Rapport de ZHPDiag v2013.4.17.96 par Nicolas Coolman, Update du 17/04/2013
Run by litzenbourger at 18/04/2013 14:56:03
State : Version � jour.
WhiteList : Disable
High Elevated Privileges : OK
UAC : Deactivate by program


---\\ Web Browser
MSIE: Internet Explorer v10.0.9200.16540
GCIE: Google Chrome v25.0.1364.152

---\\ Windows Product Information
~ Langage: Fran�ais
Windows 8 Home Premium Edition, 64-bit (Build 9200)
Windows Server License Manager Script : OK
~ ion : Windows(R) Operating System, OEM_DM channel
Windows ID Activation : OK
~ Windows Partial Key : Y4DHT
Windows License : OK
~ Windows Remaining Initializations Number : 999
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Protection
avast! Free Antivirus v8.0.1483.0
Malwarebytes Anti-Malware version 1.75.0.1300
Norton Internet Security v20.2.1.22
Windows Defender W8

---\\ System Optimizer
CCleaner v4.00

---\\ Software Update
Adobe Flash Player 11 Plugin

---\\ System Information
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3909 MB (60% free)
System Restore: Activ� (Enable)
System drive C: has 402 GB (90%) free of 446 GB

---\\ Logged in mode
~ Computer Name: DOMCRIMALISA
~ User Name: litzenbourger
~ All Users Names: litzenbourger, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\litzenbourger\AppData\Roaming\
~ %Desktop% : C:\Users\litzenbourger\Desktop\
~ %Favorites% : C:\Users\litzenbourger\Favorites\
~ %LocalAppData% : C:\Users\litzenbourger\AppData\Local\
~ %StartMenu% : C:\Users\litzenbourger\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 402 Go of 446 Go)
D:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: Scanned in 00mn 00s



---\\ Recherche particuli�re de fichiers g�n�riques
[MD5.E13A31D5254C25406A7946BDD9B06364] - (.Microsoft Corporation - Explorateur Windows.) (.11/10/2012 - 08:35:16.) -- C:\Windows\Explorer.exe [2380944]
[MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Application de d�marrage de Windows.) (.26/07/2012 - 04:08:50.) -- C:\Windows\System32\Wininit.exe [132608]
[MD5.753C0848AE7872A3F59663078A517293] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.21/02/2013 - 11:15:07.) -- C:\Windows\System32\wininet.dll [2240512]
[MD5.BCF2036A0DD579E47C008C133550283E] - (.Microsoft Corporation - Application d�ouverture de session Windows.) (.11/10/2012 - 06:46:58.) -- C:\Windows\System32\Winlogon.exe [517120]
[MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Biblioth�que de licences.) (.26/07/2012 - 04:07:20.) -- C:\Windows\System32\sppcomapi.dll [273408]
[MD5.36D6A3201721558A8AFBCC09C2DA4C2C] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.06/11/2012 - 04:53:44.) -- C:\Windows\system32\Drivers\AFD.sys [560640]
[MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 06:00:48.) -- C:\Windows\system32\Drivers\atapi.sys [25840]
[MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.26/07/2012 - 03:30:10.) -- C:\Windows\system32\Drivers\Cdfs.sys [108544]
[MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.26/07/2012 - 03:26:36.) -- C:\Windows\system32\Drivers\Cdrom.sys [174080]
[MD5.09D9EB9E7898F8E6561473A20CC808B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.26/07/2012 - 03:26:53.) -- C:\Windows\system32\Drivers\DfsC.sys [118784]
[MD5.7D87B5B6C7188D553E11B59DC7F0B111] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/09/2012 - 07:08:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [71168]
[MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Pilote de port i8042.) (.26/07/2012 - 03:28:51.) -- C:\Windows\system32\Drivers\i8042prt.sys [112640]
[MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2012 - 03:23:01.) -- C:\Windows\system32\Drivers\IpNat.sys [145920]
[MD5.93179D48066918323628CB016D8C94DC] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.05/02/2013 - 23:29:09.) -- C:\Windows\system32\Drivers\MRxSmb.sys [370688]
[MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.26/07/2012 - 03:24:28.) -- C:\Windows\system32\Drivers\netBT.sys [331776]
[MD5.76929F4A69E425911A63B407E26C2589] - (.Microsoft Corporation - Pilote du syst�me de fichiers NT.) (.02/02/2013 - 11:54:54.) -- C:\Windows\system32\Drivers\ntfs.sys [1933544]
[MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Pilote de port parall�le.) (.26/07/2012 - 03:29:53.) -- C:\Windows\system32\Drivers\Parport.sys [105984]
[MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.26/07/2012 - 03:23:17.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [124928]
[MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Redirecteur de p�riph�rique de Microsoft RDP.) (.26/07/2012 - 03:25:18.) -- C:\Windows\system32\Drivers\rdpdr.sys [179712]
[MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 06:26:47.) -- C:\Windows\system32\Drivers\tdx.sys [117248]
[MD5.2FB3CDFD5EAF4CD9D4AFAF96877D13AE] - (.Microsoft Corporation - Pilote de clich� instantan� du volume.) (.26/07/2012 - 05:57:09.) -- C:\Windows\system32\Drivers\volsnap.sys [332016]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cach�s (Cach�/Total)
~ Mes images (My Pictures) : 1/219
~ Mes musiques (My Musics) : 1/5
~ Mes Favoris (My Favorites) : 1/10
~ Mes Documents (My Documents) : 1/3
~ Mon Bureau (My Desktop) : 1/16
~ Menu demarrer (Programs) : 1/26
~ Hidden Files: Scanned in 00mn 00s



---\\ Processus lanc�s
[MD5.1B38F4C2BCDB133B757E22BEB61FB3FC] - (.Dritek System Inc. - Launch Manager.) -- C:\Program Files (x86)\Launch Manager\LManager.exe [1176176] [PID.1232]
[MD5.88AD973CBE5E3B37E0B2A44C7949DFD7] - (...) -- C:\Program Files (x86)\Accelerer PC\PCSUNotifier.exe [188680] [PID.4636]
[MD5.148C545849C1379A3D4448F5DE768E86] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4767304] [PID.888]
[MD5.F0EA603E7B91046CA48EA4B3593A007D] - (.Micro Application - Pas de description.) -- C:\Program Files (x86)\Micro Application\LauncherMA.exe [485376] [PID.3712]
[MD5.1502417B401F5206ADE73995571AE8CB] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1274832] [PID.3900]
[MD5.8C37F5AC3666F09AEBDE0B79ACB96B95] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [6849024] [PID.5024]
~ Processes Running: Scanned in 00mn 01s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\litzenbourger\AppData\Roaming\Mozilla\Firefox\Profiles\xhb8l9wj.default\prefs.js
M2 - MFEP: prefs.js [litzenbourger - xhb8l9wj.default\pluswinks@PlusWinks] [] Smiley Bar for Facebook v1.0.0.0 (..)
M2 - MFEP: prefs.js [litzenbourger - xhb8l9wj.default\SpecialSavings@SpecialSavings.com] [] SpecialSavings v2.0.0.1 (..)
M2 - MFEP: prefs.js [litzenbourger - xhb8l9wj.default\{377e5d4d-77e5-476a-8716-7e70a9272da0}] [] Search-Results Toolbar v1.2.0.0 (..)
M2 - MFEP: prefs.js [litzenbourger - xhb8l9wj.default\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] [] Wajam v1.26 (..) =>Toolbar.Wajam
M2 - MFEP: prefs.js [litzenbourger - xhb8l9wj.default\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}] [WOT] WOT v20130402 (..)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll
~ Firefox Browser: 6 Scanned in 00mn 00s



---\\ Internet Explorer, D�marrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16384 (win8_rtm.120725-1247)) -- C:\Windows\SysWOW64\ieframe.dll
~ IE Browser: 13 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: (no name) [64Bits] - {4723AAA8-B2F9-4CC1-9E60-190976DB1FA4} Cl� orpheline
O2 - BHO: Happy Lyrics [64Bits] - {59C0C5BD-2579-433A-BBB8-AFFD59642BAF} . (.Happy Productions - Happy Lyrics.) -- C:\Program Files (x86)\HappyLyrics\hppylrc.dll
O2 - BHO: Norton Identity Protection [64Bits] - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} . (.Symantec Corporation - coIEPlugIn.) -- C:\Program Files (x86)\Norton Internet Security\Engine\20.2.1.22\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection [64Bits] - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} . (.Symantec Corporation - IPS Browser Helper DLL.) -- C:\Program Files (x86)\Norton Internet Security\Engine\20.2.1.22\IPS\IPSBHO.dll
O2 - BHO: avast! WebRep [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
~ BHO: 5 Scanned in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Cl� orpheline
~ Toolbar: Scanned in 00mn 00s



---\\ Applications d�marr�es par registre & par dossier (O4)
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe (.not file.)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [PCSpeedUp] . (...) -- C:\Program Files (x86)\Accelerer PC\PCSUNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] ~"C:\Program Files (x86)\MSN Messenger\MsnMsgr.exe (.not file.)
O4 - HKCU\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe
O4 - HKLM\..\Wow6432Node\Run: [LManager] Cl� orpheline
O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
O4 - HKUS\S-1-5-21-4105170967-1408492940-2512939263-1001\..\Run: [PCSpeedUp] . (...) -- C:\Program Files (x86)\Accelerer PC\PCSUNotifier.exe
O4 - HKUS\S-1-5-21-4105170967-1408492940-2512939263-1001\..\Run: [MsnMsgr] ~"C:\Program Files (x86)\MSN Messenger\MsnMsgr.exe (.not file.)
O4 - HKUS\S-1-5-21-4105170967-1408492940-2512939263-1001\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe
~ Application: Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop: Continue Video Performer installation.lnk . (...) -- C:\Users\litzenbourger\AppData\Local\Temp\Video Performer63862.exe
O4 - GS\Desktop: firefox - Raccourci.lnk . (...) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (.not file.)
O4 - GS\Desktop: Google Drive.lnk . (...) -- C:\Users\litzenbourger\Google Drive
O4 - GS\Desktop: PhotoFiltre.lnk . (.Antonio Da Cruz - PhotoFiltre.) -- C:\Program Files (x86)\PhotoFiltre\PhotoFiltre.exe
O4 - GS\Desktop: RecentPlaces.lnk - Cl� orpheline
~ Global Startup: Scanned in 00mn 00s



---\\ Invisibilit� de l'ic�ne d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d�affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
~ Winsock: 6 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{D62CFDD5-A6DC-460C-927A-66E54E57C51C}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{FBE6AF66-71CD-476E-9235-BD376BCF340A}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{D62CFDD5-A6DC-460C-927A-66E54E57C51C}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{FBE6AF66-71CD-476E-9235-BD376BCF340A}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-cl�s Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Cl� de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non d�sactiv�s (O23)
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Dritek WMI Service (DsiWMIService) . (.Dritek System Inc. - Dritek WMI Service.) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: Elan Service (ETDService) . (.ELAN Microelectronics Corp. - Elan Service.) - C:\Program Files\Elantech\ETDService.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Capability Licensing Service In (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: (NAUpdate) . (.Nero AG - NeroUpdate.) - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: Norton Internet Security (NIS) . (.Symantec Corporation - Symantec Service Framework.) - C:\Program Files (x86)\Norton Internet Security\Engine\20.2.1.22\ccSvcHst.exe
O23 - Service: PC Speed Up Service (PCSUService) . (...) - C:\Program Files (x86)\Accelerer PC\PCSUService.exe
O23 - Service: Dritek RF Button Command Service (RfButtonDriverService) . (.Dritek System INC. - RfBtnSvc Application.) - C:\Windows\RfBtnSvc64.exe
O23 - Service: Intel(R) Management and Security Applica (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
~ Services: 14 Scanned in 00mn 22s



---\\ Enum�ration Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 1 Scanned in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ T�ches planifi�es en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1104]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1108]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Happy Lyrics Update.job [430]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\PC Performer_UPDATES.job [326]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\PC SpeedUp Service Deactivator.job [386]
[MD5.EA856F4A46320389D1899B2CAA7BF40F] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [253656]
[MD5.97D186CEEDDBBE013AF9309CF778AEEC] [APT] [ALU] (...) -- C:\Program Files (x86)\Packard Bell\Live Updater\updater.exe [3331216]
[MD5.BD0BA490E0300E859DB99DA3AB024371] [APT] [ALUAgent] (...) -- C:\Program Files (x86)\Packard Bell\Live Updater\liveupdater_agent.exe [39568]
[MD5.AB3C4A3667AEAD147F175721D8719B78] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [250248]
[MD5.A9DA5B43CF597F83B1EB441968E24891] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [3497240]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.5D3D29F26514B2EC7C16226A2909823B] [APT] [Happy Lyrics Update] (.Happy Productions.) -- C:\Program Files (x86)\HappyLyrics\HLUpdater.exe [115200]
[MD5.255236F43012C430B99D78BCA59C9593] [APT] [Norton WSC Integration] (.Symantec Corporation.) -- C:\Program Files (x86)\Norton Internet Security\Engine\20.2.1.22\WSCStub.exe [163432]
[MD5.EB29B863B5F4FE6FDA0E01784709647E] [APT] [PC Performer] (.PerformerSoft LLC.) -- C:\Program Files (x86)\PC Performer\PCPerformer.exe [7343792]
[MD5.EB29B863B5F4FE6FDA0E01784709647E] [APT] [PC Performer_UPDATES] (.PerformerSoft LLC.) -- C:\Program Files (x86)\PC Performer\PCPerformer.exe [7343792]
[MD5.7F64208A1645518702A69494C6AAD7F4] [APT] [PC SpeedUp Service Deactivator] (...) -- C:\Program Files (x86)\Accelerer PC\PCSUSD.exe [402184]
[MD5.5659ADFFA101D3AC0C62CED889991357] [APT] [Power Management] (.Acer Incorporated.) -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [5294736]
[MD5.92B476DD52794881A4B91A5529C2706B] [APT] [{40627B28-BFD9-4807-A16D-F4EA805DE73C}] (...) -- C:\Program Files\AVAST Software\Avast\aswRundll.exe [107568]
[MD5.00000000000000000000000000000000] [APT] [{AD5BEC3E-5D92-4AF0-BB65-3EBCE4A2E78D}] (...) -- D:\bsandwb\BSandWBdownloader.exe (.not file.) [0]
[MD5.C82886A0C88DA48CF36DC2B9CA701E11] [APT] [Norton Error Analyzer] (.Symantec Corporation.) -- C:\Program Files (x86)\Norton Internet Security\Engine\20.2.1.22\SymErr.exe [53656]
[MD5.C82886A0C88DA48CF36DC2B9CA701E11] [APT] [Norton Error Processor] (.Symantec Corporation.) -- C:\Program Files (x86)\Norton Internet Security\Engine\20.2.1.22\SymErr.exe [53656]
~ Scheduled Task: 27 Scanned in 00mn 07s



---\\ Composants install�s (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll
~ Active Setup: 9 Scanned in 00mn 00s



---\\ Pilotes lanc�s au d�marrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys
O41 - Driver: (BasicDisplay) . (.Microsoft Corporation - Microsoft Basic Display Driver.) - C:\Windows\system32\drivers\BasicDisplay.sys
O41 - Driver: (BasicRender) . (.Microsoft Corporation - Microsoft Basic Render Driver.) - C:\Windows\system32\drivers\BasicRender.sys
O41 - Driver: cdrom.inf (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dam.sys (dam) . (.Microsoft Corporation - DAM Kernel Driver.) - C:\Windows\System32\drivers\dam.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (Dfsc) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: mssmbios.inf (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: netnb.inf (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: npsvctrig.inf (npsvctrig) . (.Microsoft Corporation - Named pipe service triggers.) - C:\Windows\system32\drivers\npsvctrig.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-syst�me de mise en m�moire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: C:\Windows\System32\drivers\vwififlt.sys (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
~ Drivers: 36 Scanned in 00mn 00s



---\\ Logiciels install�s (O42)
O42 - Logiciel: Accelerer PC - D�sinstallation compl�te - (.Speedchecker Limited.) [HKLM][64Bits] -- PCSU-SL_is1
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Big Fish Games: Game Manager - (...) [HKLM][64Bits] -- BFGC
O42 - Logiciel: Broadcom Card Reader Driver Installer - (.Broadcom Corporation.) [HKLM][64Bits] -- {F0A7DF2F-0BE0-470F-B137-D7A19F977189}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: CyberLink PowerDVD 10 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}
O42 - Logiciel: CyberLink PowerDVD 10 - (.CyberLink Corp..) [HKLM][64Bits] -- {DEC235ED-58A4-4517-A278-C41E8DAEAB3B}
O42 - Logiciel: ETDWare PS/2-X64 11.6.11.002_WHQL - (.ELAN Microelectronic Corp..) [HKLM][64Bits] -- Elantech
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Drive - (.Google, Inc..) [HKLM][64Bits] -- {7A21C722-F259-4976-B7AA-6658E5FDEDAF}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Happy Lyrics - (.Happy Productions.) [HKLM][64Bits] -- happylyrics@hpyproductions.net
O42 - Logiciel: Identity Card - (.Packard Bell.) [HKLM][64Bits] -- {3D9CB654-99AD-4301-89C6-0D12A790767C}
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Intel(R) SDK for OpenCL - CPU Only Runtime Package - (.Intel Corporation.) [HKLM][64Bits] -- {FCB3772C-B7D0-4933-B1A9-3707EBACC573}
O42 - Logiciel: Intel� Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}
O42 - Logiciel: Jewel Quest 5 - (...) [HKLM][64Bits] -- {AF418C48-8C2D-4673-A6C9-C6CD2E187A70}
O42 - Logiciel: Launch Manager - (.Packard Bell.) [HKLM][64Bits] -- LManager
O42 - Logiciel: LauncherMA - (.Micro Application.) [HKLM][64Bits] -- {C06EFB22-B5DB-46C5-9215-BCB5C19C0858}
O42 - Logiciel: Live Updater - (.Packard Bell.) [HKLM][64Bits] -- {EE26E302-876A-48D9-9058-3129E5B99999}
O42 - Logiciel: Lollipop - (.Lollipop Network, S.L..) [HKCU][64Bits] -- yddis =>Adware.Lollipop
O42 - Logiciel: MSN Messenger 7.0 - (.Microsoft Corporation.) [HKLM][64Bits] -- {ABEB838C-A1A7-4C5D-B7E1-8B4314600820}
O42 - Logiciel: MSN Toolbar - (...) [HKLM][64Bits] -- MSN Toolbar
O42 - Logiciel: Mah Jong Quest II (nur deinstallation) - (...) [HKLM][64Bits] -- Mah Jong Quest II
O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Nero 12 Essentials OEM.a01 - (.Nero AG.) [HKLM][64Bits] -- {9BF0D9FE-9893-4647-81B9-17B7BEA4E6FD}
O42 - Logiciel: Nero BackItUp - (.Nero AG.) [HKLM][64Bits] -- {E70B2F2C-94D1-4287-B5B0-CBBE618E2652}
O42 - Logiciel: Nero BackItUp 12 Essentials OEM.a01 - (.Nero AG.) [HKLM][64Bits] -- {B2B0EC73-AD4A-4716-A3DE-CEA8440B309B}
O42 - Logiciel: Nero BackItUp Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {EF0D1292-8FC1-41BE-9740-DBC134F66415}
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {ABC88553-8770-4B97-B43E-5A90647A5B63}
O42 - Logiciel: Nero ControlCenter Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {C994C746-C6D0-4EBA-B09E-DF7B18381B69}
O42 - Logiciel: Nero Core Components - (.Nero AG.) [HKLM][64Bits] -- {BEBEE34D-84A2-4EDD-8BEA-96CC54371263}
O42 - Logiciel: Nero Express - (.Nero AG.) [HKLM][64Bits] -- {848A7C68-0ADC-4193-8A89-2CEA78E56A0C}
O42 - Logiciel: Nero Express Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {0708FF30-78C0-47B0-81F0-C84604DC769C}
O42 - Logiciel: Nero Launcher - (.Nero AG.) [HKLM][64Bits] -- {0E4630AF-0AB7-440E-A978-1A78FC4F43B9}
O42 - Logiciel: Nero RescueAgent - (.Nero AG.) [HKLM][64Bits] -- {A2D43081-CF7B-4637-A9F3-E2651AA5C4A8}
O42 - Logiciel: Nero RescueAgent Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {0B311221-05A5-4766-8D03-7A6446794156}
O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM][64Bits] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
O42 - Logiciel: Norton Internet Security - (.Symantec Corporation.) [HKLM][64Bits] -- NIS
O42 - Logiciel: Packard Bell Device Fast-lane - (.Packard Bell.) [HKLM][64Bits] -- {3F62D2FD-13C1-49A2-8B5D-47623D9460D7}
O42 - Logiciel: Packard Bell Power Management - (.Packard Bell.) [HKLM][64Bits] -- {91F52DE4-B789-42B0-9311-A349F10E5479}
O42 - Logiciel: Packard Bell Recovery Management - (.Packard Bell.) [HKLM][64Bits] -- {07F2005A-8CAC-4A4B-83A2-DA98A722CA61}
O42 - Logiciel: PhotoFiltre - (...) [HKCU][64Bits] -- PhotoFiltre
O42 - Logiciel: Plantes contre Zombies - (...) [HKLM][64Bits] -- BFG-Plantes contre Zombies
O42 - Logiciel: REALTEK Wireless LAN Driver - (.REALTEK Semiconductor Corp..) [HKLM][64Bits] -- {9D3D8C60-A55F-4123-B2B9-173F09590E16}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Snap.Do - (.ReSoft Ltd..) [HKLM][64Bits] -- {E6F38543-1C14-445C-BF30-467A23EE1091} =>Hijacker.SmartBar
O42 - Logiciel: Snap.Do Engine - (.ReSoft Ltd..) [HKCU][64Bits] -- {f5dcede3-6ae2-4f1f-9ce6-1e707a7dd65d} =>Hijacker.SmartBar
O42 - Logiciel: avast! Free Antivirus v8.0.1483.0 - (.AVAST Software.) [HKLM][64Bits] -- avast
O42 - Logiciel: eBay Worldwide - (.OEM.) [HKLM][64Bits] -- {A694AF57-9891-4D62-824C-7E55A1361A14}
O42 - Logiciel: �Torrent - (.BitTorrent Inc..) [HKLM][64Bits] -- uTorrent
~ Logic: 100 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\7Wonders Vista_16]
[HKCU\Software\AppDataLow\Software\HappyLyrics]
[HKCU\Software\AppDataLow]
[HKCU\Software\Avast Software]
[HKCU\Software\Big Fish Games]
[HKCU\Software\BigFish]
[HKCU\Software\BitTorrent]
[HKCU\Software\Brother]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Dritek]
[HKCU\Software\Elantech]
[HKCU\Software\FileScout]
[HKCU\Software\Google]
[HKCU\Software\Intel]
[HKCU\Software\Licenses]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\MCAFEE]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\Norton]
[HKCU\Software\ODBC]
[HKCU\Software\OEM]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\SYNCJM]
[HKCU\Software\Symantec]
[HKCU\Software\Systweak]
[HKCU\Software\WildTangent]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Cyberlink]
[HKLM\Software\DTS]
[HKLM\Software\Dolby]
[HKLM\Software\Intel]
[HKLM\Software\Khronos]
[HKLM\Software\Knowles]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Norton]
[HKLM\Software\ODBC]
[HKLM\Software\OEM]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\SonicFocus]
[HKLM\Software\Speedchecker Limited]
[HKLM\Software\Symantec]
[HKLM\Software\Volatile]
[HKLM\Software\Waves Audio]
[HKLM\Software\Wow6432Node\1 Jeu par jour]
[HKLM\Software\Wow6432Node\7 Wonders of the Ancient World]
[HKLM\Software\Wow6432Node\AVAST Software]
[HKLM\Software\Wow6432Node\Big Fish Games]
[HKLM\Software\Wow6432Node\Brother]
[HKLM\Software\Wow6432Node\Bunndle]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\CyberLink]
[HKLM\Software\Wow6432Node\Dritek]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\Lake]
[HKLM\Software\Wow6432Node\Licenses]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MediaCenterPaths]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\Nero]
[HKLM\Software\Wow6432Node\Norton]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\OEM]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\PopCap]
[HKLM\Software\Wow6432Node\Reallusion]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Software]
[HKLM\Software\Wow6432Node\Symantec]
[HKLM\Software\Wow6432Node\Systweak]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\WildTangent]
[HKLM\Software\Wow6432Node\iWin.com Games]
[HKLM\Software\Wow6432Node\iWinArcade]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
~ Key Software: 151 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 09/03/2013 - 22:50:13 - [370,699] ----D C:\Program Files (x86)\1 Jeu par jour
O43 - CFD: 22/03/2013 - 14:07:08 - [3,392] ----D C:\Program Files (x86)\Accelerer PC
O43 - CFD: 06/04/2013 - 21:16:46 - [22,762] ----D C:\Program Files (x86)\bfgclient
O43 - CFD: 30/03/2013 - 21:29:06 - [63,586] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 08/09/2012 - 00:20:52 - [189,845] ----D C:\Program Files (x86)\CyberLink
O43 - CFD: 22/03/2013 - 14:06:53 - [0,277] ----D C:\Program Files (x86)\Driver Performer
O43 - CFD: 22/03/2013 - 14:06:52 - [1,161] ----D C:\Program Files (x86)\ffdshow
O43 - CFD: 22/03/2013 - 13:43:57 - [316,110] ----D C:\Program Files (x86)\Google
O43 - CFD: 12/03/2013 - 15:55:14 - [0,364] ----D C:\Program Files (x86)\HappyLyrics
O43 - CFD: 09/03/2013 - 22:50:13 - [48,771] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 16/04/2013 - 03:57:39 - [169,249] ----D C:\Program Files (x86)\Intel
O43 - CFD: 13/04/2013 - 19:05:49 - [4,621] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 12/03/2013 - 18:14:51 - [57,220] ----D C:\Program Files (x86)\iWin.com Games
O43 - CFD: 08/09/2012 - 00:15:09 - [27,936] ----D C:\Program Files (x86)\Launch Manager
O43 - CFD: 13/04/2013 - 18:11:54 - [13,376] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 09/03/2013 - 22:49:16 - [0,463] ----D C:\Program Files (x86)\Micro Application
O43 - CFD: 22/03/2013 - 14:06:34 - [0,007] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 07/03/2013 - 23:09:57 - [0,023] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 13/03/2013 - 21:56:58 - [0,210] ----D C:\Program Files (x86)\mixidj
O43 - CFD: 03/08/2012 - 13:16:11 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 22/03/2013 - 14:07:13 - [11,164] ----D C:\Program Files (x86)\MSN Messenger
O43 - CFD: 22/03/2013 - 14:07:13 - [0,425] ----D C:\Program Files (x86)\MSN Toolbar
O43 - CFD: 03/08/2012 - 13:26:03 - [318,436] ----D C:\Program Files (x86)\Nero
O43 - CFD: 22/03/2013 - 14:18:23 - [111,731] ----D C:\Program Files (x86)\Norton Internet Security
O43 - CFD: 22/03/2013 - 14:07:49 - [10,918] ----D C:\Program Files (x86)\NortonInstaller
O43 - CFD: 05/01/2013 - 19:43:53 - [0,105] ----D C:\Program Files (x86)\OEM
O43 - CFD: 22/03/2013 - 14:06:34 - [0,013] ----D C:\Program Files (x86)\OnlineVault
O43 - CFD: 18/03/2013 - 20:56:32 - [100,327] ----D C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 03/08/2012 - 13:25:01 - [5,216] ----D C:\Program Files (x86)\Packard Bell
O43 - CFD: 23/03/2013 - 14:51:01 - [11,876] ----D C:\Program Files (x86)\PC Performer
O43 - CFD: 22/03/2013 - 14:06:12 - [0,098] ----D C:\Program Files (x86)\PC Speed Maximizer
O43 - CFD: 28/01/2013 - 16:03:45 - [3,526] ----D C:\Program Files (x86)\PhotoFiltre
O43 - CFD: 06/04/2013 - 21:21:53 - [44,661] ----D C:\Program Files (x86)\Plantes contre Zombies
O43 - CFD: 08/03/2013 - 15:43:46 - [3,142] ----D C:\Program Files (x86)\PopCap Games
O43 - CFD: 08/09/2012 - 00:09:48 - [3,219] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 08/09/2012 - 00:18:41 - [3,662] ----D C:\Program Files (x86)\REALTEK PCIE Wireless LAN Driver
O43 - CFD: 03/08/2012 - 13:16:11 - [36,536] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 03/08/2012 - 13:28:44 - [2,444] ----D C:\Program Files (x86)\SymSilent
O43 - CFD: 08/09/2012 - 00:10:08 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 22/03/2013 - 14:06:06 - [0,014] ----D C:\Program Files (x86)\Tiger Savings
O43 - CFD: 22/03/2013 - 14:06:06 - [38,395] ----D C:\Program Files (x86)\TuneUp Utilities 2013
O43 - CFD: 31/03/2013 - 18:55:25 - [0,951] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 08/09/2012 - 09:55:55 - [5,466] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 13/01/2013 - 06:25:49 - [3,494] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 26/07/2012 - 10:13:01 - [0,209] ----D C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 26/07/2012 - 10:12:59 - [7,243] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 08/09/2012 - 09:55:55 - [5,226] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 26/07/2012 - 10:13:01 - [0,209] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 26/07/2012 - 10:12:59 - [0] -SH-D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 18/04/2013 - 14:56:10 - [21,588] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 08/09/2012 - 00:09:46 - [3,518] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 08/09/2012 - 00:03:22 - [0] ----D C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 30/03/2013 - 21:16:51 - [29,572] ----D C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 03/08/2012 - 13:25:45 - [20,044] ----D C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 08/09/2012 - 00:13:30 - [0,185] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 26/07/2012 - 10:13:01 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 22/03/2013 - 14:07:09 - [0,595] ----D C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 07/03/2013 - 23:06:08 - [9,670] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 29/01/2013 - 09:06:55 - [0] ----D C:\ProgramData\Adobe
O43 - CFD: 26/07/2012 - 09:22:08 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 30/03/2013 - 21:16:22 - [1935,475] ----D C:\ProgramData\AVAST Software
O43 - CFD: 06/04/2013 - 21:16:42 - [46,413] ----D C:\ProgramData\Big Fish Games
O43 - CFD: 22/01/2013 - 23:09:02 - [0,019] ----D C:\ProgramData\Brother
O43 - CFD: 05/01/2013 - 19:34:42 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 08/09/2012 - 00:22:12 - [0,000] ----D C:\ProgramData\CLSK
O43 - CFD: 17/03/2013 - 13:37:03 - [0,000] --H-D C:\ProgramData\Common Files
O43 - CFD: 22/03/2013 - 13:59:18 - [0] ----D C:\ProgramData\Datamngr =>PUP.Datamngr
O43 - CFD: 26/07/2012 - 09:22:08 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 26/07/2012 - 09:22:08 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 08/09/2012 - 00:13:47 - [0,164] ----D C:\ProgramData\Intel
O43 - CFD: 30/03/2013 - 22:22:18 - [15,956] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 29/01/2013 - 09:06:51 - [0] ----D C:\ProgramData\McAfee
O43 - CFD: 05/01/2013 - 19:34:42 - [0] --H-D C:\ProgramData\Menu D�marrer
O43 - CFD: 09/03/2013 - 22:48:37 - [0,000] ----D C:\ProgramData\Micro Application
O43 - CFD: 07/03/2013 - 23:09:06 - [228,580] -S--D C:\ProgramData\Microsoft
O43 - CFD: 07/03/2013 - 23:13:34 - [0,000] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 05/01/2013 - 19:34:42 - [0] --H-D C:\ProgramData\Mod�les
O43 - CFD: 07/01/2013 - 22:06:39 - [0,019] ----D C:\ProgramData\Mozilla
O43 - CFD: 03/08/2012 - 13:26:19 - [2,353] ----D C:\ProgramData\Nero
O43 - CFD: 22/03/2013 - 14:15:26 - [22,787] ----D C:\ProgramData\Norton
O43 - CFD: 05/03/2013 - 04:24:14 - [39,771] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 05/01/2013 - 19:43:37 - [0,002] ----D C:\ProgramData\OEM
O43 - CFD: 03/08/2012 - 13:25:02 - [617,904] ----D C:\ProgramData\Packard Bell
O43 - CFD: 08/03/2013 - 15:43:49 - [0] ----D C:\ProgramData\PopCap Games
O43 - CFD: 08/01/2013 - 00:19:43 - [0,038] ----D C:\ProgramData\PRICache
O43 - CFD: 26/07/2012 - 09:52:44 - [0,001] ----D C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 26/07/2012 - 09:22:08 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 16/04/2013 - 05:09:00 - [0,356] ---AD C:\ProgramData\Temp
O43 - CFD: 26/07/2012 - 09:22:08 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 17/03/2013 - 13:37:19 - [4,671] ----D C:\ProgramData\TuneUp Software
O43 - CFD: 06/01/2013 - 02:32:25 - [30,829] ----D C:\ProgramData\Wild Tangent
O43 - CFD: 05/03/2013 - 04:33:08 - [0,521] ----D C:\ProgramData\WildTangent
O43 - CFD: 18/03/2013 - 16:53:31 - [0] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
O43 - CFD: 05/01/2013 - 19:43:36 - [2,637] ----D C:\Users\litzenbourger\AppData\Roaming\Adobe
O43 - CFD: 28/01/2013 - 21:23:21 - [0] R---D C:\Users\litzenbourger\AppData\Roaming\Brother
O43 - CFD: 13/03/2013 - 21:56:57 - [0,014] ----D C:\Users\litzenbourger\AppData\Roaming\CRMixiDJTB
O43 - CFD: 22/03/2013 - 13:56:29 - [0] ----D C:\Users\litzenbourger\AppData\Roaming\HoolappForAndroid
O43 - CFD: 07/01/2013 - 02:08:11 - [0] ----D C:\Users\litzenbourger\AppData\Roaming\Identities
O43 - CFD: 05/01/2013 - 19:42:56 - [0,271] ----D C:\Users\litzenbourger\AppData\Roaming\lm
O43 - CFD: 06/01/2013 - 00:06:25 - [0,001] ----D C:\Users\litzenbourger\AppData\Roaming\Macromedia
O43 - CFD: 30/03/2013 - 22:22:32 - [0,006] ----D C:\Users\litzenbourger\AppData\Roaming\Malwarebytes
O43 - CFD: 17/04/2013 - 16:34:42 - [11,674] -S--D C:\Users\litzenbourger\AppData\Roaming\Microsoft
O43 - CFD: 07/01/2013 - 22:07:34 - [25,446] ----D C:\Users\litzenbourger\AppData\Roaming\Mozilla
O43 - CFD: 03/03/2013 - 01:59:52 - [0,001] ----D C:\Users\litzenbourger\AppData\Roaming\Mud Puddle Games
O43 - CFD: 22/03/2013 - 13:56:20 - [0,211] ----D C:\Users\litzenbourger\AppData\Roaming\OnlineVault
O43 - CFD: 28/01/2013 - 16:06:07 - [12,672] ----D C:\Users\litzenbourger\AppData\Roaming\OpenOffice.org
O43 - CFD: 14/03/2013 - 22:24:33 - [0] ----D C:\Users\litzenbourger\AppData\Roaming\PC Speed Maximizer
O43 - CFD: 22/03/2013 - 14:17:35 - [0,001] ----D C:\Users\litzenbourger\AppData\Roaming\PhotoFiltre
O43 - CFD: 23/03/2013 - 14:50:33 - [0,056] ----D C:\Users\litzenbourger\AppData\Roaming\PlusWinks
O43 - CFD: 28/01/2013 - 20:03:48 - [0,000] ----D C:\Users\litzenbourger\AppData\Roaming\Reallusion
O43 - CFD: 04/03/2013 - 15:57:38 - [0,020] ----D C:\Users\litzenbourger\AppData\Roaming\Realore_Whiterra Roads Of Rome 3
O43 - CFD: 05/03/2013 - 04:31:48 - [0] ----D C:\Users\litzenbourger\AppData\Roaming\Systweak
O43 - CFD: 17/03/2013 - 13:37:19 - [0,053] ----D C:\Users\litzenbourger\AppData\Roaming\TuneUp Software
O43 - CFD: 31/03/2013 - 03:10:28 - [2,534] ----D C:\Users\litzenbourger\AppData\Roaming\uTorrent
O43 - CFD: 05/03/2013 - 04:33:08 - [0,001] ----D C:\Users\litzenbourger\AppData\Roaming\WildTangent
O43 - CFD: 13/01/2013 - 01:11:59 - [78,507] ----D C:\Users\litzenbourger\AppData\Local\7Wonders Vista
O43 - CFD: 05/01/2013 - 19:42:00 - [0] ----D C:\Users\litzenbourger\AppData\Local\Application Data
O43 - CFD: 09/04/2013 - 07:12:48 - [4,212] ----D C:\Users\litzenbourger\AppData\Local\CrashDumps
O43 - CFD: 17/03/2013 - 13:35:03 - [2,556] ----D C:\Users\litzenbourger\AppData\Local\CRE
O43 - CFD: 16/04/2013 - 03:52:29 - [0,769] ----D C:\Users\litzenbourger\AppData\Local\Diagnostics
O43 - CFD: 18/03/2013 - 16:53:31 - [0] ----D C:\Users\litzenbourger\AppData\Local\Downloaded Installations
O43 - CFD: 16/04/2013 - 03:52:31 - [0,061] ----D C:\Users\litzenbourger\AppData\Local\ElevatedDiagnostics
O43 - CFD: 22/03/2013 - 13:49:36 - [513,827] ----D C:\Users\litzenbourger\AppData\Local\Google
O43 - CFD: 05/01/2013 - 19:42:00 - [0] ----D C:\Users\litzenbourger\AppData\Local\Historique
O43 - CFD: 29/01/2013 - 09:07:51 - [0] ----D C:\Users\litzenbourger\AppData\Local\Macromedia
O43 - CFD: 22/03/2013 - 13:49:41 - [216,043] ----D C:\Users\litzenbourger\AppData\Local\Microsoft
O43 - CFD: 16/01/2013 - 21:51:23 - [0] ----D C:\Users\litzenbourger\AppData\Local\Microsoft Help
O43 - CFD: 07/01/2013 - 22:06:47 - [15,356] ----D C:\Users\litzenbourger\AppData\Local\Mozilla
O43 - CFD: 22/03/2013 - 13:52:16 - [228,802] ----D C:\Users\litzenbourger\AppData\Local\Packages
O43 - CFD: 12/03/2013 - 15:55:16 - [0] ----D C:\Users\litzenbourger\AppData\Local\Programs
O43 - CFD: 18/04/2013 - 14:55:12 - [49,304] ----D C:\Users\litzenbourger\AppData\Local\Temp
O43 - CFD: 05/01/2013 - 19:42:00 - [0] ----D C:\Users\litzenbourger\AppData\Local\Temporary Internet Files
O43 - CFD: 13/03/2013 - 21:05:24 - [0,014] ----D C:\Users\litzenbourger\AppData\Local\Tiger Savings
O43 - CFD: 18/03/2013 - 17:58:17 - [0,111] ----D C:\Users\litzenbourger\AppData\Local\VirtualStore
O43 - CFD: 07/01/2013 - 04:36:56 - [62,195] ----D C:\Users\litzenbourger\AppData\Local\Wild Tangent
O43 - CFD: 26/07/2012 - 10:13:00 - [0,004] R---D C:\Users\litzenbourger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 26/07/2012 - 10:13:00 - [0,001] R---D C:\Users\litzenbourger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 16/04/2013 - 04:01:48 - [0,000] R---D C:\Users\litzenbourger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 16/01/2013 - 22:13:32 - [0] ----D C:\Users\litzenbourger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 15/03/2013 - 10:12:56 - [0] ----D C:\Users\litzenbourger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
O43 - CFD: 22/03/2013 - 13:56:28 - [0] ----D C:\Users\litzenbourger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hoolapp for Android
O43 - CFD: 26/07/2012 - 10:13:00 - [0,000] ----D C:\Users\litzenbourger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 24/01/2013 - 02:50:23 - [0,001] ----D C:\Users\litzenbourger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
O43 - CFD: 28/01/2013 - 16:03:45 - [0] ----D C:\Users\litzenbourger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre
O43 - CFD: 06/04/2013 - 21:21:40 - [0,004] ----D C:\Users\litzenbourger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Plantes contre Zombies
O43 - CFD: 16/04/2013 - 04:01:48 - [0,002] R---D C:\Users\litzenbourger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 26/07/2012 - 10:13:00 - [0,005] R---D C:\Users\litzenbourger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
~ Program Folder: 147 Scanned in 00mn 01s



---\\ Derniers fichiers modifi�s ou cr�es sous Windows et System32 (O44)
O44 - LFC:[MD5.FD2E6B050F12D4E29923BCF9335C5603] - 18/04/2013 - 13:56:34 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1373660]
O44 - LFC:[MD5.634F880CA03AA9C669C40F1E9DB4D312] - 17/04/2013 - 15:53:48 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [132614]
O44 - LFC:[MD5.2F5E18316BDA23B09A76A5F093C9E6C7] - 17/04/2013 - 15:53:48 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [155650]
O44 - LFC:[MD5.3751F9E3E20CD47AB029FEFEA2331BCE] - 17/04/2013 - 15:53:48 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [710244]
O44 - LFC:[MD5.F6EE9B5E0A347C50386E7C13DA6A80DE] - 17/04/2013 - 15:53:48 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [800978]
O44 - LFC:[MD5.634F880CA03AA9C669C40F1E9DB4D312] - 17/04/2013 - 15:53:48 RSHAD . (...) -- C:\Windows\System32\perfc009.dat [132614]
O44 - LFC:[MD5.2F5E18316BDA23B09A76A5F093C9E6C7] - 17/04/2013 - 15:53:48 RSHAD . (...) -- C:\Windows\System32\perfc00C.dat [155650]
O44 - LFC:[MD5.3751F9E3E20CD47AB029FEFEA2331BCE] - 17/04/2013 - 15:53:48 RSHAD . (...) -- C:\Windows\System32\perfh009.dat [710244]
O44 - LFC:[MD5.F6EE9B5E0A347C50386E7C13DA6A80DE] - 17/04/2013 - 15:53:48 RSHAD . (...) -- C:\Windows\System32\perfh00C.dat [800978]
O44 - LFC:[MD5.7F951215DBC953DAA9E41859332D8F0F] - 17/04/2013 - 15:53:47 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1793362]
O44 - LFC:[MD5.7F951215DBC953DAA9E41859332D8F0F] - 17/04/2013 - 15:53:47 RSHAD . (...) -- C:\Windows\System32\PerfStringBackup.INI [1793362]
O44 - LFC:[MD5.DF1C4761BA072FD7280ADA94FA484439] - 16/04/2013 - 03:01:46 ---A- . (...) -- C:\Windows\SysNative\results.xml [15820]
O44 - LFC:[MD5.DF1C4761BA072FD7280ADA94FA484439] - 16/04/2013 - 03:01:46 RSHAD . (...) -- C:\Windows\System32\results.xml [15820]
O44 - LFC:[MD5.E997A39FD83EC81210229D25FCD15FF2] - 16/04/2013 - 02:58:40 ---A- . (...) -- C:\Windows\DPINST.LOG [4892]
O44 - LFC:[MD5.BA574700B3E568CBEEC1B25533676E3E] - 16/04/2013 - 02:57:37 ---A- . (...) -- C:\Windows\setupact.log [812]
O44 - LFC:[MD5.4E8D5177B439872F7AE6DAB7B6859B6B] - 16/04/2013 - 02:55:50 RSHAD . (.ELAN Microelectronics Corp. - ETD Kernel Center.) -- C:\Windows\System32\Drivers\ETD.sys [328592]
O44 - LFC:[MD5.C6740C5787BE0AA0EF73C798B05E77DB] - 16/04/2013 - 02:50:12 ---A- . (...) -- C:\Windows\SysNative\iglhxs64.vp [17058]
O44 - LFC:[MD5.9D808AF03F2128D06F105DB3B2111492] - 16/04/2013 - 02:50:12 ---A- . (.Intel Corporation - Intel(R) Graphics Media Accelerator Driver.) -- C:\Windows\SysNative\igfxCoIn_v2867.dll [116224]
O44 - LFC:[MD5.C29BBD921B6A33153C9F0CB7934E9DE3] - 16/04/2013 - 02:50:12 ---A- . (.Intel Corporation - igfxTMM Module.) -- C:\Windows\SysNative\igfxTMM.dll [410624]
O44 - LFC:[MD5.483BAA4246B80BDE1EA562C618BBA4A1] - 16/04/2013 - 02:50:12 ---A- . (.Intel Corporation - igfxTray Module.) -- C:\Windows\SysNative\igfxtray.exe [171040]
O44 - LFC:[MD5.B9CE485FC3BE2936F0C0D9F79F0A6BFB] - 16/04/2013 - 02:50:12 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrtha.lrc [437248]
O44 - LFC:[MD5.D756CE7EA935949DE55E450F54E33F08] - 16/04/2013 - 02:50:12 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrtrk.lrc [437760]
O44 - LFC:[MD5.4BC67DC2BB58DC6E2A6BCB9B4450B0B8] - 16/04/2013 - 02:50:12 ---A- . (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\SysNative\igfxsrvc.dll [63488]
O44 - LFC:[MD5.FF3FC4BE04D01830799605B6F7B55DB0] - 16/04/2013 - 02:50:12 ---A- . (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\SysNative\igfxsrvc.exe [509984]
O44 - LFC:[MD5.C6740C5787BE0AA0EF73C798B05E77DB] - 16/04/2013 - 02:50:12 RSHAD . (...) -- C:\Windows\System32\iglhxs64.vp [17058]
O44 - LFC:[MD5.9D808AF03F2128D06F105DB3B2111492] - 16/04/2013 - 02:50:12 RSHAD . (.Intel Corporation - Intel(R) Graphics Media Accelerator Driver.) -- C:\Windows\System32\igfxCoIn_v2867.dll [116224]
O44 - LFC:[MD5.C29BBD921B6A33153C9F0CB7934E9DE3] - 16/04/2013 - 02:50:12 RSHAD . (.Intel Corporation - igfxTMM Module.) -- C:\Windows\System32\igfxTMM.dll [410624]
O44 - LFC:[MD5.483BAA4246B80BDE1EA562C618BBA4A1] - 16/04/2013 - 02:50:12 RSHAD . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [171040]
O44 - LFC:[MD5.B9CE485FC3BE2936F0C0D9F79F0A6BFB] - 16/04/2013 - 02:50:12 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrtha.lrc [437248]
O44 - LFC:[MD5.D756CE7EA935949DE55E450F54E33F08] - 16/04/2013 - 02:50:12 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrtrk.lrc [437760]
O44 - LFC:[MD5.4BC67DC2BB58DC6E2A6BCB9B4450B0B8] - 16/04/2013 - 02:50:12 RSHAD . (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\System32\igfxsrvc.dll [63488]
O44 - LFC:[MD5.FF3FC4BE04D01830799605B6F7B55DB0] - 16/04/2013 - 02:50:12 RSHAD . (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\System32\igfxsrvc.exe [509984]
O44 - LFC:[MD5.4EF23173A4A8696498CC3ECD5224D95B] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrfin.lrc [438272]
O44 - LFC:[MD5.762848AE5EADE9A86CBD40F65CDCCBE3] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrfra.lrc [439808]
O44 - LFC:[MD5.5FBA60062FD7146B36C2A9636FE136F1] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrheb.lrc [435712]
O44 - LFC:[MD5.03F7934BB55134586175C8E8401D5082] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrhrv.lrc [438784]
O44 - LFC:[MD5.97A188A1542354A8605EB4E7EC52224C] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrhun.lrc [438272]
O44 - LFC:[MD5.8792A0B70DD00EC0692BEAC30F8FFA1B] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrita.lrc [438784]
O44 - LFC:[MD5.2DA337465D3CA373BAB7F6439EBCE6C7] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrjpn.lrc [432128]
O44 - LFC:[MD5.BA244CFE6B0257AB4B4498D8C068EEF1] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrkor.lrc [431104]
O44 - LFC:[MD5.08724776594B2F554D50D5D7792A2617] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrnld.lrc [438784]
O44 - LFC:[MD5.8C6513C0DBADCEFD92A9999C5FAAA2E4] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrnor.lrc [437760]
O44 - LFC:[MD5.B550472F308CF3E38A841ABE142EF819] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrplk.lrc [438784]
O44 - LFC:[MD5.D7CA470ACBAE09E508DB899B601193B8] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrptb.lrc [437760]
O44 - LFC:[MD5.C02837CFF99D54F2C21F082CB05D3727] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrptg.lrc [438784]
O44 - LFC:[MD5.E8ED9CB221E72843546FEEE839D3E8E5] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrrom.lrc [439296]
O44 - LFC:[MD5.C59F9DDA1C49FF9BDEBF6E49BC476E87] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrrus.lrc [439296]
O44 - LFC:[MD5.4FB79C7F1D38008CA524829BD6D1E1FC] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrsky.lrc [438784]
O44 - LFC:[MD5.7BB87B812F9D46B83AB827352F9A3F9B] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrslv.lrc [437760]
O44 - LFC:[MD5.389388AFB344C4669D468131BCE4FA50] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrsve.lrc [437760]
O44 - LFC:[MD5.DD599A4E9F018EDD646A3060B99092CB] - 16/04/2013 - 02:50:11 ---A- . (.Intel Corporation - igfxress Module.) -- C:\Windows\SysNative\igfxress.dll [9007616]
O44 - LFC:[MD5.4EF23173A4A8696498CC3ECD5224D95B] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrfin.lrc [438272]
O44 - LFC:[MD5.762848AE5EADE9A86CBD40F65CDCCBE3] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrfra.lrc [439808]
O44 - LFC:[MD5.5FBA60062FD7146B36C2A9636FE136F1] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrheb.lrc [435712]
O44 - LFC:[MD5.03F7934BB55134586175C8E8401D5082] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrhrv.lrc [438784]
O44 - LFC:[MD5.97A188A1542354A8605EB4E7EC52224C] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrhun.lrc [438272]
O44 - LFC:[MD5.8792A0B70DD00EC0692BEAC30F8FFA1B] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrita.lrc [438784]
O44 - LFC:[MD5.2DA337465D3CA373BAB7F6439EBCE6C7] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrjpn.lrc [432128]
O44 - LFC:[MD5.BA244CFE6B0257AB4B4498D8C068EEF1] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrkor.lrc [431104]
O44 - LFC:[MD5.08724776594B2F554D50D5D7792A2617] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrnld.lrc [438784]
O44 - LFC:[MD5.8C6513C0DBADCEFD92A9999C5FAAA2E4] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrnor.lrc [437760]
O44 - LFC:[MD5.B550472F308CF3E38A841ABE142EF819] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrplk.lrc [438784]
O44 - LFC:[MD5.D7CA470ACBAE09E508DB899B601193B8] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrptb.lrc [437760]
O44 - LFC:[MD5.C02837CFF99D54F2C21F082CB05D3727] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrptg.lrc [438784]
O44 - LFC:[MD5.E8ED9CB221E72843546FEEE839D3E8E5] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrrom.lrc [439296]
O44 - LFC:[MD5.C59F9DDA1C49FF9BDEBF6E49BC476E87] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrrus.lrc [439296]
O44 - LFC:[MD5.4FB79C7F1D38008CA524829BD6D1E1FC] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrsky.lrc [438784]
O44 - LFC:[MD5.7BB87B812F9D46B83AB827352F9A3F9B] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrslv.lrc [437760]
O44 - LFC:[MD5.389388AFB344C4669D468131BCE4FA50] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrsve.lrc [437760]
O44 - LFC:[MD5.DD599A4E9F018EDD646A3060B99092CB] - 16/04/2013 - 02:50:11 RSHAD . (.Intel Corporation - igfxress Module.) -- C:\Windows\System32\igfxress.dll [9007616]
O44 - LFC:[MD5.809AF6BE77627260D2CC2FD0E8B01662] - 16/04/2013 - 02:50:10 ---A- . (...) -- C:\Windows\SysNative\IGFXDEVLib.dll [9728]
O44 - LFC:[MD5.2A4388209A68545BD01E8DB27135A97A] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxcpl Module.) -- C:\Windows\SysNative\igfxcpl.cpl [126976]
O44 - LFC:[MD5.A3C74AB32273776E077E6C98BAC97E44] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxdev Module.) -- C:\Windows\SysNative\igfxdev.dll [441856]
O44 - LFC:[MD5.DA106090C5884A36FA0BADD647DEAA55] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxdo Module.) -- C:\Windows\SysNative\igfxdo.dll [142336]
O44 - LFC:[MD5.1D8C97EA71A8124D1DA1C0B0DAE7FE7D] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxext Module.) -- C:\Windows\SysNative\igfxexps.dll [28672]
O44 - LFC:[MD5.8A6909152203FE482EDDD269E8E203BC] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxext Module.) -- C:\Windows\SysNative\igfxext.exe [252448]
O44 - LFC:[MD5.3AC8E9252E48D0AD680962717846987C] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxpph Module.) -- C:\Windows\SysNative\igfxpph.dll [386048]
O44 - LFC:[MD5.EDF17D03C07B43C60FA58B1D079680CD] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrara.lrc [435712]
O44 - LFC:[MD5.D5159D4FE9431BA8A161B10342AC2FB1] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrchs.lrc [428544]
O44 - LFC:[MD5.3F31FD53902A0D4CBE049239BA3C106B] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrcht.lrc [429056]
O44 - LFC:[MD5.67A81407E41739C1298C8D31B8CFC21D] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrcsy.lrc [438272]
O44 - LFC:[MD5.A5F5473E4CA6CA5686448AF2CA6DE050] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrdan.lrc [437248]
O44 - LFC:[MD5.8149539FABEF4B00AACAC77C6F040C05] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrdeu.lrc [438784]
O44 - LFC:[MD5.5604F1DDAEC994DD08E1A323C2745A04] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrell.lrc [440320]
O44 - LFC:[MD5.EAF8AE414501EFE47BAF02E673EEE350] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxrenu.lrc [286208]
O44 - LFC:[MD5.B7C282AC3185AA2A119AC6709D5ABED7] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - igfxres Module.) -- C:\Windows\SysNative\igfxresn.lrc [439808]
O44 - LFC:[MD5.C88B01661694F2013F8DF1BD66B8B39E] - 16/04/2013 - 02:50:10 ---A- . (.Intel Corporation - persistence Module.) -- C:\Windows\SysNative\igfxpers.exe [441888]
O44 - LFC:[MD5.809AF6BE77627260D2CC2FD0E8B01662] - 16/04/2013 - 02:50:10 RSHAD . (...) -- C:\Windows\System32\IGFXDEVLib.dll [9728]
O44 - LFC:[MD5.2A4388209A68545BD01E8DB27135A97A] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxcpl Module.) -- C:\Windows\System32\igfxcpl.cpl [126976]
O44 - LFC:[MD5.A3C74AB32273776E077E6C98BAC97E44] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll [441856]
O44 - LFC:[MD5.DA106090C5884A36FA0BADD647DEAA55] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxdo Module.) -- C:\Windows\System32\igfxdo.dll [142336]
O44 - LFC:[MD5.1D8C97EA71A8124D1DA1C0B0DAE7FE7D] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxext Module.) -- C:\Windows\System32\igfxexps.dll [28672]
O44 - LFC:[MD5.8A6909152203FE482EDDD269E8E203BC] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxext Module.) -- C:\Windows\System32\igfxext.exe [252448]
O44 - LFC:[MD5.3AC8E9252E48D0AD680962717846987C] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxpph Module.) -- C:\Windows\System32\igfxpph.dll [386048]
O44 - LFC:[MD5.EDF17D03C07B43C60FA58B1D079680CD] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrara.lrc [435712]
O44 - LFC:[MD5.D5159D4FE9431BA8A161B10342AC2FB1] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrchs.lrc [428544]
O44 - LFC:[MD5.3F31FD53902A0D4CBE049239BA3C106B] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrcht.lrc [429056]
O44 - LFC:[MD5.67A81407E41739C1298C8D31B8CFC21D] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrcsy.lrc [438272]
O44 - LFC:[MD5.A5F5473E4CA6CA5686448AF2CA6DE050] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrdan.lrc [437248]
O44 - LFC:[MD5.8149539FABEF4B00AACAC77C6F040C05] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrdeu.lrc [438784]
O44 - LFC:[MD5.5604F1DDAEC994DD08E1A323C2745A04] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrell.lrc [440320]
O44 - LFC:[MD5.EAF8AE414501EFE47BAF02E673EEE350] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxrenu.lrc [286208]
O44 - LFC:[MD5.B7C282AC3185AA2A119AC6709D5ABED7] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - igfxres Module.) -- C:\Windows\System32\igfxresn.lrc [439808]
O44 - LFC:[MD5.C88B01661694F2013F8DF1BD66B8B39E] - 16/04/2013 - 02:50:10 RSHAD . (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [441888]
O44 - LFC:[MD5.FAC8EC602E5C5C4D41BAB6255F2ECF5E] - 16/04/2013 - 02:50:09 ---A- . (.Intel Corporation - LDDM User Mode Driver for Intel(R) Graphics.) -- C:\Windows\SysNative\igdumd64.dll [12604416]
O44 - LFC:[MD5.FAC8EC602E5C5C4D41BAB6255F2ECF5E] - 16/04/2013 - 02:50:09 RSHAD . (.Intel Corporation - LDDM User Mode Driver for Intel(R) Graphics.) -- C:\Windows\System32\igdumd64.dll [12604416]
O44 - LFC:[MD5.A1CF07D24EDCDC6870535471654D957C] - 16/04/2013 - 02:50:07 RSHAD . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\Drivers\igdkmd64.sys [5343584]
O44 - LFC:[MD5.B31A78D5150502B4FFC1FA0AE0B6BAD1] - 16/04/2013 - 02:50:04 ---A- . (...) -- C:\Windows\SysNative\igdde64.dll [80384]
O44 - LFC:[MD5.B31A78D5150502B4FFC1FA0AE0B6BAD1] - 16/04/2013 - 02:50:04 RSHAD . (...) -- C:\Windows\System32\igdde64.dll [80384]
O44 - LFC:[MD5.EFA67664E181EAF2DEA190EE71C0C9AB] - 16/04/2013 - 02:50:03 ---A- . (.Intel Corporation - LDDM User Mode Driver for Intel(R) Graphics.) -- C:\Windows\SysNative\igd10umd64.dll [12836864]
O44 - LFC:[MD5.EFA67664E181EAF2DEA190EE71C0C9AB] - 16/04/2013 - 02:50:03 RSHAD . (.Intel Corporation - LDDM User Mode Driver for Intel(R) Graphics.) -- C:\Windows\System32\igd10umd64.dll [12836864]
O44 - LFC:[MD5.C916D55684C349B568DB5FD4D9B5A004] - 16/04/2013 - 02:50:02 ---A- . (...) -- C:\Windows\SysNative\igcodeckrng600.bin [963452]
O44 - LFC:[MD5.C916D55684C349B568DB5FD4D9B5A004] - 16/04/2013 - 02:50:02 ---A- . (...) -- C:\Windows\System32\igcodeckrng600.bin [963452]
O44 - LFC:[MD5.82E64F8A695EFBE2C45BD8449F77B463] - 16/04/2013 - 02:50:00 ---A- . (.Intel Corporation - OpenGL(R) Driver for Intel(R) Graphics Acce.) -- C:\Windows\SysNative\ig4icd64.dll [12887040]
O44 - LFC:[MD5.82E64F8A695EFBE2C45BD8449F77B463] - 16/04/2013 - 02:50:00 RSHAD . (.Intel Corporation - OpenGL(R) Driver for Intel(R) Graphics Acce.) -- C:\Windows\System32\ig4icd64.dll [12887040]
O44 - LFC:[MD5.BB85F19B427924B1EFD69EF08811E586] - 16/04/2013 - 02:49:59 ---A- . (...) -- C:\Windows\SysNative\GfxUI.exe.config [259]
O44 - LFC:[MD5.4D5235B076E7FFC53193D02C374BB54A] - 16/04/2013 - 02:49:59 ---A- . (.Intel Corporation - GfxUI.) -- C:\Windows\SysNative\GfxUI.exe [5903392]
O44 - LFC:[MD5.2A9EF6CD0489FC6D1F4F7CF9FB237276] - 16/04/2013 - 02:49:59 ---A- . (.Intel Corporation - Pas de description.) -- C:\Windows\SysNative\gfxSrvc.dll [173568]
O44 - LFC:[MD5.F1288E4CE82EE9F3A00E164BDFA54130] - 16/04/2013 - 02:49:59 ---A- . (.Intel Corporation - hccutils Module.) -- C:\Windows\SysNative\hccutils.dll [110592]
O44 - LFC:[MD5.40CAEC9DBC892ED1915704CC54CB382E] - 16/04/2013 - 02:49:59 ---A- . (.Intel Corporation - hkcmd Module.) -- C:\Windows\SysNative\hkcmd.exe [399392]
O44 - LFC:[MD5.BB85F19B427924B1EFD69EF08811E586] - 16/04/2013 - 02:49:59 RSHAD . (...) -- C:\Windows\System32\GfxUI.exe.config [259]
O44 - LFC:[MD5.4D5235B076E7FFC53193D02C374BB54A] - 16/04/2013 - 02:49:59 RSHAD . (.Intel Corporation - GfxUI.) -- C:\Windows\System32\GfxUI.exe [5903392]
O44 - LFC:[MD5.2A9EF6CD0489FC6D1F4F7CF9FB237276] - 16/04/2013 - 02:49:59 RSHAD . (.Intel Corporation - Pas de description.) -- C:\Windows\System32\gfxSrvc.dll [173568]
O44 - LFC:[MD5.F1288E4CE82EE9F3A00E164BDFA54130] - 16/04/2013 - 02:49:59 RSHAD . (.Intel Corporation - hccutils Module.) -- C:\Windows\System32\hccutils.dll [110592]
O44 - LFC:[MD5.40CAEC9DBC892ED1915704CC54CB382E] - 16/04/2013 - 02:49:59 RSHAD . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [399392]
O44 - LFC:[MD5.DD8C619664E94EC2623459E0E106F9F2] - 16/04/2013 - 02:49:58 ---A- . (...) -- C:\Windows\SysNative\Gfxres.nb-NO.resources [137534]
O44 - LFC:[MD5.D989BC747C0CBE3AD51B00F670637D00] - 16/04/2013 - 02:49:58 ---A- . (...) -- C:\Windows\SysNative\Gfxres.ro-RO.resources [145715]
O44 - LFC:[MD5.53CFCAE83763F30266BD49FCDCABD798] - 16/04/2013 - 02:49:58 ---A- . (...) -- C:\Windows\SysNative\Gfxres.sk-SK.resources [141574]
O44 - LFC:[MD5.F6160AD6E68759DB0770594D87E9B4B4] - 16/04/2013 - 02:49:58 ---A- . (.Intel Corporation - 64 bit driver installer.) -- C:\Windows\SysNative\difx64.exe [185376]
O44 - LFC:[MD5.DD8C619664E94EC2623459E0E106F9F2] - 16/04/2013 - 02:49:58 RSHAD . (...) -- C:\Windows\System32\Gfxres.nb-NO.resources [137534]
O44 - LFC:[MD5.D989BC747C0CBE3AD51B00F670637D00] - 16/04/2013 - 02:49:58 RSHAD . (...) -- C:\Windows\System32\Gfxres.ro-RO.resources [145715]
O44 - LFC:[MD5.53CFCAE83763F30266BD49FCDCABD798] - 16/04/2013 - 02:49:58 RSHAD . (...) -- C:\Windows\System32\Gfxres.sk-SK.resources [141574]
O44 - LFC:[MD5.F6160AD6E68759DB0770594D87E9B4B4] - 16/04/2013 - 02:49:58 RSHAD . (.Intel Corporation - 64 bit driver installer.) -- C:\Windows\System32\difx64.exe [185376]
O44 - LFC:[MD5.78543C48D98EF201F8604EDB21BC7E0D] - 15/04/2013 - 13:42:34 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [353376]
O44 - LFC:[MD5.78543C48D98EF201F8604EDB21BC7E0D] - 15/04/2013 - 13:42:34 RSHAD . (...) -- C:\Windows\System32\FNTCACHE.DAT [353376]
O44 - LFC:[MD5.79F95469604B77296346DE7DB463EA2A] - 14/04/2013 - 18:33:45 ---A- . (.Microsoft Corporation - Agent de mise � jour automatique Windows Up.) -- C:\Windows\SysNative\wuaueng.dll [3240448]
O44 - LFC:[MD5.79F95469604B77296346DE7DB463EA2A] - 14/04/2013 - 18:33:45 RSHAD . (.Microsoft Corporation - Agent de mise � jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [3240448]
O44 - LFC:[MD5.F162757540A3307AF777C056544AE871] - 14/04/2013 - 18:33:42 ---A- . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\SysNative\shell32.dll [19748864]
O44 - LFC:[MD5.F162757540A3307AF777C056544AE871] - 14/04/2013 - 18:33:42 ---A- . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll [19748864]
O44 - LFC:[MD5.5DF7FCCCCC71E230883DC30AF3FE0203] - 14/04/2013 - 18:33:39 ---A- . (.Microsoft Corporation - Software Protection Platform Plugins.) -- C:\Windows\SysNative\sppobjs.dll [1161728]
O44 - LFC:[MD5.5DF7FCCCCC71E230883DC30AF3FE0203] - 14/04/2013 - 18:33:39 RSHAD . (.Microsoft Corporation - Software Protection Platform Plugins.) -- C:\Windows\System32\sppobjs.dll [1161728]
O44 - LFC:[MD5.B6D52E2C38B49A156E58FF5B9C6CA8BE] - 14/04/2013 - 18:33:32 RSHAD . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\Windows\System32\Drivers\tcpip.sys [2231528]
O44 - LFC:[MD5.6587EB86E32C49AC726817220390CFFE] - 14/04/2013 - 18:33:31 ---A- . (.Microsoft Corporation - Microsoft Windows Codecs Library.) -- C:\Windows\SysNative\WindowsCodecs.dll [1627648]
O44 - LFC:[MD5.6587EB86E32C49AC726817220390CFFE] - 14/04/2013 - 18:33:31 ---A- . (.Microsoft Corporation - Microsoft Windows Codecs Library.) -- C:\Windows\System32\WindowsCodecs.dll [1627648]
O44 - LFC:[MD5.3D1E4E187270B03BA28F8CF0C7C66C22] - 14/04/2013 - 18:33:29 ---A- . (.Microsoft Corporation - TWINUI.) -- C:\Windows\SysNative\twinui.dll [10116608]
O44 - LFC:[MD5.3D1E4E187270B03BA28F8CF0C7C66C22] - 14/04/2013 - 18:33:29 ---A- . (.Microsoft Corporation - TWINUI.) -- C:\Windows\System32\twinui.dll [10116608]
O44 - LFC:[MD5.0E8924B51839B0CC8AB4B9C456220683] - 14/04/2013 - 18:33:21 ---A- . (.Microsoft Corporation - Media Foundation ASF Source and Sink DLL.) -- C:\Windows\SysNative\mfasfsrcsnk.dll [1048576]
O44 - LFC:[MD5.0E8924B51839B0CC8AB4B9C456220683] - 14/04/2013 - 18:33:21 ---A- . (.Microsoft Corporation - Media Foundation ASF Source and Sink DLL.) -- C:\Windows\System32\mfasfsrcsnk.dll [1048576]
O44 - LFC:[MD5.C911D9E6BDE318D513D9168F947E1800] - 14/04/2013 - 18:33:19 ---A- . (.Microsoft Corporation - DLL du Gestionnaire de processus d�arri�re-.) -- C:\Windows\SysNative\ubpm.dll [328192]
O44 - LFC:[MD5.C911D9E6BDE318D513D9168F947E1800] - 14/04/2013 - 18:33:19 ---A- . (.Microsoft Corporation - DLL du Gestionnaire de processus d�arri�re-.) -- C:\Windows\System32\ubpm.dll [328192]
O44 - LFC:[MD5.01344DD46C95BC2A478B52AF07336F4A] - 14/04/2013 - 18:33:18 ---A- . (.Microsoft Corporation - Client ActiveX des services Bureau � distan.) -- C:\Windows\SysNative\mstscax.dll [5978624]
O44 - LFC:[MD5.01344DD46C95BC2A478B52AF07336F4A] - 14/04/2013 - 18:33:18 ---A- . (.Microsoft Corporation - Client ActiveX des services Bureau � distan.) -- C:\Windows\System32\mstscax.dll [5978624]
O44 - LFC:[MD5.C7E0C8B888B034D1A66840A5E34D61FC] - 14/04/2013 - 18:33:16 ---A- . (.Microsoft Corporation - BCP47 Language Classes.) -- C:\Windows\SysNative\BCP47Langs.dll [389120]
O44 - LFC:[MD5.C7E0C8B888B034D1A66840A5E34D61FC] - 14/04/2013 - 18:33:16 ---A- . (.Microsoft Corporation - BCP47 Language Classes.) -- C:\Windows\System32\BCP47Langs.dll [389120]
O44 - LFC:[MD5.110B70302AC6EC29FE013C5BB99BA559] - 14/04/2013 - 18:33:16 ---A- . (.Microsoft Corporation - WMPMDE DLL.) -- C:\Windows\SysNative\wmpmde.dll [1101824]
O44 - LFC:[MD5.9531E7D938912F315F8161B5DA5DAD13] - 14/04/2013 - 18:33:16 RSHAD . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\Windows\System32\Drivers\Classpnp.sys [327912]
O44 - LFC:[MD5.110B70302AC6EC29FE013C5BB99BA559] - 14/04/2013 - 18:33:16 RSHAD . (.Microsoft Corporation - WMPMDE DLL.) -- C:\Windows\System32\wmpmde.dll [1101824]
O44 - LFC:[MD5.D608E0955BF3623B54CFA1A90FCA59FD] - 14/04/2013 - 18:33:14 ---A- . (.Microsoft Corporation - WinMDE DLL.) -- C:\Windows\SysNative\winmde.dll [1149952]
O44 - LFC:[MD5.D608E0955BF3623B54CFA1A90FCA59FD] - 14/04/2013 - 18:33:14 ---A- . (.Microsoft Corporation - WinMDE DLL.) -- C:\Windows\System32\winmde.dll [1149952]
O44 - LFC:[MD5.76E6465F3153FCA20F07928BBA62D7B8] - 14/04/2013 - 18:33:14 ---A- . (.Microsoft Corporation - Windows Globalization.) -- C:\Windows\SysNative\Windows.Globalization.dll [951808]
O44 - LFC:[MD5.76E6465F3153FCA20F07928BBA62D7B8] - 14/04/2013 - 18:33:14 ---A- . (.Microsoft Corporation - Windows Globalization.) -- C:\Windows\System32\Windows.Globalization.dll [951808]
O44 - LFC:[MD5.C15FF2B4C82792230CD9742253C68CF1] - 14/04/2013 - 18:33:13 ---A- . (.Microsoft Corporation - API du client Windows Update.) -- C:\Windows\SysNative\wuapi.dll [760320]
O44 - LFC:[MD5.C15FF2B4C82792230CD9742253C68CF1] - 14/04/2013 - 18:33:13 ---A- . (.Microsoft Corporation - API du client Windows Update.) -- C:\Windows\System32\wuapi.dll [760320]
O44 - LFC:[MD5.D10587D957CFED8CC3B9B3D017C69003] - 14/04/2013 - 18:33:13 ---A- . (.Microsoft Corporation - Windows Runtime OnlineId Authentication DLL.) -- C:\Windows\SysNative\Windows.Security.Authentication.OnlineId.dll [645120]
O44 - LFC:[MD5.D10587D957CFED8CC3B9B3D017C69003] - 14/04/2013 - 18:33:13 ---A- . (.Microsoft Corporation - Windows Runtime OnlineId Authentication DLL.) -- C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll [645120]
O44 - LFC:[MD5.F8E1CA7D41BC44662D7F8936A9588201] - 14/04/2013 - 18:33:11 ---A- . (.Microsoft Corporation - Interface utilisateur d�authentification Wi.) -- C:\Windows\SysNative\authui.dll [2302464]
O44 - LFC:[MD5.F8E1CA7D41BC44662D7F8936A9588201] - 14/04/2013 - 18:33:11 ---A- . (.Microsoft Corporation - Interface utilisateur d�authentification Wi.) -- C:\Windows\System32\authui.dll [2302464]
O44 - LFC:[MD5.6FB88606C4A71E1BFAF97D63A676C673] - 14/04/2013 - 18:33:11 ---A- . (.Microsoft Corporation - Service Broker pour les �v�nements syst�me.) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll [180224]
O44 - LFC:[MD5.6FB88606C4A71E1BFAF97D63A676C673] - 14/04/2013 - 18:33:11 RSHAD . (.Microsoft Corporation - Service Broker pour les �v�nements syst�me.) -- C:\Windows\System32\SystemEventsBrokerServer.dll [180224]
O44 - LFC:[MD5.4515B9E4140F04FB3907692DF89FCA87] - 14/04/2013 - 18:33:10 ---A- . (.Microsoft Corporation - Service Broker pour les �v�nements horaires.) -- C:\Windows\SysNative\TimeBrokerServer.dll [171008]
O44 - LFC:[MD5.36E2B5A5AC7688FFB3270F57103507D2] - 14/04/2013 - 18:33:10 RSHAD . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) -- C:\Windows\System32\Drivers\FWPKCLNT.SYS [411880]
O44 - LFC:[MD5.091607B272C5E7BE2DCEF2D5463A407B] - 14/04/2013 - 18:33:10 RSHAD . (.Microsoft Corporation - Microsoft Storage Port Driver.) -- C:\Windows\System32\Drivers\storport.sys [332520]
O44 - LFC:[MD5.4515B9E4140F04FB3907692DF89FCA87] - 14/04/2013 - 18:33:10 RSHAD . (.Microsoft Corporation - Service Broker pour les �v�nements horaires.) -- C:\Windows\System32\TimeBrokerServer.dll [171008]
O44 - LFC:[MD5.D3CD3034E2292DBECCD3161DC29D8E07] - 14/04/2013 - 18:33:08 ---A- . (.Microsoft Corporation - Objets de configuration du r�seau.) -- C:\Windows\SysNative\netcfgx.dll [455168]
O44 - LFC:[MD5.D3CD3034E2292DBECCD3161DC29D8E07] - 14/04/2013 - 18:33:08 ---A- . (.Microsoft Corporation - Objets de configuration du r�seau.) -- C:\Windows\System32\netcfgx.dll [455168]
O44 - LFC:[MD5.116FBD7F3F98CB90680BCB5E5CBD0715] - 14/04/2013 - 18:33:08 ---A- . (.Microsoft Corporation - Synchronisation des param�tres.) -- C:\Windows\SysNative\SettingSync.dll [448512]
O44 - LFC:[MD5.116FBD7F3F98CB90680BCB5E5CBD0715] - 14/04/2013 - 18:33:08 ---A- . (.Microsoft Corporation - Synchronisation des param�tres.) -- C:\Windows\System32\SettingSync.dll [448512]
O44 - LFC:[MD5.BE611E28DD9AF75A6B904B55F5D6E6C3] - 14/04/2013 - 18:33:07 ---A- . (.Microsoft Corporation - DLL du moniteur de port d�impression dynami.) -- C:\Windows\SysNative\usbmon.dll [245248]
O44 - LFC:[MD5.3013658A4D327854BEEC4A08D9655194] - 14/04/2013 - 18:33:07 ---A- . (.Microsoft Corporation - �num�rateur d�appareil mobile.) -- C:\Windows\SysNative\wpdbusenum.dll [103936]
O44 - LFC:[MD5.BE611E28DD9AF75A6B904B55F5D6E6C3] - 14/04/2013 - 18:33:07 RSHAD . (.Microsoft Corporation - DLL du moniteur de port d�impression dynami.) -- C:\Windows\System32\usbmon.dll [245248]
O44 - LFC:[MD5.3013658A4D327854BEEC4A08D9655194] - 14/04/2013 - 18:33:07 RSHAD . (.Microsoft Corporation - �num�rateur d�appareil mobile.) -- C:\Windows\System32\wpdbusenum.dll [103936]
O44 - LFC:[MD5.5EE6D3195E6470DB22F480CCF5F5FF4A] - 14/04/2013 - 18:33:05 ---A- . (.Microsoft Corporation - ActiveX Interface Marshaling Library.) -- C:\Windows\SysNative\actxprxy.dll [2146304]
O44 - LFC:[MD5.5EE6D3195E6470DB22F480CCF5F5FF4A] - 14/04/2013 - 18:33:05 ---A- . (.Microsoft Corporation - ActiveX Interface Marshaling Library.) -- C:\Windows\System32\actxprxy.dll [2146304]
O44 - LFC:[MD5.500BE6B2E49883720D0AE8BB859ED7A3] - 14/04/2013 - 18:33:05 RSHAD . (.Microsoft Corporation - VHD Miniport Driver.) -- C:\Windows\System32\Drivers\vhdmp.sys [495336]
O44 - LFC:[MD5.A6B742C6B8CF9A37E0EF470DF890F74B] - 14/04/2013 - 18:33:04 ---A- . (.Microsoft Corporation - Driver Store API.) -- C:\Windows\SysNative\drvstore.dll [703488]
O44 - LFC:[MD5.A6B742C6B8CF9A37E0EF470DF890F74B] - 14/04/2013 - 18:33:04 ---A- . (.Microsoft Corporation - Driver Store API.) -- C:\Windows\System32\drvstore.dll [703488]
O44 - LFC:[MD5.3426BE7D0ED8888ACFE04BA6BB9AF83B] - 14/04/2013 - 18:33:02 ---A- . (.Microsoft Corporation - Processus h�te pour T�ches Windows.) -- C:\Windows\SysNative\taskhost.exe [77824]
O44 - LFC:[MD5.821D79C4602C5BF6C8183630D301638A] - 14/04/2013 - 18:33:02 ---A- . (.Microsoft Corporation - T�che d�analyse de l�int�grit� des donn�es.) -- C:\Windows\SysNative\discan.dll [150016]
O44 - LFC:[MD5.69A7C97D2FF3252039F18EB36B4AF76B] - 14/04/2013 - 18:33:02 ---A- . (.Microsoft Corporation - Windows Update client proxy stub.) -- C:\Windows\SysNative\wups.dll [43520]
O44 - LFC:[MD5.69A7C97D2FF3252039F18EB36B4AF76B] - 14/04/2013 - 18:33:02 ---A- . (.Microsoft Corporation - Windows Update client proxy stub.) -- C:\Windows\System32\wups.dll [43520]
O44 - LFC:[MD5.3426BE7D0ED8888ACFE04BA6BB9AF83B] - 14/04/2013 - 18:33:02 RSHAD . (.Microsoft Corporation - Processus h�te pour T�ches Windows.) -- C:\Windows\System32\taskhost.exe [77824]
O44 - LFC:[MD5.821D79C4602C5BF6C8183630D301638A] - 14/04/2013 - 18:33:02 RSHAD . (.Microsoft Corporation - T�che d�analyse de l�int�grit� des donn�es.) -- C:\Windows\System32\discan.dll [150016]
O44 - LFC:[MD5.739A739DCC5D02FE30EDEADEBD7B9898] - 14/04/2013 - 18:33:01 RSHAD . (.Microsoft Corporation - Storage Spaces Driver.) -- C:\Windows\System32\Drivers\spaceport.sys [283880]
O44 - LFC:[MD5.ED84544A18C02EE2DF436A94436168BA] - 14/04/2013 - 18:33:00 ---A- . (.Microsoft Corporation - Exp�rience utilisateur du client Windows Up.) -- C:\Windows\SysNative\wucltux.dll [1619968]
O44 - LFC:[MD5.25FD6AB608C7CFDEAAC24BA882AC4052] - 14/04/2013 - 18:33:00 ---A- . (.Microsoft Corporation - Ndis IM Platform MUX Notify Object.) -- C:\Windows\SysNative\NdisImPlatform.dll [117248]
O44 - LFC:[MD5.3C39BF7BBD73C3D862F5266D316D88D0] - 14/04/2013 - 18:33:00 ---A- . (.Microsoft Corporation - Windows Update.) -- C:\Windows\SysNative\wuauclt.exe [58288]
O44 - LFC:[MD5.ED84544A18C02EE2DF436A94436168BA] - 14/04/2013 - 18:33:00 RSHAD . (.Microsoft Corporation - Exp�rience utilisateur du client Windows Up.) -- C:\Windows\System32\wucltux.dll [1619968]
O44 - LFC:[MD5.B240874B2CA0CD02E8CD11E140B14C57] - 14/04/2013 - 18:33:00 RSHAD . (.Microsoft Corporation - MS AHCI Storport Miniport Driver.) -- C:\Windows\System32\Drivers\storahci.sys [77544]
O44 - LFC:[MD5.25FD6AB608C7CFDEAAC24BA882AC4052] - 14/04/2013 - 18:33:00 RSHAD . (.Microsoft Corporation - Ndis IM Platform MUX Notify Object.) -- C:\Windows\System32\NdisImPlatform.dll [117248]
O44 - LFC:[MD5.6F0BFF80EE2A5BC841286A51F893CBAD] - 14/04/2013 - 18:33:00 RSHAD . (.Microsoft Corporation - Pilote de p�riph�rique TPM.) -- C:\Windows\System32\Drivers\tpm.sys [148712]
O44 - LFC:[MD5.047315E75392CEA447ACC86257824C16] - 14/04/2013 - 18:33:00 RSHAD . (.Microsoft Corporation - Pilote du bus num�rique s�curis� (SD).) -- C:\Windows\System32\Drivers\sdbus.sys [194792]
O44 - LFC:[MD5.7D0570A2C678116523BB4932A6D71020] - 14/04/2013 - 18:33:00 RSHAD . (.Microsoft Corporation - SD Crashdump Port Driver.) -- C:\Windows\System32\Drivers\dumpsd.sys [125160]
O44 - LFC:[MD5.11C0CF143D246E2F0E9BDBF17A0CC70B] - 14/04/2013 - 18:33:00 RSHAD . (.Microsoft Corporation - USB XHCI Driver.) -- C:\Windows\System32\Drivers\USBXHCI.SYS [337128]
O44 - LFC:[MD5.3C39BF7BBD73C3D862F5266D316D88D0] - 14/04/2013 - 18:33:00 RSHAD . (.Microsoft Corporation - Windows Update.) -- C:\Windows\System32\wuauclt.exe [58288]
O44 - LFC:[MD5.3A014B98C45AA8C0E4ABF2AB764F9AAC] - 14/04/2013 - 18:32:59 ---A- . (.Microsoft Corporation - Function Discovery Printer Proxy Dll.) -- C:\Windows\SysNative\WSDPrintProxy.DLL [71168]
O44 - LFC:[MD5.F5BB165DD4C8B784E06E3F0324150E0F] - 14/04/2013 - 18:32:59 ---A- . (.Microsoft Corporation - Panneau de configuration - Gestion de l�ali.) -- C:\Windows\SysNative\powercfg.cpl [156160]
O44 - LFC:[MD5.F5BB165DD4C8B784E06E3F0324150E0F] - 14/04/2013 - 18:32:59 ---A- . (.Microsoft Corporation - Panneau de configuration - Gestion de l�ali.) -- C:\Windows\System32\powercfg.cpl [156160]
O44 - LFC:[MD5.0899BF12B2142213630D49E645B8A507] - 14/04/2013 - 18:32:59 ---A- . (.Microsoft Corporation - Processus h�te pour T�ches Windows.) -- C:\Windows\SysNative\taskhostex.exe [72192]
O44 - LFC:[MD5.EF9A6AA4956FCD2D0EECD48ECC54B303] - 14/04/2013 - 18:32:59 ---A- . (.Microsoft Corporation - Windows Update Modern WuApp.) -- C:\Windows\SysNative\WUSettingsProvider.dll [251904]
O44 - LFC:[MD5.3A014B98C45AA8C0E4ABF2AB764F9AAC] - 14/04/2013 - 18:32:59 RSHAD . (.Microsoft Corporation - Function Discovery Printer Proxy Dll.) -- C:\Windows\System32\WSDPrintProxy.DLL [71168]
O44 - LFC:[MD5.0698DEDEAD6A00AD0D468C687D830FBF] - 14/04/2013 - 18:32:59 RSHAD . (.Microsoft Corporation - Power Dependency Coordinator Driver.) -- C:\Windows\System32\Drivers\pdc.sys [69864]
O44 - LFC:[MD5.0899BF12B2142213630D49E645B8A507] - 14/04/2013 - 18:32:59 RSHAD . (.Microsoft Corporation - Processus h�te pour T�ches Windows.) -- C:\Windows\System32\taskhostex.exe [72192]
O44 - LFC:[MD5.EF9A6AA4956FCD2D0EECD48ECC54B303] - 14/04/2013 - 18:32:59 RSHAD . (.Microsoft Corporation - Windows Update Modern WuApp.) -- C:\Windows\System32\WUSettingsProvider.dll [251904]
O44 - LFC:[MD5.79CE97524CEC063C9A2750CCFE253847] - 14/04/2013 - 18:32:58 ---A- . (.Microsoft Corporation - Authentication Provider.) -- C:\Windows\SysNative\storewuauth.dll [173568]
O44 - LFC:[MD5.50361572A98348A6E780FFE231B55D49] - 14/04/2013 - 18:32:58 ---A- . (.Microsoft Corporation - DeviceItem inproc devquery subsystem.) -- C:\Windows\SysNative\DevDispItemProvider.dll [49152]
O44 - LFC:[MD5.50361572A98348A6E780FFE231B55D49] - 14/04/2013 - 18:32:58 ---A- . (.Microsoft Corporation - DeviceItem inproc devquery subsystem.) -- C:\Windows\System32\DevDispItemProvider.dll [49152]
O44 - LFC:[MD5.3AF11BF2AA45E222D5923E59596AC984] - 14/04/2013 - 18:32:58 ---A- . (.Microsoft Corporation - Setting Synchronization Information.) -- C:\Windows\SysNative\SettingSyncInfo.dll [128512]
O44 - LFC:[MD5.3AF11BF2AA45E222D5923E59596AC984] - 14/04/2013 - 18:32:58 ---A- . (.Microsoft Corporation - Setting Synchronization Information.) -- C:\Windows\System32\SettingSyncInfo.dll [128512]
O44 - LFC:[MD5.05677EEFA7E6AAF414F4C31FD9EBF2C0] - 14/04/2013 - 18:32:58 ---A- . (.Microsoft Corporation - Windows Update Vista Web Control.) -- C:\Windows\SysNative\wuwebv.dll [141824]
O44 - LFC:[MD5.05677EEFA7E6AAF414F4C31FD9EBF2C0] - 14/04/2013 - 18:32:58 ---A- . (.Microsoft Corporation - Windows Update Vista Web Control.) -- C:\Windows\System32\wuwebv.dll [141824]
O44 - LFC:[MD5.E781EB5E43013C358B9A335103C2B9AE] - 14/04/2013 - 18:32:58 ---A- . (.Microsoft Corporation - Windows Update WUDriver Stub.) -- C:\Windows\SysNative\wudriver.dll [98304]
O44 - LFC:[MD5.E781EB5E43013C358B9A335103C2B9AE] - 14/04/2013 - 18:32:58 ---A- . (.Microsoft Corporation - Windows Update WUDriver Stub.) -- C:\Windows\System32\wudriver.dll [98304]
O44 - LFC:[MD5.79CE97524CEC063C9A2750CCFE253847] - 14/04/2013 - 18:32:58 RSHAD . (.Microsoft Corporation - Authentication Provider.) -- C:\Windows\System32\storewuauth.dll [173568]
O44 - LFC:[MD5.C0ADEBED913295803B579ED288936CBB] - 14/04/2013 - 18:32:58 RSHAD . (.Microsoft Corporation - Pilote de filtre souris HID.) -- C:\Windows\System32\Drivers\mouhid.sys [26112]
O44 - LFC:[MD5.750082FFD280AD15DA524379CD863721] - 14/04/2013 - 18:32:57 ---A- . (.Microsoft Corporation - Windows Update Application Launcher.) -- C:\Windows\SysNative\wuapp.exe [39424]
O44 - LFC:[MD5.750082FFD280AD15DA524379CD863721] - 14/04/2013 - 18:32:57 ---A- . (.Microsoft Corporation - Windows Update Application Launcher.) -- C:\Windows\System32\wuapp.exe [39424]
O44 - LFC:[MD5.EA8EAD3F5B762F889CC7F3966625B48B] - 14/04/2013 - 18:32:57 RSHAD . (.Microsoft Corporation - Monitor Driver.) -- C:\Windows\System32\Drivers\monitor.sys [30720]
O44 - LFC:[MD5.4FD2E5BDBBBAB094B65E76908F9FADB3] - 14/04/2013 - 18:32:56 ---A- . (...) -- C:\Windows\SysNative\ApnDatabase.xml [387867]
O44 - LFC:[MD5.4FD2E5BDBBBAB094B65E76908F9FADB3] - 14/04/2013 - 18:32:56 RSHAD . (...) -- C:\Windows\System32\ApnDatabase.xml [387867]
O44 - LFC:[MD5.D5B800C7E730BDAFF36FE6FC64EB34A1] - 13/04/2013 - 17:40:37 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\SysNative\MRT.exe [72702784]
O44 - LFC:[MD5.D5B800C7E730BDAFF36FE6FC64EB34A1] - 13/04/2013 - 17:40:37 RSHAD . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe [72702784]
O44 - LFC:[MD5.79CAB096514C381152F4306BC87A7B29] - 11/04/2013 - 11:27:47 ---A- . (.Microsoft Corporation - Moteur de r�initialisation Microsoft Window.) -- C:\Windows\SysNative\reseteng.dll [1011200]
O44 - LFC:[MD5.79CAB096514C381152F4306BC87A7B29] - 11/04/2013 - 11:27:47 RSHAD . (.Microsoft Corporation - Moteur de r�initialisation Microsoft Window.) -- C:\Windows\System32\reseteng.dll [1011200]
O44 - LFC:[MD5.394ECD933CD66BADF97EA85A183B9E1E] - 11/04/2013 - 11:26:44 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysNative\mshtml.dll [19230208]
O44 - LFC:[MD5.394ECD933CD66BADF97EA85A183B9E1E] - 11/04/2013 - 11:26:44 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [19230208]
O44 - LFC:[MD5.D744D5B8145C2303B19A288AF695E9AD] - 11/04/2013 - 11:26:26 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\SysNative\ieframe.dll [15404544]
O44 - LFC:[MD5.D744D5B8145C2303B19A288AF695E9AD] - 11/04/2013 - 11:26:26 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\System32\ieframe.dll [15404544]
O44 - LFC:[MD5.DE3C3B1B4FA5FBF1F17BCD3B3AE1ED15] - 11/04/2013 - 11:26:24 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\SysNative\jscript9.dll [3958784]
O44 - LFC:[MD5.DE3C3B1B4FA5FBF1F17BCD3B3AE1ED15] - 11/04/2013 - 11:26:24 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript9.dll [3958784]
O44 - LFC:[MD5.753C0848AE7872A3F59663078A517293] - 11/04/2013 - 11:26:21 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\SysNative\wininet.dll [2240512]
O44 - LFC:[MD5.753C0848AE7872A3F59663078A517293] - 11/04/2013 - 11:26:21 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2240512]
O44 - LFC:[MD5.85F1FE2D5EDBFD26066F5ABB9504A69C] - 11/04/2013 - 11:26:20 ---A- . (.Microsoft Corporation - Utilitaire � l�ex�cution pour Internet Expl.) -- C:\Windows\SysNative\iertutil.dll [2647040]
O44 - LFC:[MD5.85F1FE2D5EDBFD26066F5ABB9504A69C] - 11/04/2013 - 11:26:20 ---A- . (.Microsoft Corporation - Utilitaire � l�ex�cution pour Internet Expl.) -- C:\Windows\System32\iertutil.dll [2647040]
O44 - LFC:[MD5.11B62706B48F8D8F624F39C4F6E98B5C] - 11/04/2013 - 11:26:18 ---A- . (.Microsoft Corporation - Biblioth�que de th�mes Ux Microsoft.) -- C:\Windows\SysNative\uxtheme.dll [915968]
O44 - LFC:[MD5.11B62706B48F8D8F624F39C4F6E98B5C] - 11/04/2013 - 11:26:18 ---A- . (.Microsoft Corporation - Biblioth�que de th�mes Ux Microsoft.) -- C:\Windows\System32\uxtheme.dll [915968]
O44 - LFC:[MD5.29812E9971077BE3F8B9DC225CF9D454] - 11/04/2013 - 11:26:18 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysNative\urlmon.dll [1365504]
O44 - LFC:[MD5.29812E9971077BE3F8B9DC225CF9D454] - 11/04/2013 - 11:26:18 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [1365504]
O44 - LFC:[MD5.8C1EFE99D4C9462EF2E10E7140B44D4A] - 11/04/2013 - 11:26:18 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\SysNative\jscript.dll [855552]
O44 - LFC:[MD5.8C1EFE99D4C9462EF2E10E7140B44D4A] - 11/04/2013 - 11:26:18 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript.dll [855552]
O44 - LFC:[MD5.268E23EAEDF3FAF87A7A87F0257C9E87] - 11/04/2013 - 11:26:17 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\SysNative\msfeeds.dll [603136]
O44 - LFC:[MD5.268E23EAEDF3FAF87A7A87F0257C9E87] - 11/04/2013 - 11:26:17 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll [603136]
O44 - LFC:[MD5.A89103864B67CE1ED3BB5D48569D3D94] - 11/04/2013 - 11:26:16 ---A- . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\SysNative\ie4uinit.exe [51712]
O44 - LFC:[MD5.A89103864B67CE1ED3BB5D48569D3D94] - 11/04/2013 - 11:26:16 RSHAD . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe [51712]
O44 - LFC:[MD5.38BEBBC4CF9FE6566262F0037DF843BF] - 11/04/2013 - 11:26:15 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\SysNative\iesysprep.dll [136704]
O44 - LFC:[MD5.38BEBBC4CF9FE6566262F0037DF843BF] - 11/04/2013 - 11:26:15 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\System32\iesysprep.dll [136704]
O44 - LFC:[MD5.194125E7839D4902F2490A70049E8F78] - 11/04/2013 - 11:26:15 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\SysNative\jsproxy.dll [53248]
O44 - LFC:[MD5.194125E7839D4902F2490A70049E8F78] - 11/04/2013 - 11:26:15 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\System32\jsproxy.dll [53248]
O44 - LFC:[MD5.9E93469F299BBCB4ECD1378403C9B8CD] - 11/04/2013 - 11:26:01 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\SysNative\win32k.sys [4041728]
O44 - LFC:[MD5.9E93469F299BBCB4ECD1378403C9B8CD] - 11/04/2013 - 11:26:01 RSHAD . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\System32\win32k.sys [4041728]
O44 - LFC:[MD5.299F354F0808017F6927B35C8FB6EFCD] - 11/04/2013 - 11:26:00 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\SysNative\ntoskrnl.exe [6991592]
O44 - LFC:[MD5.299F354F0808017F6927B35C8FB6EFCD] - 11/04/2013 - 11:26:00 RSHAD . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\System32\ntoskrnl.exe [6991592]
O44 - LFC:[MD5.0BB97D43299910CBFBA59C461B99B910] - 04/04/2013 - 13:50:32 RSHAD . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [25928]
~ Files: 262 Scanned in 00mn 33s



---\\ Derniers fichiers cr��s dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.22139227C666E43CDA8FC77C10594147] - 01/04/2013 - 12:40:48 ---A- - C:\Windows\Prefetch\AgCx_SC2.db
O45 - LFCP:[MD5.5C304E493AF798B84BE09CA6DEB4E21B] - 01/04/2013 - 12:40:56 ---A- - C:\Windows\Prefetch\ROGUEKILLERX64.EXE-BEF0C8AD.pf
O45 - LFCP:[MD5.1102DDE8FDE7EDE79E57ED153418B58F] - 01/04/2013 - 12:44:51 ---A- - C:\Windows\Prefetch\ADWCLEANER.EXE-80B60860.pf
O45 - LFCP:[MD5.CE7FF4368B2BDF6606E152C00DC90503] - 02/04/2013 - 15:13:40 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-98677702.pf
O45 - LFCP:[MD5.B9E1E04468CB55617FE5BD4BB74CB35A] - 03/04/2013 - 18:58:44 ---A- - C:\Windows\Prefetch\MAP.EXE-FB3E44B4.pf
O45 - LFCP:[MD5.38F71800F6A026523BE55CF9413A0ACF] - 03/04/2013 - 19:03:34 ---A- - C:\Windows\Prefetch\WWAHOST.EXE-38161C81.pf
O45 - LFCP:[MD5.0F9006EA2AAEEDCD43B943FC11C3B180] - 03/04/2013 - 19:15:11 ---A- - C:\Windows\Prefetch\MAKECAB.EXE-E962779E.pf
O45 - LFCP:[MD5.492577FC993C8A0853CD767231095D00] - 03/04/2013 - 19:22:32 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-4F60B70E.pf
O45 - LFCP:[MD5.9A9B553E0EF43983B7851618C0DDCCE5] - 03/04/2013 - 19:22:32 ---A- - C:\Windows\Prefetch\WINSAT.EXE-A854C4D0.pf
O45 - LFCP:[MD5.7F0AEF2D76342525B4DA2A276E8F8386] - 03/04/2013 - 19:44:02 ---A- - C:\Windows\Prefetch\dynreservedpri.db
O45 - LFCP:[MD5.B64EBBF158AFCCEEECA6CC2C08BA8AE3] - 04/04/2013 - 01:23:01 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-C43BAF4E.pf
O45 - LFCP:[MD5.7FA06135768CBDFE762B25D41558D5E6] - 04/04/2013 - 01:23:12 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-B331F1D0.pf
O45 - LFCP:[MD5.CAF914EF5E36E8131E7EE7E0D6C9621D] - 04/04/2013 - 16:55:22 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-3C40F7FB.pf
O45 - LFCP:[MD5.073BA17D4B5ED05B68C7C4145848745C] - 04/04/2013 - 16:55:22 ---A- - C:\Windows\Prefetch\SPOOLSV.EXE-AC422BB0.pf
O45 - LFCP:[MD5.D38DDB9AEB262DF100E777FE86F78E6F] - 04/04/2013 - 16:55:22 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-D926A5CA.pf
O45 - LFCP:[MD5.3715EE39462F4C95F207BAB227002B5D] - 06/04/2013 - 12:37:58 ---A- - C:\Windows\Prefetch\DASHOST.EXE-38AAABF0.pf
O45 - LFCP:[MD5.C3EF20F4EC157CE4DDBCC6DB5BB39213] - 06/04/2013 - 12:37:58 ---A- - C:\Windows\Prefetch\DSIWMIS.EXE-238692B9.pf
O45 - LFCP:[MD5.873E43B33D8A2FAD9269A0D873FAD62E] - 06/04/2013 - 13:04:55 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-465FAC7E.pf
O45 - LFCP:[MD5.CD19ECF7C34E1818D1909AE5E4ED4FB0] - 06/04/2013 - 13:14:38 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-B98D9700.pf
O45 - LFCP:[MD5.CF6BD62477E5AFA76473AF7C18AF34B6] - 06/04/2013 - 20:04:37 ---A- - C:\Windows\Prefetch\WWAHOST.EXE-5F7F692E.pf
O45 - LFCP:[MD5.A3FEAA0CB1760F7BB5C7F48365400A24] - 06/04/2013 - 20:04:41 ---A- - C:\Windows\Prefetch\LIVECOMM.EXE-F1928578.pf
O45 - LFCP:[MD5.DFFF3E52055B422BC782FDDD5C129576] - 06/04/2013 - 20:07:09 ---A- - C:\Windows\Prefetch\WSCRIPT.EXE-2D1A9206.pf
O45 - LFCP:[MD5.6148686388D1165665E77DDE01D8F74B] - 06/04/2013 - 20:11:10 ---A- - C:\Windows\Prefetch\PLANTES-CONTRE-ZOMBIES_S5_L4_-0D143F2C.pf
O45 - LFCP:[MD5.A05F6F52763553EA4280AA94ED5298CA] - 06/04/2013 - 20:11:15 ---A- - C:\Windows\Prefetch\PLANTES-CONTRE-ZOMBIES_S5_L4_-CD30A4DE.pf
O45 - LFCP:[MD5.94D502609EBB883BCA39284DB5CC19B5] - 06/04/2013 - 20:15:49 ---A- - C:\Windows\Prefetch\BFGSETUP_S5_L4.EXE-B85A885E.pf
O45 - LFCP:[MD5.EA0B774BCD6274A836F477AD476E7CA3] - 06/04/2013 - 20:15:52 ---A- - C:\Windows\Prefetch\BFGSETUP_S5_L4.EXE-0644937D.pf
O45 - LFCP:[MD5.AAC0B9D5E6365376E8E43AFB3D4E1C4A] - 06/04/2013 - 20:21:50 ---A- - C:\Windows\Prefetch\SETUP_GF5038T1L4_D2041618931_-3B7FD9F8.pf
O45 - LFCP:[MD5.B37688432F0706E7B4A7A453C56556A6] - 06/04/2013 - 20:33:26 ---A- - C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-E510713D.pf
O45 - LFCP:[MD5.C96B93AF0B5AD440A811D927A5A1904F] - 06/04/2013 - 20:33:28 ---A- - C:\Windows\Prefetch\FLASHPLAYERPLUGIN_11_6_602_18-54979347.pf
O45 - LFCP:[MD5.D7C932B3541FBD16EA79F6D19E4C641C] - 07/04/2013 - 04:51:59 ---A- - C:\Windows\Prefetch\BACKGROUNDTRANSFERHOST.EXE-9145C254.pf
O45 - LFCP:[MD5.6830CA66C8DC19CA446ABC55947A7FAF] - 08/04/2013 - 16:37:00 ---A- - C:\Windows\Prefetch\HECISERVER.EXE-AD396A6A.pf
O45 - LFCP:[MD5.948EBD37AC24C28ACD7CD2418BE33039] - 09/04/2013 - 00:28:15 ---A- - C:\Windows\Prefetch\CHROME.EXE-CCF9F3F8.pf
O45 - LFCP:[MD5.9230826AC9224E1D6FCDAF30ACDBAA91] - 09/04/2013 - 14:25:44 ---A- - C:\Windows\Prefetch\PHOTOFILTRE.EXE-714CEA23.pf
O45 - LFCP:[MD5.6F00685F00B18C9DE2BAAC55FB9B20FE] - 11/04/2013 - 11:27:58 ---A- - C:\Windows\Prefetch\WUDFHOST.EXE-0D78D366.pf
O45 - LFCP:[MD5.F21D99C99D5D6F3A200F4E37CC5DF064] - 11/04/2013 - 11:32:24 ---A- - C:\Windows\Prefetch\SNDVOL.EXE-276AC160.pf
O45 - LFCP:[MD5.1536BED7918B808709FC77E81AF529BB] - 11/04/2013 - 12:16:12 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-23477062.pf
O45 - LFCP:[MD5.0705598C94AD12A4E1F38F3344A1CDED] - 11/04/2013 - 12:47:20 ---A- - C:\Windows\Prefetch\DXPSERVER.EXE-E3812E71.pf
O45 - LFCP:[MD5.7F15C63E23106474308D156DFB2FDF37] - 11/04/2013 - 12:47:24 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-024CCF9B.pf
O45 - LFCP:[MD5.9A94329FBFC9FA5D1E7A0730B28097C0] - 12/04/2013 - 19:20:02 ---A- - C:\Windows\Prefetch\MAHJONGQUEST2.EXE-D004834C.pf
O45 - LFCP:[MD5.24404412B4E881FD5D473D553D487874] - 13/04/2013 - 17:08:24 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-3BF9CDB0.pf
O45 - LFCP:[MD5.6DD9CB7788695ED13344B60CD5EA4555] - 13/04/2013 - 17:08:37 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-DACB5D4F.pf
O45 - LFCP:[MD5.CD0256F4B296BC76FAC42E9C64E66C1B] - 13/04/2013 - 17:11:23 ---A- - C:\Windows\Prefetch\MBAM-SETUP.EXE-0E733B33.pf
O45 - LFCP:[MD5.32E3537D79A524CECB8ABC3DDC50A6DA] - 13/04/2013 - 17:11:24 ---A- - C:\Windows\Prefetch\MBAM-SETUP.TMP-689554BC.pf
O45 - LFCP:[MD5.2874494D1A431C3685EC3F928FCCAEE6] - 13/04/2013 - 17:11:50 ---A- - C:\Windows\Prefetch\REGSVR32.EXE-E1DBB6D8.pf
O45 - LFCP:[MD5.9A8A21A0D9054B8FE729C60FA257B59F] - 13/04/2013 - 17:12:28 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-210D3DBE.pf
O45 - LFCP:[MD5.7CFA78A270547A66E76FC824FF8AC7C2] - 13/04/2013 - 17:39:19 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-D687BE54.pf
O45 - LFCP:[MD5.F67F82F0E50A7C31D6DC2067ADF9BFF8] - 13/04/2013 - 17:40:13 ---A- - C:\Windows\Prefetch\SRTASKS.EXE-29C2E869.pf
O45 - LFCP:[MD5.A7D80733CD903FBA1DADCC0D313BFF9A] - 13/04/2013 - 17:40:36 ---A- - C:\Windows\Prefetch\MRTSTUB.EXE-DC25B37F.pf
O45 - LFCP:[MD5.E67F707F9ECC50564C055F3218B74188] - 13/04/2013 - 17:40:42 ---A- - C:\Windows\Prefetch\WINDOWS-KB890830-X64-V4.19-DE-F3E14590.pf
O45 - LFCP:[MD5.7EC877BC3AE0E7C672F385D0AEFF0DD1] - 13/04/2013 - 17:40:52 ---A- - C:\Windows\Prefetch\MRT.EXE-07B7D631.pf
O45 - LFCP:[MD5.A42131D5886AB6BEDAF5FF64FB388507] - 14/04/2013 - 18:32:15 ---A- - C:\Windows\Prefetch\SPLWOW64.EXE-853292E2.pf
O45 - LFCP:[MD5.73DDE3289E5FAAB9AEA8259AAFBC1DEE] - 15/04/2013 - 13:45:41 ---A- - C:\Windows\Prefetch\WWAHOST.EXE-7AAE3A0B.pf
O45 - LFCP:[MD5.560F6128C269C7B4A330898B560F363B] - 15/04/2013 - 13:45:46 ---A- - C:\Windows\Prefetch\OPENWITH.EXE-BA0DC300.pf
O45 - LFCP:[MD5.AABCD1F46B16DBD016424B1CBAF6690F] - 15/04/2013 - 13:47:08 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-EE2FB4D9.pf
O45 - LFCP:[MD5.808EA1E2EBDA8EA7B02AAF7978BCC44E] - 15/04/2013 - 13:49:54 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-BAE57A74.pf
O45 - LFCP:[MD5.666F7B39BF7EF44A0E352847324B0B3F] - 15/04/2013 - 14:01:11 ---A- - C:\Windows\Prefetch\PCPERFORMER.EXE-72493C95.pf
O45 - LFCP:[MD5.FC31D2873C3103B9D5FF1F29CE5E2BB7] - 16/04/2013 - 02:51:40 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-EA0A52C8.pf
O45 - LFCP:[MD5.1EBCBA1B8B3929487FC9106CAEA3846D] - 16/04/2013 - 02:51:50 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-3C5D03F7.pf
O45 - LFCP:[MD5.414D68D8E562C75990F82E46D5437272] - 16/04/2013 - 02:51:52 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-C92CB267.pf
O45 - LFCP:[MD5.C9D8B1CE799563850CDDA54DFEE66419] - 16/04/2013 - 02:51:52 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-9E940D77.pf
O45 - LFCP:[MD5.A85B06E16E4739A1DA30B94ED0BB58C2] - 16/04/2013 - 02:51:53 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-D593A5D9.pf
O45 - LFCP:[MD5.C3FF2E903BE1A11210C6F74F6E6FEDC8] - 16/04/2013 - 02:51:53 ---A- - C:\Windows\Prefetch\NGEN.EXE-383F81D5.pf
O45 - LFCP:[MD5.CAB6CB6CDC9C17CA198B00AEC50928A6] - 16/04/2013 - 02:51:54 ---A- - C:\Windows\Prefetch\NGEN.EXE-A8DBB043.pf
O45 - LFCP:[MD5.E06B47DC70358EC7CC2DD5111659465B] - 16/04/2013 - 02:51:54 ---A- - C:\Windows\Prefetch\SETTINGSYNCHOST.EXE-DD400067.pf
O45 - LFCP:[MD5.CB3F54F1E4193D049E314FA302DA046B] - 16/04/2013 - 02:51:55 ---A- - C:\Windows\Prefetch\NGENTASK.EXE-CD4E002C.pf
O45 - LFCP:[MD5.DBC06EEC37D86ED8C6AA5B1857898D50] - 16/04/2013 - 02:51:56 ---A- - C:\Windows\Prefetch\NGENTASK.EXE-4DB88ADA.pf
O45 - LFCP:[MD5.2AFAA1C4636A951B2A38B4A23D6F3215] - 16/04/2013 - 02:51:58 ---A- - C:\Windows\Prefetch\SDIAGNHOST.EXE-D8BC1DC6.pf
O45 - LFCP:[MD5.6E04515948C7A0D5DBAE60B00D2614C6] - 16/04/2013 - 02:52:00 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-55FE3087.pf
O45 - LFCP:[MD5.E6850D528D0AF29486709131EF2951FD] - 16/04/2013 - 02:52:09 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-5511E724.pf
O45 - LFCP:[MD5.10C40B78D925B12510539F7BF848248C] - 16/04/2013 - 02:52:13 ---A- - C:\Windows\Prefetch\W32TM.EXE-78C041DB.pf
O45 - LFCP:[MD5.EAC0B45687093A56865AE652D87A8FA2] - 16/04/2013 - 02:52:19 ---A- - C:\Windows\Prefetch\VSSVC.EXE-206E55B3.pf
O45 - LFCP:[MD5.B66B7D5BAB66138B549989DC88E470FB] - 16/04/2013 - 02:52:28 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-574A519D.pf
O45 - LFCP:[MD5.834A4333AF344DF15DC2447ED339CCA6] - 16/04/2013 - 02:52:36 ---A- - C:\Windows\Prefetch\Layout.ini
O45 - LFCP:[MD5.161C7740FFB28F16CDCBDF134E2EB3EF] - 16/04/2013 - 02:52:39 ---A- - C:\Windows\Prefetch\DEFRAG.EXE-22AD8A37.pf
O45 - LFCP:[MD5.232761648725F2438D8ECE2924A8C1A7] - 16/04/2013 - 02:53:04 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-4A7CF88B.pf
O45 - LFCP:[MD5.4CBBFEC2005A094F79507587BB4B6A47] - 16/04/2013 - 02:58:31 ---A- - C:\Windows\Prefetch\DRVINST.EXE-26FFA444.pf
O45 - LFCP:[MD5.6B6E193A8C40AA67D527D0AA2BBEB7FA] - 16/04/2013 - 02:59:38 ---A- - C:\Windows\Prefetch\POQEXEC.EXE-43A49B23.pf
O45 - LFCP:[MD5.65CE3C1C492F35F08B0454E775F6CB66] - 16/04/2013 - 03:02:05 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-B865F023.pf
O45 - LFCP:[MD5.A98B4C061D9EF22BBC57504AA07D4D40] - 16/04/2013 - 03:02:17 ---A- - C:\Windows\Prefetch\WWAHOST.EXE-D35BF5AF.pf
O45 - LFCP:[MD5.898CB695849FAF78F8C4D4CC6DAFE5EC] - 16/04/2013 - 03:02:30 ---A- - C:\Windows\Prefetch\CREDENTIALUIBROKER.EXE-E9F92FD0.pf
O45 - LFCP:[MD5.8A183477298B94397175210E831DF0DE] - 16/04/2013 - 03:02:37 ---A- - C:\Windows\Prefetch\EPOWERSVC.EXE-76E124E6.pf
O45 - LFCP:[MD5.15A40CC0C74B899C649D269119D9E84E] - 16/04/2013 - 03:03:07 ---A- - C:\Windows\Prefetch\BACKGROUNDTRANSFERHOST.EXE-05224ED5.pf
O45 - LFCP:[MD5.5E0F586631ED2F4A5696A6D10F2E89EF] - 16/04/2013 - 03:07:39 ---A- - C:\Windows\Prefetch\BFGPROCESS.EXE-F82DDBBF.pf
O45 - LFCP:[MD5.841F9FDE6E8734A29800040304D425CB] - 16/04/2013 - 03:07:43 ---A- - C:\Windows\Prefetch\ZSXZZZZ.EXE-C6925F93.pf
O45 - LFCP:[MD5.FC22D5479E20FF873A9EAF7A2E659536] - 16/04/2013 - 03:07:49 ---A- - C:\Windows\Prefetch\BFGGAMESERVICES.EXE-8A69C4A2.pf
O45 - LFCP:[MD5.7EBABC079267E4405B11EBA79E1AA374] - 16/04/2013 - 03:07:55 ---A- - C:\Windows\Prefetch\PLANTSVSZOMBIES.EXE-202D653E.pf
O45 - LFCP:[MD5.CF73BF88E8ADE78AD35BD313C33F8AAE] - 16/04/2013 - 04:09:12 ---A- - C:\Windows\Prefetch\BFGCLIENT.EXE-1BB4B44F.pf
O45 - LFCP:[MD5.049057BB98B7D361854ACEA5F89E88EE] - 16/04/2013 - 04:09:20 ---A- - C:\Windows\Prefetch\EPOWERBUTTON.EXE-80D380BE.pf
O45 - LFCP:[MD5.FB1AD07016FACA85A44727CF228C5C07] - 17/04/2013 - 15:32:55 ---A- - C:\Windows\Prefetch\JHI_SERVICE.EXE-9CD021CB.pf
O45 - LFCP:[MD5.464D2F36644DF8E72FA91A983EB7C864] - 17/04/2013 - 15:32:55 ---A- - C:\Windows\Prefetch\MBAMSCHEDULER.EXE-E0C395DC.pf
O45 - LFCP:[MD5.11A914E4ACFEDDC6502E0D1852FE2AAD] - 17/04/2013 - 15:32:55 ---A- - C:\Windows\Prefetch\MBAMSERVICE.EXE-5C46DB66.pf
O45 - LFCP:[MD5.C710CD46DB2932FE7AEFFBCA13AE72DC] - 17/04/2013 - 15:32:55 ---A- - C:\Windows\Prefetch\MQSVC.EXE-E07120CC.pf
O45 - LFCP:[MD5.026343F7766D70CA50E03FF24DF3A733] - 17/04/2013 - 15:33:49 ---A- - C:\Windows\Prefetch\PRINTISOLATIONHOST.EXE-9AE42873.pf
O45 - LFCP:[MD5.76014C334E7F745A095FC506503CF8E0] - 17/04/2013 - 15:34:46 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-05B3EDF6.pf
O45 - LFCP:[MD5.9F613FACD857D782303751C91C3252DA] - 17/04/2013 - 15:35:10 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-7779B832.pf
O45 - LFCP:[MD5.EE327E274B93248E3D2D81E571F7D68C] - 17/04/2013 - 15:36:03 ---A- - C:\Windows\Prefetch\FIREFOX.EXE-528BC649.pf
O45 - LFCP:[MD5.20C4404C6A32B30BDDE3B71A20ED6244] - 17/04/2013 - 15:38:15 ---A- - C:\Windows\Prefetch\HELPER.EXE-FDD78328.pf
O45 - LFCP:[MD5.DFF5118A1F2F5AF9655FC6A212890B36] - 17/04/2013 - 15:38:20 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-7242160E.pf
O45 - LFCP:[MD5.2E0964BA7E915EDF69C952E97F0BB705] - 17/04/2013 - 15:41:44 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-4492B02F.pf
O45 - LFCP:[MD5.2E94A401E13EEA7F47B01CB7F89A8ECA] - 17/04/2013 - 15:45:43 ---A- - C:\Windows\Prefetch\DKRUN32.EXE-8583E6AC.pf
O45 - LFCP:[MD5.295D35E2489AA2ED7FCCB9818C8B07A7] - 17/04/2013 - 15:45:53 ---A- - C:\Windows\Prefetch\LMANAGER.EXE-49876884.pf
O45 - LFCP:[MD5.98246884078BFCC8C0AACB60DE347431] - 17/04/2013 - 15:45:54 ---A- - C:\Windows\Prefetch\IGFXEXT.EXE-B04096D5.pf
O45 - LFCP:[MD5.1C9574FAB46FC39422295324313B5C76] - 17/04/2013 - 15:45:54 ---A- - C:\Windows\Prefetch\MMDX64FX.EXE-4C9473D7.pf
O45 - LFCP:[MD5.8EBAF056A1C4B31808E83A16E4398A8F] - 17/04/2013 - 15:46:03 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:[MD5.42F3A52158565AB58592CAEBB415228A] - 17/04/2013 - 15:47:54 ---A- - C:\Windows\Prefetch\SEARCHINDEXER.EXE-EF8503D3.pf
O45 - LFCP:[MD5.1FB9693649429A02EA71F55A2E029E5F] - 17/04/2013 - 15:47:58 ---A- - C:\Windows\Prefetch\RUNONCE.EXE-E874B0D0.pf
O45 - LFCP:[MD5.00B80D51972D14BB4EB9984DE3149B8F] - 17/04/2013 - 15:48:08 ---A- - C:\Windows\Prefetch\AVASTUI.EXE-DC11C262.pf
O45 - LFCP:[MD5.8086883564181D0A013AB89F18CB282D] - 17/04/2013 - 15:48:08 ---A- - C:\Windows\Prefetch\LAUNCHERMA.EXE-B4B56FB9.pf
O45 - LFCP:[MD5.5017B4959AD4BA8BA51491543E61B5C8] - 17/04/2013 - 15:48:09 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-B28CC291.pf
O45 - LFCP:[MD5.A141841C417C016C9153D5F7000E27BF] - 17/04/2013 - 15:49:01 ---A- - C:\Windows\Prefetch\REGSVR32.EXE-3290E8FC.pf
O45 - LFCP:[MD5.EE214609B9EE9558343C0B6BA6A0C2A2] - 17/04/2013 - 15:49:10 ---A- - C:\Windows\Prefetch\MBAM.EXE-125A28F9.pf
O45 - LFCP:[MD5.7ED4B5636D37FAADE7AAC5C05807A877] - 17/04/2013 - 15:49:26 ---A- - C:\Windows\Prefetch\UNS.EXE-9B1279FB.pf
O45 - LFCP:[MD5.49C3A7D42FC3A77EB2BD0A36597363F7] - 17/04/2013 - 15:49:28 ---A- - C:\Windows\Prefetch\LMS.EXE-409EDB07.pf
O45 - LFCP:[MD5.2DA427460A5B234A504D6232436139CB] - 17/04/2013 - 15:49:30 ---A- - C:\Windows\Prefetch\NASVC.EXE-314DC6C9.pf
O45 - LFCP:[MD5.89BBBDA0CB3CA01F0A470F118A8F4E2A] - 17/04/2013 - 15:49:31 ---A- - C:\Windows\Prefetch\CCSVCHST.EXE-A988759B.pf
O45 - LFCP:[MD5.224D5F97BE434B192A809136C685013D] - 17/04/2013 - 15:49:57 ---A- - C:\Windows\Prefetch\CCLEANER64.EXE-1137D9AC.pf
O45 - LFCP:[MD5.A9E4A8C8D061ACD3AA776174487FB6AE] - 17/04/2013 - 15:51:11 ---A- - C:\Windows\Prefetch\MBAMGUI.EXE-9FF23AE2.pf
O45 - LFCP:[MD5.DCF714C6A7B2D1EAF7E86AEF9E77A709] - 17/04/2013 - 15:51:23 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-7D63BB4C.pf
O45 - LFCP:[MD5.78B2EA048CF2DFA34F48CC9B698DBAB4] - 17/04/2013 - 15:51:28 ---A- - C:\Windows\Prefetch\CONTROL.EXE-5BCB0217.pf
O45 - LFCP:[MD5.9DC091D3A1A14E36465FAA2CE1978AF3] - 17/04/2013 - 15:51:29 ---A- - C:\Windows\Prefetch\Op-EXPLORER.EXE-03C49D11-000000F5.pf
O45 - LFCP:[MD5.5E3E158DCD9514D418BF19ACB3FF02BA] - 17/04/2013 - 15:51:36 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-C7028A70.pf
O45 - LFCP:[MD5.27B2CA6ACBB14F7F536B1C9828240C32] - 17/04/2013 - 16:16:42 ---A- - C:\Windows\Prefetch\THUMBNAILEXTRACTIONHOST.EXE-C3FB8861.pf
O45 - LFCP:[MD5.BED794705717D4852C2C939896ACAB84] - 17/04/2013 - 16:44:05 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-E35F76FB.pf
O45 - LFCP:[MD5.21E917A58C1AEE3E1F15C1E8A79B5859] - 17/04/2013 - 17:25:13 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-E9FE1791.pf
O45 - LFCP:[MD5.2A15B8E7C4DE4532D1A6871B5570281A] - 17/04/2013 - 17:29:51 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-50DEE1CF.pf
O45 - LFCP:[MD5.BC2D701E5CD4647370A8A6CDCFAD38D1] - 17/04/2013 - 18:05:02 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-E0E5E52F.pf
O45 - LFCP:[MD5.F2FAE46837FC398C421F054FDFECDF74] - 17/04/2013 - 18:08:32 ---A- - C:\Windows\Prefetch\AVASTSVC.EXE-E895EC10.pf
O45 - LFCP:[MD5.6B31B934C188A3042B356D53181A790D] - 17/04/2013 - 18:12:41 ---A- - C:\Windows\Prefetch\ETDANICONF.EXE-9A216E63.pf
O45 - LFCP:[MD5.A2348FFCD3C79DC5DA0761AA9A69D3B2] - 17/04/2013 - 18:17:12 ---A- - C:\Windows\Prefetch\TASKENG.EXE-23205583.pf
O45 - LFCP:[MD5.8EDC8A2302723DF913BEBB4265814568] - 17/04/2013 - 18:22:35 ---A- - C:\Windows\Prefetch\PCSUSD.EXE-023F0582.pf
O45 - LFCP:[MD5.FD9087F97D2D4193C7F6FC87B8672321] - 17/04/2013 - 19:09:31 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:[MD5.727BA095634CE2977C6C083396A1D546] - 17/04/2013 - 19:10:32 ---A- - C:\Windows\Prefetch\AgCx_SC1.db
O45 - LFCP:[MD5.9EFE85DF3C11021888E0400911E273CE] - 17/04/2013 - 19:13:44 ---A- - C:\Windows\Prefetch\ROGUEKILLERX64 (1).EXE-467AE9EF.pf
O45 - LFCP:[MD5.112F8EDB86BCB0E62D8484AF02FFF037] - 17/04/2013 - 19:16:40 ---A- - C:\Windows\Prefetch\RFBTNSVC64.EXE-4CA3F3BE.pf
O45 - LFCP:[MD5.ADF7D9C8AB886E25A56B5C735D1840E1] - 17/04/2013 - 19:19:54 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-1A4CC1C3.pf
O45 - LFCP:[MD5.BF3A8388B36B36C065871B9962A5F81D] - 17/04/2013 - 19:20:50 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.9DA851D3ED7B2920632632D0E19AF1F2] - 17/04/2013 - 19:20:51 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.8A795072EF651DC069836C02D952AD9A] - 17/04/2013 - 19:20:51 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.44AAFC857F336F63CB76113BB3EF4E59] - 17/04/2013 - 19:20:51 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.93D7062A96538680E7F3068E023B9AB8] - 17/04/2013 - 19:21:53 ---A- - C:\Windows\Prefetch\SMSS.EXE-81AD91F0.pf
O45 - LFCP:[MD5.EA4B52BC76DD649A4B193B6B20BED66D] - 17/04/2013 - 19:22:03 ---A- - C:\Windows\Prefetch\CSRSS.EXE-A7A2B218.pf
O45 - LFCP:[MD5.40EA65077FA84AE31C56935C13348DB6] - 17/04/2013 - 19:22:03 ---A- - C:\Windows\Prefetch\WINLOGON.EXE-0D9AB72B.pf
O45 - LFCP:[MD5.F96E3BC1EE781EB55FA9C67E50C04AD8] - 17/04/2013 - 19:22:04 ---A- - C:\Windows\Prefetch\DWM.EXE-F29FE9E2.pf
O45 - LFCP:[MD5.FDF72E5C3ECFDB4900C0E689426BCE0E] - 18/04/2013 - 13:46:31 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-F2C7AEBC.pf
O45 - LFCP:[MD5.5D4DC1EB9657E8EE456F2F4E42DD3334] - 18/04/2013 - 13:46:32 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-94CE7668.pf
O45 - LFCP:[MD5.E296ACA85B96665B84AE58CB5D10842B] - 18/04/2013 - 13:46:33 ---A- - C:\Windows\Prefetch\ATBROKER.EXE-8B8F7F7C.pf
O45 - LFCP:[MD5.4F5458CB1F1178162E7D89FF1D7379EA] - 18/04/2013 - 13:46:34 ---A- - C:\Windows\Prefetch\SYMSILENTBOOTSTRAP.EXE-2F1083F1.pf
O45 - LFCP:[MD5.AA5999B203AE3A4B8F96405448C3AFC7] - 18/04/2013 - 13:46:37 ---A- - C:\Windows\Prefetch\HLUPDATER.EXE-C73D8338.pf
O45 - LFCP:[MD5.3170B63421965B36058B34D9DE3AF92B] - 18/04/2013 - 13:46:39 ---A- - C:\Windows\Prefetch\AVBUGREPORT.EXE-E4EA699E.pf
O45 - LFCP:[MD5.4C8E93C4BADDC39A3FCDDF934BAF6739] - 18/04/2013 - 13:46:41 ---A- - C:\Windows\Prefetch\CONHOST.EXE-F98A1078.pf
O45 - LFCP:[MD5.4EF48A788B1E66C0E1BC0D8BE68DE9EB] - 18/04/2013 - 13:46:41 ---A- - C:\Windows\Prefetch\MPCMDRUN.EXE-6520183E.pf
O45 - LFCP:[MD5.0D14215C9F08968D7A618B773AFB7FC8] - 18/04/2013 - 13:46:42 ---A- - C:\Windows\Prefetch\ETDCTRL.EXE-91BAE8DE.pf
O45 - LFCP:[MD5.AB96CA3B3E92F4DA9DE50C8B59A15272] - 18/04/2013 - 13:46:42 ---A- - C:\Windows\Prefetch\EXPLORER.EXE-03C49D11.pf
O45 - LFCP:[MD5.A203A233A5524C0300AF8AD4BB30E468] - 18/04/2013 - 13:46:42 ---A- - C:\Windows\Prefetch\LMUTILPS32.EXE-9827F12C.pf
O45 - LFCP:[MD5.3FC615EA145C6513F739DA91FC6C07AE] - 18/04/2013 - 13:46:42 ---A- - C:\Windows\Prefetch\USERINIT.EXE-7FD17ED1.pf
O45 - LFCP:[MD5.88FFA4FF59C85D919271DE053F00E5E8] - 18/04/2013 - 13:46:47 ---A- - C:\Windows\Prefetch\ETDCTRLHELPER.EXE-6A174316.pf
O45 - LFCP:[MD5.8340ECADBA8B6EB66476339E2AD06731] - 18/04/2013 - 13:46:54 ---A- - C:\Windows\Prefetch\AVAST.SETUP-50B30900.pf
O45 - LFCP:[MD5.E33AA692906F30BAA284BBFFB369FC4C] - 18/04/2013 - 13:47:00 ---A- - C:\Windows\Prefetch\RUNTIMEBROKER.EXE-17E2786F.pf
O45 - LFCP:[MD5.E4F54952083F3D2C486CD0643AF534B5] - 18/04/2013 - 13:47:01 ---A- - C:\Windows\Prefetch\AVASTEMUPDATE.EXE-0DD1597D.pf
O45 - LFCP:[MD5.155CCD7C6CF3A391416E010B80487995] - 18/04/2013 - 13:47:02 ---A- - C:\Windows\Prefetch\IGFXSRVC.EXE-F41E6E8E.pf
O45 - LFCP:[MD5.B9619F0689D91EB48E52D21BC8E469C7] - 18/04/2013 - 13:47:02 ---A- - C:\Windows\Prefetch\RAVCPL64.EXE-C0BB540D.pf
O45 - LFCP:[MD5.E6822A5D329ECC67C693325DCB3521E0] - 18/04/2013 - 13:47:04 ---A- - C:\Windows\Prefetch\IGFXTRAY.EXE-21BDFE68.pf
O45 - LFCP:[MD5.FC60D1AA12F6E56EF06B21594728612A] - 18/04/2013 - 13:47:05 ---A- - C:\Windows\Prefetch\HKCMD.EXE-15DC91D5.pf
O45 - LFCP:[MD5.C28DC3BDC5465CD4B5981718CF38A74B] - 18/04/2013 - 13:47:06 ---A- - C:\Windows\Prefetch\IGFXPERS.EXE-82C794F2.pf
O45 - LFCP:[MD5.17BECA1BB0828F70FB022BE758DBC75F] - 18/04/2013 - 13:47:08 ---A- - C:\Windows\Prefetch\PCSUNOTIFIER.EXE-9B7EC34F.pf
O45 - LFCP:[MD5.A8FDD2CBBC7B108145DCF09A1CCE744C] - 18/04/2013 - 13:47:08 ---A- - C:\Windows\Prefetch\SETAPM.EXE-9D9BA1F2.pf
O45 - LFCP:[MD5.3A4D88129238B71F94503614C1567567] - 18/04/2013 - 13:47:13 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-6AA5D6C5.pf
O45 - LFCP:[MD5.BA3B021E43B78DE9168EC74F8AFCD8DC] - 18/04/2013 - 13:47:17 ---A- - C:\Windows\Prefetch\EPOWEREVENT.EXE-57DB0DA4.pf
O45 - LFCP:[MD5.176EDB0A8A2BBA341F01BC4F058C06D6] - 18/04/2013 - 13:47:17 ---A- - C:\Windows\Prefetch\UNSECAPP.EXE-454AB5C0.pf
O45 - LFCP:[MD5.DEA33C17D89DA40793D046002854827C] - 18/04/2013 - 13:47:27 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-7D20CFB0.pf
O45 - LFCP:[MD5.3230E664B4194A32AF1EFB28FBC84C59] - 18/04/2013 - 13:47:33 ---A- - C:\Windows\Prefetch\AUDIODG.EXE-9848A323.pf
O45 - LFCP:[MD5.E8DFDD9E091C5C22E15E3BDAC3B8A3D9] - 18/04/2013 - 13:47:35 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-29D61DAB.pf
O45 - LFCP:[MD5.2363EDA56B636BA7F7570881DC76F434] - 18/04/2013 - 13:47:35 ---A- - C:\Windows\Prefetch\TIWORKER.EXE-D3BFD41F.pf
O45 - LFCP:[MD5.48E1D1436DA8D5811D7774C7509561A0] - 18/04/2013 - 13:47:35 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-B018CCBF.pf
O45 - LFCP:[MD5.A502B1D43D9115FA8FE338DC81917FFC] - 18/04/2013 - 13:47:36 ---A- - C:\Windows\Prefetch\DELEGATE_EXECUTE.EXE-0094E886.pf
O45 - LFCP:[MD5.90D356A44B2B06FF91BFA1A5BE4BE09F] - 18/04/2013 - 13:47:42 ---A- - C:\Windows\Prefetch\CHROME.EXE-CCF9F3FB.pf
O45 - LFCP:[MD5.123E349542CFA7F4C6AB0CC94BFE0D40] - 18/04/2013 - 13:47:46 ---A- - C:\Windows\Prefetch\CHROME.EXE-CCF9F3F4.pf
O45 - LFCP:[MD5.10E22EAABC545502253918B7E46DE32D] - 18/04/2013 - 13:47:47 ---A- - C:\Windows\Prefetch\AgCx_SC5.db
O45 - LFCP:[MD5.98BA7BE9D46B8D789AD77972CB6A1F58] - 18/04/2013 - 13:47:48 ---A- - C:\Windows\Prefetch\CHROME.EXE-CCF9F3F7.pf
O45 - LFCP:[MD5.A759B6DA54C19F7238E3A204CE999512] - 18/04/2013 - 13:49:25 ---A- - C:\Windows\Prefetch\TASKHOSTEX.EXE-7356AAC0.pf
O45 - LFCP:[MD5.6B7844648B44F5F2B0051169E0E5A063] - 18/04/2013 - 13:49:32 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-985C34E6.pf
O45 - LFCP:[MD5.F7AF24E53C032EB436CAE1CEBF8DE4AC] - 18/04/2013 - 13:49:37 ---A- - C:\Windows\Prefetch\CONSENT.EXE-2D674CE4.pf
O45 - LFCP:[MD5.ED7041B5862EFC808A4E5CAE5510E2DA] - 18/04/2013 - 13:49:43 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-50AF0BCC.pf
O45 - LFCP:[MD5.F2E774D77CEDDF56A38FB5447F3F6F44] - 18/04/2013 - 13:49:47 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-BB49B536.pf
O45 - LFCP:[MD5.FA4088F507BF71A5503E84E55E282DAB] - 18/04/2013 - 13:49:48 ---A- - C:\Windows\Prefetch\ADWCLEANER (1).EXE-9C677C42.pf
O45 - LFCP:[MD5.761AE2DA0B2A6A4291E6A68707735825] - 18/04/2013 - 13:49:50 ---A- - C:\Windows\Prefetch\PING.EXE-167FE968.pf
O45 - LFCP:[MD5.ADAE6DD5B65499F97E9A202ADD2046AF] - 18/04/2013 - 13:49:51 ---A- - C:\Windows\Prefetch\CMD.EXE-CD245F9E.pf
O45 - LFCP:[MD5.D46FCC9F3FFDB816B3842404CF9833DE] - 18/04/2013 - 13:49:51 ---A- - C:\Windows\Prefetch\REG.EXE-6A8B6960.pf
O45 - LFCP:[MD5.A4AF4AF7698D90687BE485758A0C2082] - 18/04/2013 - 13:50:07 ---A- - C:\Windows\Prefetch\SYMERR.EXE-85F7934F.pf
O45 - LFCP:[MD5.A70133ECACB01E857C4906A8F050C497] - 18/04/2013 - 13:50:19 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-38926D07.pf
O45 - LFCP:[MD5.F11F3B12B269524DA7CB260AFE05DEAA] - 18/04/2013 - 13:50:51 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-4105170967-1408492940-2512939263-1001.db
O45 - LFCP:[MD5.59D5711196B2C8AE7C5011E096CEDEDC] - 18/04/2013 - 13:50:51 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-4105170967-1408492940-2512939263-1001.db
O45 - LFCP:[MD5.92813F0AC80E41AA57BBE5B8AE148671] - 18/04/2013 - 13:54:34 ---A- - C:\Windows\Prefetch\ZHPDIAG2.EXE-A81D648B.pf
O45 - LFCP:[MD5.2C403CB56D1000743C2DD61F909E48B3] - 18/04/2013 - 13:54:34 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-F0DC10FC.pf
O45 - LFCP:[MD5.35CB91D3B9EF2243154FB01D0D45398F] - 18/04/2013 - 13:54:49 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-10E4267C.pf
O45 - LFCP:[MD5.DC383D846C59FD2AD99AA43B2E4AAF3D] - 18/04/2013 - 13:54:49 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-C6CFE2A8.pf
O45 - LFCP:[MD5.6B43EAB4515BBBDDB25616084D24A7B3] - 18/04/2013 - 13:55:00 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-62E5E10F.pf
O45 - LFCP:[MD5.5F3C5AED61E29B66CD1AA79AE333D4BF] - 18/04/2013 - 13:55:06 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-6368FF25.pf
O45 - LFCP:[MD5.27DCA0073C6A27208F07F8B2663D875F] - 18/04/2013 - 13:55:17 ---A- - C:\Windows\Prefetch\ZHPHEP.EXE-5F2753B1.pf
O45 - LFCP:[MD5.EE840A80F75E23A22987AAA2F0F51F66] - 18/04/2013 - 13:55:27 ---A- - C:\Windows\Prefetch\ZHPDIAG.EXE-C7289479.pf
O45 - LFCP:[MD5.1F1162662EF14FCE851EAE647BD7D5CE] - 18/04/2013 - 13:56:07 ---A- - C:\Windows\Prefetch\CMD.EXE-2EB3E6E2.pf
O45 - LFCP:[MD5.88A7ED34F06A785677ED4F5DBD72FA92] - 18/04/2013 - 13:56:07 ---A- - C:\Windows\Prefetch\CSCRIPT.EXE-E9FF6526.pf
O45 - LFCP:[MD5.253DC0CBE5BD1AADDED03C4D199D12BA] - 18/04/2013 - 13:56:10 ---A- - C:\Windows\Prefetch\PV.EXE-D9D90B9C.pf
O45 - LFCP:[MD5.4FD97AA78ACC6D0D0042D51CF09828EC] - 18/04/2013 - 13:56:12 ---A- - C:\Windows\Prefetch\SUBINACL.EXE-D08B2113.pf
O45 - LFCP:[MD5.4A282DAED1693AF7C82A3461FE9FDA68] - 18/04/2013 - 13:56:15 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-7B160CA5.pf
O45 - LFCP:[MD5.74E8B1FDAA46CD1F0E69E900B499EDCA] - 18/04/2013 - 13:56:15 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-0C8A533A.pf
O45 - LFCP:[MD5.7EDAB31DE5FCFF1831BEFFD1FF3E8861] - 18/04/2013 - 13:56:41 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-0AD36442.pf
O45 - LFCP:[MD5.F643C85FB50FEBEAAC675B28C6166ECA] - 18/04/2013 - 13:56:56 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-5B401A7E.pf
O45 - LFCP:[MD5.F4EEE742464D634F5B767B7E7B614070] - 18/04/2013 - 13:57:07 ---A- - C:\Windows\Prefetch\PCSULAUNCHER.EXE-78887829.pf
O45 - LFCP:[MD5.9A16A42BA1E2FCCBBB92845E9737D415] - 20/03/2013 - 19:03:40 ---A- - C:\Windows\Prefetch\WWAHOST.EXE-DBE13B61.pf
O45 - LFCP:[MD5.D84C63CFB2D557B1398D21A8217484E5] - 22/03/2013 - 11:44:43 ---A- - C:\Windows\Prefetch\SPMREMINDER.EXE-46F72303.pf
O45 - LFCP:[MD5.8E31EA330BFADA6182BCBAD0EDC54C31] - 22/03/2013 - 11:50:01 ---A- - C:\Windows\Prefetch\OV.EXE-48107AD1.pf
O45 - LFCP:[MD5.02ECF74ACFE668841BF50FAAE01B34A8] - 22/03/2013 - 12:40:15 ---A- - C:\Windows\Prefetch\RSTRUI.EXE-F76EBF17.pf
O45 - LFCP:[MD5.F917466F6D6D87967E691A3200902772] - 22/03/2013 - 13:23:42 ---A- - C:\Windows\Prefetch\SWEETPACKSUPDATEMANAGER.EXE-4BA95FDA.pf =>PUP.SweetIM
O45 - LFCP:[MD5.686CF3D27A34156BB8EE074EA3088C26] - 22/03/2013 - 14:05:54 ---A- - C:\Windows\Prefetch\WWAHOST.EXE-902D44A5.pf
O45 - LFCP:[MD5.8CC8FDC15BA4973DFC7002015F580589] - 23/03/2013 - 13:49:35 ---A- - C:\Windows\Prefetch\PCPERFORMERSETUP.EXE-3193B7F4.pf
O45 - LFCP:[MD5.CF4FEEE1B1ABC8609BBEE1BAB094EF0D] - 23/03/2013 - 13:49:48 ---A- - C:\Windows\Prefetch\FILESCOUT.EXE-6D8F1F9F.pf
O45 - LFCP:[MD5.171CB7A01F564F01956D1C71F6F8A359] - 23/03/2013 - 13:50:12 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-91514A33.pf
O45 - LFCP:[MD5.26EE274F4448103AA284A8C704AB4680] - 23/03/2013 - 13:50:20 ---A- - C:\Windows\Prefetch\SPEEDANALYSIS.EXE-2967783D.pf
O45 - LFCP:[MD5.906E4A72D508B5430FAC3338B9B35341] - 23/03/2013 - 13:50:23 ---A- - C:\Windows\Prefetch\CCP.EXE-0128F051.pf
O45 - LFCP:[MD5.2A701C79465917F887E4A651476FB013] - 23/03/2013 - 13:50:30 ---A- - C:\Windows\Prefetch\TASKKILL.EXE-3D8A2F61.pf
O45 - LFCP:[MD5.E764C91BEAD298484400C29F29694F3B] - 24/03/2013 - 12:31:48 ---A- - C:\Windows\Prefetch\MSNMSGR.EXE-97D0C771.pf
O45 - LFCP:[MD5.BB8B3354EBF1E9017AED54C1CB2C62C8] - 27/03/2013 - 21:43:24 ---A- - C:\Windows\Prefetch\AUTHHOST.EXE-44C90B62.pf
O45 - LFCP:[MD5.098117C2A9D5B7EBB451C256EFC82CDC] - 30/03/2013 - 19:49:17 ---A- - C:\Windows\Prefetch\IMINENT.MESSENGERS.EXE-71459735.pf =>Adware.IMBooster
O45 - LFCP:[MD5.926497628B75DC1FF2F329D2A26E6CDA] - 30/03/2013 - 20:02:00 ---A- - C:\Windows\Prefetch\UPDATER.EXE-8B6750DD.pf
O45 - LFCP:[MD5.5D3A5BB36A1131E9E6C7238D0129956D] - 30/03/2013 - 20:02:15 ---A- - C:\Windows\Prefetch\GUNINSTALLER.EXE-2C903D24.pf
O45 - LFCP:[MD5.5AF3744642E89A59039A6CAC55024039] - 30/03/2013 - 20:02:29 ---A- - C:\Windows\Prefetch\AU_.EXE-09A05A98.pf
O45 - LFCP:[MD5.E671DF621E6A72F7AEB4DFD4B3C147E7] - 30/03/2013 - 20:02:33 ---A- - C:\Windows\Prefetch\UNINST1.EXE-70626DF6.pf
O45 - LFCP:[MD5.96C9F1C0A5D59BFAA67BA49B7AFF1A3C] - 30/03/2013 - 20:11:51 ---A- - C:\Windows\Prefetch\UPT4PC_FR_24.EXE-D5FD3820.pf
O45 - LFCP:[MD5.C200B90E047FD03E5E15774FF887E749] - 30/03/2013 - 20:15:44 ---A- - C:\Windows\Prefetch\AVAST_FREE_ANTIVIRUS_SETUP.EX-6E143A86.pf
O45 - LFCP:[MD5.F23D334A686F7C518C343FB6FE7FB2BB] - 30/03/2013 - 20:15:54 ---A- - C:\Windows\Prefetch\AVAST.SETUP-DBBE2FCE.pf
O45 - LFCP:[MD5.023C07A83ABE0401711C5236F8C9F202] - 30/03/2013 - 20:16:52 ---A- - C:\Windows\Prefetch\VCREDIST_X86_SP1.EXE-9A7CACCD.pf
O45 - LFCP:[MD5.E91B0101B1B2B400D9AAD9E4B9BED200] - 30/03/2013 - 20:21:47 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-F4FB5D2F.pf
O45 - LFCP:[MD5.D640CE9888CEE41AC36DAFD342C024F8] - 30/03/2013 - 20:24:39 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-7A9337F2.pf
O45 - LFCP:[MD5.FBA929BDB2DCC0FD7FEB1FA3A371509A] - 30/03/2013 - 21:16:06 ---A- - C:\Windows\Prefetch\CCSETUP400.EXE-7ECE3199.pf
O45 - LFCP:[MD5.CD3DD781E2C829AB5242727AB146DEE9] - 30/03/2013 - 21:21:18 ---A- - C:\Windows\Prefetch\LOGICIEL-FREE_POUR_MALWAREBYT-D6E292FA.pf
O45 - LFCP:[MD5.273298EB2B74100409F44F0B48A077CB] - 30/03/2013 - 21:21:54 ---A- - C:\Windows\Prefetch\MBAM-SETUP-1.70.0.1100.TMP-D9D22FEA.pf
O45 - LFCP:[MD5.8905EF9030839CDDB11A4460C23A1FD8] - 30/03/2013 - 21:21:56 ---A- - C:\Windows\Prefetch\MBAM-SETUP-1.70.0.1100.TMP-24BE5830.pf
O45 - LFCP:[MD5.C5428D87A2AD79B55CF63609496A09EF] - 30/03/2013 - 21:21:56 ---A- - C:\Windows\Prefetch\MBAM-SETUP-1.70.0.1100.TMP-D1427B7A.pf
O45 - LFCP:[MD5.9F10FD76C44E1E0DE327F74C846B8A20] - 30/03/2013 - 21:21:58 ---A- - C:\Windows\Prefetch\MBAM-SETUP-1.70.0.1100.TMP-CB180043.pf
O45 - LFCP:[MD5.70EED8B8DFE9CD367053DE1D6A97DC55] - 30/03/2013 - 21:28:37 ---A- - C:\Windows\Prefetch\WWAHOST.EXE-E875A140.pf
O45 - LFCP:[MD5.72A5ABEF7BD25FB5C316D32C86DC721C] - 30/03/2013 - 22:44:43 ---A- - C:\Windows\Prefetch\JEWELQUESTSLEEPLESSSTAR.EXE-5697E47C.pf
O45 - LFCP:[MD5.6406E282C14879ECFCB492759958B8A4] - 31/03/2013 - 00:28:10 ---A- - C:\Windows\Prefetch\UTORRENT.EXE-CF291A41.pf
O45 - LFCP:[MD5.4B4C34E3CEA1A94E96843029B207C4C4] - 31/03/2013 - 00:34:35 ---A- - C:\Windows\Prefetch\UTORRENT.EXE-E69D8B81.pf
O45 - LFCP:[MD5.CED9BB046373ADA5C475FDA046982951] - 31/03/2013 - 00:50:31 ---A- - C:\Windows\Prefetch\AVAST_FREE_ANTIVIRUS_SETUP.EX-A0F0D171.pf
O45 - LFCP:[MD5.3BCE21EF15F44DAF19972BED89587CE4] - 31/03/2013 - 00:50:35 ---A- - C:\Windows\Prefetch\SETUP.OVR-004B9C40.pf
O45 - LFCP:[MD5.5F3ED43FE7DE97B63FF2933ADC2DCFD4] - 31/03/2013 - 00:50:47 ---A- - C:\Windows\Prefetch\AVAST.SETUP-61A797C1.pf
O45 - LFCP:[MD5.54004FDEF6F4FBCC7757C633962DC8F3] - 31/03/2013 - 01:08:53 ---A- - C:\Windows\Prefetch\VIDEOPERFORMERSETUP.EXE-4CAC1F74.pf
O45 - LFCP:[MD5.F72240ED168E9DEB623BA1800E4769A6] - 31/03/2013 - 01:09:30 ---A- - C:\Windows\Prefetch\FIXIO_PC_CLEANER_2013_INSTALL-E7720A66.pf
O45 - LFCP:[MD5.DEF12BE91394CF4FC78B4EE31CF9A8F1] - 31/03/2013 - 01:25:45 ---A- - C:\Windows\Prefetch\DSMUSERTASK.EXE-D4A83970.pf
O45 - LFCP:[MD5.59E1916E24528619F113C2CFC756247E] - 31/03/2013 - 02:09:18 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-F0516D55.pf
O45 - LFCP:[MD5.07AC5240BCF64A096A40AE7146660ED2] - 31/03/2013 - 16:57:58 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-4DE7AE8F.pf
O45 - LFCP:[MD5.D2BFF3DA7BF7DCC496137141E06B418E] - 31/03/2013 - 16:58:00 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-959D4AA6.pf
O45 - LFCP:[MD5.F99FFAA3F56F7CC1434C10B205002F94] - 31/03/2013 - 17:58:51 ---A- - C:\Windows\Prefetch\VIDEO PERFORMER63862.EXE-5959E4E1.pf
O45 - LFCP:[MD5.4B2C6A97AF6739C11E136E5E9F327C86] - 31/03/2013 - 18:32:53 ---A- - C:\Windows\Prefetch\AU_.EXE-35714683.pf
~ Prefetcher: 255 Scanned in 00mn 04s



---\\ D�ni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l��diteur de configuration de s�curit� Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de s�curit� Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Fournisseur de s�curit� TLS/SSL.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Live Security Package.) -- C:\Windows\System32\livessp.dll
~ LSA: 9 Scanned in 00mn 00s



---\\ Contr�le du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\BasicDisplay.sys . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\BasicRender.sys . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dxgkrnl.sys . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\FsDepends.sys . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\FsDepends.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\BasicDisplay.sys . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\BasicRender.sys . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dxgkrnl.sys . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\FsDepends.sys . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\FsDepends.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (...) -- C:\Windows\System32\Drivers\rdpencdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ CSB: 17 Scanned in 00mn 00s



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ TDSD: 2 Scanned in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableCursorSuppression"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLinkedConnections"=1
~ MWPS: 18 Scanned in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
~ MWPE Keys: 3 Scanned in 00mn 00s



---\\ Liste des Drivers Syst�me (O58)
O58 - SDL:[MD5.4F18D4C7EA14F11A7211F60D553C03DB] - 26/07/2012 - 06:00:49 ---A- . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\Drivers\3ware.sys [106736]
~ Drivers: Scanned in 00mn 00s



---\\ Derniers fichiers modifi�s ou cr�es (Utilisateur) (O61)
O61 - LFC: 15/04/2013 - 13:43:45 -S-A- C:\Users\litzenbourger\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 [290]
O61 - LFC: 15/04/2013 - 13:45:45 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\PlayReady\mspr.hds [528384]
O61 - LFC: 15/04/2013 - 13:45:45 -S-A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\Content\AC9005F5466BD463DF06D711B370595F [1175]
O61 - LFC: 15/04/2013 - 13:45:45 -S-A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 [290]
O61 - LFC: 15/04/2013 - 13:45:45 -S-A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\AC9005F5466BD463DF06D711B370595F [316]
O61 - LFC: 15/04/2013 - 13:45:47 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\Database\edb.chk [8192]
O61 - LFC: 15/04/2013 - 13:45:48 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\U4KE4CRE\configuration[1].xml [2352]
O61 - LFC: 15/04/2013 - 13:45:48 -S-A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\Content\D725F3459E2275E9EA5871B92AD896D0 [23602]
O61 - LFC: 15/04/2013 - 13:45:48 -S-A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\D725F3459E2275E9EA5871B92AD896D0 [244]
O61 - LFC: 15/04/2013 - 13:45:51 -S-A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\Content\F063BF7EF604434CBE00FF198F0D9B10 [4363]
O61 - LFC: 15/04/2013 - 13:45:51 -S-A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\F063BF7EF604434CBE00FF198F0D9B10 [334]
O61 - LFC: 15/04/2013 - 13:46:34 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\3fb21d86-4035-4613-b62f-74edfc3cb355[1].jpg [28793]
O61 - LFC: 15/04/2013 - 13:46:34 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\music[2] [69613]
O61 - LFC: 15/04/2013 - 13:46:34 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\PABY495E\Spotlight-Music[1].xml [3492]
O61 - LFC: 15/04/2013 - 13:46:34 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\U4KE4CRE\314e449e-f547-4323-85c6-bd1e4ba27c72[1].jpg [12152]
O61 - LFC: 15/04/2013 - 13:46:34 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\HcWSZy8dkkihX0QWLZ6dqr1TAA5EFGUrvv0XE5jbcM [28793]
O61 - LFC: 15/04/2013 - 13:46:34 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\Z4VmT3XSgdE2U9j2gpktJ6LuSoxGiAIQKh5M4x3CM [12152]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\53IWSXOJ\browse[2].json [127299]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\53IWSXOJ\d907f12e-12b8-49c0-8ade-24369581338a[1].jpg [12194]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\53IWSXOJ\dd79b3ab-ce5e-46b6-a523-211bf2fb303c[1].jpg [4539]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\53IWSXOJ\imageCA4OOFX8.jpg [5377]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\53IWSXOJ\imageCAQ011G1.jpg [10076]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\53IWSXOJ\imageCAZS09JB.jpg [14861]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\53IWSXOJ\image[10].jpg [16785]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\53IWSXOJ\image[11].jpg [14185]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\8d54969f-a7c5-4e28-ba27-40787ee05d3e[1].jpg [22539]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\c466362a-9266-4cca-b031-e9cc6f9679d2[1].jpg [86300]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\f0d1caab-ac27-4c1e-a876-0c5ab17914a7[1].jpg [119447]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\imageCA2Q4TG6.jpg [17536]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\imageCAFCX5IF.jpg [28805]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\imageCAQ8QXLG.jpg [14904]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\imageCAXV0E8O.jpg [28139]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\PABY495E\433e66b8-8880-4eb6-9053-8df572f16617[1].jpg [11914]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\PABY495E\8223c54d-fb52-4589-b8fd-c3f91f98e44f[1].jpg [7933]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\PABY495E\imageCA5ENG22.jpg [6335]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\PABY495E\imageCAB06CBM.jpg [10592]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\PABY495E\imageCAN1VM0R.jpg [13465]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\PABY495E\imageCARJ1VIZ.jpg [4309]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\U4KE4CRE\b84368df-ee6d-48d1-a137-a21e7c6c1729[1].jpg [8910]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\U4KE4CRE\browse[2].json [73727]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\U4KE4CRE\fields[1].json [101]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\U4KE4CRE\image[6].jpg [6434]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\U4KE4CRE\image[8].jpg [6047]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\0L9TGiCmZWd6VpjYJCFdVnj3JjUhwNk7yWJvQ4p1c [6434]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\27rcdMEN7iH2lysccnGo1KFV5cSC2lq76tCWVhTFrPU [4539]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\DQZgRfZedDuSGHULgowY12yk3poFu0XErEyHzANvA [28139]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\E7zynpHS0ta6e3TIEf8fW2LHfwQbqbI9SOucbvMFFbA [6335]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\JCXjLxYxD3RSpFX2UQ0ttOY02rlwBwObx2wIQx4YSc [119447]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\QYigULmNXmCmetYLMs1yL2tHFgeEqOdZn0BQqzqh8Q [14185]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\REsuKerqj6JTWBUBDguIZdpLUOdJ8DQj7FknOnzOOI [6047]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\UrdDBOYaq89Li13jmm2tABfdxU92IMYfu9fQTvuW7qY [16785]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\WjNu7PaLR2iBQLyUMtBBYOQUwlGwXT3QC7pJnQmTg [14861]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\cMc3JaWOvJpFzliSYM7Gji6QGShlqSi1OWXRBiPCYQ [5377]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\ccJzAtQIJrAVc9m9KnqnytUIVrnCjACMZO53vqq9os [12194]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\cxQkYHdoP0Diqby0AzUttrjpAydq77Yv5Dim4U53C8 [11914]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\de3Lxr5vDHfpHDzUp1388PAt0KkgczN2t00PDnwcMeo [10592]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\fawRocxiNqpDpgGtGi2bdv8I5J033s8ysMWNfXAhGc [8910]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\feI518oSt6NuEzfpf5reQy1EvUQnVULsZx3ijv1Q [14904]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\g26Vq6IDXgZCI5JUjxeyJ5CpWZ7H0JUG4SJHFP5iUU [17536]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\iBIEi6LNpiI4MGF4elOt1WFXcqtnEJR1WwBFUorco [10076]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\iPDq2lS7a0A2rblwcC5SRiLt8LLyanlD6DwOVY [28805]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\kBO1AYSzEVxod88DhJaRr3qy9wFgrPHWlf6XMliFLY [13465]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\mSz1THb6wCpTDi9WlJtoeGjmSfjlQFwkwgcODlepWDA [7933]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\rBLSWca8GNVvSad6FGtayEGOxALDg0963tgDibY [86300]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\rrw2hEtu4HUX8i5HLub5R5wRDyuzMrjZPKdKMiKE [22539]
O61 - LFC: 15/04/2013 - 13:46:35 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\wlVw0G5f3PBI43jgCfAySUSMeuNd0QEBmqqpZmfag [4309]
O61 - LFC: 15/04/2013 - 13:46:36 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\53IWSXOJ\imageCAEPFLXL.jpg [6751]
O61 - LFC: 15/04/2013 - 13:46:36 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\imageCAZ1L4L0.jpg [4161]
O61 - LFC: 15/04/2013 - 13:46:36 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\PABY495E\imageCABGMHN7.jpg [22838]
O61 - LFC: 15/04/2013 - 13:46:36 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\U4KE4CRE\imageCA24UG3U.jpg [34076]
O61 - LFC: 15/04/2013 - 13:46:36 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\U4KE4CRE\imageCAIBJ5I6.jpg [5626]
O61 - LFC: 15/04/2013 - 13:46:36 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\U4KE4CRE\image[10].jpg [29089]
O61 - LFC: 15/04/2013 - 13:46:36 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\2HPQpsJFuK8C03Yr42fVdee8M2ER6tTL5QT4rx0LMiQ [5626]
O61 - LFC: 15/04/2013 - 13:46:36 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\2fUZvRmyi4l1AZxFL8OXrrFq5iCAPxgWTI79fes6Ov4 [4161]
O61 - LFC: 15/04/2013 - 13:46:36 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\8HH5pyDaAmrxBAldLYQDYcoRsAsgYXDGI1NvdwLXh0 [22838]
O61 - LFC: 15/04/2013 - 13:46:36 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\8xRl2IeF70WYXmayOvdU8rEslpspTXpjLc8zrNXCOM [34076]
O61 - LFC: 15/04/2013 - 13:46:36 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\cRa8HQg8BVPOA0tA8yIWArAl5sqE0tMPxTQhgoiU [6751]
O61 - LFC: 15/04/2013 - 13:46:36 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\k9mRr2Ax23WhgiQ3P01uU03SM4kW0xZ7ZCihnOtE [29089]
O61 - LFC: 15/04/2013 - 13:46:39 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\browse[2].json [156976]
O61 - LFC: 15/04/2013 - 13:46:39 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\browse[3].json [151470]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\53IWSXOJ\imageCA12U5H1.jpg [3762]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\53IWSXOJ\imageCA9GN343.jpg [1862]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\53IWSXOJ\imageCAC0RAE9.jpg [2983]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\53IWSXOJ\imageCAGZUSOV.jpg [5514]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\browse[1].json [143740]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\imageCA9QZTYG.jpg [3922]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\imageCAE5NVDR.jpg [3756]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\imageCAF4UBWI.jpg [1445]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\imageCAIT0HTO.jpg [3544]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\N4JLYPUO\imageCAUPUETM.jpg [3518]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\PABY495E\imageCA86HPDX.jpg [3431]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\PABY495E\imageCAJSABSY.jpg [2525]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\PABY495E\imageCAKUTR3G.jpg [4479]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\PABY495E\imageCAPET46S.jpg [2592]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\PABY495E\imageCAYUXZUQ.jpg [4588]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\U4KE4CRE\imageCA6WBPUC.jpg [2995]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\U4KE4CRE\imageCA87LW9A.jpg [2995]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\U4KE4CRE\imageCAMPTM05.jpg [3052]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\INetCache\U4KE4CRE\imageCAQU4MIN.jpg [4900]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\1YgX9lyI4rhOdW2Kq17VLa2ZvbGYIhKs4LBclLbKyY [2983]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\6wIjXbRziMp1f6mrdqvGcNRLINk6uZN8HdZKgRhXM [2995]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\AGuQ96DgTKFu7FLIkYN7CY2eYtcNfjKl17qBq9qmg [2592]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\AdBjJkcLGGoDnzHQW3OjMxDXaliwhXw23xvscfLymYE [3518]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\CM2ieUnG2upOai6DoVygfWkKV7M3jQLDblLTvUVps9M [4479]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\KMhd6jThP67ytYjLbm0fUp5PbpdUNVgvPLGxvkdjg [3052]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\Lq2532wCn9dopnfovkSer7ADYCzpe0xBFQ1L5K2Q [3544]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\M3DX7c2ROGqYmEvqcniORHGsFli6lAjgpfoZt4Fq00 [5514]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\S1AFAjWR0dL4q2tef2qnrCihv7pIywqHBjS78Sb6GA [4900]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\e0WH6fuxGzzLszXDhKNOYZnaHfH0NYd77qo1HQhRo [3431]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\gin4DgnFm5cpY4n5ZacdRaXAvI9Kv4huslMCnws3e5o [2995]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\icT9opSjHuNFTLkLIXFVdB9xTbv2JE8ypHo0bdVE4 [4588]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\kQtt85eMCMU8NyRlCdrlXGD09NXhv3Cn2pi6g9gW7I [3922]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\l9OmFBlhOEZOYVun6oUXW10tXcjk2R9g9iJeXnQCk [3756]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\tADQ6Grl1aFSsFeXmx4emZctMYOl9haC0TQuNrABodw [2525]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\tXDwOG1T59LmIKa62FPWDCb30u0XdGTxmMwrNIsXodU [3762]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\u3Ud7jpH4UgT7VPTilAYpzlaZNu8805Sf6ISlorLg0 [1862]
O61 - LFC: 15/04/2013 - 13:46:40 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\ImageCache\20\yF3TBgNoKZdFyHaG3M5gfeoGP5EZtXOpSy5oxfu1AM [1445]
O61 - LFC: 15/04/2013 - 13:49:57 ---A- C:\Users\litzenbourger\AppData\Local\Temp\MSI712f9.LOG [450]
O61 - LFC: 15/04/2013 - 13:52:16 -S-A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 [302]
O61 - LFC: 15/04/2013 - 21:12:59 ---A- C:\Users\litzenbourger\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\Indexed\LiveComm\0bbbe5faa1a0aad5\120712-0049\Mail\66\1d000066\20000587_7a147efd7cdf8b.eml [4869]
O61 - LFC: 15/04/2013 - 21:13:02 ---A- C:\Users\litzenbourger\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\Indexed\LiveComm\0bbbe5faa1a0aad5\120712-0049\Mail\66\1d00006e\20000588_c01306ae3405df.eml [4869]
O61 - LFC: 16/04/2013 - 02:51:47 ---A- C:\Users\litzenbourger\AppData\Local\Packages\09B6C2D8.TheTreasuresofMontezuma3_hbbh9szp6erha\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:47 ---A- C:\Users\litzenbourger\AppData\Local\Packages\7digitalLtd.7digitalMusicStore_qv1vc61z2t2b4\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:48 ---A- C:\Users\litzenbourger\AppData\Local\Packages\AcerIncorporated.PackardBellExplorer_48frkmn4z8aw4\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:49 ---A- C:\Users\litzenbourger\AppData\Local\Packages\AMZNMobileLLC.KindleforWindows8_stfe6vwa9jnbp\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:49 ---A- C:\Users\litzenbourger\AppData\Local\Packages\BrowserChoice_cw5n1h2txyewy\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:50 ---A- C:\Users\litzenbourger\AppData\Local\Packages\CyberLinkCorp.ac.SocialNetworks_ypz87dpxkv292\Settings\settings.dat [262144]
O61 - LFC: 16/04/2013 - 02:51:50 ---A- C:\Users\litzenbourger\AppData\Local\Packages\CyberLinkCorp.ac.VideoWebCamera_ypz87dpxkv292\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:51 ---A- C:\Users\litzenbourger\AppData\Local\Packages\esobiIncorporated.newsXpressoMetro_sngswjb5h6fyg\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:53 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Evernote.Evernote_q4d96b2w5wcc2\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:53 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Evernote.Skitch_q4d96b2w5wcc2\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:53 ---A- C:\Users\litzenbourger\AppData\Local\Packages\GAMELOFTSA.SharkDash_0pp20fcewvvtj\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:53 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.Camera_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:54 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.BingFinance_8wekyb3d8bbwe\Settings\settings.dat [262144]
O61 - LFC: 16/04/2013 - 02:51:54 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.BingMaps_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:54 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.FreshPaint_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:54 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.Media.PlayReadyClient_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:55 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.BingNews_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:55 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.BingSports_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:55 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.MicrosoftMahjong_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:55 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:55 ---A- C:\Users\litzenbourger\AppData\Local\Packages\microsoft.microsoftskydrive_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:56 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.BingTravel_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:56 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.Reader_8wekyb3d8bbwe\Settings\settings.dat [262144]
O61 - LFC: 16/04/2013 - 02:51:56 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:57 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:57 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.Bing_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:57 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.Taptiles_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:58 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.VCLibs.110.00_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:59 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.WinJS.1.0_8wekyb3d8bbwe\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:51:59 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.XboxLIVEGames_8wekyb3d8bbwe\Settings\settings.dat [262144]
O61 - LFC: 16/04/2013 - 02:51:59 ---A- C:\Users\litzenbourger\AppData\Local\Packages\microsoft.windowsphotos_8wekyb3d8bbwe\Settings\settings.dat [262144]
O61 - LFC: 16/04/2013 - 02:52:00 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat [262144]
O61 - LFC: 16/04/2013 - 02:52:00 ---A- C:\Users\litzenbourger\AppData\Local\Packages\WinStore_cw5n1h2txyewy\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:52:00 ---A- C:\Users\litzenbourger\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:52:01 ---A- C:\Users\litzenbourger\AppData\Local\Packages\ZeptoLabUKLimited.CutTheRope_sq9zxnwrk84pj\Settings\settings.dat [8192]
O61 - LFC: 16/04/2013 - 02:56:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002945 [17531]
O61 - LFC: 16/04/2013 - 02:58:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002946 [17781]
O61 - LFC: 16/04/2013 - 02:58:45 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002947 [23511]
O61 - LFC: 16/04/2013 - 02:59:00 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\Database\EntClientDb.edb [5783552]
O61 - LFC: 16/04/2013 - 02:59:00 ---A- C:\Users\litzenbourger\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat [262144]
O61 - LFC: 16/04/2013 - 03:01:49 ---A- C:\Users\litzenbourger\Links\Desktop.lnk [473]
O61 - LFC: 16/04/2013 - 03:01:49 ---A- C:\Users\litzenbourger\Links\Downloads.lnk [944]
O61 - LFC: 16/04/2013 - 03:01:49 ---A- C:\Users\litzenbourger\Links\RecentPlaces.lnk [383]
O61 - LFC: 16/04/2013 - 03:03:14 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002948 [27682]
O61 - LFC: 16/04/2013 - 03:03:14 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002949 [178285]
O61 - LFC: 16/04/2013 - 03:03:23 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00294b [18166]
O61 - LFC: 16/04/2013 - 03:03:23 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00294c [34268]
O61 - LFC: 16/04/2013 - 03:03:23 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00294d [35529]
O61 - LFC: 16/04/2013 - 03:03:23 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00294e [169509]
O61 - LFC: 16/04/2013 - 03:03:23 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00294f [114880]
O61 - LFC: 16/04/2013 - 03:05:27 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002950 [38286]
O61 - LFC: 16/04/2013 - 03:05:40 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002951 [20931]
O61 - LFC: 16/04/2013 - 03:05:40 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002952 [16644]
O61 - LFC: 16/04/2013 - 03:06:04 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002953 [37917]
O61 - LFC: 16/04/2013 - 03:06:04 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002954 [194160]
O61 - LFC: 16/04/2013 - 04:09:25 ---A- C:\Users\litzenbourger\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\Microsoft.WindowsLive.Mail.etl [786432]
O61 - LFC: 17/04/2013 - 15:33:47 ---A- C:\Users\litzenbourger\AppData\Local\Temp\74A5ECB7-41E6-469C-8E3C-2BD99A247A46.dat [1242]
O61 - LFC: 17/04/2013 - 15:34:42 -SHA- C:\Users\litzenbourger\AppData\Roaming\Microsoft\LastFlashConfig.wfc [1702]
O61 - LFC: 17/04/2013 - 15:35:32 ---A- C:\Users\litzenbourger\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\0bbbe5faa1a0aad5\120712-0049\DBStore\edb.chk [8192]
O61 - LFC: 17/04/2013 - 15:35:38 -S-A- C:\Users\litzenbourger\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 [6342]
O61 - LFC: 17/04/2013 - 15:36:49 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002955 [20953]
O61 - LFC: 17/04/2013 - 15:38:51 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Session Storage\000391.sst [159]
O61 - LFC: 17/04/2013 - 15:38:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002958 [63266]
O61 - LFC: 17/04/2013 - 15:38:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002959 [16911]
O61 - LFC: 17/04/2013 - 15:38:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00295a [18052]
O61 - LFC: 17/04/2013 - 15:38:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00295b [28078]
O61 - LFC: 17/04/2013 - 15:38:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00295c [24707]
O61 - LFC: 17/04/2013 - 15:38:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00295d [47058]
O61 - LFC: 17/04/2013 - 15:38:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00295e [38960]
O61 - LFC: 17/04/2013 - 15:38:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00295f [79840]
O61 - LFC: 17/04/2013 - 15:38:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002960 [45768]
O61 - LFC: 17/04/2013 - 15:38:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002961 [18875]
O61 - LFC: 17/04/2013 - 15:38:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002962 [17211]
O61 - LFC: 17/04/2013 - 15:38:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002963 [36227]
O61 - LFC: 17/04/2013 - 15:38:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002964 [35107]
O61 - LFC: 17/04/2013 - 15:38:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002965 [38042]
O61 - LFC: 17/04/2013 - 15:38:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002966 [96059]
O61 - LFC: 17/04/2013 - 15:38:54 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002967 [55477]
O61 - LFC: 17/04/2013 - 15:38:54 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002968 [139395]
O61 - LFC: 17/04/2013 - 15:38:54 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002969 [17225]
O61 - LFC: 17/04/2013 - 15:38:55 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00296c [64578]
O61 - LFC: 17/04/2013 - 15:38:57 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00296e [20299]
O61 - LFC: 17/04/2013 - 15:38:58 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00296f [28060]
O61 - LFC: 17/04/2013 - 15:39:00 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002971 [23395]
O61 - LFC: 17/04/2013 - 15:39:01 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002972 [24670]
O61 - LFC: 17/04/2013 - 15:39:01 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002973 [42418]
O61 - LFC: 17/04/2013 - 15:39:01 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002974 [38406]
O61 - LFC: 17/04/2013 - 15:39:02 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002975 [17826]
O61 - LFC: 17/04/2013 - 15:39:03 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002976 [23873]
O61 - LFC: 17/04/2013 - 15:39:14 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002977 [21205]
O61 - LFC: 17/04/2013 - 15:39:14 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002978 [24802]
O61 - LFC: 17/04/2013 - 15:39:15 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002979 [49270]
O61 - LFC: 17/04/2013 - 15:39:16 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00297a [724039]
O61 - LFC: 17/04/2013 - 15:39:18 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00297b [2872267]
O61 - LFC: 17/04/2013 - 15:39:29 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00297c [18441]
O61 - LFC: 17/04/2013 - 15:39:31 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00297d [23303]
O61 - LFC: 17/04/2013 - 15:39:31 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00297e [27585]
O61 - LFC: 17/04/2013 - 15:39:31 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00297f [36929]
O61 - LFC: 17/04/2013 - 15:39:31 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002980 [22935]
O61 - LFC: 17/04/2013 - 15:39:35 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002981 [17231]
O61 - LFC: 17/04/2013 - 15:39:36 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002982 [37914]
O61 - LFC: 17/04/2013 - 15:39:40 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002983 [25074]
O61 - LFC: 17/04/2013 - 15:39:40 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002984 [63036]
O61 - LFC: 17/04/2013 - 15:39:41 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002985 [17256]
O61 - LFC: 17/04/2013 - 15:39:41 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002986 [23303]
O61 - LFC: 17/04/2013 - 15:39:42 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002987 [38201]
O61 - LFC: 17/04/2013 - 15:41:05 ---A- C:\Users\litzenbourger\AppData\Local\Temp\810D22C6-F40C-403F-A025-BF080740BA37.dat [1242]
O61 - LFC: 17/04/2013 - 15:41:35 ---A- C:\Users\litzenbourger\AppData\Local\Temp\EAC7D6FD-70C0-4646-BB74-C3E69EB1B534.dat [1242]
O61 - LFC: 17/04/2013 - 15:42:43 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002988 [63271]
O61 - LFC: 17/04/2013 - 15:42:43 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002989 [16961]
O61 - LFC: 17/04/2013 - 15:42:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00298a [23303]
O61 - LFC: 17/04/2013 - 15:42:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00298b [103804]
O61 - LFC: 17/04/2013 - 15:42:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00298c [44706]
O61 - LFC: 17/04/2013 - 15:42:45 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00298d [63453]
O61 - LFC: 17/04/2013 - 15:42:46 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00298e [61583]
O61 - LFC: 17/04/2013 - 15:43:15 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00298f [25604]
O61 - LFC: 17/04/2013 - 15:43:16 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002990 [31688]
O61 - LFC: 17/04/2013 - 15:43:34 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002991 [30009]
O61 - LFC: 17/04/2013 - 15:43:35 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002992 [40794]
O61 - LFC: 17/04/2013 - 15:43:45 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002993 [26046]
O61 - LFC: 17/04/2013 - 15:43:53 ---A- C:\Users\litzenbourger\AppData\Local\Temp\80234093-A5C2-432F-AC3E-D6B189708F41.dat [1242]
O61 - LFC: 17/04/2013 - 15:44:18 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002995 [16529]
O61 - LFC: 17/04/2013 - 15:44:18 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002996 [25022]
O61 - LFC: 17/04/2013 - 15:44:21 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002998 [16629]
O61 - LFC: 17/04/2013 - 15:44:34 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002999 [16640]
O61 - LFC: 17/04/2013 - 15:44:37 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00299a [16603]
O61 - LFC: 17/04/2013 - 15:47:47 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00299b [18835]
O61 - LFC: 17/04/2013 - 15:47:48 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00299c [30246]
O61 - LFC: 17/04/2013 - 15:47:48 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00299d [33637]
O61 - LFC: 17/04/2013 - 15:47:48 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00299e [16857]
O61 - LFC: 17/04/2013 - 15:47:48 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_00299f [66462]
O61 - LFC: 17/04/2013 - 15:47:48 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029a0 [21572]
O61 - LFC: 17/04/2013 - 15:47:49 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029a1 [17184]
O61 - LFC: 17/04/2013 - 15:47:49 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029a2 [22376]
O61 - LFC: 17/04/2013 - 15:47:49 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029a3 [21890]
O61 - LFC: 17/04/2013 - 15:47:51 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029a4 [132117]
O61 - LFC: 17/04/2013 - 15:47:51 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029a5 [28759]
O61 - LFC: 17/04/2013 - 15:47:59 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\QuotaManager [15360]
O61 - LFC: 17/04/2013 - 15:47:59 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\QuotaManager-journal [6704]
O61 - LFC: 17/04/2013 - 15:49:40 ---A- C:\Users\litzenbourger\AppData\Local\Temp\3F35EDDE-9A3C-4305-8C79-E6DA8C85900D.dat [1242]
O61 - LFC: 17/04/2013 - 15:49:43 ---A- C:\Users\litzenbourger\AppData\Local\Temp\68066AD0-FB23-4518-8743-610C255358AF.dat [1242]
O61 - LFC: 17/04/2013 - 15:52:02 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Extension State\000354.sst [292]
O61 - LFC: 17/04/2013 - 15:52:13 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Session Storage\000396.sst [159]
O61 - LFC: 17/04/2013 - 15:52:17 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029a6 [40367]
O61 - LFC: 17/04/2013 - 15:52:19 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029a8 [16721]
O61 - LFC: 17/04/2013 - 15:52:20 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029a9 [139728]
O61 - LFC: 17/04/2013 - 15:52:22 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029ab [16415]
O61 - LFC: 17/04/2013 - 15:52:24 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029ac [44841]
O61 - LFC: 17/04/2013 - 15:52:34 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029ad [16489]
O61 - LFC: 17/04/2013 - 15:52:38 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029ae [16790]
O61 - LFC: 17/04/2013 - 15:54:51 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029af [31940]
O61 - LFC: 17/04/2013 - 15:54:51 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029b0 [18065]
O61 - LFC: 17/04/2013 - 15:54:51 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029b1 [36904]
O61 - LFC: 17/04/2013 - 15:54:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029b2 [30494]
O61 - LFC: 17/04/2013 - 15:54:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029b3 [20021]
O61 - LFC: 17/04/2013 - 15:54:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029b4 [23525]
O61 - LFC: 17/04/2013 - 15:54:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029b5 [18442]
O61 - LFC: 17/04/2013 - 15:54:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029b6 [19721]
O61 - LFC: 17/04/2013 - 15:54:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029b7 [104926]
O61 - LFC: 17/04/2013 - 15:54:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029b8 [52278]
O61 - LFC: 17/04/2013 - 15:54:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029b9 [69754]
O61 - LFC: 17/04/2013 - 15:54:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029ba [26443]
O61 - LFC: 17/04/2013 - 15:54:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029bb [22407]
O61 - LFC: 17/04/2013 - 15:54:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029bc [27865]
O61 - LFC: 17/04/2013 - 15:54:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029bd [28435]
O61 - LFC: 17/04/2013 - 15:54:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029be [16542]
O61 - LFC: 17/04/2013 - 15:54:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029bf [21226]
O61 - LFC: 17/04/2013 - 15:55:17 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029c0 [22949]
O61 - LFC: 17/04/2013 - 15:55:18 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029c1 [26377]
O61 - LFC: 17/04/2013 - 16:42:08 ---A- C:\Users\litzenbourger\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2013-04-17 (16-49-13).txt [2122]
O61 - LFC: 17/04/2013 - 17:29:16 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Shortcuts [20480]
O61 - LFC: 17/04/2013 - 17:29:16 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Shortcuts-journal [12824]
O61 - LFC: 17/04/2013 - 17:29:17 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029c2 [67699]
O61 - LFC: 17/04/2013 - 17:29:17 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029c3 [35603]
O61 - LFC: 17/04/2013 - 17:29:17 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029c4 [181431]
O61 - LFC: 17/04/2013 - 17:29:18 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029c5 [22082]
O61 - LFC: 17/04/2013 - 17:29:18 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029c6 [19132]
O61 - LFC: 17/04/2013 - 17:29:19 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029c7 [75700]
O61 - LFC: 17/04/2013 - 17:29:21 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029c8 [88975]
O61 - LFC: 17/04/2013 - 17:29:23 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029c9 [35134]
O61 - LFC: 17/04/2013 - 17:29:23 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029ca [26932]
O61 - LFC: 17/04/2013 - 17:29:23 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029cb [53602]
O61 - LFC: 17/04/2013 - 17:29:23 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029cc [219711]
O61 - LFC: 17/04/2013 - 17:29:23 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029cd [21943]
O61 - LFC: 17/04/2013 - 17:29:24 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029ce [48514]
O61 - LFC: 17/04/2013 - 17:29:24 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029cf [123784]
O61 - LFC: 17/04/2013 - 17:29:24 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029d0 [228184]
O61 - LFC: 17/04/2013 - 17:29:25 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029d1 [40513]
O61 - LFC: 17/04/2013 - 17:29:25 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029d2 [39418]
O61 - LFC: 17/04/2013 - 17:29:26 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029d3 [27882]
O61 - LFC: 17/04/2013 - 17:29:26 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029d4 [27383]
O61 - LFC: 17/04/2013 - 17:29:28 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\http_disqus.com_0.localstorage [3072]
O61 - LFC: 17/04/2013 - 17:29:28 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\http_disqus.com_0.localstorage-journal [3608]
O61 - LFC: 17/04/2013 - 17:29:31 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029d5 [27186]
O61 - LFC: 17/04/2013 - 17:29:32 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029d6 [36906]
O61 - LFC: 17/04/2013 - 17:29:32 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029d7 [22935]
O61 - LFC: 17/04/2013 - 17:30:10 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029d8 [26372]
O61 - LFC: 17/04/2013 - 17:30:10 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029d9 [37594]
O61 - LFC: 17/04/2013 - 17:30:10 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029da [23303]
O61 - LFC: 17/04/2013 - 17:30:15 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029db [124355]
O61 - LFC: 17/04/2013 - 17:30:18 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029dc [101674]
O61 - LFC: 17/04/2013 - 17:30:18 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\History Index 2013-03 [1306624]
O61 - LFC: 17/04/2013 - 17:30:20 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029dd [101684]
O61 - LFC: 17/04/2013 - 17:31:40 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029de [17184]
O61 - LFC: 17/04/2013 - 17:31:42 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029df [41177]
O61 - LFC: 17/04/2013 - 17:31:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029e0 [23395]
O61 - LFC: 17/04/2013 - 17:54:39 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029e1 [25100]
O61 - LFC: 17/04/2013 - 17:54:39 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029e2 [21415]
O61 - LFC: 17/04/2013 - 17:54:39 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029e3 [17020]
O61 - LFC: 17/04/2013 - 17:54:57 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029e4 [16886]
O61 - LFC: 17/04/2013 - 17:54:59 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\http_www.commentcamarche.net_0.localstorage [3072]
O61 - LFC: 17/04/2013 - 17:54:59 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\http_www.commentcamarche.net_0.localstorage-journal [3608]
O61 - LFC: 17/04/2013 - 18:08:56 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029e5 [19862]
O61 - LFC: 17/04/2013 - 18:08:59 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029e6 [60497]
O61 - LFC: 17/04/2013 - 18:09:15 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029e7 [22457]
O61 - LFC: 17/04/2013 - 18:09:27 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029e8 [22616]
O61 - LFC: 17/04/2013 - 18:09:28 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029e9 [64293]
O61 - LFC: 17/04/2013 - 18:09:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029ea [22469]
O61 - LFC: 17/04/2013 - 18:09:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029eb [64514]
O61 - LFC: 17/04/2013 - 18:10:04 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Last Tabs [149685]
O61 - LFC: 17/04/2013 - 19:09:43 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Network Action Predictor [118784]
O61 - LFC: 17/04/2013 - 19:09:43 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Network Action Predictor-journal [16384]
O61 - LFC: 17/04/2013 - 19:09:54 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029ec [22063]
O61 - LFC: 17/04/2013 - 19:09:55 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029ed [22981]
O61 - LFC: 17/04/2013 - 19:10:00 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029ee [22398]
O61 - LFC: 17/04/2013 - 19:10:01 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029ef [64662]
O61 - LFC: 17/04/2013 - 19:10:01 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029f0 [28060]
O61 - LFC: 17/04/2013 - 19:10:03 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029f1 [135810]
O61 - LFC: 17/04/2013 - 19:10:04 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029f2 [19069]
O61 - LFC: 17/04/2013 - 19:10:04 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029f3 [22195]
O61 - LFC: 17/04/2013 - 19:10:36 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029f4 [46714]
O61 - LFC: 17/04/2013 - 19:10:37 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029f5 [108007]
O61 - LFC: 17/04/2013 - 19:10:52 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029f6 [17093]
O61 - LFC: 17/04/2013 - 19:11:30 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029f7 [22537]
O61 - LFC: 17/04/2013 - 19:12:04 ---A- C:\Users\litzenbourger\AppData\Local\Temp\55E9D301-AE51-4224-9FAA-9356FD7772FE.dat [1242]
O61 - LFC: 17/04/2013 - 19:16:02 -S-A- C:\Users\litzenbourger\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\F063BF7EF604434CBE00FF198F0D9B10 [334]
O61 - LFC: 17/04/2013 - 19:16:27 ---A- C:\Users\litzenbourger\AppData\Local\Temp\dump.dat [2301952]
O61 - LFC: 17/04/2013 - 19:21:21 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029f8 [22324]
O61 - LFC: 17/04/2013 - 19:21:22 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029f9 [39242]
O61 - LFC: 17/04/2013 - 19:21:25 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029fa [22508]
O61 - LFC: 17/04/2013 - 19:21:46 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Current Tabs [102336]
O61 - LFC: 17/04/2013 - 19:21:46 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Session Storage\LOG.old [201640]
O61 - LFC: 17/04/2013 - 19:21:46 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Visited Links [131072]
O61 - LFC: 17/04/2013 - 19:21:47 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Extension State\LOG.old [194367]
O61 - LFC: 17/04/2013 - 19:21:47 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Last Session [680530]
O61 - LFC: 17/04/2013 - 19:21:54 --HA- C:\Users\litzenbourger\AppData\Local\IconCache.db [215094]
O61 - LFC: 17/04/2013 - 19:21:59 ---A- C:\Users\litzenbourger\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveCommLast.etl [262144]
O61 - LFC: 18/04/2013 - 13:46:45 ----- C:\Users\litzenbourger\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm.etl [0]
O61 - LFC: 18/04/2013 - 13:47:23 ---A- C:\Users\litzenbourger\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\INetCookies\YS26UD4D.txt [196]
O61 - LFC: 18/04/2013 - 13:47:38 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\History Provider Cache [44119]
O61 - LFC: 18/04/2013 - 13:47:41 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029fb [36440]
O61 - LFC: 18/04/2013 - 13:47:41 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Extension State\CURRENT [16]
O61 - LFC: 18/04/2013 - 13:47:41 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Extension State\MANIFEST-000358 [2584]
O61 - LFC: 18/04/2013 - 13:47:42 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029fc [39088]
O61 - LFC: 18/04/2013 - 13:47:46 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Managed Mode Settings [8]
O61 - LFC: 18/04/2013 - 13:47:50 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Favicons [751616]
O61 - LFC: 18/04/2013 - 13:47:50 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Favicons-journal [16384]
O61 - LFC: 18/04/2013 - 13:47:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029fd [21415]
O61 - LFC: 18/04/2013 - 13:47:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Session Storage\CURRENT [16]
O61 - LFC: 18/04/2013 - 13:47:53 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Session Storage\MANIFEST-000400 [3540]
O61 - LFC: 18/04/2013 - 13:47:54 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029fe [19407]
O61 - LFC: 18/04/2013 - 13:47:54 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_0029ff [18288]
O61 - LFC: 18/04/2013 - 13:47:54 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002a00 [80446]
O61 - LFC: 18/04/2013 - 13:47:54 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002a01 [23846]
O61 - LFC: 18/04/2013 - 13:47:55 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002a02 [70671]
O61 - LFC: 18/04/2013 - 13:47:55 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002a03 [73480]
O61 - LFC: 18/04/2013 - 13:47:56 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002a04 [59341]
O61 - LFC: 18/04/2013 - 13:47:57 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002a05 [26123]
O61 - LFC: 18/04/2013 - 13:47:57 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002a06 [22607]
O61 - LFC: 18/04/2013 - 13:48:00 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002a07 [47020]
O61 - LFC: 18/04/2013 - 13:48:03 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002a08 [47020]
O61 - LFC: 18/04/2013 - 13:48:15 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Web Data [92160]
O61 - LFC: 18/04/2013 - 13:48:15 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Web Data-journal [16384]
O61 - LFC: 18/04/2013 - 13:48:24 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002a09 [24668]
O61 - LFC: 18/04/2013 - 13:48:24 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cache\f_002a0a [44891]
O61 - LFC: 18/04/2013 - 13:48:27 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\History [716800]
O61 - LFC: 18/04/2013 - 13:48:27 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\History Index 2013-04 [4722688]
O61 - LFC: 18/04/2013 - 13:48:27 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\History Index 2013-04-journal [37448]
O61 - LFC: 18/04/2013 - 13:48:28 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\TransportSecurity [1659]
O61 - LFC: 18/04/2013 - 13:48:46 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cookies [573440]
O61 - LFC: 18/04/2013 - 13:48:46 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Cookies-journal [16384]
O61 - LFC: 18/04/2013 - 13:49:24 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\History-journal [29240]
O61 - LFC: 18/04/2013 - 13:50:05 ---A- C:\Users\litzenbourger\AppData\Local\Temp\AEC99C33-D111-4EC8-B057-679318FFE1A7.dat [1242]
O61 - LFC: 18/04/2013 - 13:50:13 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Safe Browsing Download [1186636]
O61 - LFC: 18/04/2013 - 13:50:14 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom [8646008]
O61 - LFC: 18/04/2013 - 13:50:14 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set [1558590]
O61 - LFC: 18/04/2013 - 13:50:14 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Safe Browsing Csd Whitelist [134668]
O61 - LFC: 18/04/2013 - 13:50:14 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Safe Browsing Download Whitelist [19852]
O61 - LFC: 18/04/2013 - 13:50:40 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies [6144]
O61 - LFC: 18/04/2013 - 13:50:41 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies-journal [2576]
O61 - LFC: 18/04/2013 - 13:52:54 ---A- C:\Users\litzenbourger\AppData\Local\Temp\8EDC482D-EA2F-4589-A6FE-98C747B87C3D.dat [1242]
O61 - LFC: 18/04/2013 - 13:53:33 ---A- C:\Users\litzenbourger\AppData\Local\Temp\844E87DE-997B-42D1-8733-9849278268DA.dat [1242]
O61 - LFC: 18/04/2013 - 13:53:43 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [267652]
O61 - LFC: 18/04/2013 - 13:53:43 ---A- C:\Users\litzenbourger\AppData\Local\Temp\CRX_75DAF8CB7768\crl-set [1590]
O61 - LFC: 18/04/2013 - 13:53:43 ---A- C:\Users\litzenbourger\AppData\Local\Temp\CRX_75DAF8CB7768\manifest.json [34]
O61 - LFC: 18/04/2013 - 13:53:49 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Local State [90224]
O61 - LFC: 18/04/2013 - 13:53:51 ---A- C:\Users\litzenbourger\AppData\Local\Temp\945F0F18-F4BD-4BBA-BAE3-4FBDF8402438.dat [1242]
O61 - LFC: 18/04/2013 - 13:53:52 -S-A- C:\Users\litzenbourger\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 [340]
O61 - LFC: 18/04/2013 - 13:53:52 -S-A- C:\Users\litzenbourger\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\MetaData\7D1F03728133589A90656A87E482B21F [254]
O61 - LFC: 18/04/2013 - 13:53:53 ---A- C:\Users\litzenbourger\AppData\Local\Temp\DEE9A634-A7DD-4500-89C1-42043ED6C4DE.dat [1242]
O61 - LFC: 18/04/2013 - 13:55:10 ---A- C:\Users\litzenbourger\AppData\Local\Temp\7CA194D6-C92B-4184-9A0F-2F94E461D5C6.dat [1242]
O61 - LFC: 18/04/2013 - 13:55:12 ---A- C:\Users\litzenbourger\AppData\Local\Temp\33EFDB1E-881B-4CA2-A56B-922B06C1D4B0.dat [1242]
O61 - LFC: 18/04/2013 - 13:56:59 ---A- C:\Users\litzenbourger\AppData\Local\Temp\A132D6D3-0C3D-49DB-8F93-29EBBD8DD229.dat [1242]
O61 - LFC: 18/04/2013 - 13:57:01 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Preferences [103085]
O61 - LFC: 18/04/2013 - 13:58:07 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Extension State\LOG [0]
O61 - LFC: 18/04/2013 - 13:58:48 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Session Storage\LOG [0]
O61 - LFC: 19/07/2025 - 11:26:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.0\background.html [320]
O61 - LFC: 19/07/2025 - 11:26:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.0\ci.bg.pack.js [8346]
O61 - LFC: 19/07/2025 - 11:26:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.0\ci.browser.helper.js [340]
O61 - LFC: 19/07/2025 - 11:26:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.0\ci.content.pack.js [2428]
O61 - LFC: 19/07/2025 - 11:26:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.0\content.js [9721]
O61 - LFC: 19/07/2025 - 11:26:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.0\icon128.png [12003]
O61 - LFC: 19/07/2025 - 11:26:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.0\icon16.png [640]
O61 - LFC: 19/07/2025 - 11:26:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.0\icon48.png [2912]
O61 - LFC: 19/07/2025 - 11:26:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.0\jquery-1.6.2.min.js [91731]
O61 - LFC: 19/07/2025 - 11:26:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.0\jquery.uuid.js [454]
O61 - LFC: 19/07/2025 - 11:26:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.0\mz\background.js [2162]
O61 - LFC: 19/07/2025 - 11:26:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.0\mz\content.js [1837]
O61 - LFC: 19/07/2025 - 11:26:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.0\popup.js [66]
O61 - LFC: 19/07/2025 - 11:26:44 ---A- C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.0\settings.json [183]
~ 19 Fichiers temporaires (Temporary files)
~ Files: 441 Scanned in 02mn 10s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS: Scanned in 00mn 00s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
~ FASS Keys: 19 Scanned in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: prefs.js [litzenbourger - xhb8l9wj.default] user_pref("extensions.helperbar.Country", "France");
O69 - SBI: prefs.js [litzenbourger - xhb8l9wj.default] user_pref("extensions.helperbar.DockingPositionDown", false);
O69 - SBI: prefs.js [litzenbourger - xhb8l9wj.default] user_pref("extensions.helperbar.UserID", "5688d812-4270-42cf-9d25-950d9fe0b398");
O69 - SBI: prefs.js [litzenbourger - xhb8l9wj.default] user_pref("extensions.helperbar.Visibility", true);
O69 - SBI: prefs.js [litzenbourger - xhb8l9wj.default] user_pref("weboftrust.search.ask.display", "Ask.com Web Search");
O69 - SBI: SearchScopes [HKCU] {08129A8E-EBE2-41B2-99FE-5AE1BEFB9617} - (Bing) - http://www.bing.com
~ Keys: Scanned in 00mn 00s



---\\ Crack & Keygen Files (O82)
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_1.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_blue_1.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_blue_2.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_blue_3.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_green_1.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_green_2.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_green_3.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_red_1.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_red_2.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_red_3.pnge
C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N6CMYBFF\zcache.zgncdn.com\#farm2-1\icons\icon_crafting#\_cracker_ladybug_tomato.jxr.sol
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_1.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_blue_1.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_blue_2.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_blue_3.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_green_1.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_green_2.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_green_3.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_red_1.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_red_2.pnge
C:\Program Files (x86)\iWin.com Games\Mah Jong Quest II\images\tile\firecracker_red_3.pnge
C:\Users\litzenbourger\AppData\Local\Google\Chrome\User Data\Profile 1\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N6CMYBFF\zcache.zgncdn.com\#farm2-1\icons\icon_crafting#\_cracker_ladybug_tomato.jxr.sol
~ Files: Scanned in 01mn 31s



---\\ Recherche des services d�marr�s par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Exp�rience d�application.) -- C:\Windows\System32\aelupsvc.dll [190976]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll [149504]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll [149504]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [309248]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de strat�gie de groupe.) -- C:\Windows\System32\gpsvc.dll [1366016]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [1071104]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de num�rotation automatique d�acc�s distant.) -- C:\Windows\System32\rasauto.dll [99840]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d�acc�s � distance.) -- C:\Windows\System32\rasmans.dll [358400]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d�interface dynamique.) -- C:\Windows\System32\mprdim.dll [107520]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d��v�nements syst�me (SENS).) -- C:\Windows\System32\sens.dll [62976]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l�application d�assistance � Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [438784]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de t�l�phonie Microsoft� Windows(TM).) -- C:\Windows\System32\tapisrv.dll [305664]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise � jour automatique Windows Update.) -- C:\Windows\system32\wuaueng.dll [3240448]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arri�re-plan.) -- C:\Windows\System32\qmgr.dll [826368]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [565760]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivit� IPv6 sur un r�seau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [894464]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d�ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d�application.) -- C:\Windows\System32\appinfo.dll [69632]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de d�couverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [151552]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [105472]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de t�ches.) -- C:\Windows\System32\schedsvc.dll [1282560]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [219648]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multim�dias.) -- C:\Windows\System32\mmcss.dll [80896]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d�ordinateurs.) -- C:\Windows\System32\browser.dll [134144]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau � distance.) -- C:\Windows\System32\sessenv.dll [291328]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux probl�mes.) -- C:\Windows\System32\wercplsupport.dll [84992]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des cl�s.) -- C:\Windows\System32\kmsvc.dll [97792]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [190976]
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft�.) -- C:\Windows\System32\wlidsvc.dll [1964544]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des th�mes Windows Shell.) -- C:\Windows\System32\themeservice.dll [47104]
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d�installation de p�riph�rique.) -- C:\Windows\System32\DeviceSetupManager.dll [207872]
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivit� r�seau Microsoft.) -- C:\Windows\System32\ncasvc.dll [161792]
O83 - Search Svchost Services: SystemEventsBroker (SystemEventsBroker) . (.Microsoft Corporation - Service Broker pour les �v�nements syst�me.) -- C:\Windows\System32\SystemEventsBrokerServer.dll [180224]
~ Services: 34 Scanned in 00mn 00s



---\\ Recherche particuliere � la racine de certains dossiers (O84)
[MD5.22F16D93453407AC244BF570542865DA] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\0051029C-0D89-4A5D-8C44-78478811973E.dat [1242]
[MD5.8FAC25C95F1B6FBC63F8E2E15127A138] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\11CC37C1-8056-41FA-8067-713422DF6872.dat [1242]
[MD5.170DDE66DEF91ABA05C63F455B6FAEB2] [SPRF][03/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\1986FF45-BE10-46C0-86BB-FB0A3CF614E6.dat [1242]
[MD5.EA3647155A3E0D6F757C6F95AC7F9765] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\2385E1F4-129B-4E35-884D-CECADDDF04EA.dat [1242]
[MD5.903551029512078C87F50F49C8516F0F] [SPRF][30/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\256CF846-D464-4A16-A300-BC77595497F7.dat [1242]
[MD5.4524E9857E7C50C320FE3D9CFCDEED80] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\2F76A4C2-DEC9-44A3-9927-3E6E6A512CAB.dat [1242]
[MD5.08B89B1D74AED363F7273A5515E7200C] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\3143C21A-04A1-4E31-982D-8C13BF02210F.dat [1242]
[MD5.65176AF6CE2794D6ACBF4B6725767C71] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\31A03FA0-F1C4-454E-B209-89AA958D499E.dat [1242]
[MD5.72EABFD827AAF8523C8643BBA9F01C85] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\3203400A-2811-462B-8DBE-E8907F10139F.dat [1242]
[MD5.91A98B95CBCA14C8218A452E8DA7A2F9] [SPRF][18/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\33EFDB1E-881B-4CA2-A56B-922B06C1D4B0.dat [1242]
[MD5.3343AA159329D2F5467FCD318B5A05A0] [SPRF][30/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\386E6B0D-20AE-449D-A27E-0B8098E24E32.dat [1242]
[MD5.C708ADDA71BA9EDA05CE2A4EB30C093E] [SPRF][17/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\3F35EDDE-9A3C-4305-8C79-E6DA8C85900D.dat [1242]
[MD5.70B830B9EB68C199ABA69F7C3CBE54F0] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\46C21316-1B32-4658-87C1-619F53BAF775.dat [1242]
[MD5.7952D56F855295DB1D224DFF4847BFA0] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\49888FDF-9DCD-4507-A17E-A3DADE91B9DF.dat [1242]
[MD5.26680964A2C355699457538B80861345] [SPRF][30/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\4A2818B3-2028-42C4-86D6-630BFC899D29.dat [1242]
[MD5.419CDBF6B7A0E5D2046B44E1686AE1DF] [SPRF][17/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\55E9D301-AE51-4224-9FAA-9356FD7772FE.dat [1242]
[MD5.29A2A85A7A642C6FC9180AE5543F57B7] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\5A9F05EA-18A5-49DC-AB8F-29C81A4322DD.dat [1242]
[MD5.3CF45DFE1DE0E3A30D37DED17076C1DE] [SPRF][17/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\68066AD0-FB23-4518-8743-610C255358AF.dat [1242]
[MD5.F523152E106AFB1F9DD3150423818507] [SPRF][17/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\74A5ECB7-41E6-469C-8E3C-2BD99A247A46.dat [1242]
[MD5.7441FAC41BA65E3AC1057136CB44C0F1] [SPRF][08/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\79A1C4F1-3F85-4E60-8748-D6FA19579ADF.dat [1242]
[MD5.CCEC1F296457F9AE8FE4BB8AFE1EB7FB] [SPRF][18/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\7CA194D6-C92B-4184-9A0F-2F94E461D5C6.dat [1242]
[MD5.6400E784822D70DB14EA98A2A0BE4DA2] [SPRF][17/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\80234093-A5C2-432F-AC3E-D6B189708F41.dat [1242]
[MD5.51559D2B68AB213FDD7C17454C56C7C6] [SPRF][17/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\810D22C6-F40C-403F-A025-BF080740BA37.dat [1242]
[MD5.EED6441AD0A76D5C84A66DA961DD585A] [SPRF][30/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\81601D6B-EEC9-4A2E-A3FC-B46CFA6410E0.dat [1242]
[MD5.EC10816F78C76647E2798A52BF744A9F] [SPRF][03/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\81DA20D5-B352-4821-BFA4-AEB481CAEE1C.dat [1242]
[MD5.916B53BB103E152A8CDAF3A22464A633] [SPRF][18/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\844E87DE-997B-42D1-8733-9849278268DA.dat [1242]
[MD5.9F1320C20EA21F7CD43E1E142478DBDA] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\87211CE1-6A59-42DC-B0A0-437D878079E2.dat [1242]
[MD5.5860133E093DF2287DAB96664869A5EA] [SPRF][30/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\89C0CF53-F5E8-4A12-A5F0-35478CBDCF9A.dat [1242]
[MD5.DE46B9276C332E041F6083EEDAFC59B2] [SPRF][18/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\8EDC482D-EA2F-4589-A6FE-98C747B87C3D.dat [1242]
[MD5.7E3EBFBED6FC54FBB851F44C729F6221] [SPRF][03/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\8F4B20CF-F6B9-4FCB-9CC7-908FD845499B.dat [1242]
[MD5.42DA9A88595B4A13111151D335A0A387] [SPRF][18/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\945F0F18-F4BD-4BBA-BAE3-4FBDF8402438.dat [1242]
[MD5.B425349B5C7D9BCD2FE2F64DC368519F] [SPRF][18/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\A132D6D3-0C3D-49DB-8F93-29EBBD8DD229.dat [1242]
[MD5.7742BF30C7D5C95C0C79ECCB5EDEAE44] [SPRF][01/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\A377C117-0413-496B-BA1C-483F79C4D5AC.dat [1242]
[MD5.6892A241E32960D7EBCE4FF3C337D400] [SPRF][06/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\AC7AF897-B9A1-4C84-A513-EAA5C7E5DC21.dat [1242]
[MD5.1EA3ED9BC8DF978BBDC4270EC4951B53] [SPRF][18/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\AEC99C33-D111-4EC8-B057-679318FFE1A7.dat [1242]
[MD5.40D8470FF97EE91E3F0076176A97FEBC] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\B23C5D35-F7A3-48AA-9141-AECA0C57F9EF.dat [1242]
[MD5.F9D77D7C565C33B8E4AC81C431CC60E5] [SPRF][30/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\B553AAB7-094A-46F9-B5B7-24FAE5C06D35.dat [1242]
[MD5.C16FE654E0189A212D8B6882C2AD7BD7] [SPRF][30/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\B5A8E93E-EB11-4316-BE50-E903FE59701D.dat [1242]
[MD5.135671E45E08162923E13D60BFE59B82] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\BA23BF74-86FD-4446-9670-046A10242F6E.dat [1242]
[MD5.3EB170F5A97FD018FE072F2B5B796D83] [SPRF][30/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\BDF4832C-1934-4A4E-A3B5-6B3A8A20A122.dat [1242]
[MD5.00D7B8BC5CEF3DE8D118543C132734B0] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\C9952BCC-2246-4202-8F40-43911B6072C4.dat [1242]
[MD5.49E8DD155A4D9E5D84AD44D71E806785] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\CBC21665-007A-4C99-8972-BF79A7C2B0FD.dat [1242]
[MD5.2F90AD0D17E258A1905898B148EB2E88] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\D14F52DE-DAAB-429D-AFA9-BD613B2FEAFB.dat [1242]
[MD5.DB506957F1F2454ED2725741F0E82687] [SPRF][30/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\D835DF9C-EF17-40D0-9256-054D6DFA70F3.dat [1242]
[MD5.885EE07C5896DEEBC2877F8756D77EA1] [SPRF][30/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\DE14FB8F-A2D4-4E26-A2D1-9EDDAA6D28C3.dat [1242]
[MD5.55F972E056A9BB8F738A0A35359AE150] [SPRF][18/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\DEE9A634-A7DD-4500-89C1-42043ED6C4DE.dat [1242]
[MD5.97FE713241E383FE52DC4AFFF429CABE] [SPRF][17/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\dump.dat [2301952]
[MD5.5A3245B9A34A510009FA3CFA0CA40E0B] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\E2B30460-79EF-4153-AFB0-989F0C9160D3.dat [1242]
[MD5.E5C42E392CD2188B69152DA7C63BB3BE] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\E70134DD-207E-4049-BD6A-39490BE5B84A.dat [1242]
[MD5.DEC3774A2D8A30283B186A7675F36510] [SPRF][30/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\E93F3423-8777-4346-BD26-6631126DE174.dat [1242]
[MD5.204DF21A7CEB0302A1A5BD937C3C65F9] [SPRF][06/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\EABCE62D-46CF-4823-9C16-B232E9C62275.dat [1242]
[MD5.B175805EF54B3F54A64F5B2BE4B99B90] [SPRF][17/04/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\EAC7D6FD-70C0-4646-BB74-C3E69EB1B534.dat [1242]
[MD5.748A7A300E63FDA56B9D3CCAB2E087C4] [SPRF][31/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\F001B562-16F4-400F-AB4D-4823ADB2FF22.dat [1242]
[MD5.D0C2E81110ACBB47FDA6BDA21DB9C475] [SPRF][30/03/2013] (...) -- C:\Users\litzenbourger\AppData\Local\Temp\F560A871-B0E2-46F3-92F9-A2B25299592D.dat [1242]
[MD5.36179B382A989075FF5FA282434F6892] [SPRF][21/03/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\litzenbourger\AppData\Local\Temp\uninst1.exe [394736] =>Toolbar.Babylon
[MD5.9DD57C3B039720B61C396B8ABE52EC6E] [SPRF][13/03/2013] (.Pas de propri�taire - Installer.) -- C:\Users\litzenbourger\AppData\Local\Temp\Video Performer63862.exe [622040]
~ Files: Scanned in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "vm-monitoring-rpc" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "vm-monitoring-dcom" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMP-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "SNMPTRAP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "SNMPTRAP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "Wininit-Shutdown-In-Rule-TCP-RPC" | In - None - P6 - FALSE | .(.Microsoft Corporation - Application de d�marrage de Windows.) -- C:\Windows\system32\wininit.exe
O87 - FAEL: "Wininit-Shutdown-In-Rule-TCP-RPC-EPMapper" | In - None - P6 - FALSE | .(.Microsoft Corporation - Application de d�marrage de Windows.) -- C:\Windows\system32\wininit.exe
O87 - FAEL: "PNRPMNRS-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Netlogon-TCP-RPC-In" | In - None - P6 - FALSE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\System32\lsass.exe
O87 - FAEL: "WMI-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "MsiScsi-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "ProximityUxHost-Sharing-In-TCP-NoScope" | In - None - P6 - TRUE | .(.Microsoft Corporation - H�te UX de proximit�.) -- C:\Windows\system32\proximityuxhost.exe
O87 - FAEL: "ProximityUxHost-Sharing-Out-TCP-NoScope" | Out - None - P6 - TRUE | .(.Microsoft Corporation - H�te UX de proximit�.) -- C:\Windows\system32\proximityuxhost.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-syst�me spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Private - P6 - FALSE | .(.Microsoft Corporation - Application sous-syst�me spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnPHost-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNTS-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnPHost-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-DAS-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Device Association Framework Provider Host.) -- C:\Windows\system32\dashost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNTS-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNT-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnPHost-Out-TCP" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-DAS-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Device Association Framework Provider Host.) -- C:\Windows\system32\dashost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNTS-Out-TCP" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNT-Out-TCP" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In" | In - Private - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out" | Out - Private - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In" | In - Private - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out" | Out - Private - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-RAServer-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d�assistance � distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-RAServer-Out-TCP-NoScope-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d�assistance � distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-DCOM-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-QWave-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-In-UDP-NoScope" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-UDP-LocalSubnetScope" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-UDP-PlayToScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-Out-UDP-NoScope" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-Out-UDP-LocalSubnetScope" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-Out-UDP-PlayToScope" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-RTSP-NoScope" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-RTSP-LocalSubnetScope" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-RTSP-PlayToScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-SSDP-Discovery-PlayToScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-QWave-In-UDP-PlayToScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-QWave-Out-UDP-PlayToScope" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-QWave-In-TCP-PlayToScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-QWave-Out-TCP-PlayToScope" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "TPMVSCMGR-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "TPMVSCMGR-Server-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - TPM Virtual Smart Card Manager DCOM Server.) -- C:\Windows\system32\RmtTpmVscMgrSvr.exe
O87 - FAEL: "TPMVSCMGR-Server-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - TPM Virtual Smart Card Manager DCOM Server.) -- C:\Windows\system32\RmtTpmVscMgrSvr.exe
O87 - FAEL: "TPMVSCMGR-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "TPMVSCMGR-Server-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - TPM Virtual Smart Card Manager DCOM Server.) -- C:\Windows\system32\RmtTpmVscMgrSvr.exe
O87 - FAEL: "TPMVSCMGR-Server-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - TPM Virtual Smart Card Manager DCOM Server.) -- C:\Windows\system32\RmtTpmVscMgrSvr.exe
O87 - FAEL: "Collab-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contr�leur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contr�leur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-IPHTTPS-Out" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DNS-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe
O87 - FAEL: "RVM-VDS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-TERMSRV-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-MCX2SVC-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-PlayTo-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-PlayTo-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-FDPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus h�te de l�infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus h�te de l�infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{391D50BF-7AE4-4577-9D40-FEED12DD0C70}" | In - Public - P6 - TRUE | .(.Nero AG - Nero BackItUp.) -- C:\program files (x86)\nero\nero 12\nero backitup\backitup.exe
O87 - FAEL: "{C32BA26C-B07F-4BDE-8BDD-F2BD6A2CD10E}" | In - None - P6 - TRUE | .(.CyberLink Corp. - PowerDVD 10.0.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.exe
O87 - FAEL: "{9E73BF7C-240B-4D9E-8980-4F1D60E59227}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Installateur Windows�.) -- C:\Windows\SysWOW64\msiexec.exe
O87 - FAEL: "{0E59577D-8046-4B89-AD36-C9564D77AB2F}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Installateur Windows�.) -- C:\Windows\SysWOW64\msiexec.exe
O87 - FAEL: "{6FBE8E81-13A0-4432-9C56-B9442A332B3E}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{BFB24AD1-4746-4375-B096-C1EB9623F162}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{FAD51803-4BAB-49E7-A993-54B2379071A7}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application sous-syst�me spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "{6E2420C8-B455-46C7-827C-E0EC9EF12DF0}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{949EC825-1C66-4042-822E-1BCBA6571240}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{76EF12B4-5FB9-4C6E-B6EA-8680B70E21D2}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{55FC8A81-65C6-4D0A-B709-D04C1A8B5A09}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{79BBB543-775B-47CD-AB70-712D692D7046}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{E84151E9-F82D-49DE-AACE-93DDEA4010EE}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Device Association Framework Provider Host.) -- C:\Windows\system32\dashost.exe
O87 - FAEL: "{6B53176B-7FD8-460F-822B-25024441F055}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{7C17A992-C346-42FD-BA26-1065E2413C9B}" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{FB494825-B8F2-4853-8275-580444F0DA50}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{4C62A745-10AE-4217-8DCC-12C17F682AA0}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSMQ-In-TCP" | In - None - P6 - TRUE | .(.Microsoft Corporation - Message Queuing Service.) -- C:\Windows\system32\mqsvc.exe
O87 - FAEL: "MSMQ-Out-TCP" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Message Queuing Service.) -- C:\Windows\system32\mqsvc.exe
O87 - FAEL: "MSMQ-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Message Queuing Service.) -- C:\Windows\system32\mqsvc.exe
O87 - FAEL: "MSMQ-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Message Queuing Service.) -- C:\Windows\system32\mqsvc.exe
O87 - FAEL: "{D33CD8DE-E3D6-4B36-938F-6A85051ED1B6}" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - MSN Messenger.) -- C:\Program Files (x86)\MSN Messenger\msnmsgr.exe
O87 - FAEL: "{EB947FA0-C3D7-46D7-B164-42C293436CBF}" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - MSN Messenger.) -- C:\Program Files (x86)\MSN Messenger\msnmsgr.exe
O87 - FAEL: "{9DA7ABDB-9E7D-4C2C-8BD8-D0B9CA966B9E}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - MSN Messenger.) -- C:\Program Files (x86)\MSN Messenger\msnmsgr.exe
O87 - FAEL: "{2396A932-D5BB-4D5A-98F6-698DCA755830}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - MSN Messenger.) -- C:\Program Files (x86)\MSN Messenger\msnmsgr.exe
O87 - FAEL: "{42938C9C-CFF9-4BE2-B3CC-B5E4F4CD95AE}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - MSN Messenger.) -- C:\Program Files (x86)\MSN Messenger\msnmsgr.exe
O87 - FAEL: "{1169827B-6A85-4CDF-B0C6-E64C35BC2F6E}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - MSN Messenger.) -- C:\Program Files (x86)\MSN Messenger\msnmsgr.exe
O87 - FAEL: "{12DD1C47-FBCA-4EB7-B57E-E819B15EA368}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - �Torrent.) -- C:\Users\litzenbourger\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{8FD6E11C-324C-4230-B5C5-769857403258}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - �Torrent.) -- C:\Users\litzenbourger\AppData\Roaming\uTorrent\uTorrent.exe
~ Firewall: 217 Scanned in 00mn 01s



---\\ Scan Additionnel (O88)
Database Version : v2.11570 - (17/04/2013)
Cl�s trouv�es (Keys found) : 119
Valeurs trouv�es (Values found) : 0
Dossiers trouv�s (Folders found) : 7
Fichiers trouv�s (Files found) : 2

[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\64A6E60055D801F4BB8AC269354B72B8] =>Adware.Boxore
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B2FD9C0A5B9838449838816A28001F4B] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420] =>PUP.SweetIM
[HKLM\Software\Classes\AppID\AddonsFramework.DLL] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\ButtonSite.DLL] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\PropertySync.EXE] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\ScriptHost.DLL] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\{19975B78-1907-4DD6-A437-4C48120F46A4}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\AppID\{19975B78-1907-4DD6-A437-4C48120F46A4}] =>Toolbar.Freecorder
[HKLM\Software\Classes\AppID\{562B9317-C08A-444A-9482-62080DD851AE}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\AppID\{562B9317-C08A-444A-9482-62080DD851AE}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{93CF54F5-CFAA-4440-B588-8ED0DFAD5C21}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{93CF54F5-CFAA-4440-B588-8ED0DFAD5C21}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}] =>Toolbar.Freecorder
[HKLM\Software\Classes\Interface\{D3BC53E7-0437-4C97-90EE-2CD6FF47FB14}] =>Toolbar.Freecorder
[HKLM\Software\Wow6432Node\Classes\Interface\{D3BC53E7-0437-4C97-90EE-2CD6FF47FB14}] =>Toolbar.Freecorder
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98] =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836] =>PUP.SweetIM^
C:\Program Files (x86)\PC Performer =>Rogue.PCPerformer
C:\Program Files (x86)\mixidj =>Adware.SmileyBar
C:\Program Files (x86)\Tiger Savings =>PUP.RewardsArcade
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Performer =>Rogue.PCPerformer
C:\Users\litzenbourger\AppData\Roaming\CRMixiDJTB =>Adware.SmileyBar
C:\Users\litzenbourger\AppData\Local\Tiger Savings =>PUP.RewardsArcade
C:\Users\litzenbourger\AppData\LocalLow\mixidj =>Adware.SmileyBar
C:\Users\litzenbourger\AppData\Local\Temp\uninst1.exe =>Toolbar.Babylon
~ Additionnel: Scanned in 00mn 13s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "03FF80700C870B74180F8C6440CD67C9" . (.Nero Express Help (CHM).) -- C:\windows\Installer\{0708FF30-78C0-47B0-81F0-C84604DC769C}\NeroHelpIcon.A2EDDB31_726D_4D40_8014_5D5F2D3EF945
O90 - PUC: "122113B05A506674D830A74664971465" . (.Nero RescueAgent Help (CHM).) -- c:\windows\Installer\{0B311221-05A5-4766-8D03-7A6446794156}\NeroHelpIcon.A2EDDB31_726D_4D40_8014_5D5F2D3EF945
O90 - PUC: "18034D2AB7FC73649A3F2E56A15A4C8A" . (.Nero RescueAgent.) -- c:\windows\Installer\{A2D43081-CF7B-4637-A9F3-E2651AA5C4A8}\ARPPRODUCTICON.exe
O90 - PUC: "203E62EEA6789D84098513925E9B9999" . (.Live Updater.) -- C:\windows\Installer\{EE26E302-876A-48D9-9058-3129E5B99999}\icon.ico
O90 - PUC: "227C12A7952F67947BAA66855EDFDEFA" . (.Google Drive.) -- C:\Windows\Installer\{7A21C722-F259-4976-B7AA-6658E5FDEDAF}\DriveIcon
O90 - PUC: "2921D0FE1CF8EB147904BD1C436F4651" . (.Nero BackItUp Help (CHM).) -- c:\windows\Installer\{EF0D1292-8FC1-41BE-9740-DBC134F66415}\NeroHelpIcon.A2EDDB31_726D_4D40_8014_5D5F2D3EF945
O90 - PUC: "35588CBA077879B44BE3A50946A7B536" . (.Nero ControlCenter.) -- C:\windows\Installer\{ABC88553-8770-4B97-B43E-5A90647A5B63}\ARPPRODUCTICON.exe
O90 - PUC: "37CE0B2BA4DA61743AEDEC8A44B003B9" . (.Nero BackItUp 12 Essentials OEM.a01.) -- c:\windows\Installer\{B2B0EC73-AD4A-4716-A3DE-CEA8440B309B}\ARPPRODUCTICON.exe
O90 - PUC: "3A80BAA3921F5DB44B90EA76F43957D9" . (.Prerequisite installer.) -- C:\windows\Installer\{3AAB08A3-F129-4BD5-B409-AE674F93759D}\ARPPRODUCTICON.exe
O90 - PUC: "456BC9D3DA991034986CD0217A0967C7" . (.Identity Card.) -- C:\windows\Installer\{3D9CB654-99AD-4301-89C6-0D12A790767C}\icon.ico
O90 - PUC: "647C499C0D6CABE40BE9FDB78183B196" . (.Nero ControlCenter Help (CHM).) -- C:\windows\Installer\{C994C746-C6D0-4EBA-B09E-DF7B18381B69}\NeroHelpIcon.8BC7562A_6065_4ED9_8502_C368ECC0724D
O90 - PUC: "7040BB568CC47CD459E2E3FEFD5006A2" . (.Nero Update.) -- C:\windows\Installer\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}\ARPPRODUCTICON.exe
O90 - PUC: "75FA496A198926D428C4E7551A63A141" . (.eBay Worldwide.) -- c:\Windows\Installer\{A694AF57-9891-4D62-824C-7E55A1361A14}\_853F67D554F05449430E7E.exe
O90 - PUC: "86C7A848CDA03914A898C2AE875EA6C0" . (.Nero Express.) -- C:\windows\Installer\{848A7C68-0ADC-4193-8A89-2CEA78E56A0C}\ARPPRODUCTICON.exe
O90 - PUC: "A5002F70CAC8B4A4382AAD897A22AC16" . (.Recovery Management.) -- C:\windows\Installer\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}\.\Bitmaps\eRecoveryicon.ico
O90 - PUC: "C2F2B07E1D4978245B0BBCEB16E86225" . (.Nero BackItUp.) -- c:\windows\Installer\{E70B2F2C-94D1-4287-B5B0-CBBE618E2652}\ARPPRODUCTICON.exe
O90 - PUC: "C838BEBA7A1AD5C47B1EB83441068002" . (.MSN Messenger 7.0.) -- C:\Windows\Installer\{ABEB838C-A1A7-4C5D-B7E1-8B4314600820}\MsblIco.Exe
O90 - PUC: "DE532CED4A8571542A874CE1D8EABAB3" . (.PowerDVD.) -- C:\Windows\Installer\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}\ARPPRODUCTICON.exe
O90 - PUC: "EF9D0FB939897464189B717BEB4A6EDF" . (.Nero 12 Essentials OEM.a01.) -- C:\windows\Installer\{9BF0D9FE-9893-4647-81B9-17B7BEA4E6FD}\ARPPRODUCTICON.exe
O90 - PUC: "F2FD7A0F0EB0F0741B737D1AF9791798" . (.Broadcom Card Reader Driver Installer.) -- C:\Windows\Installer\{F0A7DF2F-0BE0-470F-B137-D7A19F977189}\ARPPRODUCTICON.exe
O90 - PUC: "FA0364E07BA0E0449A87A187CFF4349B" . (.Nero Launcher.) -- C:\windows\Installer\{0E4630AF-0AB7-440E-A978-1A78FC4F43B9}\ARPPRODUCTICON.exe
~ Update Products: 28 Scanned in 00mn 00s



---\\ Etat g�n�ral des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 12/03/2013 253656 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 07/03/2013 45248 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SS - | Demand 16/04/2013 277024 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
SS - | Demand 22/08/2012 468624 | (DeviceFastLaneService) . (.Acer Incorporated.) - C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe
SR - | Auto 21/08/2012 348784 | (DsiWMIService) . (.Dritek System Inc..) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
SR - | Demand 22/08/2012 658576 | (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
SR - | Auto 16/04/2013 92560 | (ETDService) . (.ELAN Microelectronics Corp..) - C:\Program Files\Elantech\ETDService.exe
SS - | Auto 06/03/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 06/03/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SR - | Auto 20/04/2012 635104 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
SS - | Auto 18/07/2012 165760 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SR - | Auto 18/07/2012 276864 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SS - | Auto 04/04/2013 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
SS - | Auto 04/04/2013 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
SR - | Auto 26/11/2011 687400 | (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe
SR - | Auto 05/12/2012 143928 | (NIS) . (.Symantec Corporation.) - C:\Program Files (x86)\Norton Internet Security\Engine\20.2.1.22\ccSvcHst.exe
SS - | Auto 289544 | (PCSUService) . (...) - C:\Program Files (x86)\Accelerer PC\PCSUService.exe
SR - | Auto 07/09/2012 93296 | (RfButtonDriverService) . (.Dritek System INC..) - C:\Windows\RfBtnSvc64.exe
SS - | Auto 18/07/2012 364416 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SS - | Demand 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SS - | Auto 20/09/2012 29696 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
~ MBR: 1 Scanned in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by litzenbourger at 18/04/2013 15:01:38

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s



End of the scan (2353 lines in 05mn 34s)(22)