~ Rapport de ZHPDiag v2015.4.20.40 - Nicolas Coolman (20/04/2015)
~ Lancé par yacine (23/04/2015 22:49:29)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Version à jour.
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Not Found


---\\ Navigateurs Internet
MSIE: Internet Explorer v6.0.2900.2180
MFIE: Mozilla Firefox 37.0.2
GCIE: Google Chrome v42.0.2311.90 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Windows Automatic Updates : OK
Windows Genuine Advantage : KO
Microsoft Windows XP, 32-bit Service Pack 2 (Build 2600)

---\\ Logiciels de protection du système
Avast Free Antivirus v10.2.2218
Malwarebytes Anti-Malware version 2.1.4.1018

---\\ Logiciels d'optimisation du système

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Reader XI

---\\ Informations sur le système
~ Processor: x86 Family 15 Model 4 Stepping 1, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 478 MB (12% free)
System Restore: Activé (Enable)
System drive C: has 13 GB (66%) free of 20 GB

---\\ Mode de connexion au système
~ Computer Name: YACINE-3CB82ECD
~ User Name: yacine
~ All Users Names: yacine, SUPPORT_388945a0, HelpAssistant, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Documents and Settings\yacine\Application Data\ZHP\
~ %AppData% : C:\Documents and Settings\yacine\Application Data\
~ %Desktop% : C:\Documents and Settings\yacine\Bureau\
~ %Favorites% : C:\Documents and Settings\yacine\Favoris\
~ %LocalAppData% : C:\Documents and Settings\yacine\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\yacine\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ Enumération des unités disques
A: Floppy drive, Flash card reader, USB Key (Not Inserted)
C: Hard drive, Flash drive, Thumb drive (Free 13 Go of 20 Go)
D: Hard drive, Flash drive, Thumb drive (Free 5 Go of 12 Go)
E: CD-ROM drive (Not Inserted)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
~ Security Center: 37 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.4C33E5B9A6197B6ED215F6CFBA0A2DAA] - (.Microsoft Corporation - Explorateur Windows.) (.04/08/2004 - 05:54:50.) -- C:\WINDOWS\Explorer.exe [1036288]
[MD5.58FE94EF42E074F4CAD8BF02E70E6478] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.04/08/2004 - 05:54:46.) -- C:\WINDOWS\system32\wininet.dll [660480]
[MD5.D2DE785AEAB0BB8CA4C14A8A199DBE4E] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.04/08/2004 - 05:55:02.) -- C:\WINDOWS\system32\Winlogon.exe [506368]
[MD5.5AC495F4CB807B2B98AD2AD591E6D92E] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.04/08/2004 - 04:14:16.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.CDFE4411A69C224BD1D11B2DA92DAC51] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.04/08/2004 - 03:59:44.) -- C:\WINDOWS\system32\Drivers\atapi.sys [95360]
[MD5.CD7D5152DF32B47F4E36F710B35AAE02] - (.Microsoft Corporation - CD-ROM File System Driver.) (.04/08/2004 - 04:14:12.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.AF9C19B3100FE010496B1A27181FBF72] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.04/08/2004 - 03:59:54.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [49536]
[MD5.8B121FF880683607AB2AEF0340721718] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.07/09/2002 - 01:00:00.) -- C:\WINDOWS\system32\Drivers\Fips.sys [35072]
[MD5.D1EFCBD693B5BA21314D06368C471070] - (.Microsoft Corporation - Pilote de port i8042.) (.04/08/2004 - 05:41:24.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54400]
[MD5.F8AA320C6A0409C0380E5D8A99D76EC6] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.04/08/2004 - 04:00:16.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [41856]
[MD5.B5A8E215AC29D24D60B4D1250EF05ACE] - (.Microsoft Corporation - IP Network Address Translator.) (.04/08/2004 - 04:04:52.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [134912]
[MD5.64537AA5C003A6AFEEE1DF819062D0D1] - (.Microsoft Corporation - IPSec Driver.) (.04/08/2004 - 04:14:30.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [74752]
[MD5.1FD607FC67F7F7C633C3DA65BFC53D18] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.04/08/2004 - 04:15:18.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [451456]
[MD5.0C80E410CD2F47134407EE7DD19CC86B] - (.Microsoft Corporation - MBT Transport driver.) (.04/08/2004 - 04:14:38.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.B78BE402C3F63DD55521F73876951CDD] - (.Microsoft Corporation - NT File System Driver.) (.04/08/2004 - 04:15:10.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574592]
[MD5.318696359AC7DF48D1E51974EC527DD2] - (.Microsoft Corporation - Pilote de port parallèle.) (.04/08/2004 - 06:05:42.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.98FAEB4A4DCF812BA1C6FCA4AA3E115C] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.04/08/2004 - 04:14:24.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.A2CAE2C60BC37E0751EF9DDA7CEAF4AD] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.03/08/2004 - 22:01:16.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196864]
[MD5.2CC30B68DD62B73D444A41322CD7FC4C] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.04/08/2004 - 01:39:44.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58496]
[MD5.313B1A0D5DB26DFE1C34A6C13B2CE0A7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.04/08/2004 - 05:44:16.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/2
~ Mes musiques (My Musics) : 1/2
~ Mes Favoris (My Favorites) : 1/7
~ Mes Documents (My Documents) : 1/6
~ Mon Bureau (My Desktop) : 0/12
~ Menu demarrer (Programs) : 1/30
~ Hidden Files: Scanned in 00mn 00s



---\\ Processus lancés
[MD5.54236E79A44F909612391C8A2D70D512] - (.Avast Software s.r.o. - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336] [PID.1568]
[MD5.31EA4BC4328BDBC50CD5CA4870F09E06] - (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496] [PID.1908]
[MD5.8552529CFAF7619DEC023CB79520CF03] - (.www.IslamicFinder.org - Automatic Athan (Azan) five times a day f.) -- C:\Program Files\Athan\Athan.exe [1196032] [PID.1924]
[MD5.FBEF9F9C97B6B93E2041E65D3CD81C9C] - (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\SOUNDMAN.exe [77824] [PID.1936]
[MD5.E5E4CB85D6F96C795F720FE78A80F4DF] - (.VIA Technologies - VIA RAID Tool.) -- C:\Program Files\VIA\RAID\raid_tool.exe [1056768] [PID.1944]
[MD5.7806618C63213EC298FEC6423C91B788] - (.Tonec Inc. - Internet Download Manager (IDM).) -- D:\Downloads\Documents\Internet Download Manager\IDMan.exe [3220912] [PID.1960]
[MD5.7896E733AF5A8DCE4B1C94C658AA3DF4] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- D:\Downloads\Documents\Internet Download Manager\IEMonitor.exe [263600] [PID.3424]
[MD5.345B45BE09381D2011EB7F9AC11D8AC4] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [376944] [PID.3744]
[MD5.2C009C50C0EE073EC0F993698CDB6C92] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8198656] [PID.2312]
~ Processes Running: Scanned in 00mn 02s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Documents and Settings\yacine\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

---\\ Liste des dossiers d'extension Google Chrome
G2 - EXT: C:\Documents and Settings\yacine\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [__MSG_appName__]
G2 - EXT: C:\Documents and Settings\yacine\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [__MSG_appName__]
G2 - EXT: C:\Documents and Settings\yacine\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [__MSG_appName__]
G2 - EXT: C:\Documents and Settings\yacine\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [__MSG_appName__]
G2 - EXT: C:\Documents and Settings\yacine\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [__MSG_appName__]
G2 - EXT: C:\Documents and Settings\yacine\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [__MSG_appName__]
G2 - EXT: C:\Documents and Settings\yacine\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [Bookmark Manager]
G2 - EXT: C:\Documents and Settings\yacine\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [Avast Online Security]
G2 - EXT: C:\Documents and Settings\yacine\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [__MSG_APP_NAME__]
G2 - EXT: C:\Documents and Settings\yacine\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [__MSG_appName__]
~ Google Lines Browser: 20 Scanned in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
M0 - MFSP: prefs.js [yacine - cu7erp43.default] www.google.fr
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.2.1] - (.VideoLAN - VLC media player Web Plugin.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.10.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
~ Firefox Browser: 5 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.10.) (No version) -- (.not file.)
~ IE Browser: 7 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (20)
~ Hosts File: Scanned in 00mn 00s



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Tonec Inc. - IDM BHO Module.) -- D:\Downloads\Documents\Internet Download Manager\IDMIECC.dll
~ BHO: 2 Scanned in 00mn 00s



---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [AvastUI.exe] . (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [Athan] . (.www.IslamicFinder.org - Automatic Athan (Azan) five times a day f.) -- C:\Program Files\Athan\Athan.exe
O4 - HKLM\..\Run: [SoundMan] . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\SOUNDMAN.exe
O4 - HKLM\..\Run: [RaidTool] . (.VIA Technologies - VIA RAID Tool.) -- C:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- D:\Downloads\Documents\Internet Download Manager\IDMan.exe
O4 - HKCU\..\RunOnce: [Adobe Speed Launcher] 1429820097
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-1229272821-492894223-682003330-1003\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1229272821-492894223-682003330-1003\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- D:\Downloads\Documents\Internet Download Manager\IDMan.exe
O4 - HKUS\S-1-5-21-1229272821-492894223-682003330-1003\..\RunOnce: [Adobe Speed Launcher] 1429820097
~ Application: Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
~ Winsock: 3 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{3259A7C0-2C9C-4B88-A72E-DD51886BC750}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{3259A7C0-2C9C-4B88-A72E-DD51886BC750}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{3259A7C0-2C9C-4B88-A72E-DD51886BC750}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
~ SSODL: 4 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Avast Antivirus (avast! Antivirus) . (.Avast Software s.r.o. - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
~ Services: 3 Scanned in 00mn 04s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
O24 - Desktop General: BackupWallPaper - .(...) - C:\WINDOWS\web\wallpaper\Colline verdoyante.bmp
O24 - Desktop General: WallPaper - .(...) - C:\WINDOWS\web\wallpaper\Colline verdoyante.bmp
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
[MD5.C50B830CA9BCD63754928CD6C0E2B114] [APT] [avast! Emergency Update] (.Avast Software s.r.o..) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1298688]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
O39 - APT: avast! Emergency Update - (.Avast Software s.r.o..) -- C:\WINDOWS\Tasks\avast! Emergency Update.job [364]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1052]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1056]
~ Scheduled Task: 9 Scanned in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe =>.Microsoft Corporation
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe =>.Microsoft Corporation
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} . (.Microsoft Corporation - DirectX Media -- DirectAnimation.) -- C:\WINDOWS\system32\danim.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Améliorations pour la navigation - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf =>.Microsoft Corporation
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer 6 - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'installation individualisée de Internet Explorer.) -- C:\WINDOWS\system32\ie4uinit.exe
O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\42.0.2311.90\Installer\chrmstp.exe
O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Macromedia, Inc. - Macromedia Flash Player 6.0 r79.) -- C:\WINDOWS\system32\macromed\flash\flash.ocx
O40 - ASIC: Installed Component - S-1-5-21-1229272821-492894223-682003330-1003 - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS -- Not Hexadécimal CLSID
~ Active Setup: 18 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (aswRdr) . (.Avast Software s.r.o. - avast! TDI Redirect Driver.) - C:\WINDOWS\system32\drivers\aswRdr.sys
O41 - Driver: (aswSnx) . (.Avast Software s.r.o. - avast! Virtualization Driver.) - C:\WINDOWS\system32\drivers\aswSnx.sys
O41 - Driver: (aswSP) . (.Avast Software s.r.o. - avast! self protection module.) - C:\WINDOWS\system32\drivers\aswSP.sys
O41 - Driver: (aswTdi) . (.Avast Software s.r.o. - avast! TDI Filter Driver.) - C:\WINDOWS\system32\drivers\aswTdi.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (WS2IFSL) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\WINDOWS\system32\drivers\ws2ifsl.sys
~ Drivers: 72 Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 9.20 - (...) [HKLM] -- 7-Zip
O42 - Logiciel: Adobe Reader XI (11.0.10) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Athan Basic 4.5 - (...) [HKLM] -- Athan
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM] -- Avast
O42 - Logiciel: Change Extension - (...) [HKLM] -- Change Extension
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.4.1018 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Microsoft Bootvis - (.Microsoft.) [HKLM] -- {0F9196C6-58B4-445B-B56E-B1200FECC151}
O42 - Logiciel: Mozilla Firefox 37.0.2 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 37.0.2 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: Pannestv 1.0 - (...) [HKLM] -- Pannestv_is1
O42 - Logiciel: PonyProg2000 v2.05a - (.LancOS.) [HKLM] -- PonyProg2000_is1
O42 - Logiciel: Realtek AC'97 Audio - (.Realtek Semiconductor Corp..) [HKLM] -- {FB08F381-6533-4108-B7DD-039E11FBC27E}
O42 - Logiciel: SumatraPDF 2.5.2 - (.Krzysztof Kowalczyk.) [HKLM] -- SumatraPDF
O42 - Logiciel: USB-set 1.5 - (.Infoadom 38.) [HKLM] -- {B92B952E-4459-480F-A500-60D87F6F527F}_is1
O42 - Logiciel: VIA Platform Device Manager - (.VIA Technologies, Inc..) [HKLM] -- InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: WinDjView 1.0.3 - (.Andrew Zhezherun.) [HKLM] -- WinDjView
O42 - Logiciel: WinRAR 5.21 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: doPDF 7.1 printer - (.Softland.) [HKLM] -- doPDF 7 printer_is1
~ Logic: 36 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\7-Zip]
[HKCU\Software\AVAST Software]
[HKCU\Software\Adobe]
[HKCU\Software\Andrew Zhezherun]
[HKCU\Software\COL2000]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Clubic]
[HKCU\Software\DownloadManager]
[HKCU\Software\Google]
[HKCU\Software\Intel]
[HKCU\Software\Liter]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Policies]
[HKCU\Software\ProductSetup] =>Adware.InstallCore
[HKCU\Software\Softland]
[HKCU\Software\Trolltech]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKLM\Software\AVAST Software]
[HKLM\Software\Adobe]
[HKLM\Software\Avance]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\InstallShield]
[HKLM\Software\Internet Download Manager]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Softland]
[HKLM\Software\VIA Raid Lib]
[HKLM\Software\VIA Technologies, Inc]
[HKLM\Software\VideoLAN]
[HKLM\Software\WinRAR]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\mozilla.org]
~ Key Software: 109 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 21/04/2015 - 05:00:58 - [] ----D C:\Program Files\7-Zip
O43 - CFD: 20/04/2015 - 02:50:46 - [] ----D C:\Program Files\Adobe
O43 - CFD: 21/04/2015 - 05:02:39 - [] ----D C:\Program Files\Athan
O43 - CFD: 20/04/2015 - 01:35:54 - [] ----D C:\Program Files\AVAST Software
O43 - CFD: 23/04/2015 - 20:56:10 - [] ----D C:\Program Files\AvRack
O43 - CFD: 22/04/2015 - 03:03:05 - [] ----D C:\Program Files\Change Extension
O43 - CFD: 20/04/2015 - 00:38:11 - [0] ----D C:\Program Files\ComPlus Applications
O43 - CFD: 22/04/2015 - 23:54:00 - [] ----D C:\Program Files\Fichiers communs
O43 - CFD: 20/04/2015 - 02:01:51 - [] ----D C:\Program Files\Google
O43 - CFD: 20/04/2015 - 01:17:37 - [] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 20/04/2015 - 00:40:25 - [] ----D C:\Program Files\Internet Explorer
O43 - CFD: 21/04/2015 - 05:15:04 - [] ----D C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 20/04/2015 - 00:37:47 - [] ----D C:\Program Files\Messenger
O43 - CFD: 23/04/2015 - 04:57:44 - [] ----D C:\Program Files\Microsoft Bootvis
O43 - CFD: 20/04/2015 - 00:42:41 - [] ----D C:\Program Files\microsoft frontpage
O43 - CFD: 22/04/2015 - 23:54:04 - [] ----D C:\Program Files\Microsoft Office
O43 - CFD: 22/04/2015 - 23:54:00 - [] ----D C:\Program Files\Microsoft Visual Studio
O43 - CFD: 22/04/2015 - 23:54:30 - [] ----D C:\Program Files\Microsoft Works
O43 - CFD: 20/04/2015 - 00:39:14 - [] ----D C:\Program Files\Movie Maker
O43 - CFD: 21/04/2015 - 03:56:33 - [] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 21/04/2015 - 04:18:16 - [] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 22/04/2015 - 23:54:17 - [] ----D C:\Program Files\MSBuild
O43 - CFD: 20/04/2015 - 00:37:13 - [] ----D C:\Program Files\MSN
O43 - CFD: 20/04/2015 - 00:37:43 - [] ----D C:\Program Files\MSN Gaming Zone
O43 - CFD: 20/04/2015 - 00:39:26 - [] ----D C:\Program Files\NetMeeting
O43 - CFD: 20/04/2015 - 00:37:52 - [] ----D C:\Program Files\Online Services
O43 - CFD: 20/04/2015 - 00:39:23 - [] ----D C:\Program Files\Outlook Express =>.Microsoft Corporation
O43 - CFD: 22/04/2015 - 04:10:27 - [] ----D C:\Program Files\Pannestv
O43 - CFD: 22/04/2015 - 00:36:43 - [] ----D C:\Program Files\PonyProg2000
O43 - CFD: 23/04/2015 - 20:56:08 - [] ----D C:\Program Files\Realtek AC97
O43 - CFD: 23/04/2015 - 20:56:10 - [0] ----D C:\Program Files\Realtek Sound Manager
O43 - CFD: 20/04/2015 - 00:40:06 - [] ----D C:\Program Files\Services en ligne
O43 - CFD: 21/04/2015 - 05:06:52 - [] ----D C:\Program Files\Softland
O43 - CFD: 21/04/2015 - 05:12:24 - [] ----D C:\Program Files\SumatraPDF
O43 - CFD: 20/04/2015 - 00:49:56 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 20/04/2015 - 02:26:33 - [] ----D C:\Program Files\USB-set
O43 - CFD: 23/04/2015 - 21:05:04 - [] ----D C:\Program Files\VIA
O43 - CFD: 21/04/2015 - 05:04:06 - [] ----D C:\Program Files\VideoLAN
O43 - CFD: 21/04/2015 - 05:08:41 - [] ----D C:\Program Files\WinDjView
O43 - CFD: 20/04/2015 - 00:42:10 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 20/04/2015 - 00:37:35 - [] ----D C:\Program Files\Windows NT
O43 - CFD: 20/04/2015 - 00:40:11 - [0] --H-D C:\Program Files\WindowsUpdate
O43 - CFD: 20/04/2015 - 02:46:38 - [] ----D C:\Program Files\WinRAR
O43 - CFD: 20/04/2015 - 00:42:41 - [] ----D C:\Program Files\xerox
O43 - CFD: 23/04/2015 - 22:48:08 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 20/04/2015 - 02:51:39 - [] ----D C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 22/04/2015 - 23:54:00 - [] ----D C:\Program Files\Fichiers communs\DESIGNER
O43 - CFD: 23/04/2015 - 21:03:10 - [] ----D C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 22/04/2015 - 23:54:29 - [] ----D C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 20/04/2015 - 00:39:22 - [] ----D C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 20/04/2015 - 02:26:47 - [] ----D C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 20/04/2015 - 00:39:25 - [] ----D C:\Program Files\Fichiers communs\Services
O43 - CFD: 20/04/2015 - 02:26:44 - [] ----D C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 22/04/2015 - 23:49:12 - [] ----D C:\Program Files\Fichiers communs\System
O43 - CFD: 20/04/2015 - 05:36:29 - [] ----D C:\Documents and Settings\All Users\Application Data\Adobe
O43 - CFD: 20/04/2015 - 01:30:13 - [] ----D C:\Documents and Settings\All Users\Application Data\AVAST Software
O43 - CFD: 20/04/2015 - 02:01:51 - [] ----D C:\Documents and Settings\All Users\Application Data\Google
O43 - CFD: 21/04/2015 - 05:14:59 - [] ----D C:\Documents and Settings\All Users\Application Data\Malwarebytes
O43 - CFD: 22/04/2015 - 23:53:05 - [] -S--D C:\Documents and Settings\All Users\Application Data\Microsoft
O43 - CFD: 22/04/2015 - 23:56:14 - [] ----D C:\Documents and Settings\All Users\Application Data\Microsoft Help
O43 - CFD: 20/04/2015 - 03:00:47 - [] ----D C:\Documents and Settings\All Users\Application Data\Mozilla
O43 - CFD: 20/04/2015 - 02:20:44 - [] ----D C:\Documents and Settings\All Users\Application Data\usb-set
O43 - CFD: 21/04/2015 - 05:00:58 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\7-Zip
O43 - CFD: 20/04/2015 - 00:38:24 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 21/04/2015 - 05:02:28 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Athan
O43 - CFD: 20/04/2015 - 02:03:17 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\AVAST Software
O43 - CFD: 21/04/2015 - 05:07:19 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\doPDF 7
O43 - CFD: 23/04/2015 - 04:57:44 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 20/04/2015 - 01:59:48 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Google Chrome
O43 - CFD: 20/04/2015 - 00:38:24 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux
O43 - CFD: 21/04/2015 - 05:15:04 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malwarebytes Anti-Malware
O43 - CFD: 22/04/2015 - 23:56:11 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Office
O43 - CFD: 20/04/2015 - 00:42:19 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 22/04/2015 - 00:35:03 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Pannestv
O43 - CFD: 22/04/2015 - 00:35:52 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\PonyProg
O43 - CFD: 23/04/2015 - 20:56:10 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Realtek Sound Manager
O43 - CFD: 20/04/2015 - 02:19:15 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\USB-set
O43 - CFD: 23/04/2015 - 21:05:05 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\VIA
O43 - CFD: 21/04/2015 - 05:05:26 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\VideoLAN
O43 - CFD: 21/04/2015 - 05:08:43 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinDjView
O43 - CFD: 20/04/2015 - 02:46:38 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinRAR
O43 - CFD: 23/04/2015 - 22:48:08 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP =>.Nicolas Coolman
O43 - CFD: 21/04/2015 - 00:23:30 - [] ----D C:\Documents and Settings\yacine\Application Data\Adobe
O43 - CFD: 20/04/2015 - 02:03:54 - [] ----D C:\Documents and Settings\yacine\Application Data\AVAST Software
O43 - CFD: 23/04/2015 - 22:14:57 - [] ----D C:\Documents and Settings\yacine\Application Data\DMCache
O43 - CFD: 21/04/2015 - 05:08:04 - [] ----D C:\Documents and Settings\yacine\Application Data\FastStone
O43 - CFD: 20/04/2015 - 00:49:58 - [] ----D C:\Documents and Settings\yacine\Application Data\Identities
O43 - CFD: 23/04/2015 - 00:13:38 - [] ----D C:\Documents and Settings\yacine\Application Data\IDM
O43 - CFD: 21/04/2015 - 00:23:30 - [] ----D C:\Documents and Settings\yacine\Application Data\Macromedia
O43 - CFD: 23/04/2015 - 04:46:00 - [] -S--D C:\Documents and Settings\yacine\Application Data\Microsoft
O43 - CFD: 20/04/2015 - 03:01:07 - [] ----D C:\Documents and Settings\yacine\Application Data\Mozilla
O43 - CFD: 21/04/2015 - 05:07:13 - [] ----D C:\Documents and Settings\yacine\Application Data\Softland
O43 - CFD: 21/04/2015 - 05:12:42 - [] ----D C:\Documents and Settings\yacine\Application Data\SumatraPDF
O43 - CFD: 23/04/2015 - 22:04:10 - [] ----D C:\Documents and Settings\yacine\Application Data\vlc
O43 - CFD: 20/04/2015 - 06:17:48 - [] ----D C:\Documents and Settings\yacine\Application Data\WinRAR
O43 - CFD: 23/04/2015 - 22:49:48 - [] ----D C:\Documents and Settings\yacine\Application Data\ZHP =>.Nicolas Coolman
O43 - CFD: 20/04/2015 - 05:35:40 - [] ----D C:\Documents and Settings\yacine\Local Settings\Application Data\Adobe
O43 - CFD: 20/04/2015 - 02:05:01 - [] ----D C:\Documents and Settings\yacine\Local Settings\Application Data\Google
O43 - CFD: 21/04/2015 - 02:50:47 - [] ----D C:\Documents and Settings\yacine\Local Settings\Application Data\Identities
O43 - CFD: 22/04/2015 - 23:31:12 - [] ----D C:\Documents and Settings\yacine\Local Settings\Application Data\Microsoft
O43 - CFD: 22/04/2015 - 23:48:43 - [0] ----D C:\Documents and Settings\yacine\Local Settings\Application Data\Microsoft Help
O43 - CFD: 20/04/2015 - 03:00:57 - [] ----D C:\Documents and Settings\yacine\Local Settings\Application Data\Mozilla
O43 - CFD: 20/04/2015 - 05:32:53 - [] ----D C:\Documents and Settings\yacine\Local Settings\Application Data\Temp
O43 - CFD: 21/04/2015 - 03:05:54 - [0] ----D C:\Documents and Settings\yacine\Local Settings\Application Data\WMTools Downloaded Files
O43 - CFD: 20/04/2015 - 00:50:00 - [] R---D C:\Documents and Settings\yacine\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 23/04/2015 - 21:03:21 - [] R---D C:\Documents and Settings\yacine\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 23/04/2015 - 04:45:57 - [] ----D C:\Documents and Settings\yacine\Menu Démarrer\Programmes\Microsoft Bootvis
O43 - CFD: 20/04/2015 - 02:46:38 - [] ----D C:\Documents and Settings\yacine\Menu Démarrer\Programmes\WinRAR
~ Program Folder: 108 Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.775E188DD15C9AC9E735A556FB95578E] - 19/04/2015 - 23:34:45 -SH-- . (...) -- C:\boot.ini [212]
O44 - LFC:[MD5.1C95147C037AD1F1BE339C30FA8DCA28] - 19/04/2015 - 23:35:22 ---A- . (...) -- C:\WINDOWS\cmsetacl.log [200]
O44 - LFC:[MD5.A540A99C281D933F3D69D55E48727F47] - 19/04/2015 - 23:36:54 ---A- . (.Microsoft Corporation - Terminal Server Driver.) -- C:\WINDOWS\system32\Drivers\termdd.sys [40840]
O44 - LFC:[MD5.A2CAE2C60BC37E0751EF9DDA7CEAF4AD] - 19/04/2015 - 23:36:55 ---A- . (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196864]
O44 - LFC:[MD5.3C3ADF8E6A672C2F5AFBE418EFC14AAD] - 19/04/2015 - 23:37:00 ---A- . (.Microsoft Corporation - Application d'assistance du composant de lo.) -- C:\WINDOWS\system32\mmfutil.dll [17920]
O44 - LFC:[MD5.B60B64052D0C7E205C293CC7F56C8D97] - 19/04/2015 - 23:37:00 ---A- . (.Microsoft Corporation - Composant logiciel enfichable WMI.) -- C:\WINDOWS\system32\cmprops.dll [191488]
O44 - LFC:[MD5.11F381B80B10332002D700DC5C68CE00] - 19/04/2015 - 23:37:00 ---A- . (.Microsoft Corporation - Windows Product Activation Configuration WM.) -- C:\WINDOWS\system32\licwmi.dll [58880]
O44 - LFC:[MD5.A1094BEE74C929EA5E09F71B917392E6] - 19/04/2015 - 23:37:01 ---A- . (.Microsoft Corporation - WMI Snapins.) -- C:\WINDOWS\system32\servdeps.dll [56320]
O44 - LFC:[MD5.25834827265285EDC3EB5280B5F46CAC] - 19/04/2015 - 23:37:06 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\clbcatq.dll [501248]
O44 - LFC:[MD5.37BB260BB85133632CBFCA8F1EF35FB8] - 19/04/2015 - 23:37:06 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comsvcs.dll [1251840]
O44 - LFC:[MD5.B3D414073BAFBADA281BE374FE1D446C] - 19/04/2015 - 23:37:06 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comuid.dll [540160]
O44 - LFC:[MD5.596E2BA3568DC02D71AF33CB199C9004] - 19/04/2015 - 23:37:07 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\catsrv.dll [229888]
O44 - LFC:[MD5.6AD260A0CCA6EDBF77D0DE06A3D7B391] - 19/04/2015 - 23:37:07 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\catsrvps.dll [85504]
O44 - LFC:[MD5.925A5E402AD87FD0D9E19F9633D40E92] - 19/04/2015 - 23:37:07 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\catsrvut.dll [628224]
O44 - LFC:[MD5.A836A65F7DCCD028209A49FD6205D65A] - 19/04/2015 - 23:37:07 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\clbcatex.dll [110080]
O44 - LFC:[MD5.46B15593E6109B09D4FD3477199F33CF] - 19/04/2015 - 23:37:07 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\colbact.dll [62464]
O44 - LFC:[MD5.06E648A75DD9142087D42484635CDF2F] - 19/04/2015 - 23:37:08 ---A- . (.Microsoft Corporation - Configuration Backend Interface.) -- C:\WINDOWS\system32\cfgbkend.dll [39424]
O44 - LFC:[MD5.1A9B97C3D7D0B4CD61386643DDF6C149] - 19/04/2015 - 23:37:08 ---A- . (.Microsoft Corporation - MS DTC OLE Transactions interface proxy DLL.) -- C:\WINDOWS\system32\msdtcprx.dll [425472]
O44 - LFC:[MD5.5DF0706494B2ACEA691D5F7CB4014FEB] - 19/04/2015 - 23:37:08 ---A- . (.Microsoft Corporation - MS DTC administrative component DLL.) -- C:\WINDOWS\system32\msdtcuiu.dll [161280]
O44 - LFC:[MD5.680639B08040CEC24B8BD873B1F02F51] - 19/04/2015 - 23:37:08 ---A- . (.Microsoft Corporation - MS DTC console program.) -- C:\WINDOWS\system32\msdtc.exe [6144]
O44 - LFC:[MD5.107FAC23F6E5D35B5A3B59F3BC1A9611] - 19/04/2015 - 23:37:08 ---A- . (.Microsoft Corporation - MS DTC helper APIs DLL.) -- C:\WINDOWS\system32\xolehlp.dll [11776]
O44 - LFC:[MD5.6935788826C53909B3D10A99A02C9A67] - 19/04/2015 - 23:37:08 ---A- . (.Microsoft Corporation - MS DTC log manager DLL.) -- C:\WINDOWS\system32\msdtclog.dll [58880]
O44 - LFC:[MD5.5B915E0487DB180F40E4E9BB0C441372] - 19/04/2015 - 23:37:08 ---A- . (.Microsoft Corporation - MS DTC transaction manager DLL.) -- C:\WINDOWS\system32\msdtctm.dll [949248]
O44 - LFC:[MD5.6D630F46829B78E4D13A119704244D9C] - 19/04/2015 - 23:37:08 ---A- . (.Microsoft Corporation - Microsoft database support DLL for Oracle.) -- C:\WINDOWS\system32\mtxoci.dll [90112]
O44 - LFC:[MD5.4B88B1599804DEF38CA199F441F10B9A] - 19/04/2015 - 23:37:09 ---A- . (.Microsoft Corporation - DLL Interface to TermDD Device Driver.) -- C:\WINDOWS\system32\icaapi.dll [11264]
O44 - LFC:[MD5.D2D52012C5A3CD41FEC0F090A8E47EE7] - 19/04/2015 - 23:37:09 ---A- . (.Microsoft Corporation - DLL d'action personnalisée d'installation.) -- C:\WINDOWS\system32\tscupgrd.exe [44544]
O44 - LFC:[MD5.82AF1FD4AAA4A54AEB563A94A806A0E8] - 19/04/2015 - 23:37:09 ---A- . (.Microsoft Corporation - Extension du Panneau de configuration Sessi.) -- C:\WINDOWS\system32\remotepg.dll [61952]
O44 - LFC:[MD5.3126D9D63CDEF5E3244EE2D97FBAD59D] - 19/04/2015 - 23:37:09 ---A- . (.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) -- C:\WINDOWS\system32\sessmgr.exe [142336]
O44 - LFC:[MD5.85D0F553A7F198A1C5CD0B43C1A9BB73] - 19/04/2015 - 23:37:09 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop TSRDP Session Add-.) -- C:\WINDOWS\system32\rdsaddin.exe [13824]
O44 - LFC:[MD5.F9F48A16E05AF926B46CCDCDE6BF8288] - 19/04/2015 - 23:37:09 ---A- . (.Microsoft Corporation - Pilote multimédia du service Terminal Serve.) -- C:\WINDOWS\system32\rdpsnd.dll [19968]
O44 - LFC:[MD5.54554AC5C79D6E4319998BB339D184E5] - 19/04/2015 - 23:37:09 ---A- . (.Microsoft Corporation - RDP Clip Monitor.) -- C:\WINDOWS\system32\rdpclip.exe [62464]
O44 - LFC:[MD5.DA739E566EE99A32617784AE5593742A] - 19/04/2015 - 23:37:09 ---A- . (.Microsoft Corporation - RDP Extension DLL.) -- C:\WINDOWS\system32\rdpwsx.dll [87176]
O44 - LFC:[MD5.23E5B0FA918B54A2F61F9E57CE004429] - 19/04/2015 - 23:37:09 ---A- . (.Microsoft Corporation - RDSHost Client Module.) -- C:\WINDOWS\system32\rdchost.dll [147968]
O44 - LFC:[MD5.72A4D94375A7939D73E0A1C3D9AA8B10] - 19/04/2015 - 23:37:09 ---A- . (.Microsoft Corporation - RDSHost Server Module.) -- C:\WINDOWS\system32\rdshost.exe [67072]
O44 - LFC:[MD5.7D521B8CF926459E270D18C559323815] - 19/04/2015 - 23:37:09 ---A- . (.Microsoft Corporation - Service Terminal Server.) -- C:\WINDOWS\system32\termsrv.dll [297984]
O44 - LFC:[MD5.631AD03199D07EFE2E6D6F346DFFB961] - 19/04/2015 - 23:37:09 ---A- . (.Microsoft Corporation - Utilitaire d'interrogation de processus.) -- C:\WINDOWS\system32\qprocess.exe [20992]
O44 - LFC:[MD5.72D638651BAD29EB0A50DD7A359375B9] - 19/04/2015 - 23:37:10 ---A- . (.Microsoft Corporation - Connexion Bureau à distance.) -- C:\WINDOWS\system32\mstsc.exe [411648]
O44 - LFC:[MD5.3F209F07394E166B7866C81B8283C9A7] - 19/04/2015 - 23:37:10 ---A- . (.Microsoft Corporation - Fournisseur d'infrastructure WMI de configu.) -- C:\WINDOWS\system32\tscfgwmi.dll [94208]
O44 - LFC:[MD5.38D437CF2D98965F239B0ABCD66DCB0F] - 19/04/2015 - 23:37:10 ---A- . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys [12040]
O44 - LFC:[MD5.D4F5643D7714EF499AE9527FDCD50894] - 19/04/2015 - 23:37:10 ---A- . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only,.) -- C:\WINDOWS\system32\Drivers\rdpwd.sys [139400]
O44 - LFC:[MD5.ED0580AF02502D00AD8C4C066B156BE9] - 19/04/2015 - 23:37:10 ---A- . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys [21896]
O44 - LFC:[MD5.B202B160C128CCB5265082A94EE01A6C] - 19/04/2015 - 23:37:10 ---A- . (.Microsoft Corporation - Terminal Services ActiveX Client.) -- C:\WINDOWS\system32\mstscax.dll [655360]
O44 - LFC:[MD5.C0623D7C1AA3619643B381ED92C7ED30] - 19/04/2015 - 23:37:11 ---A- . (.Microsoft Corporation - Afficheur de l'album Windows NT.) -- C:\WINDOWS\system32\clipbrd.exe [104448]
O44 - LFC:[MD5.7E76AC910A9E49AFF0943CEE887161F7] - 19/04/2015 - 23:37:11 ---A- . (.Microsoft Corporation - Paint.) -- C:\WINDOWS\system32\mspaint.exe [347648]
O44 - LFC:[MD5.DE4E44825DAC8EA45F88090F4176831C] - 19/04/2015 - 23:37:11 ---A- . (.Microsoft Corporation - Spider.) -- C:\WINDOWS\system32\spider.exe [539136]
O44 - LFC:[MD5.06A73B691D1C8DAE405EAFFF37C4BA4B] - 19/04/2015 - 23:37:12 ---A- . (.Hilgraeve, Inc. - Bibliothèque d'applications HyperTerminal.) -- C:\WINDOWS\system32\hypertrm.dll [352256]
O44 - LFC:[MD5.1A214AA23AD76642A9E5F2AB90269250] - 19/04/2015 - 23:37:12 ---A- . (.Microsoft Corporation - Accessoires du magnétophone.) -- C:\WINDOWS\system32\sndrec32.exe [133120]
O44 - LFC:[MD5.F3A48DEC8261887A122A901F9A0777C3] - 19/04/2015 - 23:37:12 ---A- . (.Microsoft Corporation - Assistant Accessibilité Microsoft.) -- C:\WINDOWS\system32\accwiz.exe [189952]
O44 - LFC:[MD5.B1CF68A3C275DDA5E16CD179D25C8F3F] - 19/04/2015 - 23:37:12 ---A- . (.Microsoft Corporation - DLL du Panneau de configuration.) -- C:\WINDOWS\system32\access.cpl [71680]
O44 - LFC:[MD5.B0BBE74C77F63C1A0D7DC26E73A51362] - 19/04/2015 - 23:37:12 ---A- . (.Microsoft Corporation - Media Player.) -- C:\WINDOWS\system32\mplay32.exe [124928]
O44 - LFC:[MD5.2CE7B1EEB99C14032C0E2201B004F80E] - 19/04/2015 - 23:37:21 ---A- . (...) -- C:\WINDOWS\system32\wmimgmt.msc [63488]
O44 - LFC:[MD5.C5C7EB692A20043694A83CD534ECD1F1] - 19/04/2015 - 23:37:25 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comsnap.dll [147456]
O44 - LFC:[MD5.9B826D2A266D2AF6925639BA162CB1CF] - 19/04/2015 - 23:37:26 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comaddin.dll [25600]
O44 - LFC:[MD5.91C2A53F8A0B8D627AA617FC54FC4542] - 19/04/2015 - 23:37:26 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\comrepl.dll [82432]
O44 - LFC:[MD5.B3C23C7313DD63FF5C77BEE44113D71D] - 19/04/2015 - 23:37:26 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\dcomcnfg.exe [5120]
O44 - LFC:[MD5.7BB5E15AED9FDA88DF53AD1690A3D719] - 19/04/2015 - 23:37:26 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\mtxdm.dll [20480]
O44 - LFC:[MD5.40706C18F19FC865D8862B68711D919B] - 19/04/2015 - 23:37:26 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\mtxex.dll [4096]
O44 - LFC:[MD5.64D0CFCF1BF3E80BE8AD0F6F2D114C76] - 19/04/2015 - 23:37:26 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\mtxlegih.dll [25088]
O44 - LFC:[MD5.CAB1F12E9F21B654A5798A6120AE52E7] - 19/04/2015 - 23:37:26 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\stclient.dll [54272]
O44 - LFC:[MD5.CDD932EDCB756FB5F7CE5E2F090BA838] - 19/04/2015 - 23:37:27 ---A- . (...) -- C:\WINDOWS\system32\msdtcprf.h [768]
O44 - LFC:[MD5.FDA18F513403E67CAE9BF0D2DD948B28] - 19/04/2015 - 23:37:27 ---A- . (...) -- C:\WINDOWS\system32\msdtcprf.ini [3914]
O44 - LFC:[MD5.4A547D74B435E78418BE06406250C1D3] - 19/04/2015 - 23:37:27 ---A- . (...) -- C:\WINDOWS\system32\tslabels.h [3286]
O44 - LFC:[MD5.F9A14C7B36E10052A1B0F071BC3C1C65] - 19/04/2015 - 23:37:27 ---A- . (...) -- C:\WINDOWS\system32\tslabels.ini [27768]
O44 - LFC:[MD5.9F27B27C8405FEAF7DFC4DA3751DEF22] - 19/04/2015 - 23:37:27 ---A- . (...) -- C:\WINDOWS\system32\usrlogon.cmd [1263]
O44 - LFC:[MD5.4701BA735D535D9F46AB2A285610A04B] - 19/04/2015 - 23:37:27 ---A- . (.Microsoft Corporation - Extension de configuration de connexion Ter.) -- C:\WINDOWS\system32\rdpcfgex.dll [4608]
O44 - LFC:[MD5.2CA1060C5CF9C03B865977F12123C3F8] - 19/04/2015 - 23:37:27 ---A- . (.Microsoft Corporation - Modem Connection Driver.) -- C:\WINDOWS\system32\cdmodem.dll [15872]
O44 - LFC:[MD5.9C847DF5E1F783716032977AE4559CCC] - 19/04/2015 - 23:37:27 ---A- . (.Microsoft Corporation - Registry Initializer.) -- C:\WINDOWS\system32\regini.exe [33792]
O44 - LFC:[MD5.E167CEBDBADE82F4A6E30BBAF495800B] - 19/04/2015 - 23:37:27 ---A- . (.Microsoft Corporation - Utilitaire d'arrêt de processus des service.) -- C:\WINDOWS\system32\tskill.exe [16896]
O44 - LFC:[MD5.3861B0195ACDCD8F1187C37617C090C4] - 19/04/2015 - 23:37:27 ---A- . (.Microsoft Corporation - Utilitaire d'arrêt du système.) -- C:\WINDOWS\system32\tsshutdn.exe [17408]
O44 - LFC:[MD5.CEBA968375EE0B55094FFBA03EE69BAF] - 19/04/2015 - 23:37:27 ---A- . (.Microsoft Corporation - Utilitaire d'interrogation Terminal Server.) -- C:\WINDOWS\system32\qappsrv.exe [17408]
O44 - LFC:[MD5.8F0514EF34C2A69036CC55F91F903168] - 19/04/2015 - 23:37:27 ---A- . (.Microsoft Corporation - Utilitaire de connexion de session.) -- C:\WINDOWS\system32\tscon.exe [15360]
O44 - LFC:[MD5.B1D3D78F35E85E7481A9651BB11394B0] - 19/04/2015 - 23:37:27 ---A- . (.Microsoft Corporation - Utilitaire de contrôle à distance de sessio.) -- C:\WINDOWS\system32\shadow.exe [15360]
O44 - LFC:[MD5.8A6A5D2505D1BF424EAFD38D76D6C0E9] - 19/04/2015 - 23:37:27 ---A- . (.Microsoft Corporation - Utilitaire de déconnexion de session.) -- C:\WINDOWS\system32\logoff.exe [15872]
O44 - LFC:[MD5.C2E457CCCC8691F3194D12E4F5E70EA4] - 19/04/2015 - 23:37:27 ---A- . (.Microsoft Corporation - Utilitaire de déconnexion de session.) -- C:\WINDOWS\system32\tsdiscon.exe [14848]
O44 - LFC:[MD5.25900127DAE605546899D80EA6AE61FB] - 19/04/2015 - 23:37:27 ---A- . (.Microsoft Corporation - Utilitaire de gestion des sessions de requê.) -- C:\WINDOWS\system32\qwinsta.exe [22528]
O44 - LFC:[MD5.31BF3B4C0D04EC84684F58D14F521426] - 19/04/2015 - 23:37:27 ---A- . (.Microsoft Corporation - Utilitaire de message.) -- C:\WINDOWS\system32\msg.exe [22528]
O44 - LFC:[MD5.946B7A66354D385D9242F9AFC1CAC7C0] - 19/04/2015 - 23:37:27 ---A- . (.Microsoft Corporation - Utilitaire de réinitialisation de session.) -- C:\WINDOWS\system32\rwinsta.exe [16384]
O44 - LFC:[MD5.CACA53644879416250C9BFA6A109E3D8] - 19/04/2015 - 23:37:28 ---A- . (.Microsoft Corporation - Applet du jeu Solitaire.) -- C:\WINDOWS\system32\sol.exe [57344]
O44 - LFC:[MD5.5911F4AE105C7469636F7ADCEA35349F] - 19/04/2015 - 23:37:28 ---A- . (.Microsoft Corporation - Application Calculatrice de Windows.) -- C:\WINDOWS\system32\calc.exe [115200]
O44 - LFC:[MD5.EA682C022F7204CC8E8C9EF5DCE29356] - 19/04/2015 - 23:37:28 ---A- . (.Microsoft Corporation - Jeu Démineur du pack Entertainment.) -- C:\WINDOWS\system32\winmine.exe [119808]
O44 - LFC:[MD5.043D073DFF5E3AD85FDA67D8C30F4305] - 19/04/2015 - 23:37:28 ---A- . (.Microsoft Corporation - Jeu FreeCell du pack Entertainment.) -- C:\WINDOWS\system32\freecell.exe [55808]
O44 - LFC:[MD5.DDCA854934C0D4EF46E8E093F3446ABF] - 19/04/2015 - 23:37:28 ---A- . (.Microsoft Corporation - La Dame de Pique en réseau.) -- C:\WINDOWS\system32\mshearts.exe [128000]
O44 - LFC:[MD5.C05B691CC2328DB5456AECD616E81970] - 19/04/2015 - 23:37:28 ---A- . (.Microsoft Corporation - Utilitaire de réinitialisation des services.) -- C:\WINDOWS\system32\reset.exe [10240]
O44 - LFC:[MD5.405E1EF8E3C88E9BCD2853382BB12430] - 19/04/2015 - 23:37:29 ---A- . (...) -- C:\WINDOWS\system32\bopomofo.uce [22984]
O44 - LFC:[MD5.4FDED87068052EEB9B72A97FDBC141DB] - 19/04/2015 - 23:37:29 ---A- . (...) -- C:\WINDOWS\system32\gb2312.uce [24006]
O44 - LFC:[MD5.038F6AD6CEE43585D814CDBC7CDFD3EC] - 19/04/2015 - 23:37:29 ---A- . (...) -- C:\WINDOWS\system32\ideograf.uce [60458]
O44 - LFC:[MD5.7C0C25F4BA1084C4ABBEEA2C74194C5F] - 19/04/2015 - 23:37:29 ---A- . (...) -- C:\WINDOWS\system32\kanji_1.uce [6948]
O44 - LFC:[MD5.529BBD63519BBD654EF328454019693F] - 19/04/2015 - 23:37:29 ---A- . (...) -- C:\WINDOWS\system32\kanji_2.uce [8484]
O44 - LFC:[MD5.7A7A04370A6030B9B0E8178DAD4A6E41] - 19/04/2015 - 23:37:29 ---A- . (...) -- C:\WINDOWS\system32\korean.uce [12876]
O44 - LFC:[MD5.8CA32E9D986FA76F60EFBCFCD9D80A58] - 19/04/2015 - 23:37:29 ---A- . (...) -- C:\WINDOWS\system32\shiftjis.uce [16740]
O44 - LFC:[MD5.30F5568679A54042F99CA9EC1102EBCD] - 19/04/2015 - 23:37:29 ---A- . (...) -- C:\WINDOWS\system32\subrange.uce [93702]
O44 - LFC:[MD5.C525A8A367F9641ABB8FF32C96BD08A4] - 19/04/2015 - 23:37:29 ---A- . (.Microsoft Corporation - DLL des noms UNICODE pour UCE.) -- C:\WINDOWS\system32\getuname.dll [634880]
O44 - LFC:[MD5.0DD55909896EF797C9E5E12662CD3BDF] - 19/04/2015 - 23:37:29 ---A- . (.Microsoft Corporation - Table des caractères.) -- C:\WINDOWS\system32\charmap.exe [80896]
O44 - LFC:[MD5.39F43DBCE366B2561DF073B4C0839299] - 19/04/2015 - 23:37:30 ---A- . (...) -- C:\WINDOWS\Bulles de savon.bmp [65978]
O44 - LFC:[MD5.1AC5E83598D4F2143B59A2D893C3279A] - 19/04/2015 - 23:37:30 ---A- . (...) -- C:\WINDOWS\Granit vert.bmp [26582]
O44 - LFC:[MD5.203EF178BF8B0A8EC34E27E4DEDB6349] - 19/04/2015 - 23:37:30 ---A- . (...) -- C:\WINDOWS\Jour de pêche.bmp [17336]
O44 - LFC:[MD5.EB3BFC14E41FBAA41B4FD4489AA82D39] - 19/04/2015 - 23:37:30 ---A- . (...) -- C:\WINDOWS\Mur de Santa Fe.bmp [65832]
O44 - LFC:[MD5.3A8B85AB7B415BF3F8AFE285DFE0CE29] - 19/04/2015 - 23:37:30 ---A- . (...) -- C:\WINDOWS\Plume.bmp [16730]
O44 - LFC:[MD5.927A66BD587E31CB12D3AB25381658DC] - 19/04/2015 - 23:37:30 ---A- . (...) -- C:\WINDOWS\Rhododendron.bmp [17362]
O44 - LFC:[MD5.5B4AC407E566076BB726BA91E067D313] - 19/04/2015 - 23:37:30 ---A- . (...) -- C:\WINDOWS\Rivière Sumida.bmp [26680]
O44 - LFC:[MD5.DAC71A10A6A71CB6E3F427AE3283734B] - 19/04/2015 - 23:37:30 ---A- . (...) -- C:\WINDOWS\Rosace bleue 16.bmp [1272]
O44 - LFC:[MD5.73D70ED3EC3BBFD8FD35DF431C38F374] - 19/04/2015 - 23:37:30 ---A- . (...) -- C:\WINDOWS\Tasse à café.bmp [17062]
O44 - LFC:[MD5.280920B6773C74C3649A934257112BE1] - 19/04/2015 - 23:37:30 ---A- . (...) -- C:\WINDOWS\Vent de prairie.bmp [65954]
O44 - LFC:[MD5.5290EA6951F4724259F423B12C8E1393] - 19/04/2015 - 23:37:30 ---A- . (...) -- C:\WINDOWS\Zapotec.bmp [9522]
O44 - LFC:[MD5.520A03D1F113D251EFBFA00C164F2087] - 19/04/2015 - 23:37:35 ---A- . (.Hilgraeve, Inc. - HyperTerminal Applet Library.) -- C:\WINDOWS\system32\hticons.dll [44544]
O44 - LFC:[MD5.E7EF0C8FE4CAE6B9CA990D5B15A079CE] - 19/04/2015 - 23:37:35 ---A- . (.Microsoft Corporation - Contrôles de mesure.) -- C:\WINDOWS\system32\avmeter.dll [16384]
O44 - LFC:[MD5.2A99260794224489F29B628717B7947E] - 19/04/2015 - 23:37:35 ---A- . (.Microsoft Corporation - Conversation pour Windows NT.) -- C:\WINDOWS\system32\winchat.exe [35840]
O44 - LFC:[MD5.128CEA94B381C19C655AA18DA74ECA0A] - 19/04/2015 - 23:37:35 ---A- . (.Microsoft Corporation - Numéroteur TAPI 3.0 et Visualisateur de con.) -- C:\WINDOWS\system32\avtapi.dll [232960]
O44 - LFC:[MD5.F7B2FA971A70A335F92785DEF9478B62] - 19/04/2015 - 23:37:35 ---A- . (.Microsoft Corporation - Wave Manipulation Component.) -- C:\WINDOWS\system32\avwav.dll [73216]
O44 - LFC:[MD5.831347571C0F5006CE3913D32F21AB69] - 19/04/2015 - 23:37:36 ---A- . (.Microsoft Corporation - Contrôle du volume.) -- C:\WINDOWS\system32\sndvol32.exe [139264]
O44 - LFC:[MD5.AF68D5BB112D56D00835252C76D2D871] - 19/04/2015 - 23:37:43 ---A- . (.Microsoft Corporation - Windows Write.) -- C:\WINDOWS\system32\write.exe [5632]
O44 - LFC:[MD5.A01369EAEAEBA85D81BF4597FFC8870A] - 19/04/2015 - 23:37:52 ---A- . (...) -- C:\WINDOWS\msmqinst.log [10114]
O44 - LFC:[MD5.78A4F3B89F19E08A1C8E6274E3CC57B6] - 19/04/2015 - 23:38:00 ---A- . (...) -- C:\WINDOWS\DtcInstall.log [133]
O44 - LFC:[MD5.487403459F0B2F1A3ADEEF02496BD80E] - 19/04/2015 - 23:38:08 ---A- . (...) -- C:\WINDOWS\vb.ini [36]
O44 - LFC:[MD5.6C2F0BA210C2B53EF07653ABAC6C2490] - 19/04/2015 - 23:38:08 ---A- . (...) -- C:\WINDOWS\vbaddin.ini [37]
O44 - LFC:[MD5.8E18A8E60AE39D7891534F79EE481BA7] - 19/04/2015 - 23:38:22 ---A- . (...) -- C:\WINDOWS\system32\emptyregdb.dat [21892]
O44 - LFC:[MD5.3E30211D6192307CBE93C2C57D705115] - 19/04/2015 - 23:38:44 ---A- . (...) -- C:\WINDOWS\netfxocm.log [2790]
O44 - LFC:[MD5.35B9D17B7DE65F34C2811CD6C14B81A4] - 19/04/2015 - 23:38:49 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [11538]
O44 - LFC:[MD5.77180DAC94933A73F0CA12EA9E3C8628] - 19/04/2015 - 23:38:49 ---A- . (...) -- C:\WINDOWS\MedCtrOC.log [1487]
O44 - LFC:[MD5.037489211CA1D8F3CA75B49A51C4B637] - 19/04/2015 - 23:38:49 ---A- . (...) -- C:\WINDOWS\msgsocm.log [871]
O44 - LFC:[MD5.462656DFAB268DB34E4D65EA17DF5977] - 19/04/2015 - 23:38:49 ---A- . (...) -- C:\WINDOWS\ocgen.log [14732]
O44 - LFC:[MD5.DADB3267CF9AA47E7EF8BBF043FBC4B8] - 19/04/2015 - 23:38:49 ---A- . (...) -- C:\WINDOWS\sessmgr.setup.log [1022]
O44 - LFC:[MD5.E65916EC61CEB4917EFF162E21F424C6] - 19/04/2015 - 23:38:58 ---A- . (.Microsoft Corporation - Assistant Connexion Internet.) -- C:\WINDOWS\system32\icwphbk.dll [65536]
O44 - LFC:[MD5.819E5AB454AE7F2EA4FB69674AF42B05] - 19/04/2015 - 23:38:58 ---A- . (.Microsoft Corporation - Bibliothèque de l'Assistant Connexion Inter.) -- C:\WINDOWS\system32\inetcfg.dll [282624]
O44 - LFC:[MD5.BCD3EE461DD78F06C1AD2C5173517081] - 19/04/2015 - 23:38:58 ---A- . (.Microsoft Corporation - Fichier DLL d'interface du Planificateur de.) -- C:\WINDOWS\system32\mstask.dll [281600]
O44 - LFC:[MD5.A745A2D71180F9E7F5F5CD9CA9A39A80] - 19/04/2015 - 23:38:58 ---A- . (.Microsoft Corporation - Fichier d'installation du Planificateur de.) -- C:\WINDOWS\system32\mstinit.exe [12288]
O44 - LFC:[MD5.C97C725FF8C0408EC9BFE3A89B26E30D] - 19/04/2015 - 23:38:58 ---A- . (.Microsoft Corporation - Numéroteur automatique de l'Assistant Conne.) -- C:\WINDOWS\system32\icwdial.dll [73728]
O44 - LFC:[MD5.E24AEAA1FB8AAA6F2062C625A83ED773] - 19/04/2015 - 23:38:58 ---A- . (.Microsoft Corporation - Processus d'abonnement à Internet.) -- C:\WINDOWS\system32\isign32.dll [86016]
O44 - LFC:[MD5.4612EC6DAF695B87A2529FCBB95B75DE] - 19/04/2015 - 23:38:59 ---A- . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [193024]
O44 - LFC:[MD5.518D4D107EC5FE1E5BB36ED1D981E40C] - 19/04/2015 - 23:39:00 ---A- . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll [678400]
O44 - LFC:[MD5.1E4DA5B512556BA384F56A8F042425A5] - 19/04/2015 - 23:39:00 ---A- . (.Microsoft Corporation - Ressources API de Microsoft Internet Messag.) -- C:\WINDOWS\system32\inetres.dll [50688]
O44 - LFC:[MD5.6E17191B8A95CBD7B4960FC980657385] - 19/04/2015 - 23:39:01 ---A- . (.Microsoft Corporation - Gestionnaire de comptes Internet.) -- C:\WINDOWS\system32\msoeacct.dll [252928]
O44 - LFC:[MD5.500DF5B1C90A14C7E9BED9C3ECA19568] - 19/04/2015 - 23:39:01 ---A- . (.Microsoft Corporation - Microsoft Outlook Express RT Lib.) -- C:\WINDOWS\system32\msoert2.dll [105984]
O44 - LFC:[MD5.2464B1F7AE5AC6B930B498183C1B87CF] - 19/04/2015 - 23:39:03 ---A- . (.Microsoft Corporation - Dll de l'utilitaire de conférence.) -- C:\WINDOWS\system32\msconf.dll [69632]
O44 - LFC:[MD5.1737E8507F932BEEC01BBD60E32A0D88] - 19/04/2015 - 23:39:04 ---A- . (.Intel Corporation - ISR Debug 32-bit Engine.) -- C:\WINDOWS\system32\isrdbg32.dll [32768]
O44 - LFC:[MD5.4B1C1735CCECA4673E355EBD60461DA5] - 19/04/2015 - 23:39:04 ---A- . (.Microsoft Corporation - Application Sharing Display Driver.) -- C:\WINDOWS\system32\mnmdd.dll [34560]
O44 - LFC:[MD5.92144A7081592E15B42203DA0B7974D7] - 19/04/2015 - 23:39:04 ---A- . (.Microsoft Corporation - Bibliothèque NMMKCERT.) -- C:\WINDOWS\system32\nmmkcert.dll [28672]
O44 - LFC:[MD5.55217EFF3CD5E093CFD96CEB706983CB] - 19/04/2015 - 23:39:04 ---A- . (.Microsoft Corporation - Dll du client SR.) -- C:\WINDOWS\system32\srclient.dll [67584]
O44 - LFC:[MD5.75B66EB2A2FB8DB29C838F1800CEDE90] - 19/04/2015 - 23:39:04 ---A- . (.Microsoft Corporation - Partage de Bureau à distance NetMeeting.) -- C:\WINDOWS\system32\mnmsrvc.exe [32768]
O44 - LFC:[MD5.2471F3EEA2C49BAB801AFC38A2B00F89] - 19/04/2015 - 23:39:04 ---A- . (.Microsoft Corporation - Pilote ICM Microsoft H.261.) -- C:\WINDOWS\system32\msh261.drv [188416]
O44 - LFC:[MD5.B52181023B827ACDA36C1B76751EBFFD] - 19/04/2015 - 23:39:04 ---A- . (.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) -- C:\WINDOWS\system32\Drivers\sr.sys [73600]
O44 - LFC:[MD5.6469C53F4D16FA6055CCA265BC03DB66] - 19/04/2015 - 23:39:04 ---A- . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171008]
O44 - LFC:[MD5.1DD2454B6157F81627EFE09745614EB4] - 19/04/2015 - 23:39:04 ---A- . (.Microsoft Corporation - User Location Services Component Module.) -- C:\WINDOWS\system32\ils.dll [81920]
O44 - LFC:[MD5.6293FAA5BE0E54AA013971FE171A1F1D] - 19/04/2015 - 23:39:05 ---A- . (.Microsoft Corporation - Bibliothèque d'opérations Restauration du s.) -- C:\WINDOWS\system32\srrstr.dll [241664]
O44 - LFC:[MD5.4DA1BA9A9EE8D3241BE26DE5CF07C578] - 19/04/2015 - 23:39:05 ---A- . (.Microsoft Corporation - Filter Library.) -- C:\WINDOWS\system32\fltlib.dll [16896]
O44 - LFC:[MD5.B5769660B924A5902D844C578021CC36] - 19/04/2015 - 23:39:05 ---A- . (.Microsoft Corporation - Filter Manager Control Program.) -- C:\WINDOWS\system32\fltMc.exe [22528]
O44 - LFC:[MD5.157754F0DF355A9E0A6F54721914F9C6] - 19/04/2015 - 23:39:05 ---A- . (.Microsoft Corporation - Microsoft Filesystem Filter Manager.) -- C:\WINDOWS\system32\Drivers\fltMgr.sys [124800]
O44 - LFC:[MD5.2293022D4A6CF27F289350B16033B618] - 19/04/2015 - 23:39:08 ---A- . (.Microsoft Corporation - Assistance à distance Microsoft.) -- C:\WINDOWS\system32\racpldlg.dll [43520]
O44 - LFC:[MD5.ECE70BAD6F46F8A3EFA48BF095108885] - 19/04/2015 - 23:39:08 ---A- . (.Microsoft Corporation - Contrôles Fichier/Ouvrir et Enregistrer de.) -- C:\WINDOWS\system32\safrcdlg.dll [43520]
O44 - LFC:[MD5.CC357E59D7FBD1FE57CB7C4E23208CAD] - 19/04/2015 - 23:39:08 ---A- . (.Microsoft Corporation - Gestionnaire du bureau du centre d'Aide Mic.) -- C:\WINDOWS\system32\safrdm.dll [29696]
O44 - LFC:[MD5.AD7E33F70082EFBB7CA3A7B6D54F73AA] - 19/04/2015 - 23:39:08 ---A- . (.Microsoft Corporation - Microsoft Help Center Session Resolver.) -- C:\WINDOWS\system32\safrslv.dll [45568]
O44 - LFC:[MD5.7D04FD9D169830C90665CBEB969A90E3] - 19/04/2015 - 23:39:14 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service 2.0.) -- C:\WINDOWS\system32\bitsprx3.dll [7168]
O44 - LFC:[MD5.7FFA590A7ACE20D97FCDD574341F2F2D] - 19/04/2015 - 23:39:14 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service Pro.) -- C:\WINDOWS\system32\bitsprx2.dll [8192]
O44 - LFC:[MD5.59092B32D75C13409B8B4EE158F138DA] - 19/04/2015 - 23:39:14 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service Pro.) -- C:\WINDOWS\system32\qmgrprxy.dll [18944]
O44 - LFC:[MD5.87424817F82CF6A7F55DAC01A20111A3] - 19/04/2015 - 23:39:14 ---A- . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\system32\qmgr.dll [382464]
O44 - LFC:[MD5.D5B70A998EE023F4C420E95433BED727] - 19/04/2015 - 23:39:15 ---A- . (.Microsoft Corporation - API du client Windows Update.) -- C:\WINDOWS\system32\wuapi.dll [432640]
O44 - LFC:[MD5.14C9821B2B78B44AE5510C623E544382] - 19/04/2015 - 23:39:15 ---A- . (.Microsoft Corporation - Client Mise à jour automatique Windows Upda.) -- C:\WINDOWS\system32\wuauclt1.exe [168960]
O44 - LFC:[MD5.46990969761352F53B2310D266E2F1DF] - 19/04/2015 - 23:39:15 ---A- . (.Microsoft Corporation - Mises à jour automatiques.) -- C:\WINDOWS\system32\wuauclt.exe [112640]
O44 - LFC:[MD5.AAA76850F66A55D14080CBAC8706E507] - 19/04/2015 - 23:39:15 ---A- . (.Microsoft Corporation - Moteur de mises à jour automatique Windows.) -- C:\WINDOWS\system32\wuaueng1.dll [184320]
O44 - LFC:[MD5.EC3804F3948FD4BF84A0435314214842] - 19/04/2015 - 23:39:15 ---A- . (.Microsoft Corporation - Panneau de configuration Mises à jour autom.) -- C:\WINDOWS\system32\wuaucpl.cpl [163840]
O44 - LFC:[MD5.4B4516FB0F63C78365C78A6779999E6F] - 19/04/2015 - 23:39:15 ---A- . (.Microsoft Corporation - Plug-in Interface utilisateur du client Mis.) -- C:\WINDOWS\system32\wucltui.dll [114176]
O44 - LFC:[MD5.E17450E0ABB8F0749C5DE37152D87997] - 19/04/2015 - 23:39:15 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Engine.) -- C:\WINDOWS\system32\wuaueng.dll [1134592]
O44 - LFC:[MD5.57FE69B6648E73559552779820FA0827] - 19/04/2015 - 23:39:15 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O44 - LFC:[MD5.7C2C697B9018016D87228E9F9629E60A] - 19/04/2015 - 23:39:15 ---A- . (.Microsoft Corporation - Windows Update Web Control.) -- C:\WINDOWS\system32\wuweb.dll [120320]
O44 - LFC:[MD5.E4637E6B8A08A4D5282BFECA12511EDC] - 19/04/2015 - 23:39:15 ---A- . (.Microsoft Corporation - Windows Update client proxy stub.) -- C:\WINDOWS\system32\wups.dll [36864]
O44 - LFC:[MD5.13D8419CD73E6D14FE093A0066E36F18] - 19/04/2015 - 23:39:23 ---A- . (.Microsoft Corporation - Internet Connection Wizard.) -- C:\WINDOWS\system32\icfgnt5.dll [16384]
O44 - LFC:[MD5.D1560FE3CB700340235BECDE227C271E] - 19/04/2015 - 23:39:25 ---A- . (.Microsoft Corporation - Ressources du gestionnaire de comptes Micro.) -- C:\WINDOWS\system32\acctres.dll [72192]
O44 - LFC:[MD5.34A92A72CC0E0653828344DB5378B1E0] - 19/04/2015 - 23:39:26 ---A- . (.Microsoft Corporation - Codec Microsoft G.723.1 pour MSACM.) -- C:\WINDOWS\system32\msg723.acm [118784]
O44 - LFC:[MD5.8014838B3025DDFF6C476FCC7C18CD82] - 19/04/2015 - 23:39:26 ---A- . (.Microsoft Corporation - DLL d'enregistrement d'événements NetMeetin.) -- C:\WINDOWS\system32\nmevtmsg.dll [12288]
O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 19/04/2015 - 23:39:32 ---A- . (...) -- C:\WINDOWS\desktop.ini [2]
O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 19/04/2015 - 23:39:32 ---A- . (...) -- C:\WINDOWS\system32\desktop.ini [2]
O44 - LFC:[MD5.8FBEC4D51D39DB985490F7C049AF488E] - 19/04/2015 - 23:39:32 -SH-- . (...) -- C:\WINDOWS\winnt.bmp [49102]
O44 - LFC:[MD5.8FBEC4D51D39DB985490F7C049AF488E] - 19/04/2015 - 23:39:32 -SH-- . (...) -- C:\WINDOWS\winnt256.bmp [49102]
O44 - LFC:[MD5.D935270C569D1E4F224F861AB0559E1E] - 19/04/2015 - 23:39:34 ---A- . (.Microsoft Corporation - Async Trace DLL.) -- C:\WINDOWS\system32\atrace.dll [11264]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 19/04/2015 - 23:40:17 R-HA- . (...) -- C:\WINDOWS\WindowsShell.Manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 19/04/2015 - 23:40:17 R-HA- . (...) -- C:\WINDOWS\system32\cdplayer.exe.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 19/04/2015 - 23:40:17 R-HA- . (...) -- C:\WINDOWS\system32\ncpa.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 19/04/2015 - 23:40:17 R-HA- . (...) -- C:\WINDOWS\system32\nwc.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 19/04/2015 - 23:40:17 R-HA- . (...) -- C:\WINDOWS\system32\sapi.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 19/04/2015 - 23:40:17 R-HA- . (...) -- C:\WINDOWS\system32\wuaucpl.cpl.manifest [749]
O44 - LFC:[MD5.5D76C3FB736514E1D7C88791E7322784] - 19/04/2015 - 23:40:25 R-HA- . (...) -- C:\WINDOWS\system32\WindowsLogon.manifest [488]
O44 - LFC:[MD5.5D76C3FB736514E1D7C88791E7322784] - 19/04/2015 - 23:40:25 R-HA- . (...) -- C:\WINDOWS\system32\logonui.exe.manifest [488]
O44 - LFC:[MD5.2B9C717D21A1331BA3731886E3EE87BB] - 19/04/2015 - 23:41:47 ---A- . (...) -- C:\WINDOWS\ODBCINST.INI [4205]
O44 - LFC:[MD5.662BD5F1A693F710F066BAF92FED394A] - 19/04/2015 - 23:41:47 ---A- . (.Microsoft Corporation - Extended MAPI 1.0 for Windows NT.) -- C:\WINDOWS\system32\mapi32.dll [112128]
O44 - LFC:[MD5.6D6F4B1886E91EB37ABCCAD19C561EE0] - 19/04/2015 - 23:42:01 ---A- . (...) -- C:\WINDOWS\system32\amcompat.tlb [16832]
O44 - LFC:[MD5.A32B14BE5EDAE794FCE1A9E970827509] - 19/04/2015 - 23:42:01 ---A- . (...) -- C:\WINDOWS\system32\nscompat.tlb [23392]
O44 - LFC:[MD5.DC17DD0189B0C36D863B4DD0A036C10F] - 19/04/2015 - 23:42:02 ---A- . (...) -- C:\WINDOWS\WMSysPr9.prx [316640]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/04/2015 - 23:42:11 ---A- . (...) -- C:\AUTOEXEC.BAT [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/04/2015 - 23:42:11 ---A- . (...) -- C:\CONFIG.SYS [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/04/2015 - 23:42:11 ---A- . (...) -- C:\WINDOWS\control.ini [0]
O44 - LFC:[MD5.486E0B1BC94C346E5C352C295388C803] - 19/04/2015 - 23:42:11 ---A- . (...) -- C:\WINDOWS\system32\CONFIG.NT [3072]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/04/2015 - 23:42:11 RSHA- . (...) -- C:\IO.SYS [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/04/2015 - 23:42:11 RSHA- . (...) -- C:\MSDOS.SYS [0]
O44 - LFC:[MD5.CBCB5D8671AA0EC4ECC820685B89D12E] - 19/04/2015 - 23:45:39 ---A- . (...) -- C:\WINDOWS\system32\$winnt$.inf [261]
O44 - LFC:[MD5.5781171251EBE4C7C2A1556B5ACAB86C] - 19/04/2015 - 23:45:45 ---A- . (...) -- C:\WINDOWS\comsetup.log [15898]
O44 - LFC:[MD5.CD6DC44C419AB7673598CCCDAEB553C2] - 19/04/2015 - 23:45:45 ---A- . (...) -- C:\WINDOWS\iis6.log [48065]
O44 - LFC:[MD5.7823CA6C868E8892AA69ED5C44A26084] - 19/04/2015 - 23:45:45 ---A- . (...) -- C:\WINDOWS\imsins.log [4382]
O44 - LFC:[MD5.E09191D36B1122F6881E3BEAFBC6825D] - 19/04/2015 - 23:45:45 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [7959]
O44 - LFC:[MD5.1464E4ABE2D167DDE116D584CA625577] - 19/04/2015 - 23:45:45 ---A- . (...) -- C:\WINDOWS\ocmsn.log [885]
O44 - LFC:[MD5.603E5702CDBE90A2EA5373AD17F88C1F] - 19/04/2015 - 23:45:45 ---A- . (...) -- C:\WINDOWS\tabletoc.log [1252]
O44 - LFC:[MD5.67691246AB731B3037F3179804D34D86] - 19/04/2015 - 23:45:45 ---A- . (...) -- C:\WINDOWS\tsoc.log [10187]
O44 - LFC:[MD5.8A51AC2580B388D5FF0279397B575C99] - 19/04/2015 - 23:47:53 ---A- . (...) -- C:\WINDOWS\REGLOCS.OLD [8192]
O44 - LFC:[MD5.EF62346866E880FD393DD4B24C0A7AAB] - 19/04/2015 - 23:48:08 ---A- . (...) -- C:\WINDOWS\setupact.log [184252]
O44 - LFC:[MD5.0CC7A3E74E74287392DC9CF42BD66FBB] - 19/04/2015 - 23:49:35 ---A- . (...) -- C:\WINDOWS\setuplog.txt [776420]
O44 - LFC:[MD5.73F859BF1511D7E5E0D2DACD1848FE95] - 19/04/2015 - 23:49:37 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [2206]
O44 - LFC:[MD5.8D3A5D20FC91C4CC1E26A227E7123AB6] - 19/04/2015 - 23:49:59 ---A- . (...) -- C:\WINDOWS\wmsetup.log [936]
O44 - LFC:[MD5.CB0E6308F1938D70195E50A853689244] - 19/04/2015 - 23:50:00 ---A- . (...) -- C:\WINDOWS\OEWABLog.txt [833]
O44 - LFC:[MD5.F3C139AD492C4F73353057442E6995CE] - 19/04/2015 - 23:53:07 ---A- . (...) -- C:\WINDOWS\system32\c_10021.nls [66082]
O44 - LFC:[MD5.DCE6C200965B21A6A1F3AF9BDB0ECA0C] - 19/04/2015 - 23:53:07 ---A- . (.Microsoft Corporation - Thai Wordbreaker.) -- C:\WINDOWS\system32\ftlx041e.dll [6144]
O44 - LFC:[MD5.7D352AB808790C2E9E9DB6C105CF612F] - 19/04/2015 - 23:53:07 R--A- . (.Microsoft Corporation - Thai Kedmanee (non-ShiftLock) Keyboard Layo.) -- C:\WINDOWS\system32\kbdth2.dll [6144]
O44 - LFC:[MD5.117165FB781152E40C2180F66CBAC891] - 19/04/2015 - 23:53:07 R--A- . (.Microsoft Corporation - Thai Kedmanee Keyboard Layout.) -- C:\WINDOWS\system32\kbdth0.dll [5632]
O44 - LFC:[MD5.D99EC6E644373B10B4C84048CEBCAF21] - 19/04/2015 - 23:53:07 R--A- . (.Microsoft Corporation - Thai Pattachote (non-ShiftLock) Keyboard La.) -- C:\WINDOWS\system32\kbdth3.dll [6144]
O44 - LFC:[MD5.095B7A282AEF532A31CD5AB5DB2B9A49] - 19/04/2015 - 23:53:07 R--A- . (.Microsoft Corporation - Thai Pattachote Keyboard Layout.) -- C:\WINDOWS\system32\kbdth1.dll [5632]
O44 - LFC:[MD5.72233F1A1D788A84D4687A258CC97CBF] - 19/04/2015 - 23:53:10 ---A- . (...) -- C:\WINDOWS\system32\c_10005.nls [66082]
O44 - LFC:[MD5.A99203A3397A9DB352C5D8DFBDA230A8] - 19/04/2015 - 23:53:10 ---A- . (...) -- C:\WINDOWS\system32\c_862.nls [66594]
O44 - LFC:[MD5.42F5D1376CA979E956A86964FA0D358F] - 19/04/2015 - 23:53:10 R--A- . (.Microsoft Corporation - KBDHEB Keyboard Layout.) -- C:\WINDOWS\system32\kbdheb.dll [5632]
O44 - LFC:[MD5.C050215D8D21DF5658E94187973FB89C] - 19/04/2015 - 23:53:12 ---A- . (...) -- C:\WINDOWS\system32\c_720.nls [66594]
O44 - LFC:[MD5.4D4C7CED88E5621F21A4911A44CADACC] - 19/04/2015 - 23:53:13 ---A- . (...) -- C:\WINDOWS\system32\C_28596.NLS [66082]
O44 - LFC:[MD5.1DBBCC1B712C2674BDF29A05A5DD366E] - 19/04/2015 - 23:53:13 ---A- . (...) -- C:\WINDOWS\system32\c_10004.nls [66082]
O44 - LFC:[MD5.77F127766D758EB2C6451E221A0C7F7D] - 19/04/2015 - 23:53:13 ---A- . (...) -- C:\WINDOWS\system32\c_708.nls [66082]
O44 - LFC:[MD5.C58563DF50115E935BC811FFBCE1FC89] - 19/04/2015 - 23:53:13 ---A- . (...) -- C:\WINDOWS\system32\c_864.nls [66594]
O44 - LFC:[MD5.465E698788EC46B5E59A755CB0DE850A] - 19/04/2015 - 23:53:13 ---A- . (.Microsoft Corporation - US IBM Arabic 238_L Keyboard Layout.) -- C:\WINDOWS\system32\kbdusa.dll [5632]
O44 - LFC:[MD5.BDAAC25FA476984ED44719BEBE908A08] - 19/04/2015 - 23:53:13 R--A- . (.Microsoft Corporation - Arabic_2 Keyboard Layout.) -- C:\WINDOWS\system32\kbda2.dll [5632]
O44 - LFC:[MD5.D3C4347C5BEC57226ACA73BFFDC22E40] - 19/04/2015 - 23:53:13 R--A- . (.Microsoft Corporation - Arabic_English_101 Keyboard Layout.) -- C:\WINDOWS\system32\kbda1.dll [5632]
O44 - LFC:[MD5.187351E6E2EA64DE1F179D1C79909E74] - 19/04/2015 - 23:53:13 R--A- . (.Microsoft Corporation - Arabic_French_102 Keyboard Layout.) -- C:\WINDOWS\system32\kbda3.dll [5632]
O44 - LFC:[MD5.D69D0521B115D3E859183283754B5DF2] - 19/04/2015 - 23:53:13 R--A- . (.Microsoft Corporation - Divehi Phonetic Keyboard Layout.) -- C:\WINDOWS\system32\kbddiv1.dll [5632]
O44 - LFC:[MD5.96BE5DEF930D2F8BA4DCB98B3B4DB47E] - 19/04/2015 - 23:53:13 R--A- . (.Microsoft Corporation - Divehi Typewriter Keyboard Layout.) -- C:\WINDOWS\system32\kbddiv2.dll [5632]
O44 - LFC:[MD5.6A3F192C65B05AAD670570A184204FA0] - 19/04/2015 - 23:53:13 R--A- . (.Microsoft Corporation - Farsi Keyboard Layout.) -- C:\WINDOWS\system32\kbdfa.dll [5632]
O44 - LFC:[MD5.402870DEF2B91ABA38DF8BFCA129BCA1] - 19/04/2015 - 23:53:13 R--A- . (.Microsoft Corporation - Syriac Standard Keyboard Layout.) -- C:\WINDOWS\system32\kbdsyr1.dll [5632]
O44 - LFC:[MD5.FD72905E46F0250D7C1C4E1FD38B77F4] - 19/04/2015 - 23:53:13 R--A- . (.Microsoft Corporation - Urdu Keyboard Layout.) -- C:\WINDOWS\system32\kbdurdu.dll [5632]
O44 - LFC:[MD5.22C2AF66D10FB47153706E1EA3B21AC8] - 19/04/2015 - 23:53:14 R--A- . (.Microsoft Corporation - Syriac Phoenetic Keyboard Layout.) -- C:\WINDOWS\system32\kbdsyr2.dll [5632]
O44 - LFC:[MD5.CF6F4A013A9B41E0321E3A0DDDDCA9B9] - 19/04/2015 - 23:53:15 ---A- . (.Microsoft Corporation - ISCII Code Page Translation DLL.) -- C:\WINDOWS\system32\c_iscii.dll [10752]
O44 - LFC:[MD5.94CEB7ACA994968685E18F6155EA86E8] - 19/04/2015 - 23:53:15 R--A- . (.Microsoft Corporation - Devanagari Keyboard Layout.) -- C:\WINDOWS\system32\kbdindev.dll [5632]
O44 - LFC:[MD5.89FD6D6E233393794FB75CF79DDC1E06] - 19/04/2015 - 23:53:15 R--A- . (.Microsoft Corporation - Vietnamese Keyboard Layout.) -- C:\WINDOWS\system32\kbdvntc.dll [5632]
O44 - LFC:[MD5.1BC1AE513105BD2AEE27583A5DB650D6] - 19/04/2015 - 23:53:16 ---A- . (.Microsoft Corporation - Thai Word Breaker.) -- C:\WINDOWS\system32\Thawbrkr.dll [185344]
O44 - LFC:[MD5.0EC03162E932B49E635A79445CCE1E4C] - 19/04/2015 - 23:53:16 R--A- . (.Microsoft Corporation - Eastern Armenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdarme.dll [5120]
O44 - LFC:[MD5.E98DC261A6D62610293FF0CBDA8CAF65] - 19/04/2015 - 23:53:16 R--A- . (.Microsoft Corporation - Georgian Keyboard Layout.) -- C:\WINDOWS\system32\kbdgeo.dll [5120]
O44 - LFC:[MD5.F514F89F4903C7FC56BE62A4BDE20C60] - 19/04/2015 - 23:53:16 R--A- . (.Microsoft Corporation - Gujarati Keyboard Layout.) -- C:\WINDOWS\system32\kbdinguj.dll [5632]
O44 - LFC:[MD5.0E445D2CEE6F1454973D84E1FFAA6140] - 19/04/2015 - 23:53:16 R--A- . (.Microsoft Corporation - Hindi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinhin.dll [5632]
O44 - LFC:[MD5.38709AC2F9012F620DD1043DF0BF86DE] - 19/04/2015 - 23:53:16 R--A- . (.Microsoft Corporation - Kannada Keyboard Layout.) -- C:\WINDOWS\system32\kbdinkan.dll [5632]
O44 - LFC:[MD5.5174B929760629FEE0450F821F836CBA] - 19/04/2015 - 23:53:16 R--A- . (.Microsoft Corporation - Marathi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinmar.dll [5632]
O44 - LFC:[MD5.76B29E1C9AEF011AFCE0F591234933BE] - 19/04/2015 - 23:53:16 R--A- . (.Microsoft Corporation - Punjabi/Gurmukhi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinpun.dll [6144]
O44 - LFC:[MD5.DCC32B8533FA6C84D64620BE49E110E3] - 19/04/2015 - 23:53:16 R--A- . (.Microsoft Corporation - Tamil Keyboard Layout.) -- C:\WINDOWS\system32\kbdintam.dll [5632]
O44 - LFC:[MD5.4DA25F026970A630B0F5FE5002BA7ECA] - 19/04/2015 - 23:53:16 R--A- . (.Microsoft Corporation - Telugu Keyboard Layout.) -- C:\WINDOWS\system32\kbdintel.dll [5632]
O44 - LFC:[MD5.1004B259E77BEF2033CAF435760D95A6] - 19/04/2015 - 23:53:16 R--A- . (.Microsoft Corporation - Western Armenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdarmw.dll [5120]
O44 - LFC:[MD5.9561820FE4E04CD67CCAD7D16810C740] - 20/04/2015 - 00:16:57 R--A- . (...) -- C:\DBI.EXE [17505]
O44 - LFC:[MD5.656ACA9DDCA96C931E397C64AFA3D838] - 20/04/2015 - 00:17:38 ---A- . (...) -- C:\WINDOWS\system32\alsnd3b6.rra [3670016]
O44 - LFC:[MD5.FF86422268DE771D571E123EB7092C6A] - 20/04/2015 - 00:22:40 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Descrambler Filter.) -- C:\WINDOWS\system32\Drivers\drmk.sys [60288]
O44 - LFC:[MD5.5CA4731210134C18AA249F77EC1118DB] - 20/04/2015 - 00:22:40 ---A- . (.Microsoft Corporation - WDM Streaming ActiveMovie Proxy.) -- C:\WINDOWS\system32\ksproxy.ax [130048]
O44 - LFC:[MD5.5B0F00E43A7094C0B7E433CB42C79164] - 20/04/2015 - 00:22:41 ---A- . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\WINDOWS\system32\Drivers\portcls.sys [145792]
O44 - LFC:[MD5.30648B4925A6797C05B364F64C3FB86A] - 20/04/2015 - 00:22:41 ---A- . (.Microsoft Corporation - User CSA Library.) -- C:\WINDOWS\system32\ksuser.dll [4096]
O44 - LFC:[MD5.13E75FEF9DFEB08EEDED9D0246E1F448] - 20/04/2015 - 00:22:53 ---A- . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\system32\Drivers\MSPCLOCK.sys [5376]
O44 - LFC:[MD5.1988A33FF19242576C3D0EF9CE785DA7] - 20/04/2015 - 00:22:55 ---A- . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\system32\Drivers\MSPQM.sys [4992]
O44 - LFC:[MD5.AE431A8DD3C1D0D0610CDBAC16057AD0] - 20/04/2015 - 00:22:57 ---A- . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\system32\Drivers\MSKSSRV.sys [7552]
O44 - LFC:[MD5.650AD082D46BAC0E64C9C0E0928492FD] - 20/04/2015 - 00:22:58 ---A- . (.Microsoft Corporation - System Audio WDM Filter.) -- C:\WINDOWS\system32\Drivers\sysaudio.sys [60800]
O44 - LFC:[MD5.1ED4DBBAE9F5D558DBBA4CC450E3EB2E] - 20/04/2015 - 00:23:00 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Audio Descrambler Filt.) -- C:\WINDOWS\system32\Drivers\drmkaud.sys [2944]
O44 - LFC:[MD5.D93CAD07C5683DB066B0B2D2D3790EAD] - 20/04/2015 - 00:23:01 ---A- . (.Microsoft Corporation - Kernel Mode Audio Mixer.) -- C:\WINDOWS\system32\Drivers\kmixer.sys [171776]
O44 - LFC:[MD5.841F385C6CFAF66B58FBD898722BB4F0] - 20/04/2015 - 00:23:03 ---A- . (.Microsoft Corporation - Microsoft Acoustic Echo Canceller.) -- C:\WINDOWS\system32\Drivers\aec.sys [142464]
O44 - LFC:[MD5.94ABC808FC4B6D7D2BBF42B85E25BB4D] - 20/04/2015 - 00:23:04 ---A- . (.Microsoft Corporation - Microsoft GS Wavetable Synthesizer.) -- C:\WINDOWS\system32\Drivers\swmidi.sys [54272]
O44 - LFC:[MD5.A6F881284AC1150E37D9AE47FF601267] - 20/04/2015 - 00:23:06 ---A- . (.Microsoft Corporation - Microsoft Kernel DLS Synthesizer.) -- C:\WINDOWS\system32\Drivers\DMusic.sys [52864]
O44 - LFC:[MD5.2797F33EBF50466020C430EE4F037933] - 20/04/2015 - 00:23:08 ---A- . (.Microsoft Corporation - MMSYSTEM Wave/Midi API mapper.) -- C:\WINDOWS\system32\Drivers\wdmaud.sys [82944]
O44 - LFC:[MD5.8E186B8F23295D1E42C573B82B80D548] - 20/04/2015 - 00:23:10 ---A- . (.Microsoft Corporation - Microsoft Kernel Audio Splitter.) -- C:\WINDOWS\system32\Drivers\splitter.sys [6400]
O44 - LFC:[MD5.6CD7B22193718F1D17A47A1CD6D37E75] - 20/04/2015 - 01:21:49 ---A- . (.Microsoft Corporation - USB Mass Storage Class Driver.) -- C:\WINDOWS\system32\Drivers\USBSTOR.SYS [26496]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 20/04/2015 - 01:23:23 ---A- . (...) -- C:\WINDOWS\setuperr.log [0]
O44 - LFC:[MD5.38FE831D9C5BA480D5AFB8DE93AE6F4A] - 20/04/2015 - 01:24:29 R--A- . (...) -- C:\WINDOWS\SET3.tmp [1014836]
O44 - LFC:[MD5.5051529BF3627996CFE4A3B14AD67E78] - 20/04/2015 - 01:24:31 R--A- . (...) -- C:\WINDOWS\SET4.tmp [1086058]
O44 - LFC:[MD5.3E6967FEB3E18473D8C2627AA0C49AD3] - 20/04/2015 - 01:24:34 R--A- . (...) -- C:\WINDOWS\SET8.tmp [14043]
O44 - LFC:[MD5.B538B0B531BCEDA127D171832333CD74] - 20/04/2015 - 01:26:26 ---A- . (.Microsoft Corporation - Pages de propriétés pour les périphériques.) -- C:\WINDOWS\system32\storprop.dll [76800]
O44 - LFC:[MD5.D72175A181B2E60B9541183ACE364AA7] - 20/04/2015 - 01:26:28 ---A- . (.Microsoft Corporation - Battery Class Installer.) -- C:\WINDOWS\system32\batt.dll [8704]
O44 - LFC:[MD5.16F769BC1D37CC14E3093B9881CF1691] - 20/04/2015 - 01:26:28 ---A- . (.Microsoft Corporation - Bloc-notes.) -- C:\WINDOWS\NOTEPAD.EXE [70656]
O44 - LFC:[MD5.486E0B1BC94C346E5C352C295388C803] - 20/04/2015 - 01:26:29 ----- . (...) -- C:\WINDOWS\system32\CONFIG.TMP [3072]
O44 - LFC:[MD5.F08DBD8C48A168818A3DFC28929EE6B5] - 20/04/2015 - 01:26:29 ---A- . (...) -- C:\WINDOWS\system32\AUTOEXEC.NT [1896]
O44 - LFC:[MD5.DA090A1AD995DB0716293E029E6198E5] - 20/04/2015 - 01:26:29 ---A- . (.Microsoft Corporation - Gestionnaire des tâches.) -- C:\WINDOWS\TASKMAN.EXE [15872]
O44 - LFC:[MD5.50708DAA1B1CBB7D6AC1CF8F56A24410] - 20/04/2015 - 01:26:29 ---A- . (.Microsoft Corporation - Infra-Red Bus Enumerator.) -- C:\WINDOWS\system32\Drivers\irenum.sys [11264]
O44 - LFC:[MD5.1E9B88D340481EDA7A9BF53A949E1F42] - 20/04/2015 - 01:26:31 ---A- . (.Digi International - DGSETUP DLL.) -- C:\WINDOWS\system32\dgsetup.dll [86044]
O44 - LFC:[MD5.7AE4CDB4AD25A08B711ECC5BE12EF3D7] - 20/04/2015 - 01:26:31 ---A- . (.Digi International, Inc. - Digi RealPort® Driver Upgrade.) -- C:\WINDOWS\system32\dgrpsetu.dll [176157]
O44 - LFC:[MD5.F899213C79DEE079DCE1EE730D82594F] - 20/04/2015 - 01:26:31 ---A- . (.Equinox Systems Inc. - Co-installeur série multiport Equinox.) -- C:\WINDOWS\system32\EqnClass.Dll [103424]
O44 - LFC:[MD5.A6011889A0F23EA2BFC9CCDEC11DF553] - 20/04/2015 - 01:26:31 ---A- . (.Microsoft Corporation - Co-installateur de classe Infrarouge.) -- C:\WINDOWS\system32\irclass.dll [13312]
O44 - LFC:[MD5.FA511331A48B582A7D584FC2408E8C1A] - 20/04/2015 - 01:26:31 ---A- . (.Perle Systems Ltd. - Specialix MPS NT Upgrade CoInstaller.) -- C:\WINDOWS\system32\spxcoins.dll [24661]
O44 - LFC:[MD5.6CB26848BCDAA361B6EE21264FB362C3] - 20/04/2015 - 01:26:32 ---A- . (...) -- C:\WINDOWS\system32\c_20127.nls [66082]
O44 - LFC:[MD5.6F8A509550FE8C92D07EE0143BF29BA1] - 20/04/2015 - 01:26:33 ---A- . (...) -- C:\WINDOWS\system32\c_10010.nls [66082]
O44 - LFC:[MD5.D2CA471D36A69D17F82D5C1B64FAEE39] - 20/04/2015 - 01:26:33 ---A- . (...) -- C:\WINDOWS\system32\c_10029.nls [66082]
O44 - LFC:[MD5.9CA501D2A8E6909C5B2E8C9274682BF1] - 20/04/2015 - 01:26:33 ---A- . (...) -- C:\WINDOWS\system32\c_10082.nls [66082]
O44 - LFC:[MD5.21E928C8E6ED8EEAB0D1AAEE82ACDD76] - 20/04/2015 - 01:26:33 ---A- . (...) -- C:\WINDOWS\system32\c_852.nls [66594]
O44 - LFC:[MD5.615DDBB5CBBAE8301C1E7FA95F1E66A3] - 20/04/2015 - 01:26:33 R--A- . (.Microsoft Corporation - Albania Keyboard Layout.) -- C:\WINDOWS\system32\KBDAL.DLL [6656]
O44 - LFC:[MD5.5B46568257EE49714564511D58E0DE53] - 20/04/2015 - 01:26:33 R--A- . (.Microsoft Corporation - Croatian/Slovenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdcr.dll [6656]
O44 - LFC:[MD5.36E68E02AF2206FC4A8C73CAEABE1FB0] - 20/04/2015 - 01:26:33 R--A- . (.Microsoft Corporation - Czech Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz.dll [7168]
O44 - LFC:[MD5.AFA30A44ED11A5F9A059A2767AB6A81A] - 20/04/2015 - 01:26:33 R--A- . (.Microsoft Corporation - Czech_101 Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz1.dll [6656]
O44 - LFC:[MD5.90535C13EB54E1F2C95478F1B99DCCEB] - 20/04/2015 - 01:26:33 R--A- . (.Microsoft Corporation - Czech_Programmer's Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz2.dll [6656]
O44 - LFC:[MD5.552221E92D6BF55F8358B927F00696C3] - 20/04/2015 - 01:26:33 R--A- . (.Microsoft Corporation - Serbian_Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdycl.dll [6656]
O44 - LFC:[MD5.F3D1EEC756847C70E65335E8CA1AE64B] - 20/04/2015 - 01:26:34 R--A- . (.Microsoft Corporation - Hungarian 101-key Keyboard Layout.) -- C:\WINDOWS\system32\kbdhu1.dll [5632]
O44 - LFC:[MD5.CF92D95B5CB6649CB9D7E8D7616487A7] - 20/04/2015 - 01:26:34 R--A- . (.Microsoft Corporation - Hungarian Keyboard Layout.) -- C:\WINDOWS\system32\kbdhu.dll [6656]
O44 - LFC:[MD5.D199B05901C2407FC0F87444A24A4F3C] - 20/04/2015 - 01:26:34 R--A- . (.Microsoft Corporation - Polish Keyboard Layout.) -- C:\WINDOWS\system32\kbdpl.dll [6656]
O44 - LFC:[MD5.897663C8606357A8E86E57CDEA8EE219] - 20/04/2015 - 01:26:34 R--A- . (.Microsoft Corporation - Polish Programmer's Keyboard Layout.) -- C:\WINDOWS\system32\kbdpl1.dll [5632]
O44 - LFC:[MD5.C2E62748C875A310A6D5B10498238A68] - 20/04/2015 - 01:26:34 R--A- . (.Microsoft Corporation - Romanian Keyboard Layout.) -- C:\WINDOWS\system32\kbdro.dll [5632]
O44 - LFC:[MD5.DCCE231E5BDF1401AC0F770EE16902AA] - 20/04/2015 - 01:26:34 R--A- . (.Microsoft Corporation - Slovak Keyboard Layout.) -- C:\WINDOWS\system32\kbdsl.dll [6656]
O44 - LFC:[MD5.93033C3EA80FB24B198B24DDECA07D4A] - 20/04/2015 - 01:26:34 R--A- . (.Microsoft Corporation - Slovak(QWERTY) Keyboard Layout.) -- C:\WINDOWS\system32\kbdsl1.dll [6656]
O44 - LFC:[MD5.5D038EEABA8EA438F6B5ABD5E91BC851] - 20/04/2015 - 01:26:35 ---A- . (...) -- C:\WINDOWS\system32\C_28594.NLS [66082]
O44 - LFC:[MD5.3E969213F35127D83DAB48FF1283E8E4] - 20/04/2015 - 01:26:35 ---A- . (...) -- C:\WINDOWS\system32\c_855.nls [66594]
O44 - LFC:[MD5.5CD475CA7B87844DE1E0483B536F9AAE] - 20/04/2015 - 01:26:35 ---A- . (...) -- C:\WINDOWS\system32\c_866.nls [66594]
O44 - LFC:[MD5.BBB6C3346064C6AECEE6AD9F144B1AEA] - 20/04/2015 - 01:26:35 R--A- . (.Microsoft Corporation - Estonia Keyboard Layout.) -- C:\WINDOWS\system32\kbdest.dll [6144]
O44 - LFC:[MD5.C047165ED75FF85DB5A89EFEE3DA1133] - 20/04/2015 - 01:26:35 R--A- . (.Microsoft Corporation - Latvia Keyboard Layout.) -- C:\WINDOWS\system32\kbdlv.dll [6144]
O44 - LFC:[MD5.27D72BCF2B495FCDA073DBA5F189D7A1] - 20/04/2015 - 01:26:35 R--A- . (.Microsoft Corporation - Latvia-QWERTY Keyboard Layout.) -- C:\WINDOWS\system32\kbdlv1.dll [6144]
O44 - LFC:[MD5.F5B3B152A1D2752BC88928EB1E031B7E] - 20/04/2015 - 01:26:35 R--A- . (.Microsoft Corporation - Lithuania Keyboard Layout.) -- C:\WINDOWS\system32\kbdlt.dll [5632]
O44 - LFC:[MD5.AF05A41DBD1B0424B5CB47092152C7F6] - 20/04/2015 - 01:26:35 R--A- . (.Microsoft Corporation - Lithuanian Keyboard Layout.) -- C:\WINDOWS\system32\kbdlt1.dll [5632]
O44 - LFC:[MD5.BAC7072B365F9648CA318154BA7E03EC] - 20/04/2015 - 01:26:36 ---A- . (...) -- C:\WINDOWS\system32\c_737.nls [66594]
O44 - LFC:[MD5.B537ACFAB9E70F0EF48DB696A08ADC81] - 20/04/2015 - 01:26:37 ---A- . (...) -- C:\WINDOWS\system32\C_28597.NLS [66082]
O44 - LFC:[MD5.0A206B5CACD3CA70D2044DA691304765] - 20/04/2015 - 01:26:37 ---A- . (...) -- C:\WINDOWS\system32\c_10006.nls [66082]
O44 - LFC:[MD5.780C444EB16B65E6DE96F794A732DA12] - 20/04/2015 - 01:26:37 ---A- . (...) -- C:\WINDOWS\system32\c_869.nls [66594]
O44 - LFC:[MD5.8BE0D77A873730B4EB1DAB7C6622CD46] - 20/04/2015 - 01:26:37 ---A- . (...) -- C:\WINDOWS\system32\c_875.nls [66082]
O44 - LFC:[MD5.1E81E1F3D5ACB3371CF73C1DE8F800BF] - 20/04/2015 - 01:26:37 R--A- . (.Microsoft Corporation - Greek IBM 220 Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe220.dll [5632]
O44 - LFC:[MD5.D26533FDF72381947F823882BBA4A196] - 20/04/2015 - 01:26:37 R--A- . (.Microsoft Corporation - Greek IBM 220 Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdhela2.dll [6144]
O44 - LFC:[MD5.AC81A176BA35D1D7A5CD53137F3160FE] - 20/04/2015 - 01:26:37 R--A- . (.Microsoft Corporation - Greek IBM 319 Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe319.dll [5632]
O44 - LFC:[MD5.F2312B8A76FD584ACD1D956688BEB6F8] - 20/04/2015 - 01:26:37 R--A- . (.Microsoft Corporation - Greek IBM 319 Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdhela3.dll [6656]
O44 - LFC:[MD5.83C99B438B3D6DBE7B838DA783E173AC] - 20/04/2015 - 01:26:37 R--A- . (.Microsoft Corporation - Greek Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe.dll [5632]
O44 - LFC:[MD5.A93447C87DDB6B1945F1F5F87EAB68DC] - 20/04/2015 - 01:26:37 R--A- . (.Microsoft Corporation - Greek_Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdgkl.dll [6144]
O44 - LFC:[MD5.90CC52E8B52F0EC3A41D14FFBE789324] - 20/04/2015 - 01:26:37 R--A- . (.Microsoft Corporation - Greek_Polytonic Keyboard Layout.) -- C:\WINDOWS\system32\kbdhept.dll [8192]
O44 - LFC:[MD5.E22D1B9AC7854C0A654E4C4232074E49] - 20/04/2015 - 01:26:38 ---A- . (...) -- C:\WINDOWS\system32\C_28595.NLS [66082]
O44 - LFC:[MD5.AF4A866226BD04ACF06135088D75BB63] - 20/04/2015 - 01:26:38 ---A- . (...) -- C:\WINDOWS\system32\c_10007.nls [66082]
O44 - LFC:[MD5.314E85390BEBDAE5D1E11DB2D8CBC6E9] - 20/04/2015 - 01:26:38 ---A- . (...) -- C:\WINDOWS\system32\c_10017.nls [66082]
O44 - LFC:[MD5.0304318F189E3CC4A99FCCCB0A68147F] - 20/04/2015 - 01:26:38 R--A- . (.Microsoft Corporation - Azerbaijan_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdaze.dll [5632]
O44 - LFC:[MD5.A1FA7A83F9D98D84419A8E64286284F4] - 20/04/2015 - 01:26:38 R--A- . (.Microsoft Corporation - Belarusian Keyboard Layout.) -- C:\WINDOWS\system32\kbdblr.dll [5632]
O44 - LFC:[MD5.1DF6E4758611E1328567BFE4D1B28E27] - 20/04/2015 - 01:26:38 R--A- . (.Microsoft Corporation - Bulgarian Keyboard Layout.) -- C:\WINDOWS\system32\kbdbu.dll [5632]
O44 - LFC:[MD5.95D9106D39AB410A7F7EE513F181F84C] - 20/04/2015 - 01:26:38 R--A- . (.Microsoft Corporation - Kazak_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdkaz.dll [5632]
O44 - LFC:[MD5.B6E962B7AC1CB4A78876953D369BE6DD] - 20/04/2015 - 01:26:38 R--A- . (.Microsoft Corporation - Russia(Typewriter) Keyboard Layout.) -- C:\WINDOWS\system32\kbdru1.dll [5632]
O44 - LFC:[MD5.C6F23BC1411E91C179B0635893BB40A1] - 20/04/2015 - 01:26:38 R--A- . (.Microsoft Corporation - Russian Keyboard Layout.) -- C:\WINDOWS\system32\kbdru.dll [5632]
O44 - LFC:[MD5.E5D4673C83271FEEE1ED73E1E281A42B] - 20/04/2015 - 01:26:38 R--A- . (.Microsoft Corporation - Serbian_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdycc.dll [5632]
O44 - LFC:[MD5.F2D1EEF5ADCD5995C015AB3CB15C9415] - 20/04/2015 - 01:26:38 R--A- . (.Microsoft Corporation - Tatar_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdtat.dll [5632]
O44 - LFC:[MD5.3DDE3DC57C54452A313DC20F3019F8E3] - 20/04/2015 - 01:26:38 R--A- . (.Microsoft Corporation - Ukrainian Keyboard Layout.) -- C:\WINDOWS\system32\kbdur.dll [5632]
O44 - LFC:[MD5.4F9CFFBF05831BB81833FC64A5329C36] - 20/04/2015 - 01:26:38 R--A- . (.Microsoft Corporation - Uzbek_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbduzb.dll [5632]
O44 - LFC:[MD5.1696413C242327A0AF8AF8E5CBD8AE04] - 20/04/2015 - 01:26:39 R--A- . (.Microsoft Corporation - Kyrgyz Keyboard Layout.) -- C:\WINDOWS\system32\kbdkyr.dll [5632]
O44 - LFC:[MD5.6AEDBCEE8C0475B10A5C244A35572737] - 20/04/2015 - 01:26:39 R--A- . (.Microsoft Corporation - Mongolian Keyboard Layout.) -- C:\WINDOWS\system32\kbdmon.dll [5632]
O44 - LFC:[MD5.EFFDFF60A38CF648811BBCDD722ECF5E] - 20/04/2015 - 01:26:40 ---A- . (...) -- C:\WINDOWS\system32\c_10081.nls [66082]
O44 - LFC:[MD5.C37A21EE1ADFDC13FC707D97073148ED] - 20/04/2015 - 01:26:40 ---A- . (...) -- C:\WINDOWS\system32\c_28599.nls [66082]
O44 - LFC:[MD5.A8764750B22B528D85A691A52CB21856] - 20/04/2015 - 01:26:40 ---A- . (...) -- C:\WINDOWS\system32\c_857.nls [66594]
O44 - LFC:[MD5.712A218557F99D136735E0545E5AE223] - 20/04/2015 - 01:26:40 R--A- . (.Microsoft Corporation - Azeri-Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdazel.dll [5632]
O44 - LFC:[MD5.188E56B70419D8353B8D4F3E381D9E52] - 20/04/2015 - 01:26:40 R--A- . (.Microsoft Corporation - Turkish F Keyboard Layout.) -- C:\WINDOWS\system32\kbdtuf.dll [6144]
O44 - LFC:[MD5.5D569F2951F878EF01D7723DC08682E9] - 20/04/2015 - 01:26:40 R--A- . (.Microsoft Corporation - Turkish Q Keyboard Layout.) -- C:\WINDOWS\system32\kbdtuq.dll [6144]
O44 - LFC:[MD5.35448F3A71EBBECF8E997FAD3A99327D] - 20/04/2015 - 01:26:41 ---A- . (...) -- C:\WINDOWS\system32\c_28603.nls [66082]
O44 - LFC:[MD5.A0E02492452D4E237465D99D005D91FD] - 20/04/2015 - 01:26:42 ---A- . (...) -- C:\WINDOWS\system.ini [231]
O44 - LFC:[MD5.90263081EED87A16E2CC623DDC76B1AE] - 20/04/2015 - 01:26:43 ---A- . (...) -- C:\WINDOWS\regopt.log [1470]
O44 - LFC:[MD5.49C805D42D75EDDC9B6A7130999C9054] - 20/04/2015 - 01:28:05 ---A- . (.Microsoft Corporation - MS AGPv3.5 Filter.) -- C:\WINDOWS\system32\Drivers\UAGP35.SYS [44672]
O44 - LFC:[MD5.FB36BB4140F2F482414E5EBF71898FB5] - 20/04/2015 - 01:28:12 ---A- . (.Microsoft Corporation - DLL de l'interface utilisateur USB.) -- C:\WINDOWS\system32\usbui.dll [77312]
O44 - LFC:[MD5.E9648254056BCE81A85380C0C3647DC4] - 20/04/2015 - 01:28:18 ---A- . (.VIA Technologies, Inc. - NDIS 5.0 miniport driver.) -- C:\WINDOWS\system32\Drivers\fetnd5.sys [27165]
O44 - LFC:[MD5.2CC30B68DD62B73D444A41322CD7FC4C] - 20/04/2015 - 01:29:02 ---A- . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58496]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 20/04/2015 - 01:29:36 ---A- . (...) -- C:\WINDOWS\Sti_Trace.log [0]
O44 - LFC:[MD5.D9F724AA26C010A217C97606B160ED68] - 20/04/2015 - 01:29:41 ---A- . (.Microsoft Corporation - AudStub Driver.) -- C:\WINDOWS\system32\Drivers\audstub.sys [3072]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 20/04/2015 - 01:34:41 ---A- . (...) -- C:\WINDOWS\system32\h323log.txt [0]
O44 - LFC:[MD5.1FD1FAD38F06F14BBCB78815C943E4A1] - 21/04/2015 - 00:57:31 ---A- . (...) -- C:\WINDOWS\system32\d3d9caps.dat [664]
O44 - LFC:[MD5.3946A448C0AC5A94B325B9D679DF6CF4] - 21/04/2015 - 02:10:38 ---A- . (.Tonec Inc. - Internet Download Manager LSP dll.) -- C:\WINDOWS\system32\idmmbc.dll [210352]
O44 - LFC:[MD5.456462905091DB042141487FE030E3C9] - 21/04/2015 - 04:01:51 ---A- . (.Indigo Rose Corporation - SUF60Runtime.) -- C:\WINDOWS\iun6002.exe [737280]
O44 - LFC:[MD5.4D328694BB516E46D2D184950D94433F] - 21/04/2015 - 04:06:54 ---A- . (.Microsoft Corporation - Microsoft GDI+.) -- C:\WINDOWS\system32\GdiPlus.dll [1700352]
O44 - LFC:[MD5.D4881B5AAB01D7198716E0EF2488176A] - 21/04/2015 - 04:06:58 ---A- . (...) -- C:\WINDOWS\system32\dopdf7.ctm [7549]
O44 - LFC:[MD5.588023AE5FCF6C9A8E2AE426A9E26774] - 21/04/2015 - 04:06:58 ---A- . (.Softland - doPDF Port Monitor User Interface.) -- C:\WINDOWS\system32\dopdfmi7.dll [19784]
O44 - LFC:[MD5.0F5EAA6BD2095F433E29293544FCC911] - 21/04/2015 - 04:06:58 ---A- . (.Softland - doPDF Port Monitor.) -- C:\WINDOWS\system32\dopdfmn7.dll [22856]
O44 - LFC:[MD5.AB73A39A5E45F465B02C11C500BB0278] - 21/04/2015 - 04:15:00 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\mbam.sys [23256]
O44 - LFC:[MD5.5112869E59159C5C86226C0564947A13] - 21/04/2015 - 04:15:00 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\WINDOWS\system32\Drivers\mbamchameleon.sys [120024]
O44 - LFC:[MD5.3D134FC391D82FE29F0A6B8902C7E4AB] - 21/04/2015 - 17:11:48 ---A- . (...) -- C:\WINDOWS\d4s.hst [120]
O44 - LFC:[MD5.83DF5B3DE1C6527972946CDB328446F7] - 22/04/2015 - 00:00:40 ---A- . (.Avast Software s.r.o. - avast! Virtualization Driver.) -- C:\WINDOWS\system32\Drivers\aswSnx.sys [787760]
O44 - LFC:[MD5.2169B4B1EFAA3453A4DA732F1F94C1E1] - 22/04/2015 - 00:00:52 ---A- . (.Avast Software s.r.o. - avast! Screen Saver stub.) -- C:\WINDOWS\avastSS.scr [43112]
O44 - LFC:[MD5.1D66934D8DB4AEBE53D3F0FE40CA76CE] - 22/04/2015 - 00:00:52 ---A- . (.Avast Software s.r.o. - avast! start-up scanner.) -- C:\WINDOWS\system32\aswBoot.exe [291312]
O44 - LFC:[MD5.EFDEF61C488A193986D4672658E91532] - 22/04/2015 - 00:01:01 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswHwid.sys [24144]
O44 - LFC:[MD5.2DB91CE80C367ACDD1331DE9B1E3EAEF] - 22/04/2015 - 00:01:01 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904]
O44 - LFC:[MD5.D45875D018F9FB9BF19B976AD8791DE9] - 22/04/2015 - 00:01:01 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswVmm.sys [209048]
O44 - LFC:[MD5.91AAF4792987B43C0653D74516F092C8] - 22/04/2015 - 00:01:01 ---A- . (.Avast Software s.r.o. - avast! File System Minifilter for Windows 2.) -- C:\WINDOWS\system32\Drivers\aswMonFlt.sys [74976]
O44 - LFC:[MD5.9064B31FA781B925136DD68C17C0B1B4] - 22/04/2015 - 00:01:01 ---A- . (.Avast Software s.r.o. - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\Drivers\aswTdi.sys [57888]
O44 - LFC:[MD5.8FE9BB175E9C789FED4CB6CEFEC4EE18] - 22/04/2015 - 00:01:01 ---A- . (.Avast Software s.r.o. - avast! TDI Redirect Driver.) -- C:\WINDOWS\system32\Drivers\aswRdr.sys [55200]
O44 - LFC:[MD5.CB2B9FBFF7A3104A6AA60E797156800F] - 22/04/2015 - 00:01:01 ---A- . (.Avast Software s.r.o. - avast! self protection module.) -- C:\WINDOWS\system32\Drivers\aswSP.sys [427992]
O44 - LFC:[MD5.065BE7092B2D15DC0EC841065E2CFA04] - 22/04/2015 - 02:03:05 ---A- . (...) -- C:\WINDOWS\AMUninst01c.exe [88064]
O44 - LFC:[MD5.EE9D8B7FAD6E066F255E7598D3CB25F4] - 22/04/2015 - 22:49:17 ---A- . (...) -- C:\WINDOWS\win.ini [552]
O44 - LFC:[MD5.CB601E33C4EDA3AAC1A4008E7D3A8A64] - 22/04/2015 - 23:07:53 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [324320]
O44 - LFC:[MD5.04B309A1A653177994630C2773E659F1] - 23/04/2015 - 00:21:57 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys [119512]
O44 - LFC:[MD5.8CDF37310AB05BB28085192C1572F33F] - 23/04/2015 - 03:48:36 ---A- . (...) -- C:\WINDOWS\wiadebug.log [216]
O44 - LFC:[MD5.DAA717F42263872E4F368625B2B50164] - 23/04/2015 - 03:48:37 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.B7B344A383243B32862FE90C66568265] - 23/04/2015 - 04:00:48 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [775210]
O44 - LFC:[MD5.8772EF5F4B6DB1E9D7B3CD549CC23F14] - 23/04/2015 - 04:00:48 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [40128]
O44 - LFC:[MD5.1D7C7EDBA138956CBF8C71EBF5BD30A8] - 23/04/2015 - 04:00:48 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [48856]
O44 - LFC:[MD5.C0800DEE54F833AAF875DF29E9AD89D6] - 23/04/2015 - 04:00:48 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [311740]
O44 - LFC:[MD5.8CA5EDB7F6FF04B78428DDDBF8AAA0AE] - 23/04/2015 - 04:00:48 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [368076]
O44 - LFC:[MD5.65B3FE310B870F7EB6E9FF74EEC5044E] - 23/04/2015 - 19:55:51 R---- . (.Realtek Semiconductor Corp. - Driver Removing for Windows x64 or x86_32.) -- C:\WINDOWS\alcrmv.exe [200704]
O44 - LFC:[MD5.D21DA7D1226CC6BC67CB791E9F0EFCB6] - 23/04/2015 - 19:55:51 R---- . (.Realtek Semiconductor Corp. - Driver Update for Windows x64 or x86_32.) -- C:\WINDOWS\alcupd.exe [294912]
O44 - LFC:[MD5.11524C11F84FB817C6484605FA2C6043] - 23/04/2015 - 19:55:52 R---- . (.Realtek Semiconductor Corp. - Realtek AC97 Audio Control Panel.) -- C:\WINDOWS\system32\alsndmgr.cpl [18751488]
O44 - LFC:[MD5.C99E22EFE74C8B3EFF93E227472FE247] - 23/04/2015 - 19:55:56 R---- . (...) -- C:\WINDOWS\system32\alsndmgr.wav [141016]
O44 - LFC:[MD5.6D8D3E1AB693BAF09CCE70CA75939E8F] - 23/04/2015 - 19:55:56 R---- . (.Realtek Semiconductor Corp. - Realtek Audio Control Panel.) -- C:\WINDOWS\system32\RTLCPL.exe [9410048]
O44 - LFC:[MD5.7EB00EAF81E04A3D86B068262015C6FC] - 23/04/2015 - 19:55:58 R---- . (...) -- C:\WINDOWS\system32\ChCfg.exe [40960]
O44 - LFC:[MD5.FBEF9F9C97B6B93E2041E65D3CD81C9C] - 23/04/2015 - 19:55:58 R---- . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\soundman.exe [77824]
O44 - LFC:[MD5.118775F60B07291B63652762B1009216] - 23/04/2015 - 19:55:59 R---- . (.Pas de propriétaire - RtlCPAPI Module.) -- C:\WINDOWS\system32\RtlCPAPI.dll [156672]
O44 - LFC:[MD5.35045A23957A71BA649740741E69408C] - 23/04/2015 - 19:55:59 R---- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\system32\Drivers\alcxwdm.sys [2324480]
O44 - LFC:[MD5.B8252B042AB6DCE281D079253A404A38] - 23/04/2015 - 19:56:08 R---- . (...) -- C:\WINDOWS\avrack.ini [164]
O44 - LFC:[MD5.75CDB02A3732980B9DF1F2A98B225F93] - 23/04/2015 - 19:59:33 ---A- . (...) -- C:\WINDOWS\RtlRack.ini [169]
O44 - LFC:[MD5.0363E216E4EB5052969C96608934DBDE] - 23/04/2015 - 20:04:59 R--A- . (.VIA Technologies inc,.ltd - VIA RAID DRIVER FOR WIN 2000/XP/2003IA32.) -- C:\WINDOWS\system32\Drivers\viamraid.sys [60928]
O44 - LFC:[MD5.287CD9881E64A21EECFE5EC825865DAA] - 23/04/2015 - 20:05:03 ---A- . (...) -- C:\WINDOWS\setupapi.log [323787]
O44 - LFC:[MD5.0DF3370A5D32BE5D9A0B455412979F9F] - 23/04/2015 - 21:04:26 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32368]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 23/04/2015 - 21:14:50 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 23/04/2015 - 21:15:17 ---A- . (...) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.537A1399F22075CFA730344CF91D84D7] - 23/04/2015 - 21:21:04 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [91940]
~ Files: 397 Scanned in 00mn 23s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
~ ShellExecuteHooks: Scanned in 00mn 00s



---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Google\Chrome\Application\chrome.exe" [Enabled] .(.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Mozilla Firefox\firefox.exe" [Enabled] .(.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office12\OUTLOOK.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
~ Keys Export: 5 Scanned in 00mn 00s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll
~ LSA: 6 Scanned in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
~ CSB: 21 Scanned in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ IFEO: Scanned in 00mn 00s



---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
~ TDSD: 12 Scanned in 00mn 00s



---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
~ MSCP: 6 Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "SoftwareSASGeneration"=1
~ MWPS: 6 Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
~ MWPE Keys: 1 Scanned in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:20/06/2005 - 15:08:44 R---- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\system32\Drivers\alcxwdm.sys [2324480]
O58 - SDL:22/04/2015 - 00:01:01 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswHwid.sys [24144] =>.ALWIL Software
O58 - SDL:22/04/2015 - 00:01:01 ---A- . (.Avast Software s.r.o. - avast! File System Minifilter for Windows 2003/Vista.) -- C:\WINDOWS\system32\Drivers\aswMonFlt.sys [74976]
O58 - SDL:22/04/2015 - 00:01:01 ---A- . (.Avast Software s.r.o. - avast! TDI Redirect Driver.) -- C:\WINDOWS\system32\Drivers\aswRdr.sys [55200]
O58 - SDL:22/04/2015 - 00:01:01 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904] =>.ALWIL Software
O58 - SDL:22/04/2015 - 00:00:40 ---A- . (.Avast Software s.r.o. - avast! Virtualization Driver.) -- C:\WINDOWS\system32\Drivers\aswSnx.sys [787760]
O58 - SDL:22/04/2015 - 00:01:01 ---A- . (.Avast Software s.r.o. - avast! self protection module.) -- C:\WINDOWS\system32\Drivers\aswSP.sys [427992]
O58 - SDL:22/04/2015 - 00:01:01 ---A- . (.Avast Software s.r.o. - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\Drivers\aswTdi.sys [57888]
O58 - SDL:22/04/2015 - 00:01:01 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswVmm.sys [209048] =>.ALWIL Software
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\Drivers\cinemst2.sys [262528]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\Drivers\cpqdap01.sys [11776]
O58 - SDL:19/09/2000 - 10:16:56 ---A- . (...) -- C:\WINDOWS\system32\Drivers\DLPORTIO.SYS [3584]
O58 - SDL:04/08/2004 - 05:46:08 ---A- . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys [800256]
O58 - SDL:04/08/2004 - 05:46:20 ---A- . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys [154496]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys [5888]
O58 - SDL:17/08/2001 - 21:13:08 ---A- . (.VIA Technologies, Inc. - NDIS 5.0 miniport driver.) -- C:\WINDOWS\system32\Drivers\fetnd5.sys [27165]
O58 - SDL:17/03/2015 - 05:15:22 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\mbam.sys [23256]
O58 - SDL:17/03/2015 - 05:15:30 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\WINDOWS\system32\Drivers\mbamchameleon.sys [120024]
O58 - SDL:23/04/2015 - 00:21:57 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys [119512]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\nikedrv.sys [12032]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\Drivers\ptilink.sys [17792]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\Drivers\rio8drv.sys [12032]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\riodrv.sys [12032]
O58 - SDL:17/07/2004 - 16:36:38 ---A- . (...) -- C:\WINDOWS\system32\Drivers\secdrv.sys [27440]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\Drivers\tsbvcap.sys [21376]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\Drivers\vdmindvd.sys [58112]
O58 - SDL:20/06/2005 - 11:53:30 R--A- . (.VIA Technologies inc,.ltd - VIA RAID DRIVER FOR WIN 2000/XP/2003IA32.) -- C:\WINDOWS\system32\Drivers\viamraid.sys [60928]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]
O58 - SDL:04/08/2004 - 03:46:56 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]
O58 - SDL:07/09/2002 - 01:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]
O58 - SDL:04/08/2004 - 03:45:26 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]
O58 - SDL:04/08/2004 - 03:45:16 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]
O58 - SDL:04/08/2004 - 03:45:12 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]
O58 - SDL:04/08/2004 - 03:45:16 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]
O58 - SDL:04/08/2004 - 03:45:14 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]
~ Drivers: 42 Scanned in 00mn 02s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 20/04/2015 - 22:50:46 ---A- . (.Macrovision Corporation.) -- C:\Documents and Settings\yacine\Local Settings\Temp\isp7.tmp\_Setup.dll [368640]
O61 - LFC: 20/04/2015 - 22:50:46 ---A- . (.Macrovision Corporation.) -- C:\Documents and Settings\yacine\Local Settings\Temp\isp8.tmp\_Setup.dll [368640]
O61 - LFC: 21/04/2015 - 22:50:46 ---A- . (...) -- C:\Documents and Settings\yacine\Local Settings\Temp\bassmod.dll [9728]
O61 - LFC: 21/04/2015 - 22:50:46 ---A- . (...) -- C:\Documents and Settings\yacine\Local Settings\Temp\nso10.tmp\ServicesHelper.dll [4608]
O61 - LFC: 21/04/2015 - 22:50:46 ---A- . (.C Vital.) -- C:\Documents and Settings\yacine\Local Settings\Temp\@6C.tmp\subwaysurfers_setup.exe [540119]
O61 - LFC: 21/04/2015 - 22:50:46 ---A- . (.Mozilla Corporation.) -- C:\Documents and Settings\yacine\Local Settings\Temp\nsh4D.tmp\webapp-uninstaller.exe [74768]
O61 - LFC: 21/04/2015 - 22:50:46 ---A- . (.Mozilla Corporation.) -- C:\Documents and Settings\yacine\Local Settings\Temp\nsy12.tmp\webapp-uninstaller.exe [74768]
O61 - LFC: 21/04/2015 - 22:50:46 ---A- . (.Mozilla Corporation.) -- C:\Documents and Settings\yacine\Local Settings\Temp\nsz52.tmp\webapp-uninstaller.exe [74768]
O61 - LFC: 22/04/2015 - 22:50:37 ---A- . (...) -- C:\Documents and Settings\yacine\Local Settings\Application Data\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849]
O61 - LFC: 23/04/2015 - 22:50:35 ---A- . (...) -- C:\Documents and Settings\yacine\Local Settings\Application Data\Adobe\Acrobat\11.0\UserCache.bin [84805]
O61 - LFC: 23/04/2015 - 22:50:35 R--A- . (...) -- C:\Documents and Settings\yacine\Application Data\Microsoft\Installer\{0F9196C6-58B4-445B-B56E-B1200FECC151}\_18be6784.exe [1078]
O61 - LFC: 23/04/2015 - 22:50:35 R--A- . (...) -- C:\Documents and Settings\yacine\Application Data\Microsoft\Installer\{0F9196C6-58B4-445B-B56E-B1200FECC151}\_294823.exe [1078]
O61 - LFC: 23/04/2015 - 22:50:35 R--A- . (...) -- C:\Documents and Settings\yacine\Application Data\Microsoft\Installer\{0F9196C6-58B4-445B-B56E-B1200FECC151}\_2cd672ae.exe [1078]
O61 - LFC: 23/04/2015 - 22:50:35 R--A- . (...) -- C:\Documents and Settings\yacine\Application Data\Microsoft\Installer\{0F9196C6-58B4-445B-B56E-B1200FECC151}\_4ae13d6c.exe [1078]
O61 - LFC: 23/04/2015 - 22:50:46 ---A- . (.Macrovision Corporation.) -- C:\Documents and Settings\yacine\Local Settings\Temp\isp5B.tmp\_Setup.dll [368640]
~ 147 Fichiers temporaires (Temporary files)
~ 2 Fichiers cookies (Cookies files)
~ Files: 15 Scanned in 00mn 11s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 22/04/2015 - C:\WINDOWS\system32\drivers\aswHwid.sys (aswHwid) .(...) - LEGACY_ASWHWID
O64 - Services: CurCS - 22/04/2015 - C:\WINDOWS\system32\drivers\aswMonFlt.sys (aswMonFlt) .(.Avast Software s.r.o. - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - 22/04/2015 - C:\WINDOWS\system32\drivers\aswRdr.sys (aswRdr) .(.Avast Software s.r.o. - avast! TDI Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - 22/04/2015 - C:\WINDOWS\system32\Drivers\aswRvrt.sys (aswRvrt) .(...) - LEGACY_ASWRVRT
O64 - Services: CurCS - 22/04/2015 - C:\WINDOWS\system32\drivers\aswSnx.sys (aswSnx) .(.Avast Software s.r.o. - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - 22/04/2015 - C:\WINDOWS\system32\drivers\aswSP.sys (aswSP) .(.Avast Software s.r.o. - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - 22/04/2015 - C:\WINDOWS\system32\drivers\aswTdi.sys (aswTdi) .(.Avast Software s.r.o. - avast! TDI Filter Driver.) - LEGACY_ASWTDI
O64 - Services: CurCS - 22/04/2015 - C:\WINDOWS\system32\Drivers\aswVmm.sys (aswVmm) .(...) - LEGACY_ASWVMM
O64 - Services: CurCS - 22/04/2015 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (avast! Antivirus) .(.Avast Software s.r.o. - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS
O64 - Services: CurCS - 07/09/2002 - C:\WINDOWS\system32\drivers\dmload.sys (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - 17/03/2015 - C:\WINDOWS\system32\drivers\mbam.sys (MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR
~ Legacy: 105 Scanned in 00mn 00s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (r) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 10 Scanned in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Enumère les service demarrés par Svchost (SSS) (O83)
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\system32\appmgmts.dll [176640]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496]
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [77312]
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [60416]
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576]
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [111616]
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040]
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [243200]
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135168]
O83 - Search Svchost Services: HidServ (HidServ) . (...) -- C:\WINDOWS\system32\hidserv.dll [0]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [96768]
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096]
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792]
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [198144]
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [89088]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [174080]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [49152]
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [193024]
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll [18944]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [38912]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\system32\ipnathlp.dll [332800]
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171008]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\system32\tapisrv.dll [246272]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135168]
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90624]
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [177664]
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [359936]
O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\system32\advapi32.dll [685056]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408]
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [81408]
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129536]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [382464]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135168]
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38912]
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Fournisseur de services de périphérique multimédia Microsoft.) -- C:\WINDOWS\system32\mspmsnsv.dll [52736]
~ Services: 38 Scanned in 00mn 00s



---\\ Enumère les données de la clé NameSpace (MNS) (O92)
O92 - MNS: Web Folders - {BDEADF00-C265-11D0-BCED-00A0C90AB50F}
~ MNS: 1 Scanned in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 04/08/2004 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SS - | Auto 20/04/2015 116648 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 20/04/2015 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Auto 17/03/2015 1080120 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
SS - | Demand 21/04/2015 148080 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 22/04/2015 343336 | (avast! Antivirus) . (.Avast Software s.r.o..) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
~ Services: Scanned in 00mn 18s



---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by yacine at 23/04/2015 22:51:53
device: opened successfully
user: MBR read successfully
Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys viaide.sys PCIIDEX.SYS
1 nt!IofCallDriver[0x804E3D45] >> \Device\Harddisk0\DR0[0x84F99030]
3 CLASSPNP[0xF78CD05B] >> nt!IofCallDriver[0x804E3D45] >> \Device\00000060[0x84F7DF18]
5 ACPI[0xF7832620] >> nt!IofCallDriver[0x804E3D45] >> \Device\Ide\IdeDeviceP0T0L0-3[0x84F90418]
kernel: MBR read successfully
user & kernel MBR OK
~ MBR: 13 Scanned in 00mn 02s



---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by yacine at 23/04/2015 22:51:55
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s



---\\ Scan Additionnel (O88)
Database Version : 13008 - (20/04/2015)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 1

[HKCU\Software\ProductSetup] =>Adware.InstallCore^
~ Additionnel Scan: 114811 Items scanned in 00mn 35s



---\\ Informations complémentaires sur les modules
~ http://nicolascoolman.fr/g2-google-chrome-extensions/ =>.Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5)
~ http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects de navigateur (O2)
~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4)
~ http://nicolascoolman.fr/o50-image-file-execution-options-zhpdiag/ =>.Image File Execution Options (IFEO) (O50)
~ AMI: 5 Scanned in 00mn 00s



---\\ Récapitulatif des détections trouvées sur votre station
http://nicolascoolman.fr/adware-installcore =>Adware.InstallCore
~ MSI: 1 link(s) detected in 00mn 00s



End of the scan (1285 lines in 03mn 10s)(0.4)