cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 03/12/2014 20:46:23 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\laurent\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17420)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,00 Gb Total Physical Memory | 1,61 Gb Available Physical Memory | 53,53% Memory free
6,00 Gb Paging File | 4,12 Gb Available in Paging File | 68,70% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 931,41 Gb Total Space | 776,32 Gb Free Space | 83,35% Space Free | Partition Type: NTFS
Drive E: | 206,60 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive F: | 298,09 Gb Total Space | 55,27 Gb Free Space | 18,54% Space Free | Partition Type: NTFS

Computer Name: LAURENT-PC | User Name: laurent | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2014/12/03 20:44:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\laurent\Desktop\OTL.exe
PRC - [2014/11/25 11:19:31 | 003,898,360 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
PRC - [2014/11/21 06:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
PRC - [2014/11/21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2014/11/21 06:12:46 | 007,229,752 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
PRC - [2014/11/14 22:38:20 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2014/11/14 21:47:35 | 000,356,128 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe
PRC - [2014/11/14 03:42:14 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2014/11/07 08:21:08 | 003,882,576 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IDMan.exe
PRC - [2014/10/15 16:26:12 | 002,117,448 | ---- | M] (CybelSoft) -- C:\Program Files\ma-config.com\MaConfigAgent.exe
PRC - [2014/09/12 19:14:55 | 013,559,056 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version9\TeamViewer.exe
PRC - [2014/09/12 19:14:55 | 004,799,760 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
PRC - [2014/09/12 19:00:53 | 000,229,648 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version9\tv_w32.exe
PRC - [2014/09/12 10:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2014/08/19 22:15:38 | 001,795,872 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
PRC - [2014/05/13 20:25:28 | 001,013,616 | ---- | M] (Realtek Semiconductor) -- C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
PRC - [2014/01/08 14:12:54 | 000,251,096 | ---- | M] (Realtek Semiconductor) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe
PRC - [2013/11/07 10:17:30 | 000,269,848 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe
PRC - [2013/10/24 17:45:04 | 007,842,664 | ---- | M] (Acronis) -- C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
PRC - [2013/10/22 20:30:48 | 007,151,024 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe
PRC - [2013/10/10 12:41:36 | 001,104,320 | ---- | M] (Acronis International GmbH) -- C:\Program Files\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
PRC - [2013/07/18 11:57:32 | 000,380,456 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
PRC - [2013/07/18 11:50:44 | 000,777,800 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
PRC - [2012/01/18 06:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
PRC - [2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010/04/09 02:42:28 | 000,163,944 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe
PRC - [2010/03/16 02:09:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2014/11/14 03:42:37 | 003,649,648 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013/10/24 17:06:16 | 000,028,992 | ---- | M] () -- C:\Program Files\Common Files\Acronis\Home\thread_pool.dll
MOD - [2013/10/24 17:06:10 | 000,036,672 | ---- | M] () -- C:\Program Files\Acronis\TrueImageHome\qt_icontray_ex.dll
MOD - [2013/10/10 12:02:34 | 000,013,120 | ---- | M] () -- C:\Program Files\Common Files\Acronis\TibMounter\icudt38.dll
MOD - [2013/10/01 11:00:14 | 000,022,336 | ---- | M] () -- C:\Program Files\Acronis\TrueImageHome\ti_managers_proxy_stub.dll
MOD - [2013/10/01 10:29:54 | 002,633,576 | ---- | M] () -- C:\Program Files\Acronis\TrueImageHome\tishell.dll
MOD - [2013/09/05 00:14:10 | 004,300,456 | ---- | M] () -- C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
MOD - [2012/08/17 21:38:56 | 000,479,160 | ---- | M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\dblite.dll
MOD - [2011/06/17 11:46:04 | 008,626,176 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\QtGui4.dll
MOD - [2011/06/17 11:46:02 | 002,408,448 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\QtCore4.dll
MOD - [2011/06/17 11:46:02 | 000,212,992 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
MOD - [2006/12/03 14:53:06 | 000,126,464 | ---- | M] () -- C:\Program Files\WinRAR\rarext.dll


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV - [2014/11/26 12:32:08 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014/11/25 11:19:31 | 003,898,360 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe -- (afcdpsrv)
SRV - [2014/11/21 06:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2014/11/21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2014/11/14 22:39:32 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2014/11/14 21:47:35 | 000,356,128 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe -- (AVP)
SRV - [2014/11/14 03:42:30 | 000,114,288 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014/10/15 16:26:12 | 002,117,448 | ---- | M] (CybelSoft) [Auto | Running] -- C:\Program Files\ma-config.com\MaConfigAgent.exe -- (MaConfigAgent)
SRV - [2014/09/12 19:14:55 | 004,799,760 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
SRV - [2014/09/12 10:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014/04/03 19:21:48 | 000,315,008 | ---- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2014/01/08 14:12:54 | 000,251,096 | ---- | M] (Realtek Semiconductor) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe -- (RtkAudioService)
SRV - [2013/12/19 00:41:02 | 030,814,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2013/10/22 20:30:48 | 007,151,024 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe -- (syncagentsrv)
SRV - [2013/07/18 11:50:44 | 000,777,800 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2013/05/27 05:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV - [2013/02/11 18:48:56 | 000,311,184 | ---- | M] (Nuance Communications, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Nuance\dgnsvc.exe -- (DragonSvc)
SRV - [2012/01/18 06:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv)
SRV - [2010/03/16 02:09:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2009/07/14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - [2014/12/03 20:38:06 | 000,114,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2014/11/25 11:19:32 | 000,234,752 | ---- | M] (Acronis) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\afcdp.sys -- (afcdp)
DRV - [2014/11/25 11:19:27 | 000,889,888 | ---- | M] (Acronis International GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tdrpman.sys -- (tdrpman)
DRV - [2014/11/25 11:19:25 | 000,143,648 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tib_mounter.sys -- (tib_mounter)
DRV - [2014/11/25 11:19:23 | 000,736,192 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tib.sys -- (tib)
DRV - [2014/11/25 11:19:20 | 000,116,000 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vididr.sys -- (vididr)
DRV - [2014/11/25 11:19:18 | 000,085,280 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vidsflt.sys -- (vidsflt)
DRV - [2014/11/25 11:19:16 | 000,185,120 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\snapman.sys -- (snapman)
DRV - [2014/11/25 11:19:14 | 000,086,304 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\fltsrv.sys -- (fltsrv)
DRV - [2014/11/21 06:14:20 | 000,051,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV - [2014/11/21 06:14:06 | 000,023,256 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2014/11/14 22:51:10 | 000,145,040 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\kneps.sys -- (kneps)
DRV - [2014/11/14 22:51:10 | 000,044,000 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\kltdi.sys -- (kltdi)
DRV - [2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klkbdflt.sys -- (klkbdflt)
DRV - [2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6)
DRV - [2014/11/14 22:51:09 | 000,597,600 | ---- | M] (Kaspersky Lab ZAO) [File_System | System | Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF)
DRV - [2014/11/14 22:51:09 | 000,135,776 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\kl1.sys -- (kl1)
DRV - [2014/10/01 05:19:10 | 000,115,240 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\idmwfp.sys -- (IDMWFP)
DRV - [2014/08/19 22:16:18 | 000,162,592 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2014/02/24 17:33:46 | 000,016,160 | ---- | M] (CybelSoft) [Kernel | On_Demand | Stopped] -- C:\Program Files\ma-config.com\Drivers\ma-config_x86.sys -- (ma-config_x86)
DRV - [2012/01/18 06:44:52 | 004,332,960 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lvuvc.sys -- (LVUVC)
DRV - [2012/01/18 06:44:28 | 000,312,096 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lvrs.sys -- (LVRS)
DRV - [2010/11/20 22:29:34 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/20 22:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 22:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 22:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - [2010/11/20 22:29:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV - [2010/11/20 22:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010/11/20 22:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 22:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 22:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010/11/20 22:29:03 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
DRV - [2010/11/20 22:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 22:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/04/09 02:32:56 | 000,215,656 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvstor32.sys -- (nvstor32)
DRV - [2010/04/09 02:32:54 | 000,139,368 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvrd32.sys -- (nvrd32)
DRV - [2010/03/22 18:29:08 | 000,018,944 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvsmu.sys -- (nvsmu)
DRV - [2010/03/15 23:52:00 | 011,573,768 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010/03/04 18:26:56 | 000,296,936 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvmf6232.sys -- (NVNET)
DRV - [2009/07/14 00:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009/07/13 23:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD)


[color=#E56717]========== Standard Registry (All) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)

IE - HKU\S-1-5-20\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)

IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\..\SearchScopes\{7EC3A7BC-618C-4BA8-B84F-39F5B4FF3AAE}: "URL" = https://www.google.com/search?q={searchTerms}
IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..extensions.enabledAddons: mozilla_cc%40internetdownloadmanager.com:7.3.89
FF - prefs.js..extensions.enabledAddons: leethax%40leethax.net:2014.10.15
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:33.1.1
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.71.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\nuance.com/DragonRIAPlugin: C:\PROGRA~1\Nuance\NATURA~1\Program\npDgnRia.dll (Nuance Communications Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\url_advisor@kaspersky.com [2014/11/14 22:51:21 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\virtual_keyboard@kaspersky.com [2014/11/14 22:51:22 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\content_blocker@kaspersky.com [2014/11/14 22:51:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\jid0-lmZNVK7a82O8cufhdfB9dUDfA2w@jetpack: C:\Program Files\Nuance\NaturallySpeaking12\Program\ffShim.xpi [2013/02/11 18:44:08 | 000,136,309 | ---- | M] ()
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 33.1.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 33.1.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\laurent\AppData\Roaming\IDM\idmmzcc5 [2014/11/14 21:23:01 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\laurent\AppData\Roaming\IDM\idmmzcc5 [2014/11/14 21:23:01 | 000,000,000 | ---D | M]

[2014/11/15 00:54:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\laurent\AppData\Roaming\mozilla\Extensions
[2014/12/01 15:25:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\laurent\AppData\Roaming\mozilla\Firefox\Profiles\wlzed5ya.default\extensions
[2014/11/16 11:56:01 | 000,021,590 | ---- | M] () (No name found) -- C:\Users\laurent\AppData\Roaming\mozilla\firefox\profiles\wlzed5ya.default\extensions\leethax@leethax.net.xpi
[2014/11/16 11:40:09 | 000,979,699 | ---- | M] () (No name found) -- C:\Users\laurent\AppData\Roaming\mozilla\firefox\profiles\wlzed5ya.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2014/11/15 00:54:14 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions
[2014/11/15 00:54:14 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2014/11/14 21:23:01 | 000,000,000 | ---D | M] (IDM CC) -- C:\USERS\LAURENT\APPDATA\ROAMING\IDM\IDMMZCC5

[color=#E56717]========== Chrome ==========[/color]

CHR - default_search_provider: (Enabled)
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - homepage: https://www.google.fr/?gws_rd=ssl
CHR - plugin: Error reading preferences file
CHR - Extension: Google Slides = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.8_0\
CHR - Extension: Google Docs = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\
CHR - Extension: Google Drive = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: Google Voice Search Hotword (Beta) = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\
CHR - Extension: WOT = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp\2.5.16_0\
CHR - Extension: YouTube = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Recherche Google = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Screen Capture = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpngackimfmofbokmjmljamhdncknpmg\233\
CHR - Extension: Flash Saving = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlbemabjbfhjcccahjioenmkgimjbbkd\194\
CHR - Extension: Google Sheets = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.0_0\
CHR - Extension: Readium = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\fepbnnnkkadjhjahcafoaglimekefifl\2.15.2_0\
CHR - Extension: IDM Integration Module = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn\6.21.14_0\
CHR - Extension: Kaspersky Protection = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh\2.3.0.43_1\
CHR - Extension: Dragon NaturallySpeaking Rich Internet Application Support = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\mikhcaiakabeeokmenglcdebplfdjicn\1.0_0\
CHR - Extension: Ghostery = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\5.4.1_0\
CHR - Extension: Google Wallet = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: Real-Debrid extension = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\oefkkgfcahbeccgckjgbnfclcmnjgidg\0.9_0\
CHR - Extension: Gmail = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2014/11/25 11:20:23 | 000,000,861 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activation.acronis.com
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (Content Blocker Plugin) - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Virtual Keyboard Plugin) - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Safe Money Plugin) - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (URL Advisor Plugin) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acronis Scheduler2 Service] C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis)
O4 - HKLM..\Run: [AcronisTibMounterMonitor] C:\Program Files\Common Files\Acronis\TibMounter\TibMounterMonitor.exe (Acronis International GmbH)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
O4 - HKLM..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\isuspm.exe (Flexera Software LLC.)
O4 - HKLM..\Run: [NvBackend] C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [NVRaidService] C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe (Oracle Corporation)
O4 - HKLM..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Hewlett-Packard Company)
O4 - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Officejet 2620 series.lnk = C:\Windows\System32\rundll32.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPath = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O7 - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Télécharger tous les liens avec Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm ()
O9 - Extra Button: Clavier virtuel - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O9 - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files\Hewlett-Packard\Smart Print\SmartPrintSetup.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files\Hewlett-Packard\Smart Print\SmartPrintSetup.exe (Hewlett-Packard)
O9 - Extra Button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Analyse des liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{00D0D9BA-3A70-40B1-9D7D-A3EC3360F101}: DhcpNameServer = 192.168.0.254
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\System32\credssp.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\Windows\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\Windows\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\Windows\System32\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\Windows\System32\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2014/12/03 16:24:17 | 000,000,000 | RHSD | M] - C:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [1997/08/15 16:30:06 | 000,000,030 | RH-- | M] () - E:\AUTORUN.INF -- [ CDFS ]
O32 - AutoRun File - [2014/12/03 16:24:17 | 000,000,000 | RHSD | M] - F:\Autorun.inf -- [ NTFS ]
O33 - MountPoints2\{0cae6368-6c34-11e4-bb66-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{0cae6368-6c34-11e4-bb66-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Installe.exe -- [1997/06/06 18:27:50 | 000,059,904 | R--- | M] (InstallShield Software Corporation)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

MsConfig - StartUpReg: [b]BCSSync[/b] - hkey= - key= - C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
MsConfig - StartUpReg: [b]CCleaner Monitoring[/b] - hkey= - key= - C:\Program Files\CCleaner\CCleaner.exe (Piriform Ltd)
MsConfig - StartUpReg: [b]DNS7reminder[/b] - hkey= - key= - C:\Program Files\Nuance\NaturallySpeaking12\Ereg\Ereg.exe (Nuance Communications, Inc.)
MsConfig - StartUpReg: [b]ISUSPM[/b] - hkey= - key= - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Flexera Software LLC.)
MsConfig - State: "startup" - 2
MsConfig - State: "services" - 2

SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4903D172-DCCB-392F-93A3-34CA9D47FE3D} - .NET Framework
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files\Google\Chrome\Application\39.0.2171.65\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.pspgru - C:\Windows\System32\PSPGRU.acm (Philips Austria GmbH - Speech Processing)
Drivers32: MSVideo - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.i420 - C:\Windows\System32\lvcodec2.dll (Logitech Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2014/12/03 20:43:59 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\laurent\Desktop\OTL.exe
[2014/12/03 17:02:08 | 000,000,000 | ---D | C] -- C:\Users\laurent\Desktop\urgences s4
[2014/12/03 16:24:17 | 000,000,000 | RHSD | C] -- C:\Autorun.inf
[2014/12/03 16:22:09 | 000,000,000 | ---D | C] -- C:\UsbFix
[2014/12/03 12:15:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
[2014/12/03 12:15:14 | 000,000,000 | ---D | C] -- C:\Program Files\ZHPDiag
[2014/12/03 12:15:14 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\ZHP
[2014/12/02 23:57:58 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller
[2014/12/02 23:37:02 | 000,052,440 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\greg.sys
[2014/12/02 20:05:49 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2014/12/02 14:40:31 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\NVIDIA
[2014/12/01 16:30:52 | 000,000,000 | ---D | C] -- C:\ESD
[2014/12/01 11:24:34 | 000,114,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\1DC149D7.sys
[2014/11/30 17:35:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2014/11/30 17:35:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2014/11/30 17:33:03 | 000,758,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\cohelper.dll
[2014/11/30 17:32:10 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2014/11/30 16:28:57 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Ashampoo
[2014/11/30 16:28:36 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\ashampoo
[2014/11/30 16:28:36 | 000,000,000 | ---D | C] -- C:\ProgramData\ashampoo
[2014/11/30 16:28:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
[2014/11/30 16:28:31 | 000,000,000 | ---D | C] -- C:\Program Files\Ashampoo
[2014/11/30 16:23:51 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\ImgBurn
[2014/11/28 04:48:35 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Microsoft Games
[2014/11/27 12:12:13 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\FileViewPro
[2014/11/27 12:12:08 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\IsolatedStorage
[2014/11/27 12:12:08 | 000,000,000 | ---D | C] -- C:\ProgramData\IsolatedStorage
[2014/11/27 12:11:11 | 000,000,000 | ---D | C] -- C:\Spacekace
[2014/11/25 14:29:20 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\629
[2014/11/25 11:22:48 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Acronis
[2014/11/25 11:19:32 | 000,234,752 | ---- | C] (Acronis) -- C:\Windows\System32\drivers\afcdp.sys
[2014/11/25 11:19:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Acronis
[2014/11/25 11:19:27 | 000,889,888 | ---- | C] (Acronis International GmbH) -- C:\Windows\System32\drivers\tdrpman.sys
[2014/11/25 11:19:25 | 000,143,648 | ---- | C] (Acronis International GmbH) -- C:\Windows\System32\drivers\tib_mounter.sys
[2014/11/25 11:19:23 | 000,736,192 | ---- | C] (Acronis International GmbH) -- C:\Windows\System32\drivers\tib.sys
[2014/11/25 11:19:20 | 000,116,000 | ---- | C] (Acronis International GmbH) -- C:\Windows\System32\drivers\vididr.sys
[2014/11/25 11:19:18 | 000,085,280 | ---- | C] (Acronis International GmbH) -- C:\Windows\System32\drivers\vidsflt.sys
[2014/11/25 11:19:16 | 000,185,120 | ---- | C] (Acronis International GmbH) -- C:\Windows\System32\drivers\snapman.sys
[2014/11/25 11:19:14 | 000,086,304 | ---- | C] (Acronis International GmbH) -- C:\Windows\System32\drivers\fltsrv.sys
[2014/11/25 11:19:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
[2014/11/25 11:18:54 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Acronis
[2014/11/25 11:18:54 | 000,000,000 | ---D | C] -- C:\Program Files\Acronis
[2014/11/25 03:08:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2014/11/23 17:24:14 | 000,114,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\4D946C0E.sys
[2014/11/23 15:57:00 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2014/11/22 18:24:31 | 000,114,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\41A64C10.sys
[2014/11/22 15:21:54 | 000,000,000 | ---D | C] -- C:\ProgramData\gpggiciloackpfcihnnbnffbfffmocmh
[2014/11/22 15:15:28 | 000,000,000 | ---D | C] -- C:\ProgramData\flamhmgifljieaepeijcdojafjeclepc
[2014/11/22 15:06:54 | 000,000,000 | ---D | C] -- C:\ProgramData\ekmjhknldapbobpdieiadaannnjedgha
[2014/11/22 15:03:04 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\FDRLab
[2014/11/22 15:02:41 | 000,000,000 | ---D | C] -- C:\Program Files\FDRLab
[2014/11/22 14:08:13 | 000,000,000 | ---D | C] -- C:\Program Files\Rene.E Laboratory
[2014/11/18 16:15:07 | 000,000,000 | ---D | C] -- C:\Users\laurent\Documents\My Cheat Tables
[2014/11/18 16:14:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3
[2014/11/18 16:14:57 | 000,000,000 | ---D | C] -- C:\Program Files\Cheat Engine 6.3
[2014/11/18 14:12:07 | 000,000,000 | ---D | C] -- C:\Users\laurent\Documents\dossier médical Laurent
[2014/11/17 10:12:22 | 000,000,000 | -HSD | C] -- C:\Users\laurent\AppData\Local\EmieUserList
[2014/11/17 10:12:22 | 000,000,000 | -HSD | C] -- C:\Users\laurent\AppData\Local\EmieBrowserModeList
[2014/11/17 10:12:21 | 000,000,000 | -HSD | C] -- C:\Users\laurent\AppData\Local\EmieSiteList
[2014/11/16 13:53:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
[2014/11/16 13:53:02 | 000,075,480 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
[2014/11/16 13:53:01 | 000,051,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys
[2014/11/16 13:53:01 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes Anti-Malware
[2014/11/16 13:52:23 | 000,114,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2014/11/16 13:52:23 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Malwarebytes
[2014/11/16 13:52:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2014/11/16 13:52:13 | 000,023,256 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2014/11/16 13:52:13 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2014/11/16 12:53:14 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Borland Shared
[2014/11/16 12:53:00 | 000,000,000 | ---D | C] -- C:\Program Files\ZebHelpProcess
[2014/11/16 03:06:26 | 002,285,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
[2014/11/15 18:35:41 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\FLEXnet
[2014/11/15 18:35:40 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Nuance
[2014/11/15 18:35:14 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2014/11/15 18:34:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon NaturallySpeaking 12.0
[2014/11/15 18:33:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\IVA
[2014/11/15 18:33:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nuance
[2014/11/15 18:32:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Nuance
[2014/11/15 18:32:15 | 000,000,000 | ---D | C] -- C:\Program Files\Nuance
[2014/11/15 18:32:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Macrovision
[2014/11/15 18:32:15 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet
[2014/11/15 18:28:07 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2014/11/15 17:13:49 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fsutil.exe
[2014/11/15 17:13:46 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2014/11/15 17:13:44 | 001,987,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2014/11/15 17:13:43 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2014/11/15 17:13:42 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDYAK.DLL
[2014/11/15 17:13:42 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTAT.DLL
[2014/11/15 17:13:42 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDRU1.DLL
[2014/11/15 17:13:42 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBASH.DLL
[2014/11/15 17:13:42 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDRU.DLL
[2014/11/15 17:13:35 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2014/11/15 17:13:33 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2014/11/15 17:05:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\logishrd
[2014/11/15 17:00:56 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Skype
[2014/11/15 17:00:54 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Skype
[2014/11/15 17:00:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2014/11/15 17:00:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2014/11/15 17:00:41 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2014/11/15 17:00:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2014/11/15 16:54:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
[2014/11/15 16:54:03 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
[2014/11/15 15:51:13 | 000,000,000 | ---D | C] -- C:\ProgramData\vsosdk
[2014/11/15 15:37:31 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Macromedia
[2014/11/15 15:37:31 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Macromedia
[2014/11/15 15:35:42 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\TeamViewer
[2014/11/15 15:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\TeamViewer
[2014/11/15 15:31:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2014/11/15 15:31:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2014/11/15 15:31:31 | 000,272,808 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2014/11/15 15:31:27 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2014/11/15 15:31:27 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2014/11/15 15:31:27 | 000,096,680 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2014/11/15 15:31:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2014/11/15 15:31:18 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2014/11/15 15:30:10 | 000,701,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2014/11/15 15:30:10 | 000,071,344 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2014/11/15 15:30:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2014/11/15 15:15:51 | 000,000,000 | ---D | C] -- C:\Users\laurent\Documents\DVDFab9
[2014/11/15 15:15:51 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\DVDFab9
[2014/11/15 15:15:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDFab 9
[2014/11/15 15:15:36 | 000,000,000 | ---D | C] -- C:\Program Files\DVDFab 9
[2014/11/15 15:15:30 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Programs
[2014/11/15 15:02:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pochette Express 2
[2014/11/15 15:02:01 | 000,000,000 | ---D | C] -- C:\Program Files\Pochette Express 2
[2014/11/15 15:00:13 | 000,000,000 | ---D | C] -- C:\ProgramData\DVD Shrink
[2014/11/15 15:00:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVD Shrink
[2014/11/15 15:00:12 | 000,000,000 | ---D | C] -- C:\Program Files\DVD Shrink
[2014/11/15 14:59:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
[2014/11/15 14:59:30 | 000,000,000 | ---D | C] -- C:\Program Files\ImgBurn
[2014/11/15 14:32:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
[2014/11/15 14:32:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2014/11/15 14:32:07 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Synchronization Services
[2014/11/15 14:31:49 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2014/11/15 14:31:49 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework
[2014/11/15 14:31:49 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2014/11/15 14:30:55 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 8
[2014/11/15 14:29:45 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services
[2014/11/15 14:29:21 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Microsoft Help
[2014/11/15 14:29:16 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2014/11/15 14:29:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2014/11/15 14:29:04 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2014/11/15 14:27:43 | 000,000,000 | ---D | C] -- C:\FFOutput
[2014/11/15 14:27:21 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
[2014/11/15 14:27:05 | 000,000,000 | ---D | C] -- C:\Program Files\FreeTime
[2014/11/15 14:14:54 | 000,000,000 | ---D | C] -- C:\Program Files\LightScribe Template Labeler
[2014/11/15 14:10:47 | 000,000,000 | ---D | C] -- C:\ProgramData\LightScribe
[2014/11/15 14:09:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LightScribe
[2014/11/15 14:05:38 | 000,000,000 | ---D | C] -- C:\Users\laurent\Documents\LightScribe
[2014/11/15 13:58:57 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling
[2014/11/15 13:58:53 | 000,000,000 | ---D | C] -- C:\Program Files\LightScribe
[2014/11/15 13:43:48 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2014/11/15 13:43:48 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2014/11/15 13:43:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2014/11/15 13:41:58 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Adobe
[2014/11/15 13:39:39 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\OpenOffice
[2014/11/15 13:29:16 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
[2014/11/15 13:22:25 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
[2014/11/15 13:21:48 | 000,000,000 | ---D | C] -- C:\Program Files\OpenOffice 4
[2014/11/15 00:54:25 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Mozilla
[2014/11/15 00:54:25 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Mozilla
[2014/11/15 00:54:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2014/11/15 00:54:16 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2014/11/15 00:54:12 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2014/11/15 00:50:27 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Adobe
[2014/11/15 00:43:49 | 000,000,000 | --SD | C] -- C:\Windows\System32\CompatTel
[2014/11/15 00:37:35 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2014/11/14 23:46:56 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2014/11/14 23:46:46 | 000,000,000 | ---D | C] -- C:\Windows\Migration
[2014/11/14 23:10:12 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll
[2014/11/14 23:10:10 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll
[2014/11/14 23:10:10 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll
[2014/11/14 23:08:57 | 000,099,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\infocardapi.dll
[2014/11/14 23:08:56 | 000,008,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icardres.dll
[2014/11/14 23:08:53 | 000,619,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icardagt.exe
[2014/11/14 23:08:51 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsWpfWrp.exe
[2014/11/14 23:04:22 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe
[2014/11/14 22:50:30 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2014/11/14 22:39:32 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2014/11/14 22:39:32 | 002,051,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2014/11/14 22:39:32 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2014/11/14 22:39:32 | 000,708,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2014/11/14 22:39:32 | 000,688,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2014/11/14 22:39:32 | 000,683,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2014/11/14 22:39:32 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsIntl.dll
[2014/11/14 22:39:32 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2014/11/14 22:39:32 | 000,418,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2014/11/14 22:39:32 | 000,341,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2014/11/14 22:39:32 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2014/11/14 22:39:32 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2014/11/14 22:39:32 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2014/11/14 22:39:32 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll
[2014/11/14 22:39:32 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2014/11/14 22:39:32 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2014/11/14 22:39:32 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2014/11/14 22:39:32 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2014/11/14 22:39:32 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2014/11/14 22:39:32 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe
[2014/11/14 22:39:32 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2014/11/14 22:39:32 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2014/11/14 22:39:32 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2014/11/14 22:39:32 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll
[2014/11/14 22:39:32 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2014/11/14 22:39:32 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll
[2014/11/14 22:39:32 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2014/11/14 22:39:32 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2014/11/14 22:39:32 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2014/11/14 22:39:32 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll
[2014/11/14 22:39:31 | 004,298,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2014/11/14 22:39:31 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll
[2014/11/14 22:39:31 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2014/11/14 22:39:31 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2014/11/14 22:39:31 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2014/11/14 22:39:31 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2014/11/14 22:39:31 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2014/11/14 22:39:31 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll
[2014/11/14 22:39:31 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2014/11/14 22:39:31 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2014/11/14 22:39:31 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2014/11/14 22:39:31 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2014/11/14 22:38:54 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tdh.dll
[2014/11/14 22:38:54 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2014/11/14 22:38:20 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
[2014/11/14 22:36:16 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2014/11/14 22:36:16 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2014/11/14 22:36:16 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2014/11/14 22:36:16 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2014/11/14 22:36:16 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2014/11/14 22:36:16 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2014/11/14 22:36:16 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2014/11/14 22:36:16 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2014/11/14 22:36:16 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2014/11/14 22:36:16 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2014/11/14 22:36:16 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2014/11/14 22:36:16 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2014/11/14 22:36:16 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2014/11/14 22:36:16 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2014/11/14 22:36:16 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2014/11/14 22:36:16 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2014/11/14 22:36:16 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2014/11/14 22:36:16 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2014/11/14 22:36:16 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2014/11/14 22:35:00 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2014/11/14 22:30:50 | 000,000,000 | ---D | C] -- C:\Windows\System32\MRT
[2014/11/14 22:25:45 | 003,969,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2014/11/14 22:25:45 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2014/11/14 22:25:44 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\objsel.dll
[2014/11/14 22:25:44 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cngprovider.dll
[2014/11/14 22:25:44 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adprovider.dll
[2014/11/14 22:25:44 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\capiprovider.dll
[2014/11/14 22:25:44 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpapiprovider.dll
[2014/11/14 22:25:44 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dimsroam.dll
[2014/11/14 22:25:44 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wincredprovider.dll
[2014/11/14 22:25:33 | 000,919,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorets.dll
[2014/11/14 22:25:32 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
[2014/11/14 22:25:32 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll
[2014/11/14 22:25:32 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll
[2014/11/14 22:25:32 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
[2014/11/14 22:25:32 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdrmemptylst.exe
[2014/11/14 22:25:26 | 000,156,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscorier.dll
[2014/11/14 22:25:26 | 000,081,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscories.dll
[2014/11/14 22:25:24 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2014/11/14 22:25:24 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\System32\fpb.rs
[2014/11/14 22:25:24 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc-nz.rs
[2014/11/14 22:25:24 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\System32\pegibbfc.rs
[2014/11/14 22:25:24 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\System32\csrr.rs
[2014/11/14 22:25:24 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\System32\cob-au.rs
[2014/11/14 22:25:24 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\System32\usk.rs
[2014/11/14 22:25:24 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\System32\grb.rs
[2014/11/14 22:25:24 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-pt.rs
[2014/11/14 22:25:24 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi.rs
[2014/11/14 22:25:24 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\System32\djctq.rs
[2014/11/14 22:25:23 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll
[2014/11/14 22:25:23 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\System32\cero.rs
[2014/11/14 22:25:23 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\System32\esrb.rs
[2014/11/14 22:25:23 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc.rs
[2014/11/14 22:25:23 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-fi.rs
[2014/11/14 22:25:18 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
[2014/11/14 22:25:08 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcore6.dll
[2014/11/14 22:25:08 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
[2014/11/14 22:25:05 | 000,133,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ataport.sys
[2014/11/14 22:25:01 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RNDISMP.sys
[2014/11/14 22:25:00 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2014/11/14 22:24:26 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcorehc.dll
[2014/11/14 22:24:26 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncsi.dll
[2014/11/14 22:24:25 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll
[2014/11/14 22:24:19 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2014/11/14 22:24:13 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll
[2014/11/14 22:24:11 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certutil.exe
[2014/11/14 22:24:11 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certenc.dll
[2014/11/14 22:24:07 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\osk.exe
[2014/11/14 22:24:05 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OxpsConverter.exe
[2014/11/14 22:23:56 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2014/11/14 22:23:50 | 001,805,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
[2014/11/14 22:23:50 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msihnd.dll
[2014/11/14 22:23:50 | 000,101,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2014/11/14 22:23:44 | 000,240,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2014/11/14 22:23:44 | 000,187,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2014/11/14 22:23:43 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscript.exe
[2014/11/14 22:23:37 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2014/11/14 22:23:28 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2014/11/14 22:23:28 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2014/11/14 22:23:27 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcjt32.dll
[2014/11/14 22:23:27 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbctrac.dll
[2014/11/14 22:23:27 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccp32.dll
[2014/11/14 22:23:27 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccu32.dll
[2014/11/14 22:23:27 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccr32.dll
[2014/11/14 22:23:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml6r.dll
[2014/11/14 22:23:24 | 000,656,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshwfp.dll
[2014/11/14 22:23:24 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
[2014/11/14 22:23:22 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidclass.sys
[2014/11/14 22:23:22 | 000,025,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidparse.sys
[2014/11/14 22:23:21 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\synceng.dll
[2014/11/14 22:23:05 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbe.dll
[2014/11/14 22:23:05 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
[2014/11/14 22:23:05 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2014/11/14 22:22:59 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aeinv.dll
[2014/11/14 22:22:59 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\generaltel.dll
[2014/11/14 22:22:59 | 000,203,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aepdu.dll
[2014/11/14 22:22:48 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scavengeui.dll
[2014/11/14 22:22:46 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AUDIOKSE.dll
[2014/11/14 22:22:46 | 000,374,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AudioEng.dll
[2014/11/14 22:22:46 | 000,275,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDump.dll
[2014/11/14 22:22:46 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll
[2014/11/14 22:22:43 | 000,793,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSWorkspace.dll
[2014/11/14 22:22:38 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qedit.dll
[2014/11/14 22:22:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2014/11/14 22:22:36 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
[2014/11/14 22:22:35 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2014/11/14 22:22:35 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2014/11/14 22:22:35 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2014/11/14 22:22:35 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2014/11/14 22:22:35 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2014/11/14 22:22:35 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2014/11/14 22:22:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2014/11/14 22:22:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2014/11/14 22:22:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2014/11/14 22:22:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2014/11/14 22:22:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2014/11/14 22:22:33 | 001,549,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll
[2014/11/14 22:22:33 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll
[2014/11/14 22:22:33 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll
[2014/11/14 22:22:33 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll
[2014/11/14 22:22:33 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll
[2014/11/14 22:22:33 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll
[2014/11/14 22:22:32 | 001,620,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2014/11/14 22:22:31 | 000,219,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2014/11/14 22:22:31 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2014/11/14 22:22:29 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptdlg.dll
[2014/11/14 22:22:27 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2014/11/14 22:22:26 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\portcls.sys
[2014/11/14 22:22:26 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmk.sys
[2014/11/14 22:22:26 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2014/11/14 22:22:26 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2014/11/14 22:22:26 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dciman32.dll
[2014/11/14 22:22:25 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2014/11/14 22:22:18 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
[2014/11/14 22:22:16 | 000,149,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\storport.sys
[2014/11/14 22:22:16 | 000,027,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
[2014/11/14 22:22:16 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iologmsg.dll
[2014/11/14 22:22:14 | 002,379,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2014/11/14 22:22:13 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOVER.exe
[2014/11/14 22:22:12 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SmartcardCredentialProvider.dll
[2014/11/14 22:22:08 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2014/11/14 22:22:08 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2014/11/14 22:22:07 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll
[2014/11/14 22:22:06 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
[2014/11/14 22:22:05 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
[2014/11/14 22:22:03 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
[2014/11/14 22:21:57 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usb8023.sys
[2014/11/14 22:21:56 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IMJP10K.DLL
[2014/11/14 22:21:53 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanprotdim.dll
[2014/11/14 22:21:50 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
[2014/11/14 22:21:48 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
[2014/11/14 22:17:35 | 000,681,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adtschema.dll
[2014/11/14 22:17:35 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msaudite.dll
[2014/11/14 22:17:35 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2014/11/14 22:17:31 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2014/11/14 22:14:47 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2014/11/14 22:14:47 | 000,572,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2014/11/14 22:14:47 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2014/11/14 22:14:47 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2014/11/14 22:14:47 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2014/11/14 22:14:47 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2014/11/14 22:14:47 | 000,390,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdrm.dll
[2014/11/14 22:14:47 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2014/11/14 22:14:46 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2014/11/14 22:06:17 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfLdr.sys
[2014/11/14 22:06:17 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wdfres.dll
[2014/11/14 22:06:15 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2014/11/14 22:06:15 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2014/11/14 22:06:13 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe
[2014/11/14 21:59:21 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\NVIDIA
[2014/11/14 21:53:01 | 000,000,000 | ---D | C] -- C:\Program Files\Hewlett-Packard
[2014/11/14 21:52:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Visan
[2014/11/14 21:52:57 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Photo Creations
[2014/11/14 21:52:57 | 000,000,000 | ---D | C] -- C:\Program Files\HP Photo Creations
[2014/11/14 21:52:37 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\HpUpdate
[2014/11/14 21:52:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
[2014/11/14 21:50:04 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2014/11/14 21:49:49 | 000,000,000 | ---D | C] -- C:\Temp
[2014/11/14 21:49:39 | 000,062,936 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvshext.dll
[2014/11/14 21:49:29 | 000,000,000 | ---D | C] -- C:\ProgramData\HP
[2014/11/14 21:49:04 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2014/11/14 21:49:00 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2014/11/14 21:48:52 | 000,000,000 | ---D | C] -- C:\Program Files\HP
[2014/11/14 21:48:22 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\HP
[2014/11/14 21:43:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2014/11/14 21:43:47 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2014/11/14 21:40:14 | 000,000,000 | ---D | C] -- C:\Windows\System32\SRSLabs
[2014/11/14 21:40:11 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM
[2014/11/14 21:39:57 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll
[2014/11/14 21:39:57 | 000,185,584 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSHD.dll
[2014/11/14 21:39:57 | 000,173,296 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSHP360.dll
[2014/11/14 21:39:57 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll
[2014/11/14 21:39:56 | 001,892,056 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl
[2014/11/14 21:39:56 | 000,214,368 | ---- | C] (Synopsys, Inc.) -- C:\Windows\System32\SFNHK.dll
[2014/11/14 21:39:56 | 000,214,352 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\System32\SFFXProc.dll
[2014/11/14 21:39:56 | 000,078,672 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\System32\SFFXComm.dll
[2014/11/14 21:39:56 | 000,074,080 | ---- | C] (Synopsys, Inc.) -- C:\Windows\System32\SFCOM.dll
[2014/11/14 21:39:56 | 000,074,064 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\System32\SFFXSAPO.dll
[2014/11/14 21:39:56 | 000,074,064 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\System32\SFFXHAPO.dll
[2014/11/14 21:39:56 | 000,074,064 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\System32\SFFXDAPO.dll
[2014/11/14 21:39:56 | 000,068,960 | ---- | C] (Synopsys, Inc.) -- C:\Windows\System32\SFAPO.dll
[2014/11/14 21:39:55 | 002,566,872 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll
[2014/11/14 21:39:55 | 000,916,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInstII.dll
[2014/11/14 21:39:55 | 000,782,040 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll
[2014/11/14 21:39:55 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll
[2014/11/14 21:39:55 | 000,013,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoLDR.dll
[2014/11/14 21:39:54 | 002,474,200 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RltkAPO.dll
[2014/11/14 21:39:54 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll
[2014/11/14 21:39:54 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll
[2014/11/14 21:39:54 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll
[2014/11/14 21:39:54 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll
[2014/11/14 21:39:54 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll
[2014/11/14 21:39:53 | 060,636,160 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RCoRes.dat
[2014/11/14 21:39:49 | 002,421,792 | ---- | C] (Fortemedia Corporation) -- C:\Windows\System32\FMAPO.dll
[2014/11/14 21:39:49 | 000,182,472 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll
[2014/11/14 21:39:49 | 000,095,840 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll
[2014/11/14 21:39:49 | 000,092,584 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll
[2014/11/14 21:39:49 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2014/11/14 21:39:49 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2014/11/14 21:39:47 | 002,080,472 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2014/11/14 21:39:47 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2014/11/14 21:39:44 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2014/11/14 21:35:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ma-config.com
[2014/11/14 21:35:29 | 000,000,000 | ---D | C] -- C:\ProgramData\ma-config.com
[2014/11/14 21:35:29 | 000,000,000 | ---D | C] -- C:\Program Files\ma-config.com
[2014/11/14 21:26:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014/11/14 21:25:19 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2014/11/14 21:25:16 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Google
[2014/11/14 21:25:09 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Deployment
[2014/11/14 21:25:09 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Apps
[2014/11/14 21:20:54 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\IDM
[2014/11/14 21:20:54 | 000,000,000 | ---D | C] -- C:\ProgramData\IDM
[2014/11/14 21:20:54 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\DMCache
[2014/11/14 21:20:52 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2014/11/14 21:20:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2014/11/14 21:20:51 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Download Manager
[2014/11/14 21:13:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus 2013
[2014/11/14 21:13:20 | 000,000,000 | ---D | C] -- C:\Windows\ELAMBKUP
[2014/11/14 21:13:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2014/11/14 21:13:17 | 000,000,000 | ---D | C] -- C:\Program Files\Kaspersky Lab
[2014/11/14 21:13:11 | 000,074,848 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klflt.sys
[2014/11/14 21:13:10 | 000,597,600 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klif.sys
[2014/11/14 21:13:02 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2014/11/14 21:11:21 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014/11/14 21:11:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014/11/14 21:11:16 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2014/11/14 21:08:59 | 000,000,000 | ---D | C] -- C:\Users\laurent\Desktop\log
[2014/11/14 21:08:58 | 000,000,000 | ---D | C] -- C:\Users\laurent\Desktop\mes DEB
[2014/11/14 21:08:58 | 000,000,000 | ---D | C] -- C:\Users\laurent\Desktop\factures
[2014/11/14 20:56:58 | 000,229,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2014/11/14 20:48:28 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll
[2014/11/14 20:33:21 | 002,425,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2014/11/14 20:33:21 | 000,045,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2014/11/14 20:33:16 | 000,581,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2014/11/14 20:33:16 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2014/11/14 20:33:16 | 000,036,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2014/11/14 20:33:16 | 000,000,000 | R--D | C] -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2014/11/14 20:33:16 | 000,000,000 | R--D | C] -- C:\Users\laurent\Searches
[2014/11/14 20:33:16 | 000,000,000 | R--D | C] -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2014/11/14 20:33:16 | 000,000,000 | -H-D | C] -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2014/11/14 20:32:29 | 000,179,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2014/11/14 20:32:29 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2014/11/14 20:32:21 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Identities
[2014/11/14 20:32:19 | 000,000,000 | R--D | C] -- C:\Users\laurent\Contacts
[2014/11/14 20:32:14 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\VirtualStore
[2014/11/14 20:32:13 | 000,000,000 | --SD | C] -- C:\Users\laurent\AppData\Roaming\Microsoft
[2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Videos
[2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Saved Games
[2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Pictures
[2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Music
[2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Links
[2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Favorites
[2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Downloads
[2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Documents
[2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Desktop
[2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Voisinage réseau
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Voisinage d'impression
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\AppData\Local\Temporary Internet Files
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\SendTo
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Recent
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Modèles
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Documents\Mes vidéos
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Documents\Mes images
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Mes documents
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Menu Démarrer
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Documents\Ma musique
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Local Settings
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\AppData\Local\Historique
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Cookies
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Application Data
[2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\AppData\Local\Application Data
[2014/11/14 20:32:13 | 000,000,000 | -H-D | C] -- C:\Users\laurent\AppData
[2014/11/14 20:32:13 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Temp
[2014/11/14 20:32:13 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Microsoft
[2014/11/14 20:32:13 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Media Center Programs
[2014/11/14 20:32:00 | 000,000,000 | -HSD | C] -- C:\Recovery
[2014/11/14 20:32:00 | 000,000,000 | -HSD | C] -- C:\Program Files\Fichiers communs
[2014/11/14 20:31:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Modèles
[2014/11/14 20:31:59 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mes vidéos
[2014/11/14 20:31:59 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mes images
[2014/11/14 20:31:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Démarrer
[2014/11/14 20:31:59 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Ma musique
[2014/11/14 20:31:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoris
[2014/11/14 20:31:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Bureau
[2014/11/14 20:31:55 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2014/11/14 20:26:00 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2014/11/14 20:25:18 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2014/11/07 08:21:40 | 000,115,240 | ---- | C] (Tonec Inc.) -- C:\Windows\System32\drivers\idmwfp.sys

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2014/12/03 20:49:50 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014/12/03 20:44:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\laurent\Desktop\OTL.exe
[2014/12/03 20:38:06 | 000,114,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2014/12/03 20:32:00 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/12/03 20:30:05 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/12/03 18:47:48 | 000,026,544 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/12/03 18:47:48 | 000,026,544 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/12/03 18:47:02 | 000,746,916 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2014/12/03 18:47:02 | 000,653,526 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014/12/03 18:47:02 | 000,149,440 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2014/12/03 18:47:02 | 000,121,398 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014/12/03 18:41:05 | 000,001,998 | ---- | M] () -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Officejet 2620 series.lnk
[2014/12/03 18:41:00 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/12/03 18:40:27 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/12/03 18:40:24 | 2415,304,704 | -HS- | M] () -- C:\hiberfil.sys
[2014/12/03 16:40:47 | 000,013,545 | ---- | M] () -- C:\Users\laurent\Desktop\Capture 2.PNG
[2014/12/03 16:36:04 | 000,033,612 | ---- | M] () -- C:\Users\laurent\Desktop\Capture.PNG
[2014/12/03 16:22:12 | 000,001,448 | ---- | M] () -- C:\Users\laurent\Desktop\UsbFix.lnk
[2014/12/03 16:15:41 | 000,013,030 | ---- | M] () -- C:\PDOXUSRS.NET
[2014/12/03 12:35:41 | 000,001,795 | ---- | M] () -- C:\Users\laurent\AppData\Roaming\SAS7_000.DAT
[2014/12/03 12:18:56 | 000,000,999 | ---- | M] () -- C:\Users\Public\Desktop\ZHP.lnk
[2014/12/03 12:17:40 | 000,000,000 | ---- | M] () -- C:\PhysicalDisk0_MBR.bin
[2014/12/03 12:15:16 | 000,001,937 | ---- | M] () -- C:\Users\laurent\Desktop\ZHPFix.lnk
[2014/12/03 12:15:16 | 000,001,810 | ---- | M] () -- C:\Users\laurent\Desktop\ZHPDiag.lnk
[2014/12/02 23:58:01 | 000,034,808 | ---- | M] () -- C:\Windows\System32\drivers\TrueSight.sys
[2014/12/02 23:37:02 | 000,052,440 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\greg.sys
[2014/12/02 22:14:54 | 000,001,064 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/12/01 16:03:20 | 000,001,270 | ---- | M] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/12/01 16:03:20 | 000,001,158 | ---- | M] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2014/12/01 16:03:20 | 000,001,011 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2014/12/01 16:03:19 | 000,001,246 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/12/01 11:24:34 | 000,114,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\1DC149D7.sys
[2014/11/30 16:28:35 | 000,002,248 | ---- | M] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Ashampoo Burning Studio 6.lnk
[2014/11/30 16:28:35 | 000,002,224 | ---- | M] () -- C:\Users\Public\Desktop\Ashampoo Burning Studio 6.lnk
[2014/11/26 14:39:36 | 000,134,442 | ---- | M] () -- C:\Users\laurent\Desktop\Mobile_Bouyguestelecom_Facture_Octobre2014.pdf
[2014/11/26 12:32:08 | 000,701,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2014/11/26 12:32:08 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2014/11/25 11:19:32 | 000,234,752 | ---- | M] (Acronis) -- C:\Windows\System32\drivers\afcdp.sys
[2014/11/25 11:19:27 | 000,889,888 | ---- | M] (Acronis International GmbH) -- C:\Windows\System32\drivers\tdrpman.sys
[2014/11/25 11:19:25 | 000,143,648 | ---- | M] (Acronis International GmbH) -- C:\Windows\System32\drivers\tib_mounter.sys
[2014/11/25 11:19:23 | 000,736,192 | ---- | M] (Acronis International GmbH) -- C:\Windows\System32\drivers\tib.sys
[2014/11/25 11:19:20 | 000,116,000 | ---- | M] (Acronis International GmbH) -- C:\Windows\System32\drivers\vididr.sys
[2014/11/25 11:19:18 | 000,085,280 | ---- | M] (Acronis International GmbH) -- C:\Windows\System32\drivers\vidsflt.sys
[2014/11/25 11:19:16 | 000,185,120 | ---- | M] (Acronis International GmbH) -- C:\Windows\System32\drivers\snapman.sys
[2014/11/25 11:19:14 | 000,086,304 | ---- | M] (Acronis International GmbH) -- C:\Windows\System32\drivers\fltsrv.sys
[2014/11/25 11:19:06 | 000,001,163 | ---- | M] () -- C:\Users\Public\Desktop\Acronis True Image 2014.lnk
[2014/11/25 03:31:44 | 000,428,016 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2014/11/24 09:41:11 | 000,114,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\4D946C0E.sys
[2014/11/22 18:24:31 | 000,114,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\41A64C10.sys
[2014/11/21 06:14:20 | 000,051,928 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys
[2014/11/21 06:14:10 | 000,075,480 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
[2014/11/21 06:14:06 | 000,023,256 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2014/11/18 16:14:59 | 000,001,047 | ---- | M] () -- C:\Users\laurent\Desktop\Cheat Engine.lnk
[2014/11/16 04:01:11 | 000,002,503 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2014/11/15 18:34:23 | 000,002,787 | ---- | M] () -- C:\Users\Public\Desktop\Dragon NaturallySpeaking 12.0.lnk
[2014/11/15 15:35:40 | 000,001,124 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk
[2014/11/15 15:31:19 | 000,272,808 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2014/11/15 15:31:19 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2014/11/15 15:31:19 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2014/11/15 15:31:19 | 000,096,680 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2014/11/15 15:15:46 | 000,000,981 | ---- | M] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\DVDFab 9.lnk
[2014/11/15 15:15:46 | 000,000,957 | ---- | M] () -- C:\Users\Public\Desktop\DVDFab 9.lnk
[2014/11/15 15:02:08 | 000,001,017 | ---- | M] () -- C:\Users\Public\Desktop\Pochette Express 2.lnk
[2014/11/15 15:00:12 | 000,000,957 | ---- | M] () -- C:\Users\laurent\Desktop\DVD Shrink 3.2.lnk
[2014/11/15 14:59:31 | 000,001,815 | ---- | M] () -- C:\Users\Public\Desktop\ImgBurn.lnk
[2014/11/15 14:27:21 | 000,001,160 | ---- | M] () -- C:\Users\laurent\Desktop\Format Factory.lnk
[2014/11/15 14:22:52 | 000,001,647 | ---- | M] () -- C:\Users\laurent\Desktop\TemplateLabeler.lnk
[2014/11/15 14:09:58 | 000,002,007 | ---- | M] () -- C:\Users\Public\Desktop\LightScribe.lnk
[2014/11/15 13:44:01 | 000,001,989 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2014/11/15 13:22:25 | 000,001,034 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
[2014/11/14 22:51:10 | 000,145,040 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\kneps.sys
[2014/11/14 22:51:10 | 000,044,000 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\kltdi.sys
[2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klmouflt.sys
[2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klkbdflt.sys
[2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klim6.sys
[2014/11/14 22:51:09 | 000,597,600 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klif.sys
[2014/11/14 22:51:09 | 000,135,776 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\kl1.sys
[2014/11/14 22:51:09 | 000,074,848 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klflt.sys
[2014/11/14 22:39:32 | 002,724,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2014/11/14 22:39:32 | 002,051,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2014/11/14 22:39:32 | 001,155,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2014/11/14 22:39:32 | 000,708,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2014/11/14 22:39:32 | 000,688,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2014/11/14 22:39:32 | 000,683,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2014/11/14 22:39:32 | 000,645,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsIntl.dll
[2014/11/14 22:39:32 | 000,616,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2014/11/14 22:39:32 | 000,418,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2014/11/14 22:39:32 | 000,341,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2014/11/14 22:39:32 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2014/11/14 22:39:32 | 000,285,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2014/11/14 22:39:32 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2014/11/14 22:39:32 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll
[2014/11/14 22:39:32 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2014/11/14 22:39:32 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2014/11/14 22:39:32 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2014/11/14 22:39:32 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2014/11/14 22:39:32 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2014/11/14 22:39:32 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe
[2014/11/14 22:39:32 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2014/11/14 22:39:32 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2014/11/14 22:39:32 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2014/11/14 22:39:32 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll
[2014/11/14 22:39:32 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2014/11/14 22:39:32 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll
[2014/11/14 22:39:32 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2014/11/14 22:39:32 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2014/11/14 22:39:32 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2014/11/14 22:39:32 | 000,016,284 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2014/11/14 22:39:32 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll
[2014/11/14 22:39:31 | 004,298,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2014/11/14 22:39:31 | 000,620,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll
[2014/11/14 22:39:31 | 000,478,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2014/11/14 22:39:31 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2014/11/14 22:39:31 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2014/11/14 22:39:31 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2014/11/14 22:39:31 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2014/11/14 22:39:31 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll
[2014/11/14 22:39:31 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2014/11/14 22:39:31 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2014/11/14 22:39:31 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2014/11/14 22:39:31 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2014/11/14 22:38:54 | 000,619,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tdh.dll
[2014/11/14 22:38:54 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2014/11/14 22:38:20 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
[2014/11/14 22:36:16 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2014/11/14 22:36:16 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2014/11/14 22:36:16 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2014/11/14 22:36:16 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2014/11/14 22:36:16 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2014/11/14 22:36:16 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2014/11/14 22:36:16 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2014/11/14 22:36:16 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2014/11/14 22:36:16 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2014/11/14 22:36:16 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2014/11/14 22:36:16 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2014/11/14 22:36:16 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2014/11/14 22:36:16 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2014/11/14 22:36:16 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2014/11/14 22:36:16 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2014/11/14 22:36:16 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2014/11/14 22:36:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2014/11/14 22:36:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2014/11/14 22:36:16 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2014/11/14 22:35:00 | 001,505,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2014/11/14 21:52:20 | 000,002,236 | ---- | M] () -- C:\Users\Public\Desktop\HP Officejet 2620 series.lnk
[2014/11/14 21:48:43 | 000,000,057 | ---- | M] () -- C:\ProgramData\Ament.ini
[2014/11/14 21:43:48 | 000,000,969 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2014/11/14 21:20:52 | 000,000,983 | ---- | M] () -- C:\Users\laurent\Desktop\Internet Download Manager.lnk
[2014/11/14 21:13:35 | 000,001,081 | ---- | M] () -- C:\Users\Public\Desktop\Kaspersky Anti-Virus 2013.lnk
[2014/11/14 20:29:31 | 000,214,678 | ---- | M] () -- C:\Windows\System32\license.rtf
[2014/11/14 20:27:29 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2014/11/06 03:51:33 | 000,667,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2014/11/05 18:50:47 | 000,254,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\generaltel.dll
[2014/11/05 18:50:28 | 000,203,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aepdu.dll
[2014/11/05 18:47:40 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aeinv.dll
[2014/11/04 14:30:58 | 000,229,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2014/12/03 20:49:50 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2014/12/03 16:40:47 | 000,013,545 | ---- | C] () -- C:\Users\laurent\Desktop\Capture 2.PNG
[2014/12/03 16:36:04 | 000,033,612 | ---- | C] () -- C:\Users\laurent\Desktop\Capture.PNG
[2014/12/03 16:22:12 | 000,001,448 | ---- | C] () -- C:\Users\laurent\Desktop\UsbFix.lnk
[2014/12/03 12:18:56 | 000,000,999 | ---- | C] () -- C:\Users\Public\Desktop\ZHP.lnk
[2014/12/03 12:17:40 | 000,000,000 | ---- | C] () -- C:\PhysicalDisk0_MBR.bin
[2014/12/03 12:15:16 | 000,001,937 | ---- | C] () -- C:\Users\laurent\Desktop\ZHPFix.lnk
[2014/12/03 12:15:16 | 000,001,810 | ---- | C] () -- C:\Users\laurent\Desktop\ZHPDiag.lnk
[2014/12/02 23:58:01 | 000,034,808 | ---- | C] () -- C:\Windows\System32\drivers\TrueSight.sys
[2014/11/30 17:33:03 | 000,010,084 | ---- | C] () -- C:\Windows\System32\drivers\nvphy.bin
[2014/11/30 16:28:35 | 000,002,248 | ---- | C] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Ashampoo Burning Studio 6.lnk
[2014/11/30 16:28:35 | 000,002,224 | ---- | C] () -- C:\Users\Public\Desktop\Ashampoo Burning Studio 6.lnk
[2014/11/26 14:39:46 | 000,134,442 | ---- | C] () -- C:\Users\laurent\Desktop\Mobile_Bouyguestelecom_Facture_Octobre2014.pdf
[2014/11/25 11:19:06 | 000,001,163 | ---- | C] () -- C:\Users\Public\Desktop\Acronis True Image 2014.lnk
[2014/11/18 16:14:59 | 000,001,047 | ---- | C] () -- C:\Users\laurent\Desktop\Cheat Engine.lnk
[2014/11/16 13:52:14 | 000,001,064 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/11/16 12:54:28 | 000,013,030 | ---- | C] () -- C:\PDOXUSRS.NET
[2014/11/16 12:53:14 | 000,183,808 | ---- | C] () -- C:\Windows\System32\BDEADMIN.CPL
[2014/11/15 18:39:56 | 000,001,795 | ---- | C] () -- C:\Users\laurent\AppData\Roaming\SAS7_000.DAT
[2014/11/15 18:34:23 | 000,002,787 | ---- | C] () -- C:\Users\Public\Desktop\Dragon NaturallySpeaking 12.0.lnk
[2014/11/15 17:00:42 | 000,002,503 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2014/11/15 16:54:08 | 000,218,712 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2014/11/15 15:35:40 | 000,001,136 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
[2014/11/15 15:35:40 | 000,001,124 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk
[2014/11/15 15:30:10 | 000,001,002 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/11/15 15:15:46 | 000,000,981 | ---- | C] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\DVDFab 9.lnk
[2014/11/15 15:15:46 | 000,000,957 | ---- | C] () -- C:\Users\Public\Desktop\DVDFab 9.lnk
[2014/11/15 15:02:08 | 000,001,017 | ---- | C] () -- C:\Users\Public\Desktop\Pochette Express 2.lnk
[2014/11/15 15:00:12 | 000,000,957 | ---- | C] () -- C:\Users\laurent\Desktop\DVD Shrink 3.2.lnk
[2014/11/15 14:59:31 | 000,001,827 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
[2014/11/15 14:59:31 | 000,001,815 | ---- | C] () -- C:\Users\Public\Desktop\ImgBurn.lnk
[2014/11/15 14:27:21 | 000,001,160 | ---- | C] () -- C:\Users\laurent\Desktop\Format Factory.lnk
[2014/11/15 14:22:52 | 000,001,647 | ---- | C] () -- C:\Users\laurent\Desktop\TemplateLabeler.lnk
[2014/11/15 14:09:58 | 000,002,007 | ---- | C] () -- C:\Users\Public\Desktop\LightScribe.lnk
[2014/11/15 13:44:01 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
[2014/11/15 13:44:01 | 000,001,989 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2014/11/15 13:22:25 | 000,001,034 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
[2014/11/15 00:54:18 | 000,001,023 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2014/11/15 00:54:18 | 000,001,011 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2014/11/14 23:10:10 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2014/11/14 22:39:32 | 000,016,284 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2014/11/14 22:06:16 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2014/11/14 21:56:23 | 000,001,998 | ---- | C] () -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Officejet 2620 series.lnk
[2014/11/14 21:52:20 | 000,002,236 | ---- | C] () -- C:\Users\Public\Desktop\HP Officejet 2620 series.lnk
[2014/11/14 21:49:39 | 003,826,628 | ---- | C] () -- C:\Windows\System32\nvcoproc.bin
[2014/11/14 21:48:43 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2014/11/14 21:43:48 | 000,000,969 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2014/11/14 21:39:54 | 001,099,203 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT
[2014/11/14 21:26:08 | 000,001,270 | ---- | C] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/11/14 21:26:08 | 000,001,246 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/11/14 21:25:23 | 000,001,058 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/11/14 21:25:22 | 000,001,054 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/11/14 21:20:52 | 000,000,983 | ---- | C] () -- C:\Users\laurent\Desktop\Internet Download Manager.lnk
[2014/11/14 21:15:07 | 000,001,158 | ---- | C] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2014/11/14 21:13:45 | 000,001,081 | ---- | C] () -- C:\Users\Public\Desktop\Kaspersky Anti-Virus 2013.lnk
[2014/11/14 21:05:16 | 000,340,998 | ---- | C] () -- C:\Users\laurent\Documents\microbiologie 1.jpeg
[2014/11/14 21:05:16 | 000,331,207 | ---- | C] () -- C:\Users\laurent\Documents\mutuelle + CV.jpeg
[2014/11/14 21:05:16 | 000,312,224 | ---- | C] () -- C:\Users\laurent\Documents\note d'honoraires.jpeg
[2014/11/14 21:05:16 | 000,228,838 | ---- | C] () -- C:\Users\laurent\Documents\microbiologie 2.jpeg.jpeg
[2014/11/14 20:33:17 | 000,001,164 | ---- | C] () -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2014/11/14 20:32:13 | 000,000,290 | ---- | C] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2014/11/14 20:32:13 | 000,000,272 | ---- | C] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2014/11/14 20:29:17 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2014/11/14 20:29:10 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2014/11/14 20:27:29 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2014/11/14 20:26:00 | 2415,304,704 | -HS- | C] () -- C:\hiberfil.sys

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2009/07/14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014/06/25 02:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 22:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[color=#E56717]========== LOP Check ==========[/color]

[2014/11/25 14:29:20 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\629
[2014/11/25 11:22:48 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Acronis
[2014/11/30 16:28:57 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Ashampoo
[2014/12/03 18:39:13 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\DMCache
[2014/11/15 15:15:56 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\DVDFab9
[2014/11/22 15:03:04 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\FDRLab
[2014/11/15 14:08:28 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\IDM
[2014/12/01 14:20:13 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\ImgBurn
[2014/11/27 12:12:08 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\IsolatedStorage
[2014/11/15 18:35:40 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Nuance
[2014/11/15 13:39:39 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\OpenOffice
[2014/11/26 22:56:14 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\TeamViewer
[2014/12/03 12:18:13 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\ZHP

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color]

[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color]

[color=#A23BEC]< %APPDATA%\*. >[/color]
[2014/11/25 14:29:20 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\629
[2014/11/25 11:22:48 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Acronis
[2014/11/15 13:52:28 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Adobe
[2014/11/30 16:28:57 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Ashampoo
[2014/12/03 18:39:13 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\DMCache
[2014/11/15 15:15:56 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\DVDFab9
[2014/11/22 15:03:04 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\FDRLab
[2014/11/15 18:35:41 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\FLEXnet
[2014/11/21 22:22:10 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\HpUpdate
[2014/11/14 20:32:21 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Identities
[2014/11/15 14:08:28 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\IDM
[2014/12/01 14:20:13 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\ImgBurn
[2014/11/27 12:12:08 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\IsolatedStorage
[2014/11/15 15:37:31 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Macromedia
[2014/11/16 13:53:05 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Malwarebytes
[2011/04/12 02:44:38 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Media Center Programs
[2014/11/27 12:19:56 | 000,000,000 | --SD | M] -- C:\Users\laurent\AppData\Roaming\Microsoft
[2014/11/15 00:54:28 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Mozilla
[2014/11/15 18:35:40 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Nuance
[2014/12/02 14:40:31 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\NVIDIA
[2014/11/15 13:39:39 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\OpenOffice
[2014/12/02 21:31:59 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Skype
[2014/11/26 22:56:14 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\TeamViewer
[2014/12/03 12:18:13 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\ZHP

[color=#A23BEC]< %APPDATA%\*.exe /s >[/color]
[2014/11/14 21:22:47 | 006,339,648 | ---- | M] (Tonec Inc.) -- C:\Users\laurent\AppData\Roaming\IDM\idmupdt.exe
[2014/11/15 14:05:38 | 000,281,894 | R--- | M] () -- C:\Users\laurent\AppData\Roaming\Microsoft\Installer\{6BD97765-3ABB-4025-8F71-FAF86E57DD35}\ARPPRODUCTICON.exe

[color=#A23BEC]< %temp%\*.exe /s >[/color]

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\consrv.dll >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2009/07/14 02:15:36 | 000,226,816 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\LocationApi.dll

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]
[2014/11/14 22:51:09 | 000,135,776 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\kl1.sys
[2014/11/14 22:51:09 | 000,074,848 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klflt.sys
[2014/11/14 22:51:09 | 000,597,600 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klif.sys
[2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klim6.sys
[2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klkbdflt.sys
[2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klmouflt.sys
[2014/11/14 22:51:10 | 000,044,000 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\kltdi.sys
[2014/11/14 22:51:10 | 000,145,040 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\kneps.sys

[color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2011/02/26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2010/11/20 22:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe

[color=#A23BEC]< MD5 for: SERVICES.EXE >[/color]
[2009/07/14 02:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 -- C:\Windows\System32\services.exe
[2009/07/14 02:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 -- C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.exe

[color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2014/11/21 06:12:42 | 000,761,656 | ---- | M] (MalwareBytes) MD5=625BB08813743947985B0DEEFC35ED12 -- C:\Program Files\Malwarebytes Anti-Malware\Chameleon\Windows\svchost.exe

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2010/11/20 22:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010/11/20 22:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2009/07/14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\System32\wininit.exe
[2009/07/14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2014/07/16 03:56:14 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=4F37B93C14AEE313BEC52A23AFB15C2E -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_7224b2134c7555fa\winlogon.exe
[2014/07/17 02:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\System32\winlogon.exe
[2014/07/17 02:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_71a5e34e334f9d18\winlogon.exe
[2014/11/21 06:12:42 | 000,761,656 | ---- | M] (MalwareBytes) MD5=625BB08813743947985B0DEEFC35ED12 -- C:\Program Files\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe
[2010/11/20 22:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2014/03/04 10:17:02 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=998507B046BA314CE8245364C686FA67 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_71da23b23327143c\winlogon.exe
[2014/03/04 11:39:02 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=D53972F87D850CD2EB4B29B60CAFDD77 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_7255f1994c4f8119\winlogon.exe

[color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s >[/color]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s >[/color]

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s >[/color]
"Debug" =
"" = mnmsrvc
"Kmode" = \SystemRoot\System32\win32k.sys
"Optional" = Posix [binary data]
"Posix" = %SystemRoot%\system32\psxss.exe
"Required" = DebugWindows [binary data]
"Windows" = %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\CSRSS]
"CsrSrvSharedSectionBase" = 2137980928

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s >[/color]
"ProfilesDirectory" = %SystemDrive%\Users -- [2014/11/14 20:32:10 | 000,000,000 | R--D | M]
"Default" = %SystemDrive%\Users\Default -- [2014/11/14 20:31:59 | 000,000,000 | RH-D | M]
"Public" = %SystemDrive%\Users\Public -- [2014/11/15 14:08:37 | 000,000,000 | R--D | M]
"ProgramData" = %SystemDrive%\ProgramData -- [2014/12/02 23:57:58 | 000,000,000 | -H-D | M]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18]
"Flags" = 12
"State" = 0
"RefCount" = 1
"Sid" = 01 01 00 00 00 00 00 05 12 00 00 00 [binary data]
"ProfileImagePath" = %systemroot%\system32\config\systemprofile -- [2014/11/17 00:21:47 | 000,000,000 | ---D | M]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19]
"ProfileImagePath" = C:\Windows\ServiceProfiles\LocalService -- [2014/12/01 10:45:26 | 000,000,000 | ---D | M]
"Flags" = 0
"State" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20]
"ProfileImagePath" = C:\Windows\ServiceProfiles\NetworkService -- [2014/12/01 10:45:26 | 000,000,000 | ---D | M]
"Flags" = 0
"State" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-3442904766-2047362556-3054083087-1001]
"ProfileImagePath" = C:\Users\laurent -- [2014/11/14 20:33:16 | 000,000,000 | ---D | M]
"Flags" = 0
"State" = 0
"Sid" = 01 05 00 00 00 00 00 05 15 00 00 00 BE 8E 36 CD FC 45 08 7A 0F 9C 09 B6 E9 03 00 00 [binary data]
"ProfileLoadTimeLow" = 0
"ProfileLoadTimeHigh" = 0
"RefCount" = 4
"RunLogonScriptSync" = 0

[color=#A23BEC]< hklm\software\clients\startmenuinternet|command /rs >[/color]
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /HideShortcuts [2014/11/14 05:22:22 | 000,906,088 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /ShowShortcuts [2014/11/14 05:22:22 | 000,906,088 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal [2014/11/14 05:22:22 | 000,906,088 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: C:\Program Files\Mozilla Firefox\firefox.exe [2014/11/14 03:42:14 | 000,275,568 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -preferences [2014/11/14 03:42:14 | 000,275,568 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode [2014/11/14 03:42:14 | 000,275,568 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --make-default-browser [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --hide-icons [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --show-icons [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Program Files\Google\Chrome\Application\chrome.exe" [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\System32\ie4uinit.exe" -show [2014/11/14 22:39:32 | 000,683,008 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\System32\ie4uinit.exe" -reinstall [2014/11/14 22:39:32 | 000,683,008 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\System32\ie4uinit.exe" -hide [2014/11/14 22:39:32 | 000,683,008 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2014/11/14 22:39:32 | 000,815,280 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2014/11/14 22:39:32 | 000,815,280 | ---- | M] (Microsoft Corporation)

[color=#A23BEC]< hklm\software\clients\startmenuinternet|command /64 /rs >[/color]
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /HideShortcuts [2014/11/14 05:22:22 | 000,906,088 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /ShowShortcuts [2014/11/14 05:22:22 | 000,906,088 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal [2014/11/14 05:22:22 | 000,906,088 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: C:\Program Files\Mozilla Firefox\firefox.exe [2014/11/14 03:42:14 | 000,275,568 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -preferences [2014/11/14 03:42:14 | 000,275,568 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode [2014/11/14 03:42:14 | 000,275,568 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --make-default-browser [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --hide-icons [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --show-icons [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Program Files\Google\Chrome\Application\chrome.exe" [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\System32\ie4uinit.exe" -show [2014/11/14 22:39:32 | 000,683,008 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\System32\ie4uinit.exe" -reinstall [2014/11/14 22:39:32 | 000,683,008 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\System32\ie4uinit.exe" -hide [2014/11/14 22:39:32 | 000,683,008 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2014/11/14 22:39:32 | 000,815,280 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2014/11/14 22:39:32 | 000,815,280 | ---- | M] (Microsoft Corporation)

[color=#A23BEC]< nslookup google.fr /c >[/color]
Serveur : UnKnown
Address: 192.168.0.254
Nom : GOOGLE.FR
Addresses: 2a00:1450:400c:c02::5e
74.125.133.94

[color=#E56717]========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========[/color]
[C:\Windows\AppPatch\nbin] -> -> Unknown point type

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 164 bytes -> C:\Users\laurent\Documents\note d'honoraires.jpeg:3or4kl4x13tuuug3Byamue2s4b
@Alternate Data Stream - 164 bytes -> C:\Users\laurent\Documents\mutuelle + CV.jpeg:3or4kl4x13tuuug3Byamue2s4b
@Alternate Data Stream - 164 bytes -> C:\Users\laurent\Documents\microbiologie 2.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b
@Alternate Data Stream - 164 bytes -> C:\Users\laurent\Documents\microbiologie 1.jpeg:3or4kl4x13tuuug3Byamue2s4b
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:7FFED16F

< End of report >

Publicité


Signaler le contenu de ce document

Publicité