
O43 - CFD: 15/07/2012 - 21:51:48 - [0,004] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Apache Friends
O43 - CFD: 10/05/2012 - 00:07:46 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArcGIS License Manager 10 CRACKED
O43 - CFD: 10/02/2013 - 18:49:20 - [0,001] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
O43 - CFD: 05/01/2013 - 10:52:16 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
O43 - CFD: 15/01/2013 - 10:41:29 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 15/06/2012 - 22:33:18 - [0,010] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LMSOFT
O43 - CFD: 13/07/2009 - 23:37:42 - [0,001] R---D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 15/07/2012 - 22:05:02 - [0] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
O43 - CFD: 10/05/2012 - 00:07:46 - [0,002] R---D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 09/05/2012 - 17:14:37 - [0,007] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SuperCopier2
O43 - CFD: 31/12/2012 - 00:17:43 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
O43 - CFD: 12/10/2012 - 01:36:26 - [0,003] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ Scan Program Folder in 01mn 51s



---\\ Derniers fichiers modifi�s ou cr�es sous Windows et System32 (O44)
O44 - LFC:[MD5.063D051FDE9DEF9D4D62D668A06E6A47] - 19/02/2013 - 21:45:09 ---A- . (...) -- C:\Windows\WindowsUpdate.log [819486]
O44 - LFC:[MD5.B5C71854C6BF06E97E144A99324AB79B] - 19/02/2013 - 21:44:54 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.80BDC2240B716EDD4A1FEA5EA149A61B] - 18/02/2013 - 21:57:16 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1576940]
O44 - LFC:[MD5.17A2BC9B47289FB2DCD0D3BC0BCE945B] - 18/02/2013 - 21:57:16 ---A- . (...) -- C:\Windows\System32\perfc009.dat [110082]
O44 - LFC:[MD5.4DAA8CC3B600ECB920F26436920D2289] - 18/02/2013 - 21:57:16 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [135046]
O44 - LFC:[MD5.B991CDA78E72E397F412DE8499951342] - 18/02/2013 - 21:57:16 ---A- . (...) -- C:\Windows\System32\perfh009.dat [619894]
O44 - LFC:[MD5.CD3C56F961DB2691F306E1C69F944252] - 18/02/2013 - 21:57:16 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [718336]
O44 - LFC:[MD5.D9F4FEAA298843A3D300FD240F52EB27] - 18/02/2013 - 21:04:15 ---A- . (...) -- C:\Windows\setupact.log [7618]
O44 - LFC:[MD5.1988D4B04EC45AC2B059476800A7F72F] - 18/02/2013 - 14:52:47 ---A- . (...) -- C:\Windows\PFRO.log [687520]
O44 - LFC:[MD5.629CABB0421668C9D3D402A3C3D77E14] - 18/02/2013 - 13:44:42 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [21104]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 18/02/2013 - 07:51:54 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [0]
O44 - LFC:[MD5.983977EC8C287E3B1EE25028F534DCB9] - 17/02/2013 - 21:48:49 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerApp.exe [691568]
O44 - LFC:[MD5.B729FD55C49419A4B18EB160905D9374] - 17/02/2013 - 21:48:49 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [71024]
O44 - LFC:[MD5.4FACD0879AAD58E36EA76F48F5B75396] - 14/02/2013 - 22:57:37 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [3960424]
O44 - LFC:[MD5.6C4D491C1970112AD0861B9F53DC17E5] - 10/02/2013 - 19:09:59 ---A- . (...) -- C:\.rnd [1024]
O44 - LFC:[MD5.629610C7C04165E36704153EBCF4DCBB] - 10/02/2013 - 19:05:28 ---A- . (...) -- C:\Windows\Logo Design Studio Trial Uninstall Log.txt [438501]
O44 - LFC:[MD5.FF50EE902847C7CED9FFD157851A8678] - 10/02/2013 - 19:00:21 ---A- . (...) -- C:\Windows\Logo Design Studio Trial Setup Log.txt [959848]
O44 - LFC:[MD5.9FED4602659211E63AB6148ADA077159] - 10/02/2013 - 11:06:21 ---A- . (...) -- C:\Windows\System32\Drivers\PnkBstrK.sys [138032]
O44 - LFC:[MD5.5564EE004708EBB76086F6D66ACF60FF] - 10/02/2013 - 11:06:07 ---A- . (...) -- C:\Windows\System32\PnkBstrB.exe [281688]
O44 - LFC:[MD5.5564EE004708EBB76086F6D66ACF60FF] - 10/02/2013 - 11:06:07 ---A- . (...) -- C:\Windows\System32\PnkBstrB.xtr [281688]
O44 - LFC:[MD5.5564EE004708EBB76086F6D66ACF60FF] - 06/02/2013 - 16:55:08 ---A- . (...) -- C:\Windows\System32\PnkBstrB.ex0 [281688]
O44 - LFC:[MD5.E828134279A6BB5EF3032F9B88D335F9] - 03/02/2013 - 10:09:01 ---A- . (.Oracle Corporation - Pas de description.) -- C:\Windows\System32\WindowsAccessBridge.dll [94112]
O44 - LFC:[MD5.4951D2D49B400A1A722BC48FADEBD6F4] - 03/02/2013 - 10:09:00 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\java.exe [174496]
O44 - LFC:[MD5.ABC4230E67C8E68E070A22C1E4A8F673] - 03/02/2013 - 10:09:00 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\javaw.exe [174496]
O44 - LFC:[MD5.FBE59F564DFEEBBFCDBBDFAB54C64501] - 03/02/2013 - 10:09:00 ---A- . (.Oracle Corporation - Java(TM) Web Start Launcher.) -- C:\Windows\System32\javaws.exe [262560]
O44 - LFC:[MD5.BB8996FE972847B5879FDE24F24F034E] - 03/02/2013 - 10:08:59 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\deployJava1.dll [782240]
O44 - LFC:[MD5.2616B4D6D04F18C579B7861F02B0B592] - 03/02/2013 - 10:08:59 ---A- . (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(T.) -- C:\Windows\System32\npDeployJava1.dll [861088]
O44 - LFC:[MD5.9AC5B3550AA14513C5449FDEE13A5DB1] - 22/01/2013 - 18:37:32 ---A- . (...) -- C:\UsbFix.txt [21149]
~ Scan Files in 00mn 06s



---\\ Op�rations et fonctions au d�marrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
~ Scan ShellExecuteHooks in 00mn 00s



---\\ D�ni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l��diteur de configuration de s�curit� Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de s�curit� Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - LiveSSP.) -- C:\Windows\System32\livessp.dll
~ Scan Keys in 00mn 00s



---\\ Contr�le du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s



---\\ MountPoints2 Shell Key (O51) (None)

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak�.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"msacm.vorbis"="vorbis.acm" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\Windows\System32\vorbis.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"vorbis.acm"="Ogg Vorbis Audio CODEC" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\Windows\System32\vorbis.acm
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\BitTorrent [Key] . (.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files\BitTorrent\BitTorrent.exe
O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
~ Scan SMSR Keys in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=3
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=3
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=0
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Syst�me (O58)
O58 - SDL:[MD5.21E785EBD7DC90A06391141AAC7892FB] - 13/07/2009 - 20:26:15 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [422976]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 13/07/2009 - 16:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
~ Scan Drivers in 00mn 00s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: UsbFix By El Desaparecido - (.El Desaparecido.) [HKLM] -- Usbfix
O63 - Logiciel: ZHPDiag 1.3.5 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ Scan ADS in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 19/12/2012 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag) .(.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswFsBlk.sys (aswFsBlk) .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK
O64 - Services: CurCS - 30/10/2012 - C:\Windows\system32\drivers\aswMonFlt.sys (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - 15/10/2012 - C:\Windows\system32\Drivers\aswrdr2.sys (aswRdr) .(.AVAST Software - avast! WFP Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswSnx.sys (aswSnx) .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswSP.sys (aswSP) .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswTdi.sys (aswTdi) .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI
O64 - Services: CurCS - 14/12/2012 - C:\Windows\system32\drivers\mbam.sys (MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR
O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
~ Scan Services in 00mn 01s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Adobe Systems, Inc. - Adobe Dreamweaver CS5.) -- C:\Program Files\Adobe\Adobe Dreamweaver CS5\Dreamweaver.exe
O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - http://search.live.com
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (@ieframe.dll,-12512) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} - (Yahoo! Search) - http://fr.search.yahoo.com
O69 - SBI: SearchScopes [HKCU] {9D5BD211-422C-4164-9298-BB4186A30F31} - (Bing) - http://www.bing.com
~ Scan Keys in 00mn 00s



---\\ Recherche des services d�marr�s par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Exp�rience d�application.) -- C:\Windows\System32\aelupsvc.dll [62464]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [168448]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de strat�gie de groupe.) -- C:\Windows\System32\gpsvc.dll [591360]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [667136]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [473088]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de num�rotation automatique d�acc�s distant.) -- C:\Windows\System32\rasauto.dll [90624]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d�acc�s distant.) -- C:\Windows\System32\rasmans.dll [285184]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d�interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d��v�nements syst�me (SENS).) -- C:\Windows\System32\sens.dll [49664]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l�application d�assistance � Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [300544]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de t�l�phonie Microsoft� Windows(TM).) -- C:\Windows\System32\tapisrv.dll [241664]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur h�te de session Burea.) -- C:\Windows\System32\termsrv.dll [543232]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise � jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [1929952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arri�re-plan.) -- C:\Windows\System32\qmgr.dll [589312]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivit� IPv6 sur un r�seau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [497152]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d�ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [21504]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d�application.) -- C:\Windows\System32\appinfo.dll [46592]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de d�couverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multim�dias.) -- C:\Windows\System32\mmcss.dll [49664]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux probl�mes.) -- C:\Windows\System32\wercplsupport.dll [61440]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [162816]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de t�ches.) -- C:\Windows\System32\schedsvc.dll [743424]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des cl�s.) -- C:\Windows\System32\kmsvc.dll [71168]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau � distance.) -- C:\Windows\System32\sessenv.dll [99328]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d�ordinateurs.) -- C:\Windows\System32\browser.dll [102400]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des th�mes Windows Shell.) -- C:\Windows\System32\themeservice.dll [37376]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [149504]
~ Scan Services in 00mn 00s



---\\ Recherche particuliere � la racine de certains dossiers (O84)
[MD5.F92067543402AF7026A45B413646ACBF] [SPRF][30/08/2012] (.Foxit Corporation - Foxit Updater.) -- C:\Users\By.keita\AppData\Local\Temp\Foxit Updater.exe [4327024]
[MD5.403DA8628C89287DE1EEE4BF5CD2C582] [SPRF][08/02/2013] (...) -- C:\Users\By.keita\AppData\Local\Temp\mp3el.exe [122880]
[MD5.B04F0E0352DB5B0FEE4C4A93630838B7] [SPRF][05/02/2013] (.Advanced Micro Devices, Inc. - 13-1_vista_win7_win8_32_dd_ccc_whql.) -- C:\Users\By.keita\AppData\Local\Temp\tmp9FF6.exe [99315736]
[MD5.DAC55804225089A15D9F21BBE5031284] [SPRF][08/02/2013] (.NCH Software - WavePad - Logiciel d'�dition audio.) -- C:\Users\By.keita\AppData\Local\Temp\uninst.exe [2025476]
[MD5.034C3FBDE00A3A0E7AFC2E89ACC11970] [SPRF][05/02/2013] (...) -- C:\Users\By.keita\AppData\Local\Temp\~gu-ver.dat [112]
[MD5.46DA30476B579584ED6A6FA8CC0D09B8] [SPRF][18/02/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\By.keita\Desktop\ZHPDiag2.exe [5400486]
~ Scan Files in 00mn 20s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "{06AFF6D8-6948-493C-A9F3-2E0B6E854214}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files\BitTorrent\BitTorrent.exe
O87 - FAEL: "{6E1B0C56-9735-4DF3-B682-9C3E1A94ACA6}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files\BitTorrent\BitTorrent.exe
O87 - FAEL: "TCP Query User{48ED0E21-929E-46BE-8B1D-161F189B078C}C:\cracked license manager 10\lmgrd.exe" | In - Private - P6 - TRUE | .(.Acresso Software Inc. - Acresso Software Inc..) -- C:\cracked license manager 10\lmgrd.exe
O87 - FAEL: "UDP Query User{B8ADFFDC-5194-43EB-9882-3766FDB66F12}C:\cracked license manager 10\lmgrd.exe" | In - Private - P17 - TRUE | .(.Acresso Software Inc. - Acresso Software Inc..) -- C:\cracked license manager 10\lmgrd.exe
O87 - FAEL: "TCP Query User{AE66A696-9912-4370-A2D4-54B33A26C6FD}C:\cracked license manager 10\arcgis.exe" | In - Private - P6 - TRUE | .(...) -- C:\cracked license manager 10\arcgis.exe
O87 - FAEL: "UDP Query User{CBBA648D-9A81-4836-8C9E-A3E2831ECE05}C:\cracked license manager 10\arcgis.exe" | In - Private - P17 - TRUE | .(...) -- C:\cracked license manager 10\arcgis.exe
O87 - FAEL: "{A8120831-1CAC-460F-B7A7-37CDE513A784}" | In - Private - P6 - TRUE | .(.CAPCOM U.S.A, INC. - SUPER STREET FIGHTER IV ARCADE EDITION.) -- C:\Program Files\Capcom\Super Street Fighter IV\SSFIV.exe
O87 - FAEL: "{C76DCD9E-7656-4298-A517-4C7CB57D100A}" | In - Private - P17 - TRUE | .(.CAPCOM U.S.A, INC. - SUPER STREET FIGHTER IV ARCADE EDITION.) -- C:\Program Files\Capcom\Super Street Fighter IV\SSFIV.exe
O87 - FAEL: "{7A3F7C51-4EF4-4510-8915-A98C581EA3E0}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O87 - FAEL: "{276F32ED-5512-434F-BFCA-F0617634769D}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
O87 - FAEL: "{A232CF34-98E3-4D1A-AEB9-B4F93EAC19F8}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{97088761-0CAB-4440-9A29-2914274CE5EE}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{840DE83B-8A0A-41EC-89B8-8CAD5BD56744}" | In - Private - P6 - TRUE | .(.CAPCOM U.S.A, INC. - Street Fighter X Tekken.) -- C:\Program Files\Capcom\Street Fighter X Tekken\SFTK.exe
O87 - FAEL: "{ABA4CAA5-2F0D-44EB-89A2-60BD36898D9C}" | In - Private - P17 - TRUE | .(.CAPCOM U.S.A, INC. - Street Fighter X Tekken.) -- C:\Program Files\Capcom\Street Fighter X Tekken\SFTK.exe
O87 - FAEL: "{CC646218-24E4-4556-8523-A7957BB0561B}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files\Ubisoft\Rayman Origins\Rayman Origins.exe
O87 - FAEL: "{9D2FAF69-B33A-433C-84E6-DCBD5ACC4302}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files\Ubisoft\Rayman Origins\Rayman Origins.exe
O87 - FAEL: "{8465CBA3-678C-440C-B34D-C2B1E20E7E54}" | In - Private - P6 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files\Ubisoft\Rayman Origins\gu.exe
O87 - FAEL: "{72EBAAB2-5DA2-4534-A66E-30B9CA1C5DE9}" | In - Private - P17 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files\Ubisoft\Rayman Origins\gu.exe
O87 - FAEL: "TCP Query User{64D9FD69-209D-4D39-86D3-6FDF2CE77E34}C:\cracked license manager 10\lmgrd.exe" | In - Public - P6 - TRUE | .(.Acresso Software Inc. - Acresso Software Inc..) -- C:\cracked license manager 10\lmgrd.exe
O87 - FAEL: "UDP Query User{1BBFB9DD-7388-41D9-963A-114FF247F1FE}C:\cracked license manager 10\lmgrd.exe" | In - Public - P17 - TRUE | .(.Acresso Software Inc. - Acresso Software Inc..) -- C:\cracked license manager 10\lmgrd.exe
O87 - FAEL: "TCP Query User{6BA76B2F-D945-4F80-B78C-C18F5DB93135}C:\program files\nonoh.net\nonoh\nonoh.exe" | In - Private - P6 - TRUE | .(.Nonoh - Client to make VoIP calls..) -- C:\program files\nonoh.net\nonoh\nonoh.exe
O87 - FAEL: "UDP Query User{05F814CB-7A24-4091-A5C8-15F41226480A}C:\program files\nonoh.net\nonoh\nonoh.exe" | In - Private - P17 - TRUE | .(.Nonoh - Client to make VoIP calls..) -- C:\program files\nonoh.net\nonoh\nonoh.exe
O87 - FAEL: "TCP Query User{A99B2424-65AB-472C-A903-6D9EC00FE541}C:\program files\nonoh.net\nonoh\nonoh.exe" | In - Public - P6 - TRUE | .(.Nonoh - Client to make VoIP calls..) -- C:\program files\nonoh.net\nonoh\nonoh.exe
O87 - FAEL: "UDP Query User{16D45BAC-A773-4F2D-97AE-AB96D9B372DC}C:\program files\nonoh.net\nonoh\nonoh.exe" | In - Public - P17 - TRUE | .(.Nonoh - Client to make VoIP calls..) -- C:\program files\nonoh.net\nonoh\nonoh.exe
O87 - FAEL: "TCP Query User{6543CF60-9005-477A-AE61-F6B7757466EE}C:\cracked license manager 10\arcgis.exe" | In - Public - P6 - TRUE | .(...) -- C:\cracked license manager 10\arcgis.exe
O87 - FAEL: "UDP Query User{6AC18BF8-2038-45BC-9E11-1A02AC54CD0C}C:\cracked license manager 10\arcgis.exe" | In - Public - P17 - TRUE | .(...) -- C:\cracked license manager 10\arcgis.exe
O87 - FAEL: "TCP Query User{EAAC49A7-E1CF-4C3C-91C3-A3834D14DFC2}C:\program files\atari\tdu2\uplauncher.exe" | In - Private - P6 - FALSE | .(.Eden Games - UpLauncher.) -- C:\program files\atari\tdu2\uplauncher.exe
O87 - FAEL: "UDP Query User{929750AD-F2A3-4198-A126-E6FEB6188386}C:\program files\atari\tdu2\uplauncher.exe" | In - Private - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\program files\atari\tdu2\uplauncher.exe
O87 - FAEL: "{724711E0-729B-40CE-999C-17C843E44FF0}" | Out - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe
O87 - FAEL: "TCP Query User{010B6782-0F8B-4762-BB33-FA10C017C4DA}C:\program files\atari\tdu2\testdrive2.exe" | In - Private - P6 - TRUE | .(.Eden Games - Test Drive Unlimited 2.) -- C:\program files\atari\tdu2\testdrive2.exe
O87 - FAEL: "UDP Query User{6D87E4E7-6369-47BE-AE0A-B3254A2CF7BA}C:\program files\atari\tdu2\testdrive2.exe" | In - Private - P17 - TRUE | .(.Eden Games - Test Drive Unlimited 2.) -- C:\program files\atari\tdu2\testdrive2.exe
O87 - FAEL: "{17AD70AD-DF2D-48E4-BE24-B26A302225AF}" | In - Private - P6 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\Users\By.keita\AppData\Roaming\Dropbox\bin\Dropbox.exe
O87 - FAEL: "{B6233774-94B1-4CC8-BDC1-F1245862C415}" | In - Private - P17 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\Users\By.keita\AppData\Roaming\Dropbox\bin\Dropbox.exe
O87 - FAEL: "TCP Query User{099D689A-16F7-4A34-9B24-B109E331F894}C:\users\by.keita\appdata\roaming\dropbox\bin\dropbox.exe" | In - Public - P6 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\users\by.keita\appdata\roaming\dropbox\bin\dropbox.exe
O87 - FAEL: "UDP Query User{66A43E3D-A079-493D-8158-5BD623F2CA51}C:\users\by.keita\appdata\roaming\dropbox\bin\dropbox.exe" | In - Public - P17 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\users\by.keita\appdata\roaming\dropbox\bin\dropbox.exe
O87 - FAEL: "TCP Query User{DF3B964A-CC02-4314-A176-11DF43A2F176}C:\program files\dell voice\dellvoice.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\dell voice\dellvoice.exe (.not file.)
O87 - FAEL: "UDP Query User{CF32F4B3-517C-423A-A3FA-70974492BE4E}C:\program files\dell voice\dellvoice.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\dell voice\dellvoice.exe (.not file.)
O87 - FAEL: "TCP Query User{33BF8FBC-7785-4FB8-8703-668923691217}C:\program files\dell voice\dellvoice.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\dell voice\dellvoice.exe (.not file.)
O87 - FAEL: "UDP Query User{7E9687CA-4B26-4979-BFAD-8BEF29732BF1}C:\program files\dell voice\dellvoice.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\dell voice\dellvoice.exe (.not file.)
O87 - FAEL: "{A8467C22-9D76-4C62-8289-0BAFAD1DC6DD}" | In - None - P17 - TRUE | .(.Skype Limited - Facebook Video Calling.) -- C:\Users\By.keita\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
O87 - FAEL: "TCP Query User{088B848C-7C63-4BE2-9F2D-8EEDD1ED2E7D}C:\program files\atari\tdu2\_uplauncher.exe" |In - Private - P6 - FALSE | .(...) -- C:\program files\atari\tdu2\_uplauncher.exe (.not file.)
O87 - FAEL: "UDP Query User{755F195C-89DC-407D-AF12-D230151E0180}C:\program files\atari\tdu2\_uplauncher.exe" |In - Private - P17 - FALSE | .(...) -- C:\program files\atari\tdu2\_uplauncher.exe (.not file.)
O87 - FAEL: "{13C6B725-F7A8-40A5-97BC-BF039160E79C}" | In - Private - P6 - TRUE | .(...) -- C:\Windows\System32\PnkBstrA.exe
O87 - FAEL: "{FC68D4F2-ADA6-4C44-8F2C-A8A4B9546B99}" | In - Private - P17 - TRUE | .(...) -- C:\Windows\System32\PnkBstrA.exe
O87 - FAEL: "{5773F8FB-0F47-4BDA-A281-0B4906A584E3}" | In - Private - P6 - TRUE | .(...) -- C:\Windows\System32\PnkBstrB.exe
O87 - FAEL: "{055CEF3E-C2EF-448E-A507-F13775D78298}" | In - Private - P17 - TRUE | .(...) -- C:\Windows\System32\PnkBstrB.exe
O87 - FAEL: "{E268A179-41ED-412A-9CD9-BB716875DAC2}" | In - Private - P6 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- C:\Program Files\Ubisoft\FarCry 3\bin\farcry3.exe
O87 - FAEL: "{3A0F4C0D-2DFA-406C-B5B5-88FFD521F940}" | In - Private - P17 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- C:\Program Files\Ubisoft\FarCry 3\bin\farcry3.exe
O87 - FAEL: "{9F9D6068-8A3E-4E60-A126-7D4C70EC8A40}" | In - Private - P6 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- C:\Program Files\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe
O87 - FAEL: "{EDB94CAB-D6B7-4F3C-8BCB-DBCC8E1E8E15}" | In - Private - P17 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- C:\Program Files\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe
O87 - FAEL: "{97A6F0C6-8F94-40DE-ABA5-64C77B62CF56}" | In - Private - P6 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Updater.exe
O87 - FAEL: "{D09C9209-B6FF-4D5B-A3E5-6FF89AC68529}" | In - Private - P17 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Updater.exe
O87 - FAEL: "{DC9DFB7C-AEE5-4510-A665-C7D571D73B71}" | In - Private - P6 - TRUE | .(.Ubisoft - FC3Editor.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Editor.exe
O87 - FAEL: "{5518B617-29EE-4670-BA21-FDAD6D6F14FE}" | In - Private - P17 - TRUE | .(.Ubisoft - FC3Editor.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Editor.exe
O87 - FAEL: "{0030B8C1-8749-4229-8031-073462FEB319}" | In - Private - P6 - TRUE | .(.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2012.) -- C:\Program Files\KONAMI\Pro Evolution Soccer 2012\pes2012.exe
O87 - FAEL: "{4B36C3E0-E65B-4026-9C28-94490FAFB01E}" | In - Private - P17 - TRUE | .(.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2012.) -- C:\Program Files\KONAMI\Pro Evolution Soccer 2012\pes2012.exe
O87 - FAEL: "TCP Query User{61EB0206-A421-4EEE-B7A5-251E22C75773}C:\program files\konami\pro evolution soccer 2013\pes2013.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\konami\pro evolution soccer 2013\pes2013.exe (.not file.)
O87 - FAEL: "UDP Query User{D973DEE7-8DE9-4664-A6E3-C5B9FD674A00}C:\program files\konami\pro evolution soccer 2013\pes2013.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\konami\pro evolution soccer 2013\pes2013.exe (.not file.)
O87 - FAEL: "TCP Query User{8AC1C25C-CF9F-4229-A77B-DC6B276E7D78}E:\crack\pes2013.exe" |In - Private - P6 - TRUE | .(...) -- E:\crack\pes2013.exe (.not file.)
O87 - FAEL: "UDP Query User{24F00664-75F4-4B7A-B915-5CD79FD98C07}E:\crack\pes2013.exe" |In - Private - P17 - TRUE | .(...) -- E:\crack\pes2013.exe (.not file.)
O87 - FAEL: "{8705B984-E653-4B45-8295-AA2E7EAA6664}" | In - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe
O87 - FAEL: "{E23DB75F-400E-444C-BBC0-E0022B58C031}" | In - None - P17 - TRUE | .(.Eden Games - Test Drive Unlimited 2.) -- C:\Program Files\Atari\TDU2\TestDrive2.exe
O87 - FAEL: "{822CAF55-54CD-412D-875B-0C7F56BD6A2B}" | In - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe
O87 - FAEL: "{DC5BB53E-0051-48DE-84E9-2A509331C6FF}" | Out - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe
O87 - FAEL: "{A0630CC6-580B-43A1-9AC5-E5C836549117}" | Out - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe
O87 - FAEL: "{51585C97-1DD9-4DBF-AA6C-E9AEC14CAC44}" | Out - None - P17 - TRUE | .(.Eden Games - Test Drive Unlimited 2.) -- C:\Program Files\Atari\TDU2\TestDrive2.exe
O87 - FAEL: "{A41F7D46-7ADF-496E-878A-539DD693CFAB}" | Out - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe
O87 - FAEL: "{0E36B27A-A896-4AD6-BD39-3EE06DEF77FD}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\Common Files\Comodo\GeekBuddyRSP.exe (.not file.)
O87 - FAEL: "{4D344528-7BC9-4F3E-8786-073050C7ED21}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\Common Files\Comodo\GeekBuddyRSP.exe (.not file.)
~ Scan Firewall in 00mn 01s



---\\ Scan Additionnel (O88)
Database Version : v2.10777 - (17/02/2013)
Cl�s trouv�es (Keys found) : 2
Valeurs trouv�es (Values found) : 0
Dossiers trouv�s (Folders found) : 0
Fichiers trouv�s (Files found) : 0

[HKLM\Software\Classes\esriEditorExt.FeatureFromAreaContainsPointErrorCommand] =>Adware.SPointer
[HKLM\Software\Classes\esriEditorExt.FeatureFromAreaContainsPointErrorCommand.1] =>Adware.SPointer
~ Scan Additionnel in 00mn 38s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "057978BEDBCC3104FB5D20494DADB50D" . (.Apple Application Support.) -- C:\Windows\Installer\{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}\WinInstall.ico
O90 - PUC: "0826823371681E11F86F8BCAF6798BE8" . (.Google Earth Plug-in.) -- C:\Windows\Installer\{33286280-8617-11E1-8FF6-B8AC6F97B88E}\ARPPRODUCTICON.exe
O90 - PUC: "0C1FF52A6B08B8B45A15CD2565794A80" . (.AMD APP SDK Runtime.) -- C:\Windows\Installer\{A25FF1C0-80B6-4B8B-A551-DC525697A408}\ARPPRODUCTICON.exe
O90 - PUC: "0ED9D238CFA898648991D4BBEDDBE3F4" . (.Microsoft Games for Windows - LIVE Redistributable.) -- C:\Windows\Installer\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}\GameForWindowsLiveRedist.exe
O90 - PUC: "121E2D80A6F7BE3479DF26B944094330" . (.Microsoft_VC90_CRT_x86.) -- C:\Windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe
O90 - PUC: "20B91A1DE71869244AB57058F37DD475" . (.Microsoft_VC80_MFC_x86.) -- C:\Windows\Installer\{D1A19B02-817E-4296-A45B-07853FD74D57}\ARPPRODUCTICON.exe
O90 - PUC: "227C12A7952F67947BAA66855EDFDEFA" . (.Google Drive.) -- C:\Windows\Installer\{7A21C722-F259-4976-B7AA-6658E5FDEDAF}\DriveIcon
O90 - PUC: "25BBB29DFF28DE24A8C3E460F249A47B" . (.Microsoft_VC80_MFCLOC_x86.) -- C:\Windows\Installer\{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}\ARPPRODUCTICON.exe
O90 - PUC: "29D1F74FFD4F3114080B5BF8E21BF082" . (.AMD Media Foundation Decoders.) -- C:\Windows\Installer\{F47F1D92-F4DF-4113-80B0-B58F2EB10F28}\ARPPRODUCTICON.exe
O90 - PUC: "2B754B4DF062165CAC7807B33D7B42AC" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{D4B457B2-260F-C561-CA87-703BD3B724CA}\ARPPRODUCTICON.exe
O90 - PUC: "32FA0F2EF2EF2224A934556EC34CE11F" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}\ARPPRODUCTICON.exe
O90 - PUC: "42962336FAC3858CA3F858898C07917D" . (.Catalyst Control Center.) -- C:\Windows\Installer\{63326924-3CAF-C858-3A8F-8598C87019D7}\ARPPRODUCTICON.exe
O90 - PUC: "44C482C10E8B3DE218452531A3FA5F83" . (.HydraVision.) -- C:\Windows\Installer\{1C284C44-B8E0-2ED3-8154-52133AAFF538}\ARPPRODUCTICON.exe
O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico
O90 - PUC: "4FF2CB855A86A8D40B0B332CDCACF2D2" . (.Logo Design Studio Pro.) -- C:\Windows\Installer\{58BC2FF4-68A5-4D8A-B0B0-33C2CDCA2F2D}\ARPPRODUCTICON.exe
O90 - PUC: "67B3FB7D9FEE8684B9B224BA6FB072A9" . (.Microsoft_VC80_CRT_x86.) -- C:\Windows\Installer\{D7BF3B76-EEF9-4868-9B2B-42ABF60B279A}\ARPPRODUCTICON.exe
O90 - PUC: "68AB67CA7DA73301B7449A0500000010" . (.Adobe Reader 9.5.3.) -- C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A95000000001}\SC_Reader.ico
O90 - PUC: "6D4B04801DD7781458326ECF0070FE7B" . (.Windows Live ID Sign-in Assistant.) -- C:\Windows\Installer\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}\prodicon.ico
O90 - PUC: "74A8220B65A87AA6EB3819B0DB1DC94B" . (.AMD Drag and Drop Transcoding.) -- C:\Windows\Installer\{B0228A47-8A56-6AA7-BE83-910BBDD19CB4}\ARPPRODUCTICON.exe
O90 - PUC: "890A737E161FF6B4FA2268AA3EF4F6DB" . (.Pro Evolution Soccer 2012.) -- C:\Windows\Installer\{E737A098-F161-4B6F-AF22-86AAE34F6FBD}\ARPPRODUCTICON.exe
O90 - PUC: "91785D291CBB3CC40AB8659C8E48CCC2" . (.Microsoft_VC80_CRT_x86.) -- C:\Windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe
O90 - PUC: "9C7DC219B8ABB5161496D75346166DCB" . (.ATI AVIVO Codecs.) -- C:\Windows\Installer\{912CD7C9-BA8B-615B-4169-7D356461D6BC}\ARPPRODUCTICON.exe
O90 - PUC: "B2F5519759897D9468219D52080EEDB5" . (.Bonjour.) -- C:\Windows\Installer\{79155F2B-9895-49D7-8612-D92580E0DE5B}\Bonjour.ico
O90 - PUC: "B4A2F9673A486849DA2DE9A54B4B1E3E" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{769F2A4B-84A3-9486-ADD2-9E5AB4B4E1E3}\ARPPRODUCTICON.exe
O90 - PUC: "B5DEF536D6C2EB94786EA7F6DC22CBA5" . (.Microsoft_VC90_MFC_x86.) -- C:\Windows\Installer\{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}\ARPPRODUCTICON.exe
O90 - PUC: "C7030BC4E565144468EBD02F4EBF28C8" . (.Microsoft Games for Windows Marketplace.) -- C:\Windows\Installer\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}\GameForWindowsLiveDash.exe
O90 - PUC: "CDC23D06EB3E8754AB0192233270DCCD" . (.Logitech Gaming Software 5.10.) -- C:\Windows\Installer\{60D32CDC-E3BE-4578-BA10-29322307CDDC}\ARPPRODUCTICON.exe
O90 - PUC: "DB8F5283487FBBF65ADC585795410870" . (.AMD Catalyst Install Manager.) -- C:\Windows\Installer\{3825F8BD-F784-6FBB-A5CD-857559148007}\ARPPRODUCTICON.exe
O90 - PUC: "E323A2F34C068E14C8BC79511D7D053C" . (.Angry Birds Space.) -- C:\Windows\Installer\{3F2A323E-60C4-41E8-8CCB-9715D1D750C3}\AngryBirdsSpace.exe
O90 - PUC: "E7FF67E4ABEA78C47B88DC745E24B5D9" . (.Skype� 6.1.) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
O90 - PUC: "E805DFCE2A862B1964DDD1307D389DB4" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{ECFD508E-68A2-91B2-46DD-1D03D783D94B}\ARPPRODUCTICON.exe
O90 - PUC: "E873E3303DA65DA4DBBEBC6DB91340C6" . (.Microsoft_VC90_ATL_x86.) -- C:\Windows\Installer\{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}\ARPPRODUCTICON.exe
O90 - PUC: "EA5B44F46A28A8A43A3E2ED48479823E" . (.Microsoft SQL Server 2008 Native Client.) -- C:\Windows\Installer\{4F44B5AE-82A6-4A8A-A3E3-E24D489728E3}\ARPIco
O90 - PUC: "ECA69F379429D40D5E96D116D19028BB" . (.ccc-utility.) -- C:\Windows\Installer\{73F96ACE-9249-D04D-E569-1D611D0982BB}\ARPPRODUCTICON.exe
O90 - PUC: "F06BE6A807CBB101ACECD9774967A7C3" . (.AMD Accelerated Video Transcoding.) -- C:\Windows\Installer\{8A6EB60F-BC70-101B-CACE-9D7794767A3C}\ARPPRODUCTICON.exe
O90 - PUC: "F3D40CFE251A7E745871EEF02610FAFE" . (.Apple Mobile Device Support.) -- C:\Windows\Installer\{EFC04D3F-A152-47E7-8517-EE0F6201AFEF}\Installer.ico
O90 - PUC: "F6071111A6667304777712318267D401" . (.JavaFX 2.1.1.) -- C:\Windows\Installer\{1111706F-666A-4037-7777-211328764D10}\javaIcon.ico
~ Scan Files in 00mn 00s



---\\ Etat g�n�ral des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 17/02/2013 251248 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 19/12/2012 219136 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 26/02/2012 55144 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 30/10/2012 44808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Disabled 0 | (avast! Firewall) . (...) - C:\Program Files\AVAST Software\Avast\afwServ.exe
SR - | Auto 30/08/2011 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SS - | Demand 7168 | (EverestDriver) . (...) - C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt
SS - | Demand 10/05/2012 867080 | (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - | Auto 21/05/2012 116648 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 21/05/2012 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SR - | Auto 06/07/2011 326424 | (LMS) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 14/12/2012 398184 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
SR - | Auto 14/12/2012 682344 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
SS - | Demand 02/01/2013 115168 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 76888 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
SS - | Auto 08/01/2013 161536 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
SS - | Demand 19/02/2010 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SR - | Auto 06/07/2011 2656536 | (UNS) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 13/07/2009 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 13/07/2009 20992 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Scan Services in 00mn 03s



---\\ Liste des �mulateurs de CD/DVD (Hook du MBR)
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Lite
~ Scan Emulateurs in 00mn 03s



End of the scan (1382 lines in 03mn 41s)(0)

Publicité


Signaler le contenu de ce document

Publicité