~ Rapport de ZHPDiag v2013.10.13.35 - Nicolas Coolman (13/10/2013)
~ Lanc� par vevere (14/10/2013 17:21:15)
~ Adresse du Site Web http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance � la d�sinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : D�sactiv�e par l'utilisateur
~ El�vation des Privil�ges : OK
~ User Account Control (UAC): Deactivate by program


---\\ Navigateurs Internet
MSIE: Internet Explorer v10.0.9200.16686
GCIE: Google Chrome v30.0.1599.69 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Fran�ais
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : RMV82
Windows License : OK
~ Windows Remaining Initializations Number : 4
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection du syst�me
avast! Free Antivirus v8.0.1497.0
Malwarebytes Anti-Malware version 1.75.0.1300
Windows Defender W7

---\\ Logiciels d'optimisation du syst�me

---\\ Logiciels de partage PeerToPeer
Vuze v5.0.0.0 =>P2P.Azureus

---\\ Surveillance de Logiciels
Adobe Flash Player 11 ActiveX
Adobe Reader XI

---\\ Informations sur le syst�me
~ Processor: Intel64 Family 6 Model 15 Stepping 13, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2038 MB (36% free)
System Restore: Activ� (Enable)
System drive C: has 250 GB (83%) free of 298 GB

---\\ Mode de connexion au syst�me
~ Computer Name: VEVERE-PC
~ User Name: vevere
~ All Users Names: vevere, Toine 45, HomeGroupUser$, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\vevere\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\vevere\AppData\Roaming\
~ %Desktop% : C:\Users\vevere\Desktop\
~ %Favorites% : C:\Users\vevere\Favorites\
~ %LocalAppData% : C:\Users\vevere\AppData\Local\
~ %StartMenu% : C:\Users\vevere\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enum�ration des unit�s disques
C: Hard drive, Flash drive, Thumb drive (Free 250 Go of 298 Go)
D: CD-ROM drive (Not Inserted)
E: CD-ROM drive (Not Inserted)



---\\ Etat du Centre de S�curit� Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 38 Scanned in 00mn 00s



---\\ Recherche particuli�re de fichiers g�n�riques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de d�marrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.AAFA952E774DDDB0956D3BDFAE5B5B99] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.10/08/2013 - 06:22:18.) -- C:\Windows\System32\wininet.dll [2241024]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d�ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Biblioth�que de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du syst�me de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parall�le.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de clich� instantan� du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cach�s (Cach�/Total)
~ Mes Favoris (My Favorites) : 1/26
~ Mes Documents (My Documents) : 1/18
~ Mon Bureau (My Desktop) : 5/70
~ Menu demarrer (Programs) : 1/26
~ Hidden Files: Scanned in 00mn 00s



---\\ Processus lanc�s
[MD5.B3A6C62AEB2ABD456328D1F62769DD47] - (.Acronis - Acronis Scheduler Helper.) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [358024] [PID.4196]
[MD5.F7128E5772F9312F0D111A5FA5D41773] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [20684656] [PID.4400]
[MD5.CBC7D8E5416AD30CF16DC2FD4A6AA399] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968] [PID.4484]
[MD5.23242FD6C7D4C61807E84FD3A79248C4] - (.Creative Technology Ltd. - Live! Cam Console Auto Launcher.) -- C:\Windows\OEM02Mon.exe [36864] [PID.4684]
[MD5.4A73AB8412D3AA6CFAD24051FF9DBFA7] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160] [PID.4692]
[MD5.1C2C16B154291D673DAFF8695F6471F1] - (.Acronis - Acronis True Image Monitor.) -- C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5081912] [PID.5076]
[MD5.0D3745CA2F064F2D6B6388C6AA5D3BC7] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [844752] [PID.4756]
[MD5.2176B4590387405E5F2405C3CEF0C02A] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8078848] [PID.5848]
[MD5.9330941C8F6DF417F6DBBE998DB6687E] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808] [PID.1588]
[MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1980]
[MD5.986A134B1A1770599B7AF9354CBB066F] - (.Acronis - File Level CDP Manager Service.) -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2326920] [PID.1404]
[MD5.8FFF9083252C16FE3960173722605E9E] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [13336] [PID.3420]
~ Processes Running: Scanned in 00mn 02s



---\\ Google Chrome, D�marrage,Recherche,Extensions (G0,G1,G2)
C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G0 - GCSP: Preference [User Data\Default][HomePage] about:newtab?source=home
G0 - GCSP: Preference [User Data\Default] http://www.google.fr
G2 - GCE: Preference [User Data\Default] [aaaaabcbmongicmdegkmmfgdickgnnob] Movies Toolbar v.21.56092, (D�sactiv�) =>Adware.Bandoo
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Store v.0.2 (Activ�)
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Drive v.6.3 (Activ�)
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.6 (Activ�)
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.20 (Activ�)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activ�)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activ�)
G2 - GCE: Preference [User Data\Default] [ifohbjbgfchkkfhphahclmkpgejiplfo] Lightning Newtab v.1.1.5.2, (D�sactiv�) =>PUP.Elex
G2 - GCE: Preference [User Data\Default] [jpmbfleldcgkldadpdinhjjopdfpjfjp] Wajam v.1.24 (D�sactiv�) =>Toolbar.Wajam
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activ�)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activ�)
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Chrome In-App Payments service v.0.0.4.11 (Activ�)
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activ�)
~ Google Browser: 16 Scanned in 00mn 23s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - The plugin allows you to have a better experience with Microsoft Lync.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npMeetingJoinPluginOC.dll
P2 - FPN: [HKLM] [@microsoft.com/SharePoint,version=14.0] - (.Microsoft Corporation - The plugin allows you to have a better experience with Microsoft Share.) -- C:\Program Files\Microsoft Office\Office15\NPSPWRAP.dll
~ Firefox Browser: 3 Scanned in 00mn 00s



---\\ Internet Explorer, D�marrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:newtab
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:newtab
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.qvo6.com =>Hijacker.Qvo6
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ IE Browser: 18 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: HomeTab [64Bits] - {2d7ad3eb-ea9e-48d5-a5b5-ecaa2d48341b} . (...) -- C:\Users\vevere\AppData\Roaming\HomeTab\HomeTab.dll (.not file.) =>PUP.CertifiedToolbar
O2 - BHO: Lync Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: avast! WebRep [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft SkyDrive Pro Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.dll =>.Microsoft Corporation
~ BHO: 8 Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Acronis Sauvegarde en un seul clic..lnk . (.Acronis - Acronis True Image.) -- C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageLauncher.exe
O4 - GS\Desktop [Public]: Acronis True Image Home 2010.lnk . (.Acronis - Acronis True Image.) -- C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageLauncher.exe
O4 - GS\Desktop [Public]: Adobe Reader XI.lnk . (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
O4 - GS\Desktop [Public]: Age of Mythology Gold.lnk . (.Ensemble Studios - Age of Mythology - The Titans Expansion.) -- C:\Program Files (x86)\Microsoft Games\Age of Mythology\aomx.exe
O4 - GS\Desktop [Public]: avast! Free Antivirus.lnk . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - GS\Desktop [Public]: DAEMON Tools Lite.lnk . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe =>.DT Soft Ltd
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\Desktop [Public]: Heroes III Armageddon's Blade.lnk . (.The 3DO Company - Heroes of Might and Magic(tm) III.) -- C:\Program Files (x86)\3DO\Heroes3\h3blade.exe
O4 - GS\Desktop [Public]: Heroes III The Shadow of Death.lnk . (.The 3DO Company - Heroes of Might and Magic� III.) -- C:\Program Files (x86)\3DO\Heroes3\Heroes3.exe
O4 - GS\Desktop [Public]: Malwarebytes Anti-Malware.lnk . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
O4 - GS\Desktop [Public]: Skype.lnk . (...) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
O4 - GS\Desktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player 2.0.7.) -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe =>.VideoLAN
O4 - GS\Desktop [Public]: Vuze.lnk . (...) -- C:\Program Files (x86)\Vuze\Azureus.exe (.not file.) =>P2P.Azureus
O4 - GS\Program [Public]: Adobe Reader XI.lnk . (...) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico
O4 - GS\Program [Public]: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: Microsoft Money.lnk . (.Microsoft(R) Corporation - Microsoft Money.) -- C:\Program Files (x86)\Microsoft Money 2005\MNYCoreFiles\msmoney.exe
O4 - GS\Program [Public]: Sidebar.lnk . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: Vuze.lnk . (...) -- C:\Program Files (x86)\Vuze\Azureus.exe (.not file.) =>P2P.Azureus
O4 - GS\Program [Public]: Windows Anytime Upgrade.lnk . (.Microsoft Corporation - Interface utilisateur de Mise � niveau expr.) -- C:\Windows\system32\WindowsAnytimeUpgradeUI.exe
O4 - GS\Program [Public]: Windows DVD Maker.lnk . (...) -- C:\Program Files (x86)\DVD Maker\DVDMaker.exe (.not file.)
O4 - GS\Program [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) -- C:\Windows\system32\xpsrchvw.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) -- C:\Windows\system32\calc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: displayswitch.lnk . (.Microsoft Corporation - Afficher le commutateur.) -- C:\Windows\system32\displayswitch.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - Accessoire du panneau de saisie math�matiqu.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilit� Windows.) -- C:\Windows\system32\mblctr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) -- C:\Windows\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau � distance.) -- C:\Windows\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.) -- C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magn�tophone Windows.) -- C:\Windows\system32\SoundRecorder.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-b�te.) -- C:\Windows\system32\StikyNot.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.) -- C:\Windows\System32\mobsync.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Mise en route.) -- C:\Windows\system32\OobeFldr.dll =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) -- C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caract�res.) -- C:\Windows\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestionnaire de nettoyage de disque pour Wi.) -- C:\Windows\system32\cleanmgr.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Diskeeper 2011.lnk . (.Flexera Software, Inc. - InstallShield.) -- C:\Windows\Installer\{8E4FBD97-A3B6-450D-A99B-9368ECFB1026}\DiskeeperShortcut.exe
O4 - GS\SystemTools [Public]: Resource Monitor.lnk . (.Microsoft Corporation - Moniteur de ressources et de performances.) -- C:\Windows\system32\perfmon.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informations syst�me.) -- C:\Windows\system32\msinfo32.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauration du syst�me de Microsoft� Windo.) -- C:\Windows\system32\rstrui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) -- C:\Windows\system32\taskschd.msc
O4 - GS\SystemTools [Public]: Windows Easy Transfer Reports.lnk . (.Microsoft Corporation - Application post-migration de transfert de.) -- C:\Windows\system32\migwiz\postmig.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Windows Easy Transfer.lnk . (.Microsoft Corporation - Application Transfert de fichiers et param�.) -- C:\Windows\system32\migwiz\migwiz.exe =>.Microsoft Corporation
O4 - GS\QuickLaunch [vevere]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch [vevere]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch [vevere]: Microsoft Outlook.lnk . (...) -- C:\Program Files (x86)\Microsoft Office\Office15\OUTLOOK.exe (.not file.)
O4 - GS\QuickLaunch [vevere]: Vuze.lnk . (...) -- C:\Program Files (x86)\Vuze\Azureus.exe (.not file.) =>P2P.Azureus
O4 - GS\TaskBar [vevere]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [vevere]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\TaskBar [vevere]: Outlook 2013.lnk . (...) -- C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\outicon.exe
O4 - GS\TaskBar [vevere]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\TaskBar [vevere]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O4 - GS\Program [vevere]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Accessories [vevere]: Command Prompt.lnk . (.Microsoft Corporation - Interpr�teur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
O4 - GS\Accessories [vevere]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) -- C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [vevere]: Run.lnk - Cl� orpheline
O4 - GS\Accessories [vevere]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\SystemTools [vevere]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\SystemTools [vevere]: Private Character Editor.lnk . (.Microsoft Corporation - �diteur de caract�res priv�s.) -- C:\Windows\system32\eudcedit.exe =>.Microsoft Corporation
O4 - GS\SendTo [vevere]: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - GS\Desktop [vevere]: Excel 2013.lnk . (...) -- C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\xlicons.exe
O4 - GS\Desktop [vevere]: Microsoft Money.lnk . (.Microsoft(R) Corporation - Microsoft Money.) -- C:\Program Files (x86)\Microsoft Money 2005\MNYCoreFiles\msmoney.exe
O4 - GS\Desktop [vevere]: Musique - Raccourci.lnk . (...) -- C:\Users\vevere\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms
O4 - GS\Desktop [vevere]: Word 2013.lnk . (...) -- C:\Windows\Installer\{91150000-0011-0000-1000-0000000FF1CE}\wordicon.exe
O4 - GS\Desktop [vevere]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe =>.Nicolas Coolman
O4 - GS\Desktop [vevere]: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe =>.Nicolas Coolman
O4 - GS\QuickLaunch [Toine 45]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [Toine 45]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.qvo6.com =>Hijacker.Qvo6
O4 - GS\TaskBar [Toine 45]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\TaskBar [Toine 45]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Toine 45]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O4 - GS\Program [Toine 45]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Accessories [Toine 45]: Command Prompt.lnk . (.Microsoft Corporation - Interpr�teur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
O4 - GS\Accessories [Toine 45]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) -- C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Toine 45]: Run.lnk - Cl� orpheline
O4 - GS\Accessories [Toine 45]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Toine 45]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\SystemTools [Toine 45]: Private Character Editor.lnk . (.Microsoft Corporation - �diteur de caract�res priv�s.) -- C:\Windows\system32\eudcedit.exe =>.Microsoft Corporation
~ Global Startup: 79 Scanned in 00mn 04s



---\\ Applications lanc�es au d�marrage du syt�me (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] C:\Program Files (x86)\SigmaTel\C-Major Audio\WDM\sttray64.exe (.not file.)
O4 - HKLM\..\Run: [Service Scheduler2 Acronis] . (.Acronis - Acronis Scheduler Helper.) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe =>.DT Soft Ltd
O4 - HKCU\..\Run: [DellSystemDetect] . (...) -- C:\Users\vevere\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell\Dell System Detect.appref-ms
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKCU\..\RunOnce: [Application Restart #0] . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
O4 - HKLM\..\Wow6432Node\Run: [OEM02Mon.exe] . (.Creative Technology Ltd. - Live! Cam Console Auto Launcher.) -- C:\Windows\OEM02Mon.exe =>.Creative Technology Ltd
O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [TrueImageMonitor.exe] . (.Acronis - Acronis True Image Monitor.) -- C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\SPReview\SPReview.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-135296302-3689904380-3089145907-1000\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe =>.DT Soft Ltd
O4 - HKUS\S-1-5-21-135296302-3689904380-3089145907-1000\..\Run: [DellSystemDetect] . (...) -- C:\Users\vevere\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell\Dell System Detect.appref-ms
O4 - HKUS\S-1-5-21-135296302-3689904380-3089145907-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKUS\S-1-5-21-135296302-3689904380-3089145907-1000\..\RunOnce: [Application Restart #0] . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
~ Application: Scanned in 00mn 00s



---\\ Invisibilit� de l'ic�ne d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Boutons situ�s sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer � OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} -- C:\Program Files (x86)\MICROS~2\Office15\ONBttnIE.dll (.not file.)
O9 - Extra button: Cliquer pour appeler Lync [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office\Office15\lync.exe
O9 - Extra button: Notes &li�es OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -- C:\Program Files (x86)\MICROS~2\Office15\ONBTTN~1.dll (.not file.)
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d�affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
~ Winsock: 6 Scanned in 00mn 00s



---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
O15 - Trusted Zone: [HKCU\...\Domains] *.dell.com
~ IE Zone Confiance: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{3FCA1125-C8C2-4918-A523-3E83AC0A0067}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{3FCA1125-C8C2-4918-A523-3E83AC0A0067}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{3FCA1125-C8C2-4918-A523-3E83AC0A0067}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-cl�s Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Cl� de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non d�sactiv�s (O23)
O23 - Service: Service Scheduler2 Acronis (AcrSch2Svc) . (.Acronis - Acronis Scheduler 2.) - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (64-bit).) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_295b5b4710f6d77b\AESTSr64.exe
O23 - Service: Intel� Centrino� Wireless Bluetooth� + H (AMPPALR3) . (.Intel Corporation - Intel� Centrino� Wireless Bluetooth� + High.) - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth (BTHSSecurityMgr) . (.Intel(R) Corporation - Intel(R) BlueTooth(R) HS Security Manager S.) - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Diskeeper (Diskeeper) . (.Diskeeper Corporation - Diskeeper Service.) - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: TrueSuiteService (FPLService) . (.AuthenTec, Inc - TrueSuite Service.) - C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Ma-Config Agent (MaConfigAgent) . (.CybelSoft - Service de d�tection mat�riel.) - C:\Program Files\ma-config.com\MaConfigAgent.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Servic (RegSrvc) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: SigmaTel Audio Service (STacSV) . (.IDT, Inc. - STacSV Module.) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_295b5b4710f6d77b\STacSV64.exe
O23 - Service: Intel(R) PROSet/Wireless Zero Configurat (ZeroConfigService) . (.Intel� Corporation - Intel� PROSet/Wireless Zero Configure Servi.) - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
~ Services: 16 Scanned in 00mn 12s



---\\ Enum�ration Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ Enum�re les donn�es de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ T�ches planifi�es en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1064]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1068]
[MD5.A283108E14F3970432C21AF4C0CB1BCE] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [257416]
[MD5.82C362A81EE4E441CD85260C8E9E708A] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [251784]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.00000000000000000000000000000000] [APT] [Protected Search] (...) -- C:\Program Files (x86)\HomeTab\ProtectedSearch.exe (.not file.) [0] =>PUP.CertifiedToolbar
~ Scheduled Task: 11 Scanned in 00mn 07s



---\\ Composants install�s (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpr�teur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 10 Scanned in 00mn 00s



---\\ Pilotes lanc�s au d�marrage du syst�me (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\Windows\System32\DRIVERS\dtsoftbus01.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-syst�me de mise en m�moire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 63 Scanned in 00mn 00s



---\\ Logiciels install�s (O42)
O42 - Logiciel: Acronis�True�Image�Home - (.Acronis.) [HKLM][64Bits] -- {C2F1F96A-057E-5819-B52E-FEA1D1D2933B}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader XI (11.0.05) - Fran�ais - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Age of Mythology Gold - (.Microsoft.) [HKLM][64Bits] -- Age of Mythology Expansion Pack 1.0
O42 - Logiciel: AuthenTec TrueSuite - (.AuthenTec, Inc..) [HKLM][64Bits] -- {15F8EDF7-B032-438A-9D55-4C6573BBAF19}
O42 - Logiciel: Centre Souris et Claviers Microsoft - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Mouse and Keyboard Center
O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite =>.DT Soft Ltd
O42 - Logiciel: Dell System Detect - (.Dell.) [HKCU][64Bits] -- 9204f5692a8faf3b
O42 - Logiciel: Diskeeper 2011 - (.Diskeeper Corporation.) [HKLM][64Bits] -- {8E4FBD97-A3B6-450D-A99B-9368ECFB1026}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Heroes of Might and Magic III Armageddon's Blade - (...) [HKLM][64Bits] -- Heroes of Might and Magic III Armageddon's Blade
O42 - Logiciel: Heroes of Might and Magic� III The Shadow of Death(TM) - (...) [HKLM][64Bits] -- Heroes III The Shadow of Death
O42 - Logiciel: HomeTab 4.8 - (.HomeTab.) [HKLM][64Bits] -- {5b719707-d4d0-4592-a904-9939df8c089f}_is1 =>PUP.CertifiedToolbar
O42 - Logiciel: Intel PROSet Wireless - (...) [HKLM][64Bits] -- ProInst
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM][64Bits] -- HDMI
O42 - Logiciel: Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed - (.Intel Corporation.) [HKLM][64Bits] -- {90F00673-A276-4A58-B675-B426D39D1E09}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Laptop Integrated Webcam Driver (1.04.01.1011) - (...) [HKLM][64Bits] -- Creative OEM002
O42 - Logiciel: Logiciel Intel� PROSet/Wireless WiFi - (.Intel Corporation.) [HKLM][64Bits] -- {ECE5B218-A086-4E18-A362-D11181681457}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: MSXML4 Parser - (.Microsoft Game Studios.) [HKLM][64Bits] -- {01501EBA-EC35-4F9F-8889-3BE346E5DA13}
O42 - Logiciel: Ma-Config.com (64 bits) - (.Cybelsoft.) [HKLM][64Bits] -- {50A9E459-A2CF-4109-BB73-9079702BEBF2}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft Access MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0015-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft DCF MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0090-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Excel MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0016-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Groove MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00BA-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft InfoPath MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0044-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Lync MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Money - (.Microsoft.) [HKLM][64Bits] -- Money2005b
O42 - Logiciel: Microsoft OneNote MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00A1-040C-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Outlook MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001A-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft PowerPoint MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0018-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Publisher MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0019-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Word MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001B-040C-1000-0000000FF1CE}
O42 - Logiciel: RICOH R5C83x/84x Media Driver x64 Ver.5.03.03 - (...) [HKLM][64Bits] -- {59F6A514-9813-47A3-948C-8A155460CC2A}
O42 - Logiciel: SigmaTel Audio - (.SigmaTel.) [HKLM][64Bits] -- {A462213D-EED4-42C2-9A60-7BDD4D4B0B17}
O42 - Logiciel: Skype� 6.7 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
O42 - Logiciel: VLC media player 2.0.7 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: Vuze - (.Azureus Software, Inc..) [HKLM][64Bits] -- 8461-7759-5462-8226 =>P2P.Azureus
O42 - Logiciel: WinRAR 4.20 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: avast! Free Antivirus v8.0.1497.0 - (.AVAST Software.) [HKLM][64Bits] -- avast
~ Logic: 87 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\Acronis]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow]
[HKCU\Software\AuthenTec]
[HKCU\Software\Avast Software]
[HKCU\Software\Azureus] =>P2P.Azureus
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Creative Tech]
[HKCU\Software\Disc Soft]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Policies]
[HKCU\Software\Skype]
[HKCU\Software\Software]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\ej-technologies]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Acronis]
[HKLM\Software\AuthenTec]
[HKLM\Software\Azureus] =>P2P.Azureus
[HKLM\Software\BrowserChoice]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Creative Tech]
[HKLM\Software\Diskeeper Corporation]
[HKLM\Software\IDT]
[HKLM\Software\IM Providers]
[HKLM\Software\Intel]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\Protector Suite QL]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sigmatel]
[HKLM\Software\Sonic]
[HKLM\Software\TGUID]
[HKLM\Software\WinRAR]
[HKLM\Software\Wow6432Node\AVAST Software]
[HKLM\Software\Wow6432Node\Acronis]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\AuthenTec]
[HKLM\Software\Wow6432Node\C07ft5Y]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Creative Tech]
[HKLM\Software\Wow6432Node\CyberLink]
[HKLM\Software\Wow6432Node\Disc Soft]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\IM Providers]
[HKLM\Software\Wow6432Node\InstallShield]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\Licenses]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\New World Computing]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\PowerPivot]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\SegaSoft]
[HKLM\Software\Wow6432Node\SigmaTel]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\Software]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node]
[HKLM\Software\cybelsoft]
[HKLM\Software\ej-technologies]
[HKLM\Software\tdbg_trace]
~ Key Software: 128 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 25/06/2013 - 17:02:28 - [396,830] ----D C:\Program Files (x86)\3DO
O43 - CFD: 30/06/2013 - 17:58:45 - [78,791] ----D C:\Program Files (x86)\Acronis
O43 - CFD: 25/06/2013 - 13:10:48 - [120,785] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 24/06/2013 - 23:45:11 - [6,757] ----D C:\Program Files (x86)\Cisco
O43 - CFD: 03/09/2013 - 16:22:30 - [282,847] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 24/06/2013 - 21:53:02 - [26,884] ----D C:\Program Files (x86)\DAEMON Tools Lite =>.DT Soft Ltd
O43 - CFD: 01/07/2013 - 10:04:38 - [414,092] ----D C:\Program Files (x86)\Google
O43 - CFD: 25/06/2013 - 00:23:52 - [8,369] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 03/09/2013 - 16:13:06 - [19,653] ----D C:\Program Files (x86)\Intel
O43 - CFD: 14/09/2013 - 12:34:14 - [4,885] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 14/10/2013 - 15:55:14 - [13,265] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 24/06/2013 - 22:54:47 - [98,053] ----D C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 25/06/2013 - 18:34:13 - [1311,112] ----D C:\Program Files (x86)\Microsoft Games
O43 - CFD: 25/06/2013 - 11:44:39 - [70,213] ----D C:\Program Files (x86)\Microsoft Money 2005
O43 - CFD: 24/06/2013 - 22:54:24 - [96,050] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 24/06/2013 - 23:00:52 - [0,029] ----D C:\Program Files (x86)\Microsoft SQL Server
O43 - CFD: 24/06/2013 - 23:00:51 - [8,445] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 01/08/2013 - 12:42:41 - [0,032] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 27/06/2013 - 03:01:08 - [0] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 14/07/2009 - 07:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 25/06/2013 - 00:23:54 - [25,961] ----D C:\Program Files (x86)\SigmaTel
O43 - CFD: 09/08/2013 - 13:52:10 - [20,004] R---D C:\Program Files (x86)\Skype
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 25/06/2013 - 16:22:53 - [101,930] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 01/08/2013 - 13:36:31 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 24/06/2013 - 22:16:11 - [5,895] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 24/06/2013 - 22:16:11 - [4,791] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 24/06/2013 - 22:16:10 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 24/06/2013 - 22:16:11 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 24/06/2013 - 22:16:11 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 14/10/2013 - 17:21:08 - [16,995] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 30/06/2013 - 17:59:58 - [79,702] ----D C:\Program Files (x86)\Common Files\Acronis
O43 - CFD: 25/06/2013 - 13:11:23 - [6,289] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 03/09/2013 - 16:22:32 - [15,268] ----D C:\Program Files (x86)\Common Files\AuthenTec
O43 - CFD: 24/06/2013 - 23:41:55 - [3,338] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 25/06/2013 - 11:44:32 - [127,042] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 09/08/2013 - 13:52:09 - [1,904] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 24/06/2013 - 22:16:10 - [10,101] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 30/06/2013 - 18:03:11 - [0,014] ----D C:\ProgramData\Acronis
O43 - CFD: 25/06/2013 - 16:13:23 - [146,880] ----D C:\ProgramData\Adobe
O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Application Data
O43 - CFD: 24/06/2013 - 14:47:31 - [20,307] ----D C:\ProgramData\AVAST Software
O43 - CFD: 24/06/2013 - 14:39:40 - [0] -SH-D C:\ProgramData\Bureau
O43 - CFD: 24/06/2013 - 22:50:09 - [0,001] ----D C:\ProgramData\DAEMON Tools Lite =>.DT Soft Ltd
O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Desktop
O43 - CFD: 24/06/2013 - 14:58:29 - [0] ----D C:\ProgramData\Diskeeper Corporation
O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Documents
O43 - CFD: 03/09/2013 - 16:20:47 - [23,150] ----D C:\ProgramData\Downloaded Installations
O43 - CFD: 24/06/2013 - 14:39:40 - [0] -SH-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Favorites
O43 - CFD: 24/06/2013 - 23:45:11 - [0,001] ----D C:\ProgramData\Intel
O43 - CFD: 24/06/2013 - 23:23:45 - [1,315] ----D C:\ProgramData\ma-config.com
O43 - CFD: 14/10/2013 - 15:55:07 - [7,405] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 24/06/2013 - 14:39:40 - [0] -SH-D C:\ProgramData\Menu D�marrer
O43 - CFD: 24/06/2013 - 22:58:44 - [243,787] -S--D C:\ProgramData\Microsoft
O43 - CFD: 28/09/2013 - 19:17:39 - [0,011] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 24/06/2013 - 23:12:00 - [0,002] ----D C:\ProgramData\Microsoft Toolkit
O43 - CFD: 24/06/2013 - 14:39:40 - [0] -SH-D C:\ProgramData\Mod�les
O43 - CFD: 01/07/2013 - 17:26:01 - [0,001] ----D C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 24/06/2013 - 23:48:02 - [0] ----D C:\ProgramData\Roaming
O43 - CFD: 09/08/2013 - 13:52:25 - [32,540] ----D C:\ProgramData\Skype
O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 18/09/2013 - 21:09:50 - [0] ----D C:\ProgramData\TEMP
O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Templates
O43 - CFD: 03/09/2013 - 21:44:59 - [0,001] ----D C:\ProgramData\TrueSuite
O43 - CFD: 30/06/2013 - 18:04:43 - [0] ----D C:\Users\vevere\AppData\Roaming\Acronis
O43 - CFD: 25/06/2013 - 13:12:33 - [0,074] ----D C:\Users\vevere\AppData\Roaming\Adobe
O43 - CFD: 03/07/2013 - 09:41:32 - [24,928] ----D C:\Users\vevere\AppData\Roaming\Azureus =>P2P.Azureus
O43 - CFD: 24/06/2013 - 22:51:14 - [1,454] ----D C:\Users\vevere\AppData\Roaming\DAEMON Tools Lite =>.DT Soft Ltd
O43 - CFD: 24/06/2013 - 14:40:25 - [0] ----D C:\Users\vevere\AppData\Roaming\Identities
O43 - CFD: 24/06/2013 - 23:57:34 - [0] ----D C:\Users\vevere\AppData\Roaming\InstallShield
O43 - CFD: 24/06/2013 - 23:48:20 - [0,001] ----D C:\Users\vevere\AppData\Roaming\Intel
O43 - CFD: 25/06/2013 - 00:15:32 - [0] ----D C:\Users\vevere\AppData\Roaming\Intel Corporation
O43 - CFD: 24/06/2013 - 22:59:10 - [0,003] ----D C:\Users\vevere\AppData\Roaming\Macromedia
O43 - CFD: 14/10/2013 - 15:55:19 - [35,453] ----D C:\Users\vevere\AppData\Roaming\Malwarebytes
O43 - CFD: 14/07/2009 - 17:35:05 - [0] ----D C:\Users\vevere\AppData\Roaming\Media Center Programs
O43 - CFD: 03/10/2013 - 23:49:33 - [43,853] -S--D C:\Users\vevere\AppData\Roaming\Microsoft
O43 - CFD: 18/09/2013 - 21:41:46 - [0,015] ----D C:\Users\vevere\AppData\Roaming\player
O43 - CFD: 14/10/2013 - 17:15:00 - [5,782] ----D C:\Users\vevere\AppData\Roaming\Skype
O43 - CFD: 08/10/2013 - 02:53:02 - [0,077] ----D C:\Users\vevere\AppData\Roaming\vlc
O43 - CFD: 24/06/2013 - 23:26:36 - [1,809] ----D C:\Users\vevere\AppData\Roaming\WinRAR
O43 - CFD: 14/10/2013 - 17:22:23 - [0,764] ----D C:\Users\vevere\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 25/06/2013 - 13:12:33 - [17,592] ----D C:\Users\vevere\AppData\Local\Adobe
O43 - CFD: 24/06/2013 - 14:39:55 - [0] -SH-D C:\Users\vevere\AppData\Local\Application Data
O43 - CFD: 24/06/2013 - 23:16:53 - [8,780] ----D C:\Users\vevere\AppData\Local\Apps
O43 - CFD: 03/09/2013 - 16:24:09 - [0,003] ----D C:\Users\vevere\AppData\Local\AuthenTec
O43 - CFD: 14/10/2013 - 17:14:41 - [0] ----D C:\Users\vevere\AppData\Local\Deployment
O43 - CFD: 17/09/2013 - 20:18:43 - [1,109] ----D C:\Users\vevere\AppData\Local\Diagnostics
O43 - CFD: 24/09/2013 - 13:31:12 - [0,121] ----D C:\Users\vevere\AppData\Local\ElevatedDiagnostics
O43 - CFD: 01/07/2013 - 10:05:13 - [137,351] ----D C:\Users\vevere\AppData\Local\Google
O43 - CFD: 24/06/2013 - 14:39:55 - [0] -SH-D C:\Users\vevere\AppData\Local\Historique
O43 - CFD: 29/09/2013 - 01:32:46 - [143,714] ----D C:\Users\vevere\AppData\Local\Microsoft
O43 - CFD: 02/10/2013 - 01:50:06 - [0,237] ----D C:\Users\vevere\AppData\Local\Microsoft Games
O43 - CFD: 01/07/2013 - 17:34:02 - [0,067] ----D C:\Users\vevere\AppData\Local\Microsoft Help
O43 - CFD: 18/09/2013 - 21:08:21 - [0] ----D C:\Users\vevere\AppData\Local\Programs
O43 - CFD: 18/09/2013 - 21:06:54 - [0] ----D C:\Users\vevere\AppData\Local\Software
O43 - CFD: 14/10/2013 - 17:19:50 - [238,329] ----D C:\Users\vevere\AppData\Local\Temp
O43 - CFD: 24/06/2013 - 14:39:55 - [0] -SH-D C:\Users\vevere\AppData\Local\Temporary Internet Files
O43 - CFD: 25/06/2013 - 11:47:07 - [227,290] ----D C:\Users\vevere\AppData\Local\VirtualStore
O43 - CFD: 14/07/2009 - 06:54:32 - [0,014] R---D C:\Users\vevere\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 15/09/2013 - 02:58:11 - [0] R---D C:\Users\vevere\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 25/06/2013 - 00:39:41 - [0] ----D C:\Users\vevere\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
O43 - CFD: 14/07/2009 - 06:49:38 - [0,001] R---D C:\Users\vevere\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 18/09/2013 - 21:38:09 - [0] R---D C:\Users\vevere\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 24/06/2013 - 14:55:32 - [0,003] ----D C:\Users\vevere\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ Program Folder: 109 Scanned in 00mn 13s



---\\ Derniers fichiers modifi�s ou cr�es sous Windows et System32 (O44)
O44 - LFC:[MD5.0BB97D43299910CBFBA59C461B99B910] - 14/10/2013 - 14:55:04 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [25928]
O44 - LFC:[MD5.FBD4A9726699DE1E118BD364F063A6BC] - 14/10/2013 - 16:11:24 ---A- . (...) -- C:\Windows\PFRO.log [25428]
O44 - LFC:[MD5.E027BE0212A18829E093893FB9005C75] - 14/10/2013 - 16:11:30 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.60879DDF1334C81C1126BAF9B157A968] - 14/10/2013 - 16:11:32 ---A- . (...) -- C:\Windows\setupact.log [31766]
O44 - LFC:[MD5.506E413992557C47A15AA2BC47D63EE2] - 14/10/2013 - 16:17:27 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1436229]
O44 - LFC:[MD5.723CF1D813C7EAFC2D0F0D543A7066D8] - 14/10/2013 - 16:18:23 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1661710]
O44 - LFC:[MD5.516210C420975429B1221AC88A1A3198] - 14/10/2013 - 16:18:23 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [121080]
O44 - LFC:[MD5.347B07A646AA9D05DB295419475E2BC4] - 14/10/2013 - 16:18:23 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [148792]
O44 - LFC:[MD5.86E67910868FD0D155565BF9CB93AB76] - 14/10/2013 - 16:18:23 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [652148]
O44 - LFC:[MD5.FF489D96A7E848FAEEC876E63AC1A790] - 14/10/2013 - 16:18:23 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [745306]
O44 - LFC:[MD5.723CF1D813C7EAFC2D0F0D543A7066D8] - 14/10/2013 - 16:18:23 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1661710]
O44 - LFC:[MD5.516210C420975429B1221AC88A1A3198] - 14/10/2013 - 16:18:23 ---A- . (...) -- C:\Windows\System32\perfc009.dat [121080]
O44 - LFC:[MD5.347B07A646AA9D05DB295419475E2BC4] - 14/10/2013 - 16:18:23 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [148792]
O44 - LFC:[MD5.86E67910868FD0D155565BF9CB93AB76] - 14/10/2013 - 16:18:23 ---A- . (...) -- C:\Windows\System32\perfh009.dat [652148]
O44 - LFC:[MD5.FF489D96A7E848FAEEC876E63AC1A790] - 14/10/2013 - 16:18:23 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [745306]
~ Files: 15 Scanned in 00mn 30s



---\\ Derniers fichiers cr��s dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.1E7060E4BECC4DE872DBC74F3143D6B4] - 02/10/2013 - 00:59:57 ---A- - C:\Windows\Prefetch\AOMX.EXE-3061BC5B.pf
O45 - LFCP:[MD5.716563CDE44FA12766095C874D4FAF1C] - 02/10/2013 - 01:00:00 ---A- - C:\Windows\Prefetch\MOVIEPLAYER.EXE-F87B21D3.pf
O45 - LFCP:[MD5.9E696523F1E14E5A9995BE77C7E8C17F] - 02/10/2013 - 13:09:16 ---A- - C:\Windows\Prefetch\RUNONCE.EXE-0E293DD6.pf
O45 - LFCP:[MD5.2B0325693D31D7FBF1BF8D65C26092A1] - 03/10/2013 - 12:53:54 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-5CA45734.pf
O45 - LFCP:[MD5.9BB39965B67CD5E17D2ADD4AD2AE9686] - 04/10/2013 - 09:23:15 ---A- - C:\Windows\Prefetch\GOOGLECRASHHANDLER.EXE-98369EB7.pf
O45 - LFCP:[MD5.8B0C6387621F1D049BA89B23A0090145] - 04/10/2013 - 09:23:28 ---A- - C:\Windows\Prefetch\WMPNETWK.EXE-D9F2A96F.pf
O45 - LFCP:[MD5.4EA7048D8F07D655C71A9E69C96DB43E] - 06/10/2013 - 15:15:58 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-A3E35360.pf
O45 - LFCP:[MD5.BC29E7B88FEC69B326F31A547E5E0289] - 06/10/2013 - 16:00:02 ---A- - C:\Windows\Prefetch\WSQMCONS.EXE-118B52B7.pf
O45 - LFCP:[MD5.CE92B641C38437D7791DF65D3E5544FA] - 06/10/2013 - 16:18:51 ---A- - C:\Windows\Prefetch\SPLWOW64.EXE-297C4568.pf
O45 - LFCP:[MD5.4E8A8A04599C0AD679ADE5FD36DF4979] - 07/10/2013 - 17:50:11 ---A- - C:\Windows\Prefetch\EXCEL.EXE-9A13BBDB.pf
O45 - LFCP:[MD5.14D727C8F6A39EE5DCC9840BE0B546A9] - 08/10/2013 - 00:17:50 ---A- - C:\Windows\Prefetch\ACRORD32.EXE-D066635E.pf
O45 - LFCP:[MD5.0F42B4413D5F862F0B19F52CCBBE0083] - 10/10/2013 - 23:10:07 ---A- - C:\Windows\Prefetch\FLASHPLAYERINSTALLER.EXE-21C59411.pf
O45 - LFCP:[MD5.1C78BE51BB7F9976277BC9281103733D] - 13/10/2013 - 12:36:27 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-007FEA55.pf
O45 - LFCP:[MD5.A55D490912966EA1D70C31858212F389] - 13/10/2013 - 12:36:33 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-3AB35CA7.pf
O45 - LFCP:[MD5.8BE819F221A6482DCFF625E97A7B394A] - 13/10/2013 - 12:36:37 ---A- - C:\Windows\Prefetch\STTRAY64.EXE-C2B24300.pf
O45 - LFCP:[MD5.1CF99540AEA62AA2FF11C44F66F02860] - 13/10/2013 - 12:36:47 ---A- - C:\Windows\Prefetch\DTLITE.EXE-368347E6.pf
O45 - LFCP:[MD5.048CDB40EB34D4FF08F246AA4DF04A13] - 13/10/2013 - 12:36:47 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-64AA225C.pf
O45 - LFCP:[MD5.E7E3D16AA76BA7BDA557E6947138C001] - 13/10/2013 - 12:37:04 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-C871F054.pf
O45 - LFCP:[MD5.19B307551DD1F6598CCC8103769AF2F8] - 13/10/2013 - 12:37:55 ---A- - C:\Windows\Prefetch\SC.EXE-945D79AE.pf
O45 - LFCP:[MD5.37903EC585425FF7A084EEFF636E5E6C] - 13/10/2013 - 12:39:47 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-A2D55CB6.pf
O45 - LFCP:[MD5.0DC799273A2DF72AEA7B0A7ED1277E03] - 13/10/2013 - 12:40:04 ---A- - C:\Windows\Prefetch\GOOGLEUPDATEONDEMAND.EXE-12A77CA1.pf
O45 - LFCP:[MD5.1544D4E4C441C769DA6CA8FFD1AD7A29] - 13/10/2013 - 12:40:05 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-E09A077A.pf
O45 - LFCP:[MD5.7049C39A7828C816EB65998754B16605] - 13/10/2013 - 12:46:54 ---A- - C:\Windows\Prefetch\OLICENSEHEARTBEAT.EXE-85E1AF9F.pf
O45 - LFCP:[MD5.E76DB23BD62E0E94FE01A01E4CF3D57C] - 13/10/2013 - 23:37:12 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:[MD5.9445652177BC37FEE6D8BB5D55D05C62] - 13/10/2013 - 23:38:13 ---A- - C:\Windows\Prefetch\AgCx_SC1.db
O45 - LFCP:[MD5.608BD1CAA7C33B4B429ABCDDCCECAAF0] - 13/10/2013 - 23:48:57 ---A- - C:\Windows\Prefetch\MPCMDRUN.EXE-F401FBB4.pf
O45 - LFCP:[MD5.4D537631F1B3E5EDE7522D28EFAA52B5] - 14/10/2013 - 13:44:36 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-C373C89E.pf
O45 - LFCP:[MD5.ECB4955D29AC0BAD6C5C8BBAE594A526] - 14/10/2013 - 13:51:33 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-76936ED5.pf
O45 - LFCP:[MD5.8D5E2BC41101AD01DA3D4F15ABFD30A6] - 14/10/2013 - 14:28:39 ---A- - C:\Windows\Prefetch\CMD.EXE-4A81B364.pf
O45 - LFCP:[MD5.6E2A3918F5D6904D37492D4558FBACDC] - 14/10/2013 - 14:28:52 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-135296302-3689904380-3089145907-1000.db
O45 - LFCP:[MD5.28514541FA42BC883EB931512D9E039F] - 14/10/2013 - 14:28:52 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-135296302-3689904380-3089145907-1000.db
O45 - LFCP:[MD5.1E8EDA54F043365FEEFBF184AF3F9333] - 14/10/2013 - 14:31:44 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.5E53B845AF367A15D3784181B025D9D8] - 14/10/2013 - 14:31:44 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-61AE5AB6.pf
O45 - LFCP:[MD5.AA802B94B2A9F26FA44CAB1787A28FDD] - 14/10/2013 - 14:31:55 ---A- - C:\Windows\Prefetch\UNSECAPP.EXE-A02905A6.pf
O45 - LFCP:[MD5.8C3C021523669BECF7EFE5E81025CB16] - 14/10/2013 - 14:32:06 ---A- - C:\Windows\Prefetch\AVAST.SETUP-B1D66586.pf
O45 - LFCP:[MD5.341E22CA51105873EF3B1986FF7D9ED7] - 14/10/2013 - 14:32:07 ---A- - C:\Windows\Prefetch\AVBUGREPORT.EXE-3B5B9E84.pf
O45 - LFCP:[MD5.4492355B6791EB67D06EFC84F44E0694] - 14/10/2013 - 14:33:08 ---A- - C:\Windows\Prefetch\BTHSAMPPALSERVICE.EXE-D65F3E7C.pf
O45 - LFCP:[MD5.518EB60E72CFACB4AB1ADA3029BF91CB] - 14/10/2013 - 14:42:56 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf
O45 - LFCP:[MD5.E3381A9B6B8DE2C2FB6866C931421ABA] - 14/10/2013 - 14:43:00 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-02CC9EFF.pf
O45 - LFCP:[MD5.0936FFA6CE1DD8DDF99EEBC801072CAF] - 14/10/2013 - 14:46:19 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf
O45 - LFCP:[MD5.ABC28C38F852EB3AF19F975C89C5DB2C] - 14/10/2013 - 14:46:20 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf
O45 - LFCP:[MD5.B8B52EEC3D43CDC902C8929C672E6250] - 14/10/2013 - 14:47:08 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf
O45 - LFCP:[MD5.23C287CC2315785CABA818BA78696692] - 14/10/2013 - 14:47:13 ---A- - C:\Windows\Prefetch\MPSIGSTUB.EXE-6CB27A06.pf
O45 - LFCP:[MD5.1A28F688A927BC07237FD476CC56332C] - 14/10/2013 - 14:55:19 ---A- - C:\Windows\Prefetch\WMIAPSRV.EXE-29F35ED0.pf
O45 - LFCP:[MD5.81BE236703604215F5FDB7CA1BA602C5] - 14/10/2013 - 15:48:37 ---A- - C:\Windows\Prefetch\OSPPSVC.EXE-E53D3CC0.pf
O45 - LFCP:[MD5.226745693D76F574940EB096B4AF1FED] - 14/10/2013 - 15:53:14 ---A- - C:\Windows\Prefetch\WINWORD.EXE-CECBA770.pf
O45 - LFCP:[MD5.903BDCAA9793D246AE3677F9724ECE86] - 14/10/2013 - 15:58:22 ---A- - C:\Windows\Prefetch\MSOSQM.EXE-14F17915.pf
O45 - LFCP:[MD5.0851B9250B22CFFBDD09BA63A61FAD0D] - 14/10/2013 - 15:58:30 ---A- - C:\Windows\Prefetch\OSE.EXE-533D8AC9.pf
O45 - LFCP:[MD5.CB0F2E9C66317DBDE84AC232D478C249] - 14/10/2013 - 16:02:07 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.B357EB19C81EB049E5C519B9268E40C9] - 14/10/2013 - 16:02:07 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.1F853C0C4705636E4475F738D9931C82] - 14/10/2013 - 16:02:08 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.3AF8AAEE4C6507B8ADE5035E54296731] - 14/10/2013 - 16:02:08 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.02548DA487912C2D31679088CB132C1D] - 14/10/2013 - 16:08:10 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-216D9C35.pf
O45 - LFCP:[MD5.95AF461DE0BF5719684E10089F1C7CD1] - 14/10/2013 - 16:09:43 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf
O45 - LFCP:[MD5.F0AB41578AC8E7CADFE8F3A66BC278E6] - 14/10/2013 - 16:10:55 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:[MD5.6F51F26116D4C90CE36FAE98A5F18ED4] - 14/10/2013 - 16:13:41 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-B95715F5.pf
O45 - LFCP:[MD5.4F423E47C201939B280EEBA4D543BDFD] - 14/10/2013 - 16:13:44 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf
O45 - LFCP:[MD5.EA5E7BA0136FADCB78A44C9237E2F11C] - 14/10/2013 - 16:13:45 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf
O45 - LFCP:[MD5.DC6B1978D6BE6AC4F562DEF4CC2D24B7] - 14/10/2013 - 16:13:55 ---A- - C:\Windows\Prefetch\SEARCHINDEXER.EXE-4A6353B9.pf
O45 - LFCP:[MD5.2714AA72E707D0BCA61E94BE3978A0A4] - 14/10/2013 - 16:13:57 ---A- - C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf
O45 - LFCP:[MD5.D18EB7E46231AE59C65E273048254CB2] - 14/10/2013 - 16:14:01 ---A- - C:\Windows\Prefetch\IGFXSRVC.EXE-96A493A4.pf
O45 - LFCP:[MD5.BC5DD432AF6579238D3569A08B63AD16] - 14/10/2013 - 16:14:01 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf
O45 - LFCP:[MD5.FC5C20FD5B28A7042A62AC28CAEE0721] - 14/10/2013 - 16:14:03 ---A- - C:\Windows\Prefetch\AVASTEMUPDATE.EXE-6EF4B603.pf
O45 - LFCP:[MD5.D907C78EE4FB71034F1046BBC91449DC] - 14/10/2013 - 16:14:03 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-57D17DAF.pf
O45 - LFCP:[MD5.C2725B0EB4345F6C8AF0291DFEF733C9] - 14/10/2013 - 16:14:03 ---A- - C:\Windows\Prefetch\READER_SL.EXE-38C1D083.pf
O45 - LFCP:[MD5.60639C83C208FDA9499C4191EE6764F5] - 14/10/2013 - 16:14:06 ---A- - C:\Windows\Prefetch\SCHEDHLP.EXE-D0E56EB2.pf
O45 - LFCP:[MD5.4063025EF649A14E0198F9FEB07F21F7] - 14/10/2013 - 16:14:08 ---A- - C:\Windows\Prefetch\BTHSSECURITYMGR.EXE-B9C50DC6.pf
O45 - LFCP:[MD5.B7FBF60D644C0E47B61D3ECF8CE9590C] - 14/10/2013 - 16:14:09 ---A- - C:\Windows\Prefetch\AVASTUI.EXE-56B29A08.pf
O45 - LFCP:[MD5.0E5505676115BF1903A09473EACE2D36] - 14/10/2013 - 16:14:10 ---A- - C:\Windows\Prefetch\DFSVC.EXE-3D1775F1.pf
O45 - LFCP:[MD5.137649F0F3E06FEAFB37737C078189C9] - 14/10/2013 - 16:14:12 ---A- - C:\Windows\Prefetch\OEM02MON.EXE-F2039A93.pf
O45 - LFCP:[MD5.D9D4321E374715B960383264490AE561] - 14/10/2013 - 16:14:16 ---A- - C:\Windows\Prefetch\CSC.EXE-A3B8D95D.pf
O45 - LFCP:[MD5.AC06AA9B2F742247C02793F62CE1DD2E] - 14/10/2013 - 16:14:16 ---A- - C:\Windows\Prefetch\CVTRES.EXE-069169FB.pf
O45 - LFCP:[MD5.A0DEF687E7802ACA64110CBBACC8416E] - 14/10/2013 - 16:14:16 ---A- - C:\Windows\Prefetch\DKSERVICE.EXE-EC674E82.pf
O45 - LFCP:[MD5.FC8EA13FD060DF729DB63BD6FF664FD8] - 14/10/2013 - 16:14:16 ---A- - C:\Windows\Prefetch\TRUEIMAGEMONITOR.EXE-812204A3.pf
O45 - LFCP:[MD5.73448984315A50EC3C61B827224C4C1E] - 14/10/2013 - 16:14:19 ---A- - C:\Windows\Prefetch\IASTORDATAMGRSVC.EXE-C086B157.pf
O45 - LFCP:[MD5.A9D0F97A7007BED774E9090752B2D088] - 14/10/2013 - 16:14:20 ---A- - C:\Windows\Prefetch\UPDATER.EXE-EA1310CB.pf
O45 - LFCP:[MD5.3852CA742697186FD2E7FF016242E7CF] - 14/10/2013 - 16:14:29 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-40DD444D.pf
O45 - LFCP:[MD5.98A5BF5D533DF48D92B7E7F549E7A600] - 14/10/2013 - 16:14:32 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-05F624AB.pf
O45 - LFCP:[MD5.66439D7FB1AEAFCE14D7269E60B38C92] - 14/10/2013 - 16:14:36 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf
O45 - LFCP:[MD5.29A493403DF167E326DE0AED2B4B1929] - 14/10/2013 - 16:14:53 ---A- - C:\Windows\Prefetch\AgCx_SC4.db
O45 - LFCP:[MD5.6E8FECEED957AF44BA8621F4FBA1B940] - 14/10/2013 - 16:15:02 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf
O45 - LFCP:[MD5.60A3DBB25B7B5A08E122DA530A26B66F] - 14/10/2013 - 16:16:03 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf
O45 - LFCP:[MD5.9D58D8F0E7570D3452BC11932169EE68] - 14/10/2013 - 16:16:21 ---A- - C:\Windows\Prefetch\CHROME.EXE-D999B1BA.pf
O45 - LFCP:[MD5.E2E5AE8163CB60C9053F072A3F6D2012] - 14/10/2013 - 16:20:07 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf
O45 - LFCP:[MD5.B6569EA3860AAB0EBB1527538A4C16BC] - 14/10/2013 - 16:20:07 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
O45 - LFCP:[MD5.712FB3DAB92EF862F2834B5BB32F85AA] - 14/10/2013 - 16:21:00 ---A- - C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf
O45 - LFCP:[MD5.788A4DD0DFD898101E6E2B90EF1B413D] - 14/10/2013 - 16:21:06 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf
O45 - LFCP:[MD5.E6E69DA953050931F410816B22190ACA] - 14/10/2013 - 16:21:09 ---A- - C:\Windows\Prefetch\AUDIODG.EXE-BDFD3029.pf
O45 - LFCP:[MD5.7F9EC51A0CF6187429D5B0E33A7ACB71] - 14/10/2013 - 16:21:15 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-A8DE6D5B.pf
O45 - LFCP:[MD5.A961FA80E67FD05161B36D3A6DD4B452] - 14/10/2013 - 16:21:25 ---A- - C:\Windows\Prefetch\CMD.EXE-AC113AA8.pf
O45 - LFCP:[MD5.39B02827C46FF9804D91065983974A56] - 14/10/2013 - 16:21:25 ---A- - C:\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf
O45 - LFCP:[MD5.B47DD6A9F8B26091C84A44659D4C8285] - 14/10/2013 - 16:21:29 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-B0F8131B.pf
O45 - LFCP:[MD5.BB52CB1E815BAE652D69A9BC9BAB6907] - 14/10/2013 - 16:21:51 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf
O45 - LFCP:[MD5.1F5204053CBF9F28F1FF205EC100AD8B] - 15/09/2013 - 01:56:33 ---A- - C:\Windows\Prefetch\WUDFHOST.EXE-AFFEF87C.pf
O45 - LFCP:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 15/09/2159 - 02:38:47 ----D - C:\Windows\Prefetch\ReadyBoot
O45 - LFCP:[MD5.4B94BDDE8D7875D7E620A89A050DF84A] - 17/09/2013 - 19:23:52 ---A- - C:\Windows\Prefetch\MPAS-FE_BD.EXE-BB62FD5E.pf
O45 - LFCP:[MD5.1A7652D33C7ED11647A82AE24B4BD610] - 18/09/2013 - 20:44:18 ---A- - C:\Windows\Prefetch\PING.EXE-7E94E73E.pf
O45 - LFCP:[MD5.0113DB2A37B1953D264AC874A94CA051] - 22/09/2013 - 18:12:11 ---A- - C:\Windows\Prefetch\CONTROL.EXE-817F8F1D.pf
O45 - LFCP:[MD5.90D163547C311BAD37E5BB0F4174963F] - 22/09/2013 - 18:12:21 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-89545801.pf
O45 - LFCP:[MD5.8408ABF6D8E3728C90B4C8C36DED02BA] - 24/09/2013 - 12:18:14 ---A- - C:\Windows\Prefetch\DELLSYSTEMDETECT.EXE-2E6807DF.pf
O45 - LFCP:[MD5.74EAF5F4A16604A857C9521E0D71D42F] - 24/09/2013 - 12:31:01 ---A- - C:\Windows\Prefetch\SDIAGNHOST.EXE-8D72177C.pf
O45 - LFCP:[MD5.2993DE69E8769C4345C117B7A7EB861B] - 24/09/2013 - 12:31:03 ---A- - C:\Windows\Prefetch\CSC.EXE-BE9AC2DF.pf
O45 - LFCP:[MD5.4077A1C66C3396C194C90F3EB5221D45] - 24/09/2013 - 12:31:03 ---A- - C:\Windows\Prefetch\CVTRES.EXE-2B9D810D.pf
O45 - LFCP:[MD5.736FB6279DF0ABF6365C424289C00816] - 25/09/2013 - 03:30:07 ---A- - C:\Windows\Prefetch\ADOBEARM.EXE-7105D3A2.pf
O45 - LFCP:[MD5.E54194D4B831D12B2C23D3990F4F2B2A] - 25/09/2013 - 03:38:17 ---A- - C:\Windows\Prefetch\AgCx_SC3_FBB19CD962D1A685.db
O45 - LFCP:[MD5.65225E6B9F514E642E5F7C24D7082451] - 26/09/2013 - 09:53:25 ---A- - C:\Windows\Prefetch\IASTORICON.EXE-FF322740.pf
O45 - LFCP:[MD5.FFD77970E3C06234AAD4D4BAB153842E] - 28/09/2013 - 18:03:28 ---A- - C:\Windows\Prefetch\GOOGLECRASHHANDLER64.EXE-A4D3C329.pf
O45 - LFCP:[MD5.4D751C6B2E6964D15F5DA035B2C06122] - 28/09/2013 - 18:13:48 ---A- - C:\Windows\Prefetch\LODCTR.EXE-3CCE0534.pf
O45 - LFCP:[MD5.7A84FA9CAC2197A52B523F1A2BF260AE] - 28/09/2013 - 18:15:45 ---A- - C:\Windows\Prefetch\ADDINUTIL.EXE-FEF23417.pf
O45 - LFCP:[MD5.432C05F98BDF77CD142343ED5458B077] - 29/09/2013 - 15:57:29 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-1C4D4A73.pf
O45 - LFCP:[MD5.574F7E79B627499AB275D11956AFB32D] - 29/09/2013 - 15:57:32 ---A- - C:\Windows\Prefetch\SNDVOL.EXE-5D4CC7D6.pf
O45 - LFCP:[MD5.68FBDFCC87D7B3FE53B1C92895EDB245] - 29/09/2013 - 22:26:43 ---A- - C:\Windows\Prefetch\SKYPE.EXE-E71BF59F.pf
~ Prefetcher: 112 Scanned in 00mn 03s



---\\ D�ni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l��diteur de configuration de s�curit� Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de s�curit� Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
~ LSA: 8 Scanned in 00mn 00s



---\\ Contr�le du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ CSB: 13 Scanned in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - bitguard.exe - tasklist.exe =>PUP.BitGuard
O50 - IFEO:Image File Execution Options - bprotect.exe - tasklist.exe
O50 - IFEO:Image File Execution Options - browserdefender.exe - tasklist.exe =>Hijacker.Eazel
O50 - IFEO:Image File Execution Options - browserprotect.exe - tasklist.exe =>Hijacker.Eazel
~ IFEO: Scanned in 00mn 00s



---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ TDSD: 2 Scanned in 00mn 00s



---\\ Enum�ration des cl�s de registre SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s



---\\ Enum�ration des cl�s de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKCU\...\Policies\System] - "LogonHoursAction"=2
O55 - MWPS:[HKCU\...\Policies\System] - "DontDisplayLogonHoursWarnings"=1
~ MWPS: 18 Scanned in 00mn 00s



---\\ Enum�ration des cl�s de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
~ MWPE Keys: 4 Scanned in 00mn 00s



---\\ Liste des pilotes du syst�me (SDL) (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088]
~ Drivers: 18 Scanned in 00mn 00s



---\\ Derniers fichiers modifi�s ou cr�es (Utilisateur) (O61)
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Archived History [270336]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Archived History-journal [16384]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Bookmarks [2223]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\data_0 [45056]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\data_1 [270336]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\data_2 [1056768]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\data_3 [4202496]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000001 [59888]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000002 [37901]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000003 [87502]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000004 [32826]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000005 [58819]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000006 [22324]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000007 [23168]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000008 [22172]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000009 [21572]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00000a [20724]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00000b [32343]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00000c [42076]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00000d [21272]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00000e [21399]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00000f [175993]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000010 [94057]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000011 [27233]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000012 [93065]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000013 [89850]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000014 [77144]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000015 [80104]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000016 [17396]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000017 [19324]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000018 [23460]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000019 [19008]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00001a [86556]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00001b [24076]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00001c [18014]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00001d [38082]
O61 - LFC: 13/10/2013 - 17:23:23 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00001e [41792]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00001f [40798]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000020 [37180]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000021 [72702]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000022 [35954]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000023 [80104]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000024 [20638]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000025 [86530]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000026 [86530]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000027 [22926]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000028 [32298]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000029 [41016]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00002a [36000]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00002b [262144]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00002c [86916]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00002d [94148]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00002e [72702]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00002f [94148]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000030 [86916]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000031 [482084]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000032 [45270]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000033 [23198]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000034 [446140]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000035 [524880]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000036 [535750]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000037 [535750]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000038 [594916]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_000039 [594916]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00003a [446140]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00003b [37950]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00003c [524880]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00003d [174414]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00003e [93484]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\f_00003f [89847]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cache\index [524656]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cookies [722944]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Cookies-journal [16384]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Current Session [60243]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Extension Cookies [6144]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Extension Cookies-journal [4640]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Extension Rules\CURRENT [16]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Extension Rules\LOCK [0]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Extension Rules\LOG [148]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Extension Rules\LOG.old [148]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Extension Rules\MANIFEST-000361 [712]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Extension State\CURRENT [16]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Extension State\LOCK [0]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Extension State\LOG [142]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Extension State\LOG.old [257]
O61 - LFC: 13/10/2013 - 17:23:24 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Extension State\MANIFEST-000007 [50]
O61 - LFC: 13/10/2013 - 17:23:27 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Favicons [1361920]
O61 - LFC: 13/10/2013 - 17:23:27 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Favicons-journal [16384]
O61 - LFC: 13/10/2013 - 17:23:27 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\File System\Origins\CURRENT [16]
O61 - LFC: 13/10/2013 - 17:23:27 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\File System\Origins\LOG [145]
O61 - LFC: 13/10/2013 - 17:23:27 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\File System\Origins\MANIFEST-000016 [279]
O61 - LFC: 13/10/2013 - 17:23:27 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\GPUCache\data_0 [45056]
O61 - LFC: 13/10/2013 - 17:23:27 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\GPUCache\data_1 [270336]
O61 - LFC: 13/10/2013 - 17:23:27 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\GPUCache\data_2 [1056768]
O61 - LFC: 13/10/2013 - 17:23:27 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\GPUCache\data_3 [8192]
O61 - LFC: 13/10/2013 - 17:23:27 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\GPUCache\index [262512]
O61 - LFC: 13/10/2013 - 17:23:27 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Google Profile.ico [181623]
O61 - LFC: 13/10/2013 - 17:23:27 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\History [2863104]
O61 - LFC: 13/10/2013 - 17:23:27 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\History-journal [16384]
O61 - LFC: 13/10/2013 - 17:23:28 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Local Storage\http_badoo.com_0.localstorage [137216]
O61 - LFC: 13/10/2013 - 17:23:28 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Local Storage\http_badoo.com_0.localstorage-journal [16384]
O61 - LFC: 13/10/2013 - 17:23:28 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Local Storage\https_plus.google.com_0.localstorage [3072]
O61 - LFC: 13/10/2013 - 17:23:28 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Local Storage\https_plus.google.com_0.localstorage-journal [3608]
O61 - LFC: 13/10/2013 - 17:23:29 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Managed Mode Settings [8]
O61 - LFC: 13/10/2013 - 17:23:29 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Network Action Predictor [160768]
O61 - LFC: 13/10/2013 - 17:23:29 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Network Action Predictor-journal [16384]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Preferences [187789]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\QuotaManager [19456]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\QuotaManager-journal [8768]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Session Storage\CURRENT [16]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Session Storage\LOCK [0]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Session Storage\LOG [269]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Session Storage\LOG.old [269]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Session Storage\MANIFEST-000633 [325]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Sync Data\SyncData.sqlite3 [757760]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Sync Data\SyncData.sqlite3-journal [16384]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Top Sites [425984]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Top Sites-journal [16384]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\TransportSecurity [1912]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Visited Links [131072]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Web Data [88064]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Default\Web Data-journal [16384]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Local State [45109]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Safe Browsing Bloom_new [765952]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Safe Browsing Cookies [6144]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Safe Browsing Cookies-journal [4640]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Safe Browsing Csd Whitelist_new [0]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Safe Browsing Download [736140]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Safe Browsing Download Whitelist_new [0]
O61 - LFC: 13/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\Solo_175052\Safe Browsing Extension Blacklist_new [0]
O61 - LFC: 13/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Google Profile.ico [181623]
O61 - LFC: 13/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Temp\1856_21023\crl-set [262612]
O61 - LFC: 13/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Temp\1856_21023\manifest.fingerprint [12]
O61 - LFC: 13/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Temp\1856_21023\manifest.json [34]
O61 - LFC: 13/10/2013 - 17:23:52 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\antoine.cocoual\chatsync\36\36769b5b94e46292.dat [21321]
O61 - LFC: 13/10/2013 - 17:23:52 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\antoine.cocoual\chatsync\5e\5e6413b4e19bcb4f.dat [3402]
O61 - LFC: 13/10/2013 - 17:23:52 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\antoine.cocoual\chatsync\88\88adc3e0a9d0f02b.dat [3109]
O61 - LFC: 14/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Archived History [57344]
O61 - LFC: 14/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal [512]
O61 - LFC: 14/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Bookmarks [1923]
O61 - LFC: 14/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Bookmarks.bak [1923]
O61 - LFC: 14/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Cookies [753664]
O61 - LFC: 14/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal [16384]
O61 - LFC: 14/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Current Tabs [120081]
O61 - LFC: 14/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db [7168]
O61 - LFC: 14/10/2013 - 17:23:32 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db-journal [5672]
O61 - LFC: 14/10/2013 - 17:23:33 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies [6144]
O61 - LFC: 14/10/2013 - 17:23:33 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies-journal [4640]
O61 - LFC: 14/10/2013 - 17:23:33 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\CURRENT [16]
O61 - LFC: 14/10/2013 - 17:23:33 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG [0]
O61 - LFC: 14/10/2013 - 17:23:33 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old [148]
O61 - LFC: 14/10/2013 - 17:23:33 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000385 [712]
O61 - LFC: 14/10/2013 - 17:23:33 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT [16]
O61 - LFC: 14/10/2013 - 17:23:33 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG [0]
O61 - LFC: 14/10/2013 - 17:23:33 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000002 [50]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Favicons [26624]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal [16384]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT [16]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOG [145]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOG.old [145]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\MANIFEST-000022 [279]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\History [118784]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache [3652]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\History-journal [16384]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Last Session [237]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plus.google.com_0.localstorage [3072]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plus.google.com_0.localstorage-journal [3608]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.google.fr_0.localstorage [3072]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.google.fr_0.localstorage-journal [3608]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Login Data [32768]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal [12848]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings [8]
O61 - LFC: 14/10/2013 - 17:23:37 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Media Cache\data_0 [45056]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Media Cache\data_1 [270336]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Media Cache\data_2 [1056768]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Media Cache\data_3 [4202496]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Media Cache\index [524656]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor [160768]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal [16384]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs [28672]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs-journal [16384]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Preferences [134002]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\QuotaManager [17408]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\QuotaManager-journal [9800]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT [16]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG [0]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old [271]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000670 [244]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Shortcuts [12288]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal [16384]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3 [794624]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3-journal [16384]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Top Sites [20480]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal [12824]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity [644]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Visited Links [131072]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Web Data [88064]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal [16384]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Local State [44373]
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\PepperFlash\11.9.900.117\manifest.fingerprint [14] =>.Google PepperFlash
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\PepperFlash\11.9.900.117\manifest.json [2054] =>.Google PepperFlash
O61 - LFC: 14/10/2013 - 17:23:38 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\PepperFlash\11.9.900.117\pepflashplayer.dll [13584776] =>.Google PepperFlash
O61 - LFC: 14/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\PnaclTranslationCache\data_0 [8192]
O61 - LFC: 14/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\PnaclTranslationCache\data_1 [270336]
O61 - LFC: 14/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\PnaclTranslationCache\data_2 [8192]
O61 - LFC: 14/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\PnaclTranslationCache\data_3 [8192]
O61 - LFC: 14/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\PnaclTranslationCache\index [524656]
O61 - LFC: 14/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom [8512044]
O61 - LFC: 14/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set [1595256]
O61 - LFC: 14/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies [6144]
O61 - LFC: 14/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies-journal [4640]
O61 - LFC: 14/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Safe Browsing Csd Whitelist [135236]
O61 - LFC: 14/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Safe Browsing Download [751652]
O61 - LFC: 14/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Safe Browsing Download Whitelist [19592]
O61 - LFC: 14/10/2013 - 17:23:39 ---A- . (...) -- C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Safe Browsing Extension Blacklist [6608]
O61 - LFC: 14/10/2013 - 17:23:39 --HA- . (...) -- C:\Users\vevere\AppData\Local\IconCache.db [2185004]
O61 - LFC: 14/10/2013 - 17:23:40 ---A- . (...) -- C:\Users\vevere\AppData\Local\Temp\CVRA7C4.tmp.cvr [0]
O61 - LFC: 14/10/2013 - 17:23:43 ---A- . (...) -- C:\Users\vevere\AppData\Local\Temp\Skype\DbTemp\temp-aubfZkduzMxEmf4fLtIVO1nw [0]
O61 - LFC: 14/10/2013 - 17:23:43 ---A- . (...) -- C:\Users\vevere\AppData\Local\Temp\Skype\DbTemp\temp-quH3vbluQ9xdrLmuAjousb8R [0]
O61 - LFC: 14/10/2013 - 17:23:45 ---A- . (...) -- C:\Users\vevere\AppData\Local\Temp\~DF8986E3B348006715.TMP [376832]
O61 - LFC: 14/10/2013 - 17:23:49 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Intel\Wireless\WLANProfiles\Profiles.enc [48]
O61 - LFC: 14/10/2013 - 17:23:49 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2013-10-14 (15-56-01).txt [7888]
O61 - LFC: 14/10/2013 - 17:23:50 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Microsoft\Office\Recent\Herv� et Antoine.doc.LNK [1215]
O61 - LFC: 14/10/2013 - 17:23:50 --H-- . (...) -- C:\Users\vevere\AppData\Roaming\Microsoft\Office\Recent\index.dat [1237]
O61 - LFC: 14/10/2013 - 17:23:50 -SHA- . (...) -- C:\Users\vevere\AppData\Roaming\Microsoft\Protect\S-1-5-21-135296302-3689904380-3089145907-1000\2004b587-be82-4e4b-a630-d96b7367784c [468]
O61 - LFC: 14/10/2013 - 17:23:50 -SHA- . (...) -- C:\Users\vevere\AppData\Roaming\Microsoft\Protect\S-1-5-21-135296302-3689904380-3089145907-1000\Preferred [24]
O61 - LFC: 14/10/2013 - 17:23:51 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Microsoft\Word\Herv�%20et%20Antoine303290700225361017\Herv�%20et%20Antoine.doc.lnk [755]
O61 - LFC: 14/10/2013 - 17:23:51 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\antoine.cocoual\bistats.db [110592]
O61 - LFC: 14/10/2013 - 17:23:51 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\antoine.cocoual\bistats.db-journal [37448]
O61 - LFC: 14/10/2013 - 17:23:51 R---- . (.Totof.) -- C:\Users\vevere\AppData\Roaming\Microsoft\Word\Herv�%20et%20Antoine303290700225361017\Herv�%20et%20Antoine((Autosaved-303290871155611248)).asd [25600]
O61 - LFC: 14/10/2013 - 17:23:52 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\antoine.cocoual\chatsync\40\40050afda6833ebc.dat [1532]
O61 - LFC: 14/10/2013 - 17:23:52 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\antoine.cocoual\config.xml [12293]
O61 - LFC: 14/10/2013 - 17:23:52 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\antoine.cocoual\dc.db [86016]
O61 - LFC: 14/10/2013 - 17:23:52 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\antoine.cocoual\eas.db [110592]
O61 - LFC: 14/10/2013 - 17:23:52 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\antoine.cocoual\keyval.db [53248]
O61 - LFC: 14/10/2013 - 17:23:52 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\antoine.cocoual\keyval.db-journal [33344]
O61 - LFC: 14/10/2013 - 17:23:52 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\antoine.cocoual\main.db [1114112]
O61 - LFC: 14/10/2013 - 17:23:52 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\antoine.cocoual\main.db-journal [156464]
O61 - LFC: 14/10/2013 - 17:23:52 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\antoine.cocoual\qikdb\qik_main.db [28672]
O61 - LFC: 14/10/2013 - 17:23:53 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\shared.xml [84746]
O61 - LFC: 14/10/2013 - 17:23:53 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\shared_dynco\dc.db [2334720]
O61 - LFC: 14/10/2013 - 17:23:53 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\Skype\shared_dynco\dc.db-journal [1256336]
O61 - LFC: 14/10/2013 - 17:23:54 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\ZHP\Log.txt [38325] =>.Nicolas Coolman
O61 - LFC: 14/10/2013 - 17:23:54 ---A- . (...) -- C:\Users\vevere\AppData\Roaming\ZHP\TestsZHPDiag.txt [2884] =>.Nicolas Coolman
O61 - LFC: 14/10/2013 - 17:23:55 ---A- . (.Malwarebytes Corporation.) -- C:\Users\vevere\Downloads\mbam-setup-1.75.0.1300 (1).exe [10285040]
O61 - LFC: 14/10/2013 - 17:23:55 ---A- . (.Malwarebytes Corporation.) -- C:\Users\vevere\Downloads\mbam-setup-1.75.0.1300.exe [10285040]
~ 7 Fichiers temporaires (Temporary files)
~ Files: 246 Scanned in 00mn 36s



---\\ Liste des outils de d�sinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 30/06/2013 - C:\Windows\System32\DRIVERS\afcdp.sys (afcdp) .(.Acronis - File Level CDP Kernel Helper.) - LEGACY_AFCDP
O64 - Services: CurCS - 28/12/2011 - C:\Windows\system32\drivers\afd.sys (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - 30/08/2013 - C:\Windows\System32\Drivers\aswFsBlk.sys (aswFsBlk) .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK
O64 - Services: CurCS - 30/08/2013 - C:\Windows\system32\drivers\aswMonFlt.sys (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - 30/08/2013 - C:\Windows\system32\Drivers\aswrdr2.sys (aswRdr) .(.AVAST Software - avast! WFP Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - 30/08/2013 - C:\Windows\System32\Drivers\aswRvrt.sys (aswRvrt) .(...) - LEGACY_ASWRVRT
O64 - Services: CurCS - 30/08/2013 - C:\Windows\System32\Drivers\aswSnx.sys (aswSnx) .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - 30/08/2013 - C:\Windows\System32\Drivers\aswSP.sys (aswSP) .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - 30/08/2013 - C:\Windows\System32\Drivers\aswTdi.sys (aswTdi) .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI
O64 - Services: CurCS - 30/08/2013 - C:\Windows\System32\Drivers\aswVmm.sys (aswVmm) .(...) - LEGACY_ASWVMM
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\Beep.sys (Beep) .(.Microsoft Corporation - BEEP Driver.) - LEGACY_BEEP
O64 - Services: CurCS - 04/07/2012 - C:\Windows\system32\browser.dll (bowser) .(.Microsoft Corporation - DLL du service Explorateur d�ordinateurs.) - LEGACY_BOWSER
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\cdfs.sys (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\clfs.sys (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
O64 - Services: CurCS - 24/08/2012 - C:\Windows\System32\Drivers\cng.sys (CNG) .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\dfsc.sys (DfsC) .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\discache.sys (discache) .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
O64 - Services: CurCS - 14/02/2011 - C:\Windows\System32\DRIVERS\DKRtWrt.sys (DKRtWrt) .(.Diskeeper Corporation - Diskeeper IntelliWrite Mini-Filter Driver.) - LEGACY_DKRTWRT
O64 - Services: CurCS - 21/07/2011 - C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys (driverhardwarev2x64) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2X64
O64 - Services: CurCS - 10/04/2013 - C:\Windows\system32\drivers\dxgkrnl.sys (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\fileinfo.sys (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\fltmgr.sys (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de syst�me de fichi.) - LEGACY_FLTMGR
O64 - Services: CurCS - 24/01/2013 - C:\Windows\system32\drivers\fvevol.sys (fvevol) .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\http.sys (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy) .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\ksecdd.sys (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
O64 - Services: CurCS - 24/08/2012 - C:\Windows\System32\Drivers\ksecpkg.sys (KSecPkg) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\lltdio.sys (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\luafv.sys (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\mountmgr.sys (mountmgr) .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb10) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb20) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\msahci.sys (msahci) .(.Microsoft Corporation - MS AHCI 1.0 Standard Driver.) - LEGACY_MSAHCI
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\msisadrv.sys (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\nwifi.sys (NativeWifiP) .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP
O64 - Services: CurCS - 22/08/2012 - C:\Windows\system32\drivers\ndis.sys (NDIS) .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\DRIVERS\ndisuio.sys (Ndisuio) .(.Microsoft Corporation - Pilote d�E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\netbios.sys (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\netbt.sys (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\pcw.sys (pcw) .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\peauth.sys (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\pacer.sys (Psched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (rdbss) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\rspndr.sys (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\spldr.sys (spldr) .(.Microsoft Corporation - loader for security processor.) - LEGACY_SPLDR
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\srvsvc.dll (srv) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\srvsvc.dll (srv2) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
O64 - Services: CurCS - 29/04/2011 - C:\Windows\System32\DRIVERS\srvnet.sys (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du r�seau.) - LEGACY_TCPIP
O64 - Services: CurCS - 03/10/2012 - C:\Windows\System32\drivers\tcpipreg.sys (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du r�seau.) - LEGACY_TDX
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\vga.sys (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\volmgrx.sys (volmgrx) .(.Microsoft Corporation - Pilote d�extension du gestionnaire de volum.) - LEGACY_VOLMGRX
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\volsnap.sys (volsnap) .(.Microsoft Corporation - Pilote de clich� instantan� du volume.) - LEGACY_VOLSNAP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\rascfg.dll (Wanarpv6) .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6
O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\Wdf01000.sys (Wdf01000) .(.Microsoft Corporation - Runtime de l�infrastructure de pilotes en m.) - LEGACY_WDF01000
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\wfplwf.sys (WfpLwf) .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF
O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\WudfPf.sys (WudfPf) .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF
~ Legacy: 72 Scanned in 00mn 01s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
~ FASS Keys: 19 Scanned in 00mn 00s



---\\ Menu de d�marrage Internet (SMI) (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Not Key.)
~ Keys: Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] 5176677812824185AFE0ACE617536CA0 - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {D6041261-2FFC-4F15-B261-63D0262BC411} - (Web Search) - http://search.certified-toolbar.com =>PUP.CertifiedToolbar
O69 - SBI: SearchScopes [HKCR] {afdbddaa-5d3f-42ee-b79c-185a7020515b} - (Web Search) - http://search.certified-toolbar.com =>PUP.CertifiedToolbar
~ Keys: Scanned in 00mn 00s



---\\ Enum�re les service demarr�s par Svchost (SSS) (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Exp�rience d�application.) -- C:\Windows\System32\aelupsvc.dll [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de strat�gie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de num�rotation automatique d�acc�s distant.) -- C:\Windows\System32\rasauto.dll [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d�acc�s distant.) -- C:\Windows\System32\rasmans.dll [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d�interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d��v�nements syst�me (SENS).) -- C:\Windows\System32\sens.dll [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l�application d�assistance � Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de t�l�phonie Microsoft� Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur h�te de session Burea.) -- C:\Windows\System32\termsrv.dll [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise � jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [2428952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arri�re-plan.) -- C:\Windows\System32\qmgr.dll [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivit� IPv6 sur un r�seau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d�ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d�application.) -- C:\Windows\System32\appinfo.dll [70144]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de d�couverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multim�dias.) -- C:\Windows\System32\mmcss.dll [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau � distance.) -- C:\Windows\System32\sessenv.dll [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d�ordinateurs.) -- C:\Windows\System32\browser.dll [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de t�ches.) -- C:\Windows\System32\schedsvc.dll [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des cl�s.) -- C:\Windows\System32\kmsvc.dll [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux probl�mes.) -- C:\Windows\System32\wercplsupport.dll [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des th�mes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864]
~ Services: 32 Scanned in 00mn 01s



---\\ Recherche particuli�re � la racine du syst�me (SPRF) (O84)
[MD5.E7BE2C033C6AB0BA199B4717F98BC947] [SPRF][24/06/2013] (...) -- C:\Users\vevere\AppData\Local\Temp\248289950.exe [3931485]
[MD5.C83670DCBD7FB075FD62BA7398D92984] [SPRF][18/09/2013] (...) -- C:\Users\vevere\AppData\Local\Temp\apnuserid.dat [16]
[MD5.06D5E5E952C61923C9D24C83E7FE1F45] [SPRF][01/09/2013] (...) -- C:\Users\vevere\AppData\Local\Temp\app.exe [22937227]
[MD5.75FC093C0EE742F6DDDAA13FFF98F104] [SPRF][18/09/2013] (...) -- C:\Users\vevere\AppData\Local\Temp\appid.dat [3]
[MD5.B3D26A6E8DDE3EF576938F904B84CF83] [SPRF][01/09/2013] (.Pas de propri�taire - SoloApp Setup.) -- C:\Users\vevere\AppData\Local\Temp\apptorun.exe [5848088]
[MD5.81B637EF7B2A7C8673E518763FC31D32] [SPRF][18/09/2013] (...) -- C:\Users\vevere\AppData\Local\Temp\BackupSetup.exe [10355336]
[MD5.11D751D299B9ABDC77BFF4156C75C4CF] [SPRF][24/06/2013] (...) -- C:\Users\vevere\AppData\Local\Temp\bitool.dll [38480]
[MD5.32DCED18FFFEA0035E4FA975CA0AE8BE] [SPRF][22/04/2013] (.The Software Group - Software Update Setup.) -- C:\Users\vevere\AppData\Local\Temp\BoxoreInstaller.exe [620656] =>Adware.Boxore
[MD5.5BB7F9160A555D16C1C4C8914C976043] [SPRF][18/09/2013] (...) -- C:\Users\vevere\AppData\Local\Temp\BundleSweetIMSetup.exe [9] =>PUP.SweetIM
[MD5.0E771375445E13429E68CAE720A48B72] [SPRF][03/07/2013] (...) -- C:\Users\vevere\AppData\Local\Temp\i4jdel0.exe [35224]
[MD5.675CE9743CFACD1A1DA44307035279F2] [SPRF][02/07/2013] (.Microsoft Corporation - Self-Extracting Cabinet.) -- C:\Users\vevere\AppData\Local\Temp\MouseKeyboardCenterx64_1036.exe [49882832]
[MD5.D2B48C62D4E77881DF37119BBADB8A0F] [SPRF][18/09/2013] (...) -- C:\Users\vevere\AppData\Local\Temp\MybabylonTB.exe [11] =>Toolbar.Babylon
[MD5.D41D8CD98F00B204E9800998ECF8427E] [SPRF][04/07/2013] (...) -- C:\Users\vevere\AppData\Local\Temp\ngphc2yz.dll [0]
[MD5.B9C125314A025127FE562C116D614AA3] [SPRF][13/11/2012] (.Microsoft Corporation - Office Source Engine.) -- C:\Users\vevere\AppData\Local\Temp\ose00000.exe [178824]
[MD5.1B80378EA920FCD0EA146B28C3DBA2AE] [SPRF][18/09/2013] (...) -- C:\Users\vevere\AppData\Local\Temp\propsys.dll [6]
[MD5.6EA18C193AAF14F9EDFF65EED8EFAB2C] [SPRF][09/10/2013] (...) -- C:\Users\vevere\AppData\Local\Temp\Quarantine.exe [344355]
[MD5.8CB22BDD0B7BA1AB13D742E22EED8DA2] [SPRF][18/09/2013] (...) -- C:\Users\vevere\AppData\Local\Temp\sysid.dat [3]
[MD5.A7ACDA85469933AC2E44F2C7347EBFE2] [SPRF][25/12/2008] (.HomeTab - HomeTab Setup.) -- C:\Users\vevere\AppData\Local\Temp\tbuFA36.exe [3647864] =>PUP.CertifiedToolbar
[MD5.BDEE9D936EFB7C76DF778F45F1CF130D] [SPRF][18/09/2013] (...) -- C:\Users\vevere\AppData\Local\Temp\trackid.dat [6]
[MD5.40395C175553CB14D2050888EFCCDF00] [SPRF][18/09/2013] (.Microsoft Corporation - Microsoft Visual C++ 2008 Redistributable Setup.) -- C:\Users\vevere\AppData\Local\Temp\vcredist_x64.exe [4961800]
[MD5.31E39E9FF261030F71C0209C016580F4] [SPRF][14/10/2013] (...) -- C:\Users\vevere\Desktop\adwcleaner.exe [1048960]
[MD5.7C57C15651004F88D57232CEC3CB2C66] [SPRF][25/12/2008] (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Users\vevere\Desktop\ZHPDiag2.exe [6834317]
~ Files: 22 Scanned in 00mn 02s



---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "SNMPTRAP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "SNMPTRAP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "WMP-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "WMP-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "WMP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-QWave-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-WMP-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-WMP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-QWave-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-WMP-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-WMP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-P2PHost-In-TCP" | In - None - P6 - TRUE | .(.Microsoft Corporation - Voisinage imm�diat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Voisinage imm�diat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage imm�diat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage imm�diat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-syst�me spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Application sous-syst�me spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-IPHTTPS-Out" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DNS-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contr�leur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contr�leur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-RAServer-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d�assistance � distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-RAServer-Out-TCP-NoScope-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d�assistance � distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-DCOM-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-TCP-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus h�te de l�infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus h�te de l�infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation
O87 - FAEL: "MCX-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation
O87 - FAEL: "MCX-QWave-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation
O87 - FAEL: "MCX-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation
O87 - FAEL: "MCX-MCX2SVC-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-Prov-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - MCX2 Provisioning library.) -- C:\Windows\ehome\mcx2prov.exe
O87 - FAEL: "MCX-PlayTo-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-McrMgr-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Media Center Extender Manager.) -- C:\Windows\ehome\mcrmgr.exe
O87 - FAEL: "MCX-PlayTo-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-FDPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "{38FEF476-3F5E-4EDF-BCB4-352187BD7018}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "{3EF3A8D6-A3B4-4B4B-90E6-0C4C1F9CC9FC}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "{C280D823-74CA-443D-A8A9-1D57F8E3C11B}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "{55A0496A-FBB8-4B43-A56B-5F2CF254534C}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{93538BDC-8B4E-4DB3-A83E-F7E9E09AE49C}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation
O87 - FAEL: "{477F9F4B-ABE3-4C4C-AD10-C76A9F42AC54}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation
O87 - FAEL: "{BC41A0B2-CB13-4E8B-8BF2-1CE50A43D5A9}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation
O87 - FAEL: "{9189A90A-3C51-49B8-948F-84A328B6170A}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) =>.Microsoft Corporation
O87 - FAEL: "{59DB4B7D-A4EA-4B28-BCD9-FA755F260A00}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "{F833B87B-7F67-4A4E-8C1E-18596B76B5E9}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "{79FC72F9-8A58-48C7-A628-BA0DB8919B67}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O87 - FAEL: "{BABF44BB-39DA-49E2-AC44-268B78C81F15}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{A3AA6F11-BCC1-42EA-A536-CD62E56C44A5}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{780F42E7-8865-4920-A982-64B4988F6A06}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{7E72F361-9FFA-415E-B2A9-A3228EC72C22}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{2DE48A56-7AC3-45C4-B978-80D46633EE47}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{36921ECD-CE55-42BF-BDB9-83137314FEFD}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{F01357A7-E91B-429C-A8C3-8CBA91B68C48}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{449F9F75-CFFB-4615-832E-4F5ABB292D1F}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{C5089A6F-78F6-4EB3-B4DC-A2C22259F44E}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-syst�me spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "{F5655FC4-5E80-474A-8C83-81943B3C856C}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office\Office15\lync.exe
O87 - FAEL: "{899B612F-A2A3-4F54-B751-694384A37F33}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office\Office15\lync.exe
O87 - FAEL: "{B44E6A74-0079-4F38-B789-8EBA10656A14}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office\Office15\UcMapi.exe
O87 - FAEL: "{64B83134-904E-438B-9F1D-EEE51698672F}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office\Office15\UcMapi.exe
O87 - FAEL: "{B1A5BA58-D0B9-4C1F-A8D5-3DEF58683323}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Microsoft Outlook.) -- C:\Program Files\Microsoft Office\Office15\outlook.exe
O87 - FAEL: "TCP Query User{CF973FA9-847E-4751-9EC5-72B0FEF577F8}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" | In - Private - P6 - TRUE | .(.Microsoft Corporation.) -- C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
O87 - FAEL: "UDP Query User{25CCEE1A-CD69-46DA-A140-003E33AEF95C}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" | In - Private - P17 - TRUE | .(.Microsoft Corporation.) -- C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
O87 - FAEL: "{3EE42945-7FA4-4EE8-9D1B-6D218FA5295F}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de d�tection mat�riel.) -- C:\Program Files\ma-config.com\MaConfigAgent.exe
O87 - FAEL: "{E62A67BC-6899-4E6E-BFEE-728D5ED4E083}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de d�tection mat�riel.) -- C:\Program Files\ma-config.com\MaConfigAgent.exe
O87 - FAEL: "{BDE03D68-4568-42EE-A86F-4BE67F389457}" | In - None - P6 - FALSE | .(.Microsoft Corporation - SMSvcHost.exe.) -- c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
O87 - FAEL: "{15B30AA0-F726-42E5-A505-A9A3CBCB5951}" | In - Private - P6 - TRUE | .(.Ensemble Studios - Age of Mythology - The Titans Expansion.) -- C:\Program Files (x86)\Microsoft Games\Age of Mythology\aomx.exe
O87 - FAEL: "{90BE88CE-E26E-445E-B486-D87B8FD65840}" | In - Private - P17 - TRUE | .(.Ensemble Studios - Age of Mythology - The Titans Expansion.) -- C:\Program Files (x86)\Microsoft Games\Age of Mythology\aomx.exe
O87 - FAEL: "RemoteDesktop-UserMode-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{BE176AD7-0FB3-4B37-BFE2-3E3361A98BCA}" | In - Private - P6 - TRUE | .(.Azureus Software, Inc - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe =>P2P.Azureus
O87 - FAEL: "{3275F94D-CE63-4885-8EC5-535C2F9D881F}" | In - Private - P17 - TRUE | .(.Azureus Software, Inc - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe =>P2P.Azureus
O87 - FAEL: "TCP Query User{E4238628-992A-4062-A08E-9D1429C2BF7E}C:\Program Files\Vuze\Azureus.exe" | In - Public - P6 - TRUE | .(.Azureus Software, Inc - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe =>P2P.Azureus
O87 - FAEL: "UDP Query User{BBA9DF78-B749-4B04-AEC7-628D23B6BE17}C:\Program Files\Vuze\Azureus.exe" | In - Public - P17 - TRUE | .(.Azureus Software, Inc - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe =>P2P.Azureus
O87 - FAEL: "{E3F129B4-4700-4CF9-B2B6-CBCBB5343A63}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office\Office15\lync.exe
O87 - FAEL: "{B3A038D4-4CDF-4FD4-83D4-A5E4ECEF54A5}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office\Office15\lync.exe
O87 - FAEL: "{E792A3FA-DF32-4E6B-972B-4424E3664C36}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office\Office15\UcMapi.exe
O87 - FAEL: "{494ACA49-B186-43F4-B17B-050EF1542411}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office\Office15\UcMapi.exe
O87 - FAEL: "TCP Query User{E2CC4371-0C23-4C01-81FC-5B0627230786}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" | In - Public - P6 - TRUE | .(.Microsoft Corporation.) -- C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
O87 - FAEL: "UDP Query User{1ECED880-7E47-4CF9-B76E-72593C7594CC}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" | In - Public - P17 - TRUE | .(.Microsoft Corporation.) -- C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
O87 - FAEL: "{A8FC8715-3CDF-4E95-B11F-F2AD76144EF3}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O87 - FAEL: "{A54CDAB9-1B36-4DEA-9C31-EE30B7BE2179}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomeTab\ProtectedSearch.exe (.not file.) =>PUP.CertifiedToolbar
O87 - FAEL: "{81CB644C-4BC8-44ED-A3FC-960D1BF232F4}" |Out - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomeTab\ProtectedSearch.exe (.not file.) =>PUP.CertifiedToolbar
O87 - FAEL: "{7DB95DFE-D2ED-44BB-94FB-8A10CF197502}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomeTab\TBUpdater.dll (.not file.) =>PUP.CertifiedToolbar
O87 - FAEL: "{4E94A6E6-4729-410D-AC10-D3D19FF9EA03}" |Out - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomeTab\TBUpdater.dll (.not file.) =>PUP.CertifiedToolbar
O87 - FAEL: "{DBEA110C-9A29-40DD-A4E8-E43E27306B4A}" | In - None - P17 - TRUE | .(.Pas de propri�taire - WidditSoloApp.) -- C:\SoloApp\SoloApp.exe
O87 - FAEL: "{8458224B-33ED-4D2C-AE66-5A06975D7AF6}" | Out - None - P17 - TRUE | .(.Pas de propri�taire - WidditSoloApp.) -- C:\SoloApp\SoloApp.exe
O87 - FAEL: "{B34FC528-F18F-4FB4-8E62-06C35991C017}" | In - None - P17 - TRUE | .(.Selenium Committers - Selenium WebDriver.) -- C:\SoloApp\WebDriver.dll
O87 - FAEL: "{6E52E1A6-36DB-48D3-A9B8-02E23F6DFA8B}" | Out - None - P17 - TRUE | .(.Selenium Committers - Selenium WebDriver.) -- C:\SoloApp\WebDriver.dll
O87 - FAEL: "{3C5E8910-8297-408D-B04B-349945E78AED}" | In - None - P17 - TRUE | .(...) -- C:\SoloApp\chromedriver.exe
O87 - FAEL: "{892F8162-E9A1-4BF4-A828-0CBBAB4BEC57}" | Out - None - P17 - TRUE | .(...) -- C:\SoloApp\chromedriver.exe
O87 - FAEL: "{0D8732FA-9369-458B-ABE9-A0019405064A}" | In - None - P17 - TRUE | .(.Software Freedom Conservancy - Command line server for the IE driver.) -- C:\SoloApp\IEDriverServer.exe
O87 - FAEL: "{303CEC56-9803-4157-BF14-CE94F031BE1F}" | Out - None - P17 - TRUE | .(.Software Freedom Conservancy - Command line server for the IE driver.) -- C:\SoloApp\IEDriverServer.exe
O87 - FAEL: "{DAAA9CE4-ACF5-4DF0-BF23-A04D29FBF14C}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomeTab\ProtectedSearch.exe (.not file.) =>PUP.CertifiedToolbar
O87 - FAEL: "{514E787A-0310-42C1-84D1-17D21D9BD9DC}" |Out - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomeTab\ProtectedSearch.exe (.not file.) =>PUP.CertifiedToolbar
O87 - FAEL: "{BE5F6116-3998-4D05-84CE-E19FFA6F0912}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomeTab\TBUpdater.dll (.not file.) =>PUP.CertifiedToolbar
O87 - FAEL: "{6562FFFC-1E2B-4BC2-81A5-A4C57FA5BC2D}" |Out - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomeTab\TBUpdater.dll (.not file.) =>PUP.CertifiedToolbar
O87 - FAEL: "{F025F159-2737-4FD0-A5B7-1C9BA0DBCEDC}" | In - None - P17 - TRUE | .(.Pas de propri�taire - WidditSoloApp.) -- C:\SoloApp\SoloApp.exe
O87 - FAEL: "{A972D6CA-95F2-46D8-8853-094F5C3F0286}" | Out - None - P17 - TRUE | .(.Pas de propri�taire - WidditSoloApp.) -- C:\SoloApp\SoloApp.exe
O87 - FAEL: "{FD112B49-0CEB-4327-94E7-C5FFDC1F4E3C}" | In - None - P17 - TRUE | .(.Selenium Committers - Selenium WebDriver.) -- C:\SoloApp\WebDriver.dll
O87 - FAEL: "{6E6A1BC9-B073-4BF7-A5D5-E97D64848DB6}" | Out - None - P17 - TRUE | .(.Selenium Committers - Selenium WebDriver.) -- C:\SoloApp\WebDriver.dll
O87 - FAEL: "{4DF1DFFD-2F54-4E31-978C-DAA1C2FC5D53}" | In - None - P17 - TRUE | .(...) -- C:\SoloApp\chromedriver.exe
O87 - FAEL: "{07E8A2B8-F10A-4EA9-ACAE-F853ED48FAAB}" | Out - None - P17 - TRUE | .(...) -- C:\SoloApp\chromedriver.exe
O87 - FAEL: "{A94114EC-4B19-45B7-9B72-A3DCB474E452}" | In - None - P17 - TRUE | .(.Software Freedom Conservancy - Command line server for the IE driver.) -- C:\SoloApp\IEDriverServer.exe
O87 - FAEL: "{2256C467-3032-4F76-926B-15E9EE1F4E0C}" | Out - None - P17 - TRUE | .(.Software Freedom Conservancy - Command line server for the IE driver.) -- C:\SoloApp\IEDriverServer.exe
O87 - FAEL: "{0B026420-F1FE-45BC-89E2-A3C6CC3E6492}" |In - Public - P6 - TRUE | .(...) -- C:\ProgramData\eSafe\eGdpSvc.exe (.not file.) =>PUP.eSafeSecurity
O87 - FAEL: "{2D0F9D63-1B34-4469-B32A-2B4D20704616}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\HomeTab\ProtectedSearch.exe (.not file.) =>PUP.CertifiedToolbar
O87 - FAEL: "{B181A7A8-C6E7-4607-BFCD-969F14741197}" |Out - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\HomeTab\ProtectedSearch.exe (.not file.) =>PUP.CertifiedToolbar
O87 - FAEL: "{600B3734-E032-49ED-9378-98DA411CF9FF}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\HomeTab\TBUpdater.dll (.not file.) =>PUP.CertifiedToolbar
O87 - FAEL: "{D4556BCE-7678-46BC-9FE7-C163BDCCADDD}" |Out - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\HomeTab\TBUpdater.dll (.not file.) =>PUP.CertifiedToolbar
O87 - FAEL: "{8CC62498-A5BC-4E24-90DF-610A490C1A28}" | In - None - P6 - TRUE | .(.Pas de propri�taire - WidditSoloApp.) -- C:\SoloApp\SoloApp.exe
O87 - FAEL: "{FE9E30ED-72CF-4733-957D-8ABBE454FC65}" | Out - None - P6 - TRUE | .(.Pas de propri�taire - WidditSoloApp.) -- C:\SoloApp\SoloApp.exe
O87 - FAEL: "{C8743971-D075-4F8D-B342-6FDD8571E7F0}" | In - None - P6 - TRUE | .(.Selenium Committers - Selenium WebDriver.) -- C:\SoloApp\WebDriver.dll
O87 - FAEL: "{DE7853F9-AEE4-4789-A3A3-29E70F01D450}" | Out - None - P6 - TRUE | .(.Selenium Committers - Selenium WebDriver.) -- C:\SoloApp\WebDriver.dll
O87 - FAEL: "{0F1B2FB7-45CF-49AE-A2E2-38B34484B5DD}" | In - None - P6 - TRUE | .(...) -- C:\SoloApp\chromedriver.exe
O87 - FAEL: "{D0DB0B39-1C4F-40EE-AEEE-10A12E40A9FD}" | Out - None - P6 - TRUE | .(...) -- C:\SoloApp\chromedriver.exe
O87 - FAEL: "{E55F003C-004D-4A59-A577-185255E88526}" | In - None - P6 - TRUE | .(.Software Freedom Conservancy - Command line server for the IE driver.) -- C:\SoloApp\IEDriverServer.exe
O87 - FAEL: "{FAB9A17F-8E1D-4DE1-A61A-9BB30462FB57}" | Out - None - P6 - TRUE | .(.Software Freedom Conservancy - Command line server for the IE driver.) -- C:\SoloApp\IEDriverServer.exe
~ Firewall: 248 Scanned in 00mn 02s



---\\ Enum�re les codes produits des logiciels (PUC) (O90)
O90 - PUC: "00005109F10010400100000000F01FEC" . (.Microsoft Office Proofing Tools 2013 - ????? ???????.) -- C:\Windows\Installer\{90150000-001F-0401-1000-0000000FF1CE}\misc.exe,6
O90 - PUC: "00005109F10031400100000000F01FEC" . (.Microsoft Office Proofing Tools 2013 - Nederlands.) -- C:\Windows\Installer\{90150000-001F-0413-1000-0000000FF1CE}\misc.exe,6
O90 - PUC: "00005109F10070400100000000F01FEC" . (.Microsoft Office Korrekturhilfen 2013 - Deutsch.) -- C:\Windows\Installer\{90150000-001F-0407-1000-0000000FF1CE}\misc.exe,6
O90 - PUC: "00005109F10090400100000000F01FEC" . (.Microsoft Office Proofing Tools 2013 - English.) -- C:\Windows\Installer\{90150000-001F-0409-1000-0000000FF1CE}\misc.exe,6
O90 - PUC: "00005109F100A0C00100000000F01FEC" . (.Microsoft Office Proofing Tools 2013 - Espa�ol.) -- C:\Windows\Installer\{90150000-001F-0C0A-1000-0000000FF1CE}\misc.exe,6
O90 - PUC: "00005109F100C0400100000000F01FEC" . (.Outils de v�rification linguistique 2013 de Microsoft Office�- Fran�ais.) -- C:\Windows\Installer\{90150000-001F-040C-1000-0000000FF1CE}\misc.exe,6
O90 - PUC: "0AF7403EB6D26DB4C84D9599551FECD9" . (.Centre Souris et Claviers Microsoft.) -- c:\Windows\Installer\{E3047FA0-2D6B-4BD6-8CD4-599955F1CE9D}\DeviceCenter.ico
O90 - PUC: "37600F09672A85A46B574B623DD9E190" . (.Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed.) -- C:\Windows\Installer\{90F00673-A276-4A58-B675-B426D39D1E09}\IntelBluetoothICO
O90 - PUC: "68AB67CA7DA76301B744BA0000000010" . (.Adobe Reader XI (11.0.05) - Fran�ais.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico
O90 - PUC: "79DBF4E86B3AD0549AB93986CEBF0162" . (.Diskeeper 2011 .) -- C:\Windows\Installer\{8E4FBD97-A3B6-450D-A99B-9368ECFB1026}\ARPPRODUCTICON.exe
O90 - PUC: "7FDE8F51230BA834D955C45637BBFA91" . (.AuthenTec TrueSuite.) -- C:\Windows\Installer\{15F8EDF7-B032-438A-9D55-4C6573BBAF19}\ARPPRODUCTICON.exe
O90 - PUC: "812B5ECE680A81E43A261D1118864175" . (.Logiciel Intel� PROSet/Wireless WiFi.) -- C:\Windows\Installer\{ECE5B218-A086-4E18-A362-D11181681457}\ARPPRODUCTICON.exe
O90 - PUC: "954E9A05FC2A9014BB37099707B2BE2F" . (.Ma-Config.com (64 bits).) -- C:\Windows\Installer\{50A9E459-A2CF-4109-BB73-9079702BEBF2}\maconfico
O90 - PUC: "A69F1F2CE75091855BE2EF1A1D2D39B3" . (.Acronis�True�Image�Home.) -- C:\Windows\Installer\{C2F1F96A-057E-5819-B52E-FEA1D1D2933B}\product.ico
O90 - PUC: "E7FF67E4ABEA78C47B88DC745E24B5D9" . (.Skype� 6.7.) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
~ Update Products: 41 Scanned in 00mn 00s



---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.1BDC7355F909B4CA08D49AE2CBE620BF] [WIS][24/06/2013] (.Diskeeper Corporation - Diskeeper 2011.) -- C:\Windows\Installer\2f0fa.msi [21046784]
[MD5.B1C861317B5A5D0755FBC53352C4B0A3] [WIS][09/08/2013] (.Skype Technologies S.A. - Skype.) -- C:\Windows\Installer\3c25815.msi [22614016]
~ WIS: 42 Scanned in 00mn 12s



---\\ Etat g�n�ral des services not Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 12/09/2009 892072 | (AcrSch2Svc) . (.Acronis.) - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
SR - | Auto 11/05/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 10/10/2013 257416 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 20/09/2007 86016 | (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_295b5b4710f6d77b\AESTSr64.exe
SR - | Auto 30/06/2013 2326920 | (afcdpsrv) . (.Acronis.) - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
SR - | Auto 17/07/2012 659472 | (AMPPALR3) . (.Intel Corporation.) - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
SR - | Auto 30/08/2013 46808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 23/08/2012 135984 | (BTHSSecurityMgr) . (.Intel(R) Corporation.) - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
SR - | Auto 18/03/2011 2627920 | (Diskeeper) . (.Diskeeper Corporation.) - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
SR - | Auto 23/08/2012 629040 | (EvtEng) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
SR - | Auto 30/08/2012 296808 | (FPLService) . (.AuthenTec, Inc.) - C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe
SS - | Auto 01/07/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 01/07/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SR - | Auto 05/11/2010 13336 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SR - | Auto 09/06/2013 2635600 | (MaConfigAgent) . (.CybelSoft.) - C:\Program Files\ma-config.com\MaConfigAgent.exe
SR - | Auto 23/08/2012 149296 | (RegSrvc) . (.Intel(R) Corporation.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
SS - | Auto 25/07/2013 162672 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SR - | Auto 15/02/2008 122880 | (STacSV) . (.IDT, Inc..) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_295b5b4710f6d77b\STacSV64.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 23/08/2012 3342640 | (ZeroConfigService) . (.Intel� Corporation.) - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
~ Services: Scanned in 00mn 15s



---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Run by vevere at 14/10/2013 17:24:41
~ OS 64 not supported by MBR tool
~ MBR: 0 Scanned in 00mn 00s



---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by vevere at 14/10/2013 17:24:43

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 02s



---\\ Liste des �mulateurs de CD/DVD (MBR Hook)
O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite =>.DT Soft Ltd
~ Emulateurs: Scanned in 00mn 02s



---\\ Scan Additionnel (O88)
Database Version : 12946 - (13/10/2013)
Cl�s trouv�es (Keys found) : 6
Valeurs trouv�es (Values found) : 1
Dossiers trouv�s (Folders found) : 1
Fichiers trouv�s (Files found) : 7

[HKLM\Software\Google\Chrome\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob] =>Adware.Bandoo^
[HKLM\Software\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo] =>PUP.Elex^
[HKLM\Software\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp] =>Toolbar.Wajam^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2D7AD3EB-EA9E-48D5-A5B5-ECAA2D48341B}] =>PUP.CertifiedToolbar^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5b719707-d4d0-4592-a904-9939df8c089f}_is1] =>PUP.CertifiedToolbar^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
C:\Users\vevere\AppData\Local\Software =>Adware.Boxore
C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob =>Adware.Bandoo^
C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo =>PUP.Elex^
C:\Users\vevere\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp =>Toolbar.Wajam^
C:\Users\vevere\AppData\Local\Temp\BoxoreInstaller.exe =>Adware.Boxore^
C:\Users\vevere\AppData\Local\Temp\BundleSweetIMSetup.exe =>PUP.SweetIM^
C:\Users\vevere\AppData\Local\Temp\MybabylonTB.exe =>Toolbar.Babylon^
C:\Users\vevere\AppData\Local\Temp\tbuFA36.exe =>PUP.CertifiedToolbar^
~ Additionnel Scan: 206703 Items scanned in 00mn 53s



---\\ R�capitulatif des d�tections trouv�es sur votre station
~ http://nicolascoolman.webs.com/apps/blog/show/26611092-adware-bandoo =>Adware.Bandoo
~ http://nicolascoolman.webs.com/apps/blog/show/33479906-pup-elex =>PUP.Elex
~ http://nicolascoolman.webs.com/apps/blog/show/27379491-toolbar-wajam =>Toolbar.Wajam
~ http://nicolascoolman.webs.com/apps/blog/show/26631242-hijacker-qvo6 =>Hijacker.Qvo6
~ http://nicolascoolman.webs.com/apps/blog/show/28040039-pup-certifiedtoolbar =>PUP.CertifiedToolbar
~ http://nicolascoolman.webs.com/apps/blog/show/32979753-pup-bitguard =>PUP.BitGuard
~ http://nicolascoolman.webs.com/apps/blog/show/27161672-hijacker-eazel =>Hijacker.Eazel
~ http://nicolascoolman.webs.com/apps/blog/show/26626977-adware-boxore =>Adware.Boxore
~ http://nicolascoolman.webs.com/apps/blog/show/29216159-pup-sweetim =>PUP.SweetIM
~ http://nicolascoolman.webs.com/apps/blog/show/26627369-toolbar-babylon =>Toolbar.Babylon
~ http://nicolascoolman.webs.com/apps/blog/show/27588628-pup-esafesecurity =>PUP.eSafeSecurity
~ MSI: 11 link(s) detected in 00mn 53s



End of the scan (1769 lines in 04mn 25s)(0)