Rapport de ZHPDiag v1.34.19 par Nicolas Coolman, Update du 09/01/2013
Run by Damien at 09.01.2013 19:57:06
State :
UAC : Deactivate by program


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 17.0.1 v17.0.1 (Defaut)
GCIE: Google Chrome v23.0.1271.97

---\\ Windows Product Information
~ Langage: Fran�ais
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_COA_NSLP channel
Windows ID Activation : OK
~ Windows Partial Key : XV4FB
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 16336.0 MB (71% free)
System Restore: Activ� (Enable)
System drive C: has 6 GB (9%) free of 60 GB

---\\ Logged in mode
~ Computer Name: DAMIEN-PC
~ User Name: Damien
~ All Users Names: UpdatusUser, HomeGroupUser$, Damien, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Damien\AppData\Roaming\
~ %Desktop% : C:\Users\Damien\Desktop\
~ %Favorites% : C:\Users\Damien\Favorites\
~ %LocalAppData% : C:\Users\Damien\AppData\Local\
~ %StartMenu% : C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 6 Go of 60 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 393 Go of 488 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 253 Go of 443 Go)
G:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Scan Security Center in 00mn 00s



---\\ Search Generic System Files
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25.02.2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de d�marrage de Windows.) (.14.07.2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.5121DB613E10A46A3C5085B479026AA7] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.14.11.2012 - 07:04:11.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d�ouverture de session Windows.) (.21.11.2010 - 04:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Biblioth�que de licences.) (.21.11.2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28.12.2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14.07.2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14.07.2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21.11.2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21.11.2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21.11.2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14.07.2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14.07.2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27.04.2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21.11.2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.E453ACF4E7D44E5530B5D5F2B9CA8563] - (.Microsoft Corporation - Pilote du syst�me de fichiers NT.) (.31.08.2012 - 19:19:35.) -- C:\Windows\system32\Drivers\ntfs.sys [1659760]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parall�le.) (.14.07.2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21.11.2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14.07.2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21.11.2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.DF8126BD41180351A093A3AD2FC8903B] - (.Microsoft Corporation - Pilote de clich� instantan� du volume.) (.25.02.2011 - 07:25:38.) -- C:\Windows\system32\Drivers\volsnap.sys [296320]
~ Scan Generic Processes in 00mn 00s



---\\ Hidden files state (Hidden/Total)
~ Mes images (My Pictures) : 2/195
~ Mes musiques (My Musics) : 10/3815
~ Mes Favoris (My Favorites) : 1/18
~ Mes Documents (My Documents) : 2/251
~ Mon Bureau (My Desktop) : 1/4
~ Menu demarrer (Programs) : 1/16
~ Scan Hidden Files in 00mn 00s



---\\ Running Processes
[MD5.3B2DDFABCC929174CD7212D11CEF0E0E].(...) -- C:\ProgramData\BrowserProtect\2.5.986.67\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2443800] [PID.2248]
[MD5.7DFCCC67990B6DE7F30F553A4E4612A4].(...) -- D:\Program Files (x86)\RocketDock\RocketDock.exe [495616] [PID.2756]
[MD5.A24B9F75B9535B7CCDDC1E2DE7CBF64F].(.Intel Corporation.Intel(R) USB 3.0 Monitor.) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648] [PID.2652]
[MD5.1D2B51E5291448DA123644A41250F6D6].(.AVG Technologies CZ, s.r.o..AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe [3143800] [PID.3096]
[MD5.84A878D2D4A84CC73D53733F80FB57CE].(.SweetIM Technologies Ltd..Update Manager for SweetPacks.) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [231768] [PID.3156]
[MD5.92C8B4413CAC0350C76AC5168FF49B6F].(..VProtect Application.) -- C:\Program Files (x86)\AVG Secure Search\vprot.exe [1099592] [PID.3180]
[MD5.205E6E08B4921CE48B8E80A2D2FDE6F2].(.Logitech Inc..Logitech G-series Media Display.) -- C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe [522824] [PID.3460]
[MD5.A80C173AC5C75706BB74AE4D78F2A53D].(.Microsoft Corporation.Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe [164864] [PID.2624]
[MD5.90C2705EADBFB539A848333B4F3E99FD].(.TeamSpeak Systems GmbH.TeamSpeak 3 Client.) -- D:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe [9128944] [PID.5688]
[MD5.E3CD0A561F3AABE8607BF1474F4AE1DD].(.Valve Corporation.Steam.) -- E:\Steam\Steam.exe [1354736] [PID.5556]
[MD5.5744FFF8E72D105C138DAE9E17BB29FE].(.Mozilla Corporation.Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [916960] [PID.5676]
[MD5.C142445B59C1DABA31F6397A34C42C74].(.Mozilla Corporation.Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [16864] [PID.4692]
[MD5.4EBF0CF9B48781DA145A147AA7E9E505].(.Adobe Systems, Inc..Adobe Flash Player 11.5 r502.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe [1808392] [PID.6080]
[MD5.0F3AA1E262FC566E4A652CFE837DF10F].(.Nicolas Coolman.ZHPDiag.) -- D:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [4969984] [PID.6148]
~ Scan Processes Running in 00mn 00s



---\\ Google Chrome, Start,Search,Extensions (G0,G1,G2)
C:\Users\Damien\AppData\Local\Google\Chrome\User Data\Default\Preferences
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.com
G0 - GCSP: Preference [User Data\Default] http://www.google.com
G1 - GCS: Preference [User Data\Default] None
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3)
C:\Users\Damien\AppData\Roaming\Mozilla\Firefox\Profiles\31jy3jpe.default\prefs.js
C:\Users\Damien\AppData\Roaming\Mozilla\Firefox\Profiles\31jy3jpe.default\user.js
M3 - MFPP: Plugins - [Damien] -- C:\Users\Damien\AppData\Roaming\Mozilla\Firefox\Profiles\31jy3jpe.default\searchplugins\babylon1.xml
M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\avg-secure-search.xml
M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Damien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [Damien - 31jy3jpe.default] http://google.fr
M2 - MFEP: prefs.js [Damien - 31jy3jpe.default\jid1-qQSMEVsYTOjgYA@jetpack] [] Better Battlelog (BBLog) v3.2.0 (.BrainFooLong.)
M2 - MFEP: prefs.js [Damien - 31jy3jpe.default\plugin@yontoo.com] [] Yontoo v1.20.00 (.Yontoo LLC.)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.10.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.10.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.10.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com # win64 # 6.5.0.3.) -- C:\Program Files\ma-config.com\x64\nphardwaredetection.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.10411.0.) -- C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 4.0.1f1.) -- C:\Users\Damien\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
P2 - FPN: [HKCU] [ubisoft.com/uplaypc] - (.Ubisoft - Uplay PC Plugin.) -- D:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer Extensions, Start, Search (R4,R3,R0,R1)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Line Analysis F0, F1, F2, F3 - IniFiles, Auto loading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 0



---\\ Browser Helper Objects (O2)
O2 - BHO: CrossriderApp0021810 [64Bits] - {11111111-1111-1111-1111-110211181110} . (.215 Apps - Giant Savings Extension BHO.) -- C:\Program Files (x86)\Giant Savings Extension\Giant Savings Extension.dll
O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper [64Bits] - {2EECD738-5844-4a99-B4B6-146BF802613B} . (.Babylon BHO - .) -- C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.4.9\bh\BabylonToolbar.dll
O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft� Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar [64Bits] - {95B7759C-8C7F-4BF1-B163-73684A933233} . (. - toolbar.dll.) -- C:\Program Files (x86)\AVG Secure Search\14.0.0.7\AVG Secure Search_toolbar.dll
O2 - BHO: Wajam IE BHO [64Bits] - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} . (.Wajam - Wajam Internet Explorer Add-on.) -- C:\Program Files (x86)\Wajam\IE\priam_bho.dll
O2 - BHO: Yontoo Layers [64Bits] - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} . (.Yontoo LLC - Yontoo Runtime.) -- C:\Program Files (x86)\Yontoo\YontooIEClient.dll
~ Scan BHO in 00mn 00s



---\\ Auto loading programs from Registry and folders (O4)
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
O4 - HKLM\..\Run: [Launch LgDeviceAgent] . (.Logitech Inc. - Logitech GamePanel Agent.) -- C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe
O4 - HKLM\..\Run: [Launch LCDMon] . (.Logitech Inc. - Logitech LCD Manager.) -- C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
O4 - HKLM\..\Run: [Launch LGDCore] . (.Logitech Inc. - Logitech G-series Profiler.) -- C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
O4 - HKLM\..\Run: [EvtMgr6] . (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
O4 - HKCU\..\Run: [RocketDock] . (...) -- D:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [AdobeBridge]
O4 - HKLM\..\Wow6432Node\Run: [USB3MON] . (.Intel Corporation - Intel(R) USB 3.0 Monitor.) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Wow6432Node\Run: [Sweetpacks Communicator] . (.SweetIM Technologies Ltd. - Update Manager for SweetPacks.) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
O4 - HKLM\..\Wow6432Node\Run: [vProt] . (. - VProtect Application.) -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-1440571822-1613912104-2328342273-1003-1440571822-1613912104-2328342273-1000\..\Run: [RocketDock] . (...) -- D:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - HKUS\S-1-5-21-1440571822-1613912104-2328342273-1003-1440571822-1613912104-2328342273-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-21-1440571822-1613912104-2328342273-1003-1440571822-1613912104-2328342273-1000\..\Run: [AdobeBridge]
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
~ Scan Application in 00mn 00s



---\\ Other User Links (O4)
O4 - Global Startup: C:\Users\UpdatusUser\Desktop\CamStudio.lnk . (...) -- D:\Program Files (x86)\CamStudio\Recorder.exe (.not file.)
O4 - Global Startup: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\Damien\Desktop\Minecraft.lnk . (...) -- C:\Users\Damien\AppData\Roaming\.minecraft\Minecraft.bat
O4 - Global Startup: C:\Users\Damien\Desktop\Minecraft_Server.lnk . (...) -- D:\Program Files (x86)\Serveur_minecraft\Minecraft_Server.exe
O4 - Global Startup: C:\Users\Damien\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\Damien\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Scan Global Startup in 00mn 00s



---\\ IE Options icon not visible in Control Panel (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ Scan IE Control Panel in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d�affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corporation - Microsoft� Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corporation - Microsoft� Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
~ Scan Winsock in 00mn 00s



---\\ Lop.com/Domain Hijackers (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{5E152C77-CE79-489E-9DFE-EB31FE2C9D99}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{5E152C77-CE79-489E-9DFE-EB31FE2C9D99}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS2\Services\Tcpip\..\{5E152C77-CE79-489E-9DFE-EB31FE2C9D99}: DhcpNameServer = 212.27.40.241 212.27.40.240
~ Scan Domain in 00mn 00s



---\\ Extra protocols (O18)
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contr�le ActiveX pour le flux vid�o.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft� InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft� InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: skype4com [64Bits] - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contr�le ActiveX pour le flux vid�o.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: viprotocol [64Bits] - {B658800C-F66E-4EF3-AB85-6C0C227862A9} . (...) -- C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\14.0.0\ViProtocol.dll
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ AppInit_DLLs Registry value Autorun (O20)
O20 - Winlogon Notify: LBTWlgn . (.Logitech, Inc. - Logitech Bluetooth Service.) -- c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
O20 - Winlogon Notify: WB . (...) -- C:\Program Files (x86)\Stardock\MyColors\fast64.dll (.not file.)
~ Scan Winlogon in 00mn 00s



---\\ ShellServiceObjectDelayLoad (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ non Microsoft non disabled Windows XP/NT/2000 Services (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) . (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: BrowserProtect (BrowserProtect) . (...) - C:\ProgramData\BrowserProtect\2.5.986.67\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Capability Licensing Service In (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 306.9.) - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\SysWOW64\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) . (...) - C:\Program Files (x86)\Skype\Updater\Updater.exe (.not file.)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Intel(R) Management and Security Applica (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: (vToolbarUpdater14.0.0) . (. - ToolbarU Application.) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.0\ToolbarUpdater.exe
O23 - Service: (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
~ Scan Services in 00mn 00s



---\\ Windows Active Desktop Components & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ Task Planned Automatically(039)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.424877CB9D5517F980FF7BACA2EB379D] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
[MD5.00000000000000000000000000000000] [APT] [{2C1D7355-0195-43CC-B412-6A9E9926ECF3}] (...) -- D:\Downloads\InstallLCPDFR.exe (.not file.)
[MD5.7BCFFE9C9EB371A9F139DA2551E515E1] [APT] [{69C0BF2F-467F-409E-B823-8832883D461C}] (.Babylon Ltd..) -- C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.4.9\GUninstaller.exe
[MD5.00000000000000000000000000000000] [APT] [{9A6F2029-5328-4C84-BAEF-D1089F579B49}] (...) -- D:\Downloads\InstallLCPDFR.exe (.not file.)
~ Scan Scheduled Task in 00mn 00s



---\\ ActiveSetup Installed Components (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d�IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Drivers launched at startup (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (AVGIDSDriver) . (.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) - C:\Windows\System32\DRIVERS\avgidsdrivera.sys
O41 - Driver: (Avgldx64) . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - C:\Windows\System32\DRIVERS\avgldx64.sys
O41 - Driver: (Avgtdia) . (.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - C:\Windows\System32\DRIVERS\avgtdia.sys
O41 - Driver: (avgtp) . (.AVG Technologies - .) - C:\Windows\system32\drivers\avgtpx64.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\Windows\System32\DRIVERS\dtsoftbus01.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-syst�me de mise en m�moire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de p�riph�rique s�rie.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s



---\\ Software installed (O42)
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441}
O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {504184A2-1B0E-5D93-603A-517E93E7EDB3}
O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {46DA7FD9-8BC1-7BA8-98D1-27F46647871B}
O42 - Logiciel: AMD Drag and Drop Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {0407893F-352C-B182-E04A-A8C3333DA29B}
O42 - Logiciel: AMD Media Foundation Decoders - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {0DCAB5DD-CC69-271A-CF03-F2BD6B60BD8A}
O42 - Logiciel: ARMA 2 - (.Bohemia Interactive.) [HKLM][64Bits] -- Steam App 33910
O42 - Logiciel: ARMA 2: Operation Arrowhead - (.Bohemia Interactive.) [HKLM][64Bits] -- Steam App 33930
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- AVG
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {73105254-4936-47AC-ACDE-08D11D25E3DB}
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {B9D80BD8-C6F4-467C-9717-0ABA9684DA29}
O42 - Logiciel: AVG Security Toolbar - (.AVG Technologies.) [HKLM][64Bits] -- AVG Secure Search
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723}
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Photoshop CS5 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {15FEDA5F-141C-4127-8D7E-B962D1742728}
O42 - Logiciel: Adobe Reader X (10.1.4) - Fran�ais - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Ancient Weapon Sounds - (.Screaming Bee.) [HKLM][64Bits] -- {E00A5837-482C-4DCE-B4CC-D16B343374E1}
O42 - Logiciel: Assassin's Creed (R) III - (.Ubisoft.) [HKLM][64Bits] -- {9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}
O42 - Logiciel: BF3 Settings Editor - (.Realmware.) [HKLM][64Bits] -- {5866DD36-8055-475B-A5C3-82C04091D14E}
O42 - Logiciel: Babylon toolbar - (.BabylonToolbar.) [HKLM][64Bits] -- BabylonToolbar
O42 - Logiciel: BattlEye for OA Uninstall - (..) [HKLM][64Bits] -- BattlEye for OA
O42 - Logiciel: Battlefield 3� - (.Electronic Arts.) [HKLM][64Bits] -- {76285C16-411A-488A-BCE3-C83CB933D8CF}
O42 - Logiciel: Battlelog Web Plugins - (.EA Digital Illusions CE AB.) [HKLM][64Bits] -- Battlelog Web Plugins
O42 - Logiciel: BrowserProtect - (.Bit89 Inc.) [HKLM][64Bits] -- {15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693}
O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM][64Bits] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}
O42 - Logiciel: Curse Client - (.Curse.) [HKCU][64Bits] -- 101a9f93b8f0bb6f
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
O42 - Logiciel: DayZ Commander - (.Dotjosh Studios.) [HKLM][64Bits] -- {D35C30C0-0A42-44C2-BBC9-23431832C89E}
O42 - Logiciel: Diablo III - (.Blizzard Entertainment.) [HKLM][64Bits] -- Diablo III
O42 - Logiciel: D�sinstaller l'imprimante EPSON SX110 Series - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON SX110 Series
O42 - Logiciel: EPSON Scan - (..) [HKLM][64Bits] -- EPSON Scanner
O42 - Logiciel: ESN Sonar - (.ESN Social Software AB.) [HKLM][64Bits] -- ESN Sonar-0.70.4
O42 - Logiciel: Epson Stylus SX110_TX110 Manuel - (..) [HKLM][64Bits] -- Epson Stylus SX110_TX110 Guide d'utilisation
O42 - Logiciel: F1 2012 - Update 1 - (..) [HKLM][64Bits] -- F1 2012_is1
O42 - Logiciel: FIFA 13 - (.Electronic Arts.) [HKLM][64Bits] -- {A29E18C2-7AB1-4b6b-848C-5D5E2C85F0C0}
O42 - Logiciel: Far Cry� 3 - (.Ubisoft.) [HKLM][64Bits] -- Steam App 220240
O42 - Logiciel: Farm Animal Sounds - (.Screaming Bee.) [HKLM][64Bits] -- {F290F841-044D-44EF-9E51-FFFEA7FEE2D7}
O42 - Logiciel: Futuremark SystemInfo - (.Futuremark Corporation.) [HKLM][64Bits] -- {BEE64C14-BEF1-4610-8A68-A16EAA47B882}
O42 - Logiciel: Ghost Recon Online - (.Ubisoft.) [HKCU][64Bits] -- d8be6c3f847d7d92
O42 - Logiciel: Giant Savings Extension - (.215 Apps.) [HKLM][64Bits] -- Giant Savings Extension
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Grand Theft Auto IV - (.Rockstar Games Inc..) [HKLM][64Bits] -- {5454083B-1308-4485-BF17-1110000D8301}
O42 - Logiciel: Grand Theft Auto IV - (.Rockstar.) [HKLM][64Bits] -- Steam App 12210
O42 - Logiciel: Hitman Absolution - (..) [HKLM][64Bits] -- Hitman Absolution_is1
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) USB 3.0 eXtensible Host Controller Driver - (.Intel Corporation.) [HKLM][64Bits] -- {240C3DDD-C5E9-4029-9DF7-95650D040CF2}
O42 - Logiciel: Intel� Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {977D1ABF-4089-4CA7-BA33-CC75808B7ACE}
O42 - Logiciel: Intel� Watchdog Timer Driver (Intel� WDT) - (.Intel Corporation.) [HKLM][64Bits] -- {3FD0C489-0F02-481a-A3E1-9754CD396761}
O42 - Logiciel: Java 7 Update 10 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86417010FF}
O42 - Logiciel: LCDSirReal - a multipurpose plugin for the Logitech G13/G15 - (.Link Data Stockholm.) [HKCU][64Bits] -- LCDSirReal
O42 - Logiciel: Logitech GamePanel Software 3.06.109 - (.Logitech Inc..) [HKLM][64Bits] -- {A1E85B9A-AFAD-4D38-AF01-6B020DD5213A}
O42 - Logiciel: Logitech SetPoint 6.32 - (.Logitech.) [HKLM][64Bits] -- sp6
O42 - Logiciel: Ma-Config.com (64 bits) - (.Cybelsoft.) [HKLM][64Bits] -- {602C9E30-F838-4AD2-8DC2-265C192D4AAC}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.70.0.1100 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft Games for Windows - LIVE - (.Microsoft Corporation.) [HKLM][64Bits] -- {2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft_VC80_ATL_x86 - (.Adobe.) [HKLM][64Bits] -- {0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}
O42 - Logiciel: Microsoft_VC80_ATL_x86_x64 - (.Adobe.) [HKLM][64Bits] -- {925D058B-564A-443A-B4B2-7E90C6432E55}
O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM][64Bits] -- {92D58719-BBC1-4CC3-A08B-56C9E884CC2C}
O42 - Logiciel: Microsoft_VC80_CRT_x86_x64 - (.Adobe.) [HKLM][64Bits] -- {4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}
O42 - Logiciel: Microsoft_VC80_MFCLOC_x86 - (.Adobe.) [HKLM][64Bits] -- {D92BBB52-82FF-42ED-8A3C-4E062F944AB7}
O42 - Logiciel: Microsoft_VC80_MFCLOC_x86_x64 - (.Adobe.) [HKLM][64Bits] -- {1E9FC118-651D-4934-97BE-E53CAE5C7D45}
O42 - Logiciel: Microsoft_VC80_MFC_x86 - (.Adobe.) [HKLM][64Bits] -- {D1A19B02-817E-4296-A45B-07853FD74D57}
O42 - Logiciel: Microsoft_VC80_MFC_x86_x64 - (.Adobe.) [HKLM][64Bits] -- {C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}
O42 - Logiciel: Microsoft_VC90_ATL_x86 - (.Adobe.) [HKLM][64Bits] -- {033E378E-6AD3-4AD5-BDEB-CBD69B31046C}
O42 - Logiciel: Microsoft_VC90_ATL_x86_x64 - (.Adobe.) [HKLM][64Bits] -- {8557397C-A42D-486F-97B3-A2CBC2372593}
O42 - Logiciel: Microsoft_VC90_CRT_x86 - (.Adobe.) [HKLM][64Bits] -- {08D2E121-7F6A-43EB-97FD-629B44903403}
O42 - Logiciel: Microsoft_VC90_CRT_x86_x64 - (.Adobe.) [HKLM][64Bits] -- {92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}
O42 - Logiciel: Microsoft_VC90_MFC_x86 - (.Adobe.) [HKLM][64Bits] -- {635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}
O42 - Logiciel: Microsoft_VC90_MFC_x86_x64 - (.Adobe.) [HKLM][64Bits] -- {A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}
O42 - Logiciel: Mises � jour NVIDIA 1.10.8 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update
O42 - Logiciel: Modern War Sounds - (.Screaming Bee.) [HKLM][64Bits] -- {A514E94F-C436-44C3-A1E9-1F58CD352669}
O42 - Logiciel: Mozilla Firefox 17.0.1 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 17.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: Mumble 1.2.3 - (.Thorvald Natvig.) [HKLM][64Bits] -- {E1019541-10A2-464F-A23E-A4F23DA65160}
O42 - Logiciel: NGists G15/TeamSpeak Display - (.Prabang Ltd.) [HKLM][64Bits] -- {07C903D3-2996-4683-9B49-7839207148CA}
O42 - Logiciel: NVIDIA Logiciel syst�me PhysX 9.12.0604 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {2FDD750F-49B7-40C1-9D5E-D2955BC0E2D8}
O42 - Logiciel: NVIDIA Pilote 3D Vision 306.97 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision
O42 - Logiciel: NVIDIA Pilote audio HD : 1.3.18.0 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver
O42 - Logiciel: NVIDIA Pilote du contr�leur 3D Vision 306.23 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB
O42 - Logiciel: NVIDIA Pilote graphique 306.97 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM][64Bits] -- NVIDIAStereo
O42 - Logiciel: Need for Speed Most Wanted - (..) [HKLM][64Bits] -- Need for Speed Most Wanted_is1
O42 - Logiciel: Notepad++ - (..) [HKLM][64Bits] -- Notepad++
O42 - Logiciel: OpenSSL 1.0.1c Light (32-bit) - (.OpenSSL Win32 Installer Team.) [HKLM][64Bits] -- OpenSSL Light (32-bit)_is1
O42 - Logiciel: Origin - (.Electronic Arts, Inc..) [HKLM][64Bits] -- Origin
O42 - Logiciel: PDF Settings CS5 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A78FE97A-C0C8-49CE-89D0-EDD524A17392}
O42 - Logiciel: PunkBuster Services - (.Even Balance, Inc..) [HKLM][64Bits] -- PunkBusterSvc
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: RocketDock 1.3.5 - (.Punk Software.) [HKLM][64Bits] -- RocketDock_is1
O42 - Logiciel: Saints Row: The Third - (.Volition.) [HKLM][64Bits] -- Steam App 55230
O42 - Logiciel: Skype� 6.0 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {EA17F4FC-FDBF-4CF8-A529-2D983132D053}
O42 - Logiciel: Spooky Sounds - (.Screaming Bee.) [HKLM][64Bits] -- {F71EBF86-9A73-44C0-A674-55FA3E4A8428}
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3}
O42 - Logiciel: TeamSpeak 3 Client - (.TeamSpeak Systems GmbH.) [HKLM][64Bits] -- TeamSpeak 3 Client
O42 - Logiciel: Tukui Update Utility - (.Tukui.) [HKLM][64Bits] -- {B5EDE97F-29A3-4A18-B9AE-CBE33DD2ED61}
O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU][64Bits] -- UnityWebPlayer
O42 - Logiciel: Update Manager for SweetPacks 1.1 - (.SweetIM Technologies Ltd..) [HKLM][64Bits] -- {EA8FA6BE-29BE-4AF2-9352-841F83215EB0}
O42 - Logiciel: Uplay - (.Ubisoft.) [HKLM][64Bits] -- Uplay
O42 - Logiciel: VLC media player 2.0.4 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: Visual Studio 2010 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {21B133D6-5979-47F0-BE1C-F6A6B304693F}
O42 - Logiciel: Wajam - (.Wajam.) [HKLM][64Bits] -- Wajam
O42 - Logiciel: WinRAR 4.20 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: World of Warcraft - (.Blizzard Entertainment.) [HKLM][64Bits] -- World of Warcraft
O42 - Logiciel: Yontoo 1.10.03 - (.Yontoo LLC.) [HKLM][64Bits] -- {889DF117-14D1-44EE-9F31-C5FB5D47F68B}
O42 - Logiciel: eReg - (.Logitech, Inc..) [HKLM][64Bits] -- {3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}
O42 - Logiciel: theHunter (remove only) - (.Expansive Worlds.) [HKLM][64Bits] -- theHunter
O42 - Logiciel: �Torrent - (..) [HKLM][64Bits] -- uTorrent

---\\ HKCU & HKLM Software Keys
[HKCU\Software\532d78ab26fb844]
[HKCU\Software\AMD]
[HKCU\Software\ASUS]
[HKCU\Software\ATI]
[HKCU\Software\AVG Secure Search]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Crossrider]
[HKCU\Software\AppDataLow\Software\Giant Savings Extension]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\Smartbar]
[HKCU\Software\AppDataLow\Software\Unity]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Avg]
[HKCU\Software\BabylonToolbar]
[HKCU\Software\Battlefield 1942]
[HKCU\Software\BitTorrent]
[HKCU\Software\Blizzard Entertainment]
[HKCU\Software\Bohemia Interactive Studio]
[HKCU\Software\Canneverbe Limited]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Conduit]
[HKCU\Software\Cr_Installer]
[HKCU\Software\DT Soft]
[HKCU\Software\DataMngr]
[HKCU\Software\DataMngr_Toolbar]
[HKCU\Software\EA Games]
[HKCU\Software\EPSON]
[HKCU\Software\Electronic Arts]
[HKCU\Software\FLT]
[HKCU\Software\GameSpy]
[HKCU\Software\Google]
[HKCU\Software\IM]
[HKCU\Software\IO Interactive]
[HKCU\Software\ImInstaller]
[HKCU\Software\IncrediMail]
[HKCU\Software\InstallCore]
[HKCU\Software\InstalledBrowserExtensions]
[HKCU\Software\JavaSoft]
[HKCU\Software\Lavalys]
[HKCU\Software\Leadertech]
[HKCU\Software\Link Data]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Logitech]
[HKCU\Software\MCAFEE]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Modern UI Test]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Mumble]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\Policies]
[HKCU\Software\Portrait Displays, Inc.]
[HKCU\Software\Portrait Displays]
[HKCU\Software\Realtek]
[HKCU\Software\RocketDock]
[HKCU\Software\Rockstar Games]
[HKCU\Software\SEIKO EPSON]
[HKCU\Software\SecuROM]
[HKCU\Software\Skype]
[HKCU\Software\Softonic]
[HKCU\Software\Stardock]
[HKCU\Software\StartSearch]
[HKCU\Software\SweetIM]
[HKCU\Software\Symantec]
[HKCU\Software\TeleCharger]
[HKCU\Software\Trolltech]
[HKCU\Software\Ubisoft]
[HKCU\Software\Unity]
[HKCU\Software\Valve]
[HKCU\Software\Wajam]
[HKCU\Software\Win7Themes]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\cybelsoft]
[HKCU\Software\theHunter]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\Adobe]
[HKLM\Software\Alienware]
[HKLM\Software\CBSTEST]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DTS]
[HKLM\Software\Dolby]
[HKLM\Software\EPSON]
[HKLM\Software\Futuremark]
[HKLM\Software\IM Providers]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\Khronos]
[HKLM\Software\Knowles]
[HKLM\Software\Logitech]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Norton]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\SonicFocus]
[HKLM\Software\Sonic]
[HKLM\Software\Stardock]
[HKLM\Software\Tarma Installer]
[HKLM\Software\Waves Audio]
[HKLM\Software\Wow6432Node\4shared Desktop]
[HKLM\Software\Wow6432Node\532d78ab26fb844]
[HKLM\Software\Wow6432Node\AGEIA Technologies]
[HKLM\Software\Wow6432Node\AMD]
[HKLM\Software\Wow6432Node\ASUS]
[HKLM\Software\Wow6432Node\ATI Technologies]
[HKLM\Software\Wow6432Node\ATI]
[HKLM\Software\Wow6432Node\AVG Security Toolbar]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\Avg]
[HKLM\Software\Wow6432Node\Babylon]
[HKLM\Software\Wow6432Node\Blizzard Entertainment]
[HKLM\Software\Wow6432Node\Bohemia Interactive Studio]
[HKLM\Software\Wow6432Node\Bohemia Interactive]
[HKLM\Software\Wow6432Node\Bunndle]
[HKLM\Software\Wow6432Node\Canneverbe Limited]
[HKLM\Software\Wow6432Node\Caphyon]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\DT Soft]
[HKLM\Software\Wow6432Node\DataMngr]
[HKLM\Software\Wow6432Node\EA Games]
[HKLM\Software\Wow6432Node\EA Sports]
[HKLM\Software\Wow6432Node\EPSON]
[HKLM\Software\Wow6432Node\ESN Launcher-1.138.0]
[HKLM\Software\Wow6432Node\ESN Launcher]
[HKLM\Software\Wow6432Node\Electronic Arts]
[HKLM\Software\Wow6432Node\Even Balance]
[HKLM\Software\Wow6432Node\Futuremark Corporation]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\IM Providers]
[HKLM\Software\Wow6432Node\InstallShield]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\McAfee.com]
[HKLM\Software\Wow6432Node\MimarSinan]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\NPCCU]
[HKLM\Software\Wow6432Node\NVIDIA Corporation]
[HKLM\Software\Wow6432Node\Norton]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Origin Games]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Rockstar Games]
[HKLM\Software\Wow6432Node\SCS Software]
[HKLM\Software\Wow6432Node\Screaming Bee]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\Stardock]
[HKLM\Software\Wow6432Node\SweetIM]
[HKLM\Software\Wow6432Node\Ubisoft]
[HKLM\Software\Wow6432Node\Valve]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\WinRAR]
[HKLM\Software\Wow6432Node\cybelsoft]
[HKLM\Software\Wow6432Node\mcafeeupdater]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
[HKLM\Software\cybelsoft]
~ Scan Softwares in 00mn 00s



---\\ Contents of the Common Files folders (O43)
O43 - CFD: 09.11.2012 - 16:47:44 - [765.948] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 23.11.2012 - 13:12:38 - [2.145] ----D C:\Program Files (x86)\AMD APP
O43 - CFD: 23.11.2012 - 13:12:39 - [0.389] ----D C:\Program Files (x86)\AMD AVT
O43 - CFD: 03.10.2012 - 00:36:34 - [58.510] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 20.09.2012 - 13:10:38 - [113.967] ----D C:\Program Files (x86)\AVG
O43 - CFD: 26.12.2012 - 14:12:10 - [13.774] ----D C:\Program Files (x86)\AVG Secure Search
O43 - CFD: 14.12.2012 - 15:34:28 - [2.337] ----D C:\Program Files (x86)\BabylonToolbar
O43 - CFD: 17.12.2012 - 18:19:24 - [11.220] ----D C:\Program Files (x86)\Battlelog Web Plugins
O43 - CFD: 04.01.2013 - 23:21:27 - [444.023] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 23.11.2012 - 22:02:20 - [13.906] ----D C:\Program Files (x86)\epson
O43 - CFD: 25.12.2012 - 00:02:07 - [3.420] ----D C:\Program Files (x86)\Futuremark
O43 - CFD: 27.12.2012 - 15:04:37 - [5.058] ----D C:\Program Files (x86)\Giant Savings Extension
O43 - CFD: 29.09.2012 - 17:34:02 - [820.617] ----D C:\Program Files (x86)\Google
O43 - CFD: 06.01.2013 - 14:06:24 - [23.053] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 29.09.2012 - 12:23:31 - [27.494] ----D C:\Program Files (x86)\Intel
O43 - CFD: 12.12.2012 - 15:47:53 - [4.933] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 29.09.2012 - 17:50:11 - [0.108] ----D C:\Program Files (x86)\Logitech
O43 - CFD: 10.10.2012 - 14:42:43 - [40.838] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 20.09.2012 - 21:03:37 - [0.023] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 05.12.2012 - 03:07:15 - [42.500] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 05.12.2012 - 11:14:57 - [0.212] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 14.07.2009 - 06:32:38 - [0.025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 29.09.2012 - 16:48:06 - [0] ----D C:\Program Files (x86)\My Company Name
O43 - CFD: 18.11.2012 - 18:12:27 - [135.034] ----D C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 23.11.2012 - 13:09:27 - [6.073] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14.07.2009 - 06:32:38 - [37.357] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 27.12.2012 - 15:37:47 - [0.824] ----D C:\Program Files (x86)\Stardock
O43 - CFD: 28.10.2012 - 04:05:37 - [2.765] ----D C:\Program Files (x86)\SweetIM
O43 - CFD: 20.09.2012 - 12:58:52 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 14.07.2009 - 05:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 06.10.2012 - 11:41:48 - [94.079] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 10.11.2012 - 15:00:43 - [0.505] ----D C:\Program Files (x86)\Wajam
O43 - CFD: 12.04.2011 - 10:16:36 - [0.500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 12.04.2011 - 10:16:36 - [5.895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 12.04.2011 - 10:16:36 - [4.791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14.07.2009 - 06:32:38 - [11.632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 12.04.2011 - 10:16:36 - [4.213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 21.11.2010 - 04:31:38 - [0.181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 12.04.2011 - 10:16:36 - [5.717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 29.09.2012 - 13:57:27 - [4.131] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 28.10.2012 - 03:42:29 - [0.319] ----D C:\Program Files (x86)\Yontoo
O43 - CFD: 09.11.2012 - 16:48:24 - [309.776] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 09.11.2012 - 16:46:23 - [30.670] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 23.11.2012 - 13:12:29 - [2.737] ----D C:\Program Files (x86)\Common Files\ATI Technologies
O43 - CFD: 26.12.2012 - 14:12:11 - [15.129] ----D C:\Program Files (x86)\Common Files\AVG Secure Search
O43 - CFD: 31.12.2012 - 16:27:02 - [3.679] ----D C:\Program Files (x86)\Common Files\Blizzard Entertainment
O43 - CFD: 04.01.2013 - 13:29:56 - [1.667] --H-D C:\Program Files (x86)\Common Files\EAInstaller
O43 - CFD: 29.09.2012 - 16:46:01 - [7.963] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 11.10.2012 - 13:47:18 - [0.494] ----D C:\Program Files (x86)\Common Files\LogiShrd
O43 - CFD: 06.01.2013 - 04:24:24 - [20.183] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 20.09.2012 - 13:01:23 - [0.185] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 14.07.2009 - 04:20:08 - [0.003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 03.12.2012 - 00:20:30 - [2.056] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14.07.2009 - 04:20:08 - [39.200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 29.12.2012 - 14:54:07 - [0.517] ----D C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 20.09.2012 - 21:01:15 - [9.767] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 09.12.2012 - 14:08:50 - [383.150] ----D C:\ProgramData\Adobe
O43 - CFD: 23.11.2012 - 13:12:41 - [0.792] ----D C:\ProgramData\AMD
O43 - CFD: 14.07.2009 - 06:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 23.11.2012 - 13:12:44 - [0.000] ----D C:\ProgramData\ATI
O43 - CFD: 09.11.2012 - 08:46:12 - [1.953] ----D C:\ProgramData\AVG Secure Search
O43 - CFD: 20.09.2012 - 13:12:18 - [244.122] ----D C:\ProgramData\AVG2013
O43 - CFD: 14.12.2012 - 15:34:16 - [0] ----D C:\ProgramData\Babylon
O43 - CFD: 03.11.2012 - 16:46:41 - [202.193] ----D C:\ProgramData\Battle.net
O43 - CFD: 03.11.2012 - 16:47:12 - [4.168] ----D C:\ProgramData\Blizzard Entertainment
O43 - CFD: 14.12.2012 - 15:34:33 - [7.946] ----D C:\ProgramData\BrowserProtect
O43 - CFD: 20.09.2012 - 12:05:54 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 10.11.2012 - 15:03:39 - [0] ----D C:\ProgramData\Canneverbe Limited
O43 - CFD: 19.10.2012 - 02:12:39 - [2000.000] ----D C:\ProgramData\Codemasters
O43 - CFD: 20.09.2012 - 13:05:59 - [0.000] --H-D C:\ProgramData\Common Files
O43 - CFD: 19.10.2012 - 02:00:19 - [0.001] ----D C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 14.07.2009 - 06:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14.07.2009 - 06:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 07.10.2012 - 14:49:50 - [0] ----D C:\ProgramData\EA Core
O43 - CFD: 13.10.2012 - 00:32:03 - [0.001] ----D C:\ProgramData\EA Logs
O43 - CFD: 07.10.2012 - 14:49:53 - [1.118] ----D C:\ProgramData\Electronic Arts
O43 - CFD: 23.11.2012 - 22:01:38 - [8.213] ----D C:\ProgramData\EPSON
O43 - CFD: 20.09.2012 - 12:05:54 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 14.07.2009 - 06:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 02.11.2012 - 05:46:29 - [0.004] ----D C:\ProgramData\Hunter
O43 - CFD: 20.09.2012 - 13:01:38 - [0.175] ----D C:\ProgramData\Intel
O43 - CFD: 11.10.2012 - 13:47:17 - [3.531] ----D C:\ProgramData\LogiShrd
O43 - CFD: 29.09.2012 - 17:50:11 - [1.482] ----D C:\ProgramData\Logitech
O43 - CFD: 18.11.2012 - 18:14:21 - [1.363] ----D C:\ProgramData\ma-config.com
O43 - CFD: 03.11.2012 - 16:23:18 - [16.096] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 10.10.2012 - 14:42:11 - [0.223] ----D C:\ProgramData\McAfee
O43 - CFD: 20.09.2012 - 12:05:54 - [0] --H-D C:\ProgramData\Menu D�marrer
O43 - CFD: 09.01.2013 - 18:26:24 - [8.301] ----D C:\ProgramData\MFAData
O43 - CFD: 30.11.2012 - 19:46:50 - [221.787] -S--D C:\ProgramData\Microsoft
O43 - CFD: 20.09.2012 - 12:05:54 - [0] --H-D C:\ProgramData\Mod�les
O43 - CFD: 20.09.2012 - 13:08:43 - [0.019] ----D C:\ProgramData\Mozilla
O43 - CFD: 29.09.2012 - 17:52:28 - [0.014] ----D C:\ProgramData\Norton
O43 - CFD: 29.09.2012 - 17:34:09 - [23.548] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 09.01.2013 - 18:49:39 - [2.706] ----D C:\ProgramData\NVIDIA
O43 - CFD: 02.10.2012 - 17:18:45 - [2.410] ----D C:\ProgramData\NVIDIA Corporation
O43 - CFD: 21.12.2012 - 18:25:38 - [0.101] ----D C:\ProgramData\Orbit
O43 - CFD: 30.11.2012 - 15:29:40 - [6.713] ----D C:\ProgramData\Origin
O43 - CFD: 09.11.2012 - 16:48:32 - [0.002] ----D C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 27.10.2012 - 21:32:22 - [1.586] ----D C:\ProgramData\Screaming Bee
O43 - CFD: 06.01.2013 - 04:21:56 - [0.116] -SH-D C:\ProgramData\SecuROM
O43 - CFD: 03.12.2012 - 00:20:31 - [38.544] ----D C:\ProgramData\Skype
O43 - CFD: 14.07.2009 - 06:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 23.10.2012 - 17:42:39 - [0.000] ----D C:\ProgramData\Sun
O43 - CFD: 28.10.2012 - 04:05:37 - [0.000] ----D C:\ProgramData\SweetIM
O43 - CFD: 28.10.2012 - 03:42:28 - [1.661] ----D C:\ProgramData\Tarma Installer
O43 - CFD: 14.07.2009 - 06:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 07.01.2013 - 19:25:14 - [100.295] ----D C:\Users\Damien\AppData\Roaming\.minecraft
O43 - CFD: 18.12.2012 - 02:04:04 - [48.755] ----D C:\Users\Damien\AppData\Roaming\Adobe
O43 - CFD: 09.11.2012 - 18:31:06 - [0.000] ----D C:\Users\Damien\AppData\Roaming\Adobe Mini Bridge CS5
O43 - CFD: 20.09.2012 - 15:23:27 - [0] ----D C:\Users\Damien\AppData\Roaming\ATI
O43 - CFD: 20.09.2012 - 13:13:00 - [0.006] ----D C:\Users\Damien\AppData\Roaming\AVG2013
O43 - CFD: 10.11.2012 - 15:03:39 - [0.001] ----D C:\Users\Damien\AppData\Roaming\Canneverbe Limited
O43 - CFD: 29.12.2012 - 21:47:30 - [1.654] ----D C:\Users\Damien\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O43 - CFD: 14.12.2012 - 16:29:44 - [1.727] ----D C:\Users\Damien\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 18.12.2012 - 03:53:35 - [0] ----D C:\Users\Damien\AppData\Roaming\DisplayTune
O43 - CFD: 22.11.2012 - 16:09:29 - [0.000] ----D C:\Users\Damien\AppData\Roaming\dvdcss
O43 - CFD: 20.09.2012 - 12:06:01 - [0] ----D C:\Users\Damien\AppData\Roaming\Identities
O43 - CFD: 20.09.2012 - 13:01:07 - [0] ----D C:\Users\Damien\AppData\Roaming\InstallShield
O43 - CFD: 11.10.2012 - 13:47:19 - [0.000] ----D C:\Users\Damien\AppData\Roaming\Leadertech
O43 - CFD: 11.10.2012 - 13:46:28 - [0.181] ----D C:\Users\Damien\AppData\Roaming\Logishrd
O43 - CFD: 11.10.2012 - 13:47:25 - [0.001] ----D C:\Users\Damien\AppData\Roaming\Logitech
O43 - CFD: 29.09.2012 - 13:31:05 - [0.165] ----D C:\Users\Damien\AppData\Roaming\Macromedia
O43 - CFD: 03.11.2012 - 16:23:24 - [0.014] ----D C:\Users\Damien\AppData\Roaming\Malwarebytes
O43 - CFD: 12.04.2011 - 10:27:52 - [0] ----D C:\Users\Damien\AppData\Roaming\Media Center Programs
O43 - CFD: 06.01.2013 - 04:22:56 - [62.379] -S--D C:\Users\Damien\AppData\Roaming\Microsoft
O43 - CFD: 24.12.2012 - 17:11:02 - [0.773] ----D C:\Users\Damien\AppData\Roaming\Milestone
O43 - CFD: 20.09.2012 - 13:08:48 - [250.086] ----D C:\Users\Damien\AppData\Roaming\Mozilla
O43 - CFD: 05.01.2013 - 23:42:56 - [1.288] ----D C:\Users\Damien\AppData\Roaming\Mumble
O43 - CFD: 07.01.2013 - 18:06:33 - [0.226] ----D C:\Users\Damien\AppData\Roaming\Notepad++
O43 - CFD: 15.10.2012 - 23:40:37 - [0.856] ----D C:\Users\Damien\AppData\Roaming\NVIDIA
O43 - CFD: 30.11.2012 - 15:29:39 - [0.131] ----D C:\Users\Damien\AppData\Roaming\Origin
O43 - CFD: 29.09.2012 - 14:17:09 - [0.019] ----D C:\Users\Damien\AppData\Roaming\Prabang
O43 - CFD: 06.01.2013 - 04:20:29 - [0.010] R-H-D C:\Users\Damien\AppData\Roaming\SecuROM
O43 - CFD: 18.12.2012 - 17:38:26 - [5.128] ----D C:\Users\Damien\AppData\Roaming\Skype
O43 - CFD: 09.11.2012 - 16:53:48 - [0.006] ----D C:\Users\Damien\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
O43 - CFD: 25.12.2012 - 00:05:53 - [0.039] ----D C:\Users\Damien\AppData\Roaming\Theta
O43 - CFD: 09.01.2013 - 19:55:29 - [11.174] ----D C:\Users\Damien\AppData\Roaming\TS3Client
O43 - CFD: 20.09.2012 - 13:12:06 - [0] ----D C:\Users\Damien\AppData\Roaming\TuneUp Software
O43 - CFD: 02.01.2013 - 01:20:30 - [0.000] ----D C:\Users\Damien\AppData\Roaming\Unity
O43 - CFD: 06.01.2013 - 02:11:44 - [10.652] ----D C:\Users\Damien\AppData\Roaming\uTorrent
O43 - CFD: 31.12.2012 - 22:09:35 - [0.079] ----D C:\Users\Damien\AppData\Roaming\vlc
O43 - CFD: 29.09.2012 - 13:59:31 - [0.000] ----D C:\Users\Damien\AppData\Roaming\WinRAR
O43 - CFD: 16.11.2012 - 17:31:14 - [14.918] ----D C:\Users\Damien\AppData\Local\Adobe
O43 - CFD: 20.09.2012 - 12:05:57 - [0] ----D C:\Users\Damien\AppData\Local\Application Data
O43 - CFD: 02.10.2012 - 17:26:46 - [48.315] ----D C:\Users\Damien\AppData\Local\Apps
O43 - CFD: 31.12.2012 - 22:03:08 - [0] ----D C:\Users\Damien\AppData\Local\Arktos
O43 - CFD: 03.10.2012 - 01:00:09 - [0] ----D C:\Users\Damien\AppData\Local\ArmA 2
O43 - CFD: 08.01.2013 - 22:10:11 - [5.915] ----D C:\Users\Damien\AppData\Local\ArmA 2 OA
O43 - CFD: 20.09.2012 - 15:23:27 - [0.063] ----D C:\Users\Damien\AppData\Local\ATI
O43 - CFD: 20.09.2012 - 13:12:07 - [1.089] ----D C:\Users\Damien\AppData\Local\AVG Secure Search
O43 - CFD: 20.09.2012 - 15:24:36 - [12.401] ----D C:\Users\Damien\AppData\Local\Avg2013
O43 - CFD: 08.01.2013 - 22:10:16 - [242.474] ----D C:\Users\Damien\AppData\Local\CrashDumps
O43 - CFD: 31.12.2012 - 22:03:07 - [0.000] ----D C:\Users\Damien\AppData\Local\CrashRpt
O43 - CFD: 03.10.2012 - 00:44:34 - [0.003] ----D C:\Users\Damien\AppData\Local\DayZCommander
O43 - CFD: 06.01.2013 - 14:53:52 - [0] ----D C:\Users\Damien\AppData\Local\Deployment
O43 - CFD: 07.01.2013 - 04:35:03 - [1.759] ----D C:\Users\Damien\AppData\Local\Diagnostics
O43 - CFD: 24.12.2012 - 14:18:18 - [0] ----D C:\Users\Damien\AppData\Local\ElevatedDiagnostics
O43 - CFD: 20.11.2012 - 15:47:01 - [0] ----D C:\Users\Damien\AppData\Local\ESN
O43 - CFD: 05.12.2012 - 04:38:46 - [0.015] ----D C:\Users\Damien\AppData\Local\ESN Sonar
O43 - CFD: 19.10.2012 - 02:12:39 - [0.787] ----D C:\Users\Damien\AppData\Local\FLT
O43 - CFD: 27.12.2012 - 15:04:33 - [0.039] ----D C:\Users\Damien\AppData\Local\Giant Savings Extension
O43 - CFD: 09.10.2012 - 23:51:34 - [24.887] ----D C:\Users\Damien\AppData\Local\Google
O43 - CFD: 20.09.2012 - 12:05:57 - [0] ----D C:\Users\Damien\AppData\Local\Historique
O43 - CFD: 11.10.2012 - 13:47:25 - [0.334] ----D C:\Users\Damien\AppData\Local\LogiShrd
O43 - CFD: 11.10.2012 - 20:36:49 - [0.034] ----D C:\Users\Damien\AppData\Local\Logitech
O43 - CFD: 29.09.2012 - 13:31:05 - [0] ----D C:\Users\Damien\AppData\Local\Macromedia
O43 - CFD: 20.09.2012 - 13:05:59 - [6.658] ----D C:\Users\Damien\AppData\Local\MFAData
O43 - CFD: 06.01.2013 - 14:06:01 - [297.382] ----D C:\Users\Damien\AppData\Local\Microsoft
O43 - CFD: 25.12.2012 - 11:23:15 - [0.933] ----D C:\Users\Damien\AppData\Local\Microsoft Games
O43 - CFD: 20.09.2012 - 13:08:45 - [371.919] ----D C:\Users\Damien\AppData\Local\Mozilla
O43 - CFD: 05.10.2012 - 22:32:55 - [0] ----D C:\Users\Damien\AppData\Local\Mumble
O43 - CFD: 03.10.2012 - 01:06:22 - [15.589] ----D C:\Users\Damien\AppData\Local\Origin
O43 - CFD: 27.12.2012 - 15:37:33 - [0] ----D C:\Users\Damien\AppData\Local\PackageAware
O43 - CFD: 29.09.2012 - 14:17:10 - [0.001] ----D C:\Users\Damien\AppData\Local\Prabang
O43 - CFD: 04.01.2013 - 13:11:53 - [0] ----D C:\Users\Damien\AppData\Local\Programs
O43 - CFD: 21.12.2012 - 18:25:50 - [9.715] ----D C:\Users\Damien\AppData\Local\PunkBuster
O43 - CFD: 28.12.2012 - 22:55:06 - [0.001] ----D C:\Users\Damien\AppData\Local\Realmware
O43 - CFD: 06.01.2013 - 04:20:38 - [3.779] ----D C:\Users\Damien\AppData\Local\Rockstar Games
O43 - CFD: 23.12.2012 - 11:09:46 - [0.500] ----D C:\Users\Damien\AppData\Local\SKIDROW
O43 - CFD: 09.01.2013 - 19:55:44 - [429.522] ----D C:\Users\Damien\AppData\Local\Temp
O43 - CFD: 20.09.2012 - 12:05:57 - [0] ----D C:\Users\Damien\AppData\Local\Temporary Internet Files
O43 - CFD: 02.11.2012 - 15:06:32 - [0.305] ----D C:\Users\Damien\AppData\Local\theHunter
O43 - CFD: 30.10.2012 - 15:48:51 - [0.001] ----D C:\Users\Damien\AppData\Local\Tukui
O43 - CFD: 02.01.2013 - 00:52:54 - [0.001] ----D C:\Users\Damien\AppData\Local\Ubisoft Game Launcher
O43 - CFD: 02.01.2013 - 01:11:17 - [0.208] ----D C:\Users\Damien\AppData\Local\Unity
O43 - CFD: 03.11.2012 - 16:50:43 - [0.003] ----D C:\Users\Damien\AppData\Local\VirtualStore
O43 - CFD: 10.11.2012 - 15:00:36 - [0.054] ----D C:\Users\Damien\AppData\Local\Wajam
O43 - CFD: 11.10.2012 - 15:58:48 - [0.001] ----D C:\Users\Damien\AppData\Local\WebDKPSync
O43 - CFD: 23.11.2012 - 21:52:38 - [0.000] R---D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 08.01.2013 - 02:20:08 - [0.001] ----D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
O43 - CFD: 14.12.2012 - 15:34:34 - [0.001] ----D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
O43 - CFD: 04.11.2012 - 15:22:33 - [0.000] ----D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse
O43 - CFD: 07.11.2012 - 00:44:55 - [0.000] ----D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 07.01.2013 - 18:06:07 - [0] ----D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
O43 - CFD: 02.11.2012 - 14:05:10 - [0.001] ----D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\theHunter
O43 - CFD: 21.12.2012 - 18:05:18 - [0.004] ----D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
O43 - CFD: 10.11.2012 - 15:00:39 - [0.001] ----D C:\Users\Damien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
~ Scan Program Folder in 00mn 01s



---\\ Last modified or created files under Windows and System32 (O44)
O44 - LFC:[MD5.C6EEB574F26C0AA814C54ED5B6128345] - 09.01.2013 - 19:42:36 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1703991]
O44 - LFC:[MD5.C452E1B9AFA4D928467C47360440A38D] - 09.01.2013 - 18:55:35 . (.Microsoft - Syst�me de classement PEGI/BBFC.) -- C:\Windows\System32\perfc009.dat [44544]
O44 - LFC:[MD5.52313AB987FC608E969EE5C0D069BD9F] - 09.01.2013 - 18:55:35 . (.Microsoft - Syst�me de classement PEGI/BBFC.) -- C:\Windows\System32\perfc00C.dat [44544]
O44 - LFC:[MD5.BC28A95D4756680940DC8D84AB286344] - 09.01.2013 - 18:55:35 . (.Microsoft - Syst�me de classement PEGI/BBFC.) -- C:\Windows\System32\perfh009.dat [44544]
O44 - LFC:[MD5.B23C3C50EEA3E620AE795B57D88C1EF2] - 09.01.2013 - 18:55:35 . (.Microsoft - Syst�me de classement PEGI/BBFC.) -- C:\Windows\System32\perfh00C.dat [44544]
O44 - LFC:[MD5.F63D28280EE2B2C17DD31538B105F7A2] - 09.01.2013 - 18:55:35 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1661710]
O44 - LFC:[MD5.C452E1B9AFA4D928467C47360440A38D] - 09.01.2013 - 18:55:35 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [120870]
O44 - LFC:[MD5.52313AB987FC608E969EE5C0D069BD9F] - 09.01.2013 - 18:55:35 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [148574]
O44 - LFC:[MD5.BC28A95D4756680940DC8D84AB286344] - 09.01.2013 - 18:55:35 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [651938]
O44 - LFC:[MD5.B23C3C50EEA3E620AE795B57D88C1EF2] - 09.01.2013 - 18:55:35 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [745056]
O44 - LFC:[MD5.F63D28280EE2B2C17DD31538B105F7A2] - 09.01.2013 - 18:55:35 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1661710]
O44 - LFC:[MD5.E537D44310D23B43D7025C109401C861] - 09.01.2013 - 18:49:39 ---A- . (...) -- C:\Windows\setupact.log [53219]
O44 - LFC:[MD5.A70145B0FF6629CBA86DF3FC815B6186] - 09.01.2013 - 18:49:39 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.549748A599ED48986C170073481DFF77] - 09.01.2013 - 15:40:56 . (.Microsoft - Syst�me de classement ESRB.) -- C:\Windows\System32\FNTCACHE.DAT [51712]
O44 - LFC:[MD5.549748A599ED48986C170073481DFF77] - 09.01.2013 - 15:40:56 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [4845296]
O44 - LFC:[MD5.8ACC1EFC15C4EA1243FF0A48B397BCC1] - 09.01.2013 - 15:17:01 . (...) -- C:\Windows\System32\MRT.exe [420064]
O44 - LFC:[MD5.C4B0793E4B97AA36A2A8C81A7AA1979A] - 09.01.2013 - 14:54:58 ---A- . (.Microsoft - Syst�me de classement PEGI/BBFC.) -- C:\Windows\SysNative\pegibbfc.rs [44544]
O44 - LFC:[MD5.C4B0793E4B97AA36A2A8C81A7AA1979A] - 09.01.2013 - 14:54:58 ---A- . (.Microsoft - Syst�me de classement PEGI/BBFC.) -- C:\Windows\System32\pegibbfc.rs [44544]
O44 - LFC:[MD5.5C48A43FC30FC61ECB1335DC646686BC] - 09.01.2013 - 14:54:58 ---A- . (.Microsoft - Syst�me de classement USK.) -- C:\Windows\SysNative\usk.rs [30720]
O44 - LFC:[MD5.5C48A43FC30FC61ECB1335DC646686BC] - 09.01.2013 - 14:54:58 ---A- . (.Microsoft - Syst�me de classement USK.) -- C:\Windows\System32\usk.rs [30720]
O44 - LFC:[MD5.A2E0F1E01A0983E9C94565BBEC862BF7] - 09.01.2013 - 14:54:58 ---A- . (.Microsoft - Syst�me de classification COB-AU.) -- C:\Windows\SysNative\cob-au.rs [40960]
O44 - LFC:[MD5.A2E0F1E01A0983E9C94565BBEC862BF7] - 09.01.2013 - 14:54:58 ---A- . (.Microsoft - Syst�me de classification COB-AU.) -- C:\Windows\System32\cob-au.rs [40960]
O44 - LFC:[MD5.65A8302C7551CFE45FAA2BC085C9E7E2] - 09.01.2013 - 14:54:58 ---A- . (.Microsoft - Syst�me de classification DJCTQ.) -- C:\Windows\SysNative\djctq.rs [15360]
O44 - LFC:[MD5.65A8302C7551CFE45FAA2BC085C9E7E2] - 09.01.2013 - 14:54:58 ---A- . (.Microsoft - Syst�me de classification DJCTQ.) -- C:\Windows\System32\djctq.rs [15360]
O44 - LFC:[MD5.54B11BB2AFBC3D5EBA9C96F0C1820B9B] - 09.01.2013 - 14:54:58 ---A- . (.Microsoft - Syst�me de classification FPB.) -- C:\Windows\SysNative\fpb.rs [46592]
O44 - LFC:[MD5.54B11BB2AFBC3D5EBA9C96F0C1820B9B] - 09.01.2013 - 14:54:58 ---A- . (.Microsoft - Syst�me de classification FPB.) -- C:\Windows\System32\fpb.rs [46592]
O44 - LFC:[MD5.997938D423CE830161CB6059434E3C9F] - 09.01.2013 - 14:54:58 ---A- . (.Microsoft - Syst�me de classification OFLC-NZ.) -- C:\Windows\SysNative\oflc-nz.rs [45568]
O44 - LFC:[MD5.997938D423CE830161CB6059434E3C9F] - 09.01.2013 - 14:54:58 ---A- . (.Microsoft - Syst�me de classification OFLC-NZ.) -- C:\Windows\System32\oflc-nz.rs [45568]
O44 - LFC:[MD5.EBB73E4E8CA01089CF74ECE506EB7607] - 09.01.2013 - 14:54:58 ---A- . (.Microsoft - Syst�me de notation CSRR.) -- C:\Windows\SysNative\csrr.rs [43520]
O44 - LFC:[MD5.EBB73E4E8CA01089CF74ECE506EB7607] - 09.01.2013 - 14:54:58 ---A- . (.Microsoft - Syst�me de notation CSRR.) -- C:\Windows\System32\csrr.rs [43520]
O44 - LFC:[MD5.D0C01412FBF59C1C25630C49F0C1B803] - 09.01.2013 - 14:54:57 ---A- . (.Microsoft - Syst�me de classement CERO.) -- C:\Windows\SysNative\cero.rs [55296]
O44 - LFC:[MD5.D0C01412FBF59C1C25630C49F0C1B803] - 09.01.2013 - 14:54:57 ---A- . (.Microsoft - Syst�me de classement CERO.) -- C:\Windows\System32\cero.rs [55296]
O44 - LFC:[MD5.51D25C805A01A2C4F930F9720CF51FFE] - 09.01.2013 - 14:54:57 ---A- . (.Microsoft - Syst�me de classement ESRB.) -- C:\Windows\SysNative\esrb.rs [51712]
O44 - LFC:[MD5.51D25C805A01A2C4F930F9720CF51FFE] - 09.01.2013 - 14:54:57 ---A- . (.Microsoft - Syst�me de classement ESRB.) -- C:\Windows\System32\esrb.rs [51712]
O44 - LFC:[MD5.4489D5D2CB4BA0799F3FB4625DE181CF] - 09.01.2013 - 14:54:57 ---A- . (.Microsoft - Syst�me de classement GRB.) -- C:\Windows\SysNative\grb.rs [21504]
O44 - LFC:[MD5.4489D5D2CB4BA0799F3FB4625DE181CF] - 09.01.2013 - 14:54:57 ---A- . (.Microsoft - Syst�me de classement GRB.) -- C:\Windows\System32\grb.rs [21504]
O44 - LFC:[MD5.4773EB5962548068547214A620E9ACC3] - 09.01.2013 - 14:54:57 ---A- . (.Microsoft - Syst�me de classement OFLC.) -- C:\Windows\SysNative\oflc.rs [23552]
O44 - LFC:[MD5.4773EB5962548068547214A620E9ACC3] - 09.01.2013 - 14:54:57 ---A- . (.Microsoft - Syst�me de classement OFLC.) -- C:\Windows\System32\oflc.rs [23552]
O44 - LFC:[MD5.6D540AF9B183FC97DC4CC54369561548] - 09.01.2013 - 14:54:57 ---A- . (.Microsoft - Syst�me de classement PEGI au Portugal.) -- C:\Windows\SysNative\pegi-pt.rs [20480]
O44 - LFC:[MD5.6D540AF9B183FC97DC4CC54369561548] - 09.01.2013 - 14:54:57 ---A- . (.Microsoft - Syst�me de classement PEGI au Portugal.) -- C:\Windows\System32\pegi-pt.rs [20480]
O44 - LFC:[MD5.9BB05674E013C35F4DAED51F5015355D] - 09.01.2013 - 14:54:57 ---A- . (.Microsoft - Syst�me de classement PEGI en Finlande.) -- C:\Windows\SysNative\pegi-fi.rs [20480]
O44 - LFC:[MD5.9BB05674E013C35F4DAED51F5015355D] - 09.01.2013 - 14:54:57 ---A- . (.Microsoft - Syst�me de classement PEGI en Finlande.) -- C:\Windows\System32\pegi-fi.rs [20480]
O44 - LFC:[MD5.661AE5EAC62C4598DD01795CEB915BAE] - 09.01.2013 - 14:54:57 ---A- . (.Microsoft - Syst�me de classement PEGI.) -- C:\Windows\SysNative\pegi.rs [20480]
O44 - LFC:[MD5.661AE5EAC62C4598DD01795CEB915BAE] - 09.01.2013 - 14:54:57 ---A- . (.Microsoft - Syst�me de classement PEGI.) -- C:\Windows\System32\pegi.rs [20480]
O44 - LFC:[MD5.1BCDB508143B517F21BBDAC10F5777BF] - 09.01.2013 - 14:54:49 . (.Microsoft - Syst�me de classification COB-AU.) -- C:\Windows\System32\conhost.exe [40960]
O44 - LFC:[MD5.61DB428415B8F3E2EF91107185BD83BD] - 06.01.2013 - 04:20:04 ---A- . (...) -- C:\Windows\DirectX.log [184927]
O44 - LFC:[MD5.74642EB7F8691C23ADC980EAE43C7D04] - 04.01.2013 - 23:26:13 ---A- . (.Oracle Corporation - .) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll [108008]
O44 - LFC:[MD5.CB32B57003EC2B07070BEE32059C4F64] - 04.01.2013 - 23:26:13 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\SysNative\deployJava1.dll [959976]
O44 - LFC:[MD5.AAF7C6AD7D7AB54018A514B6C2F8CC8A] - 04.01.2013 - 23:26:13 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\SysNative\java.exe [188392]
O44 - LFC:[MD5.CD1A1CFE578B04369E31C4141B26F96E] - 04.01.2013 - 23:26:13 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\SysNative\javaw.exe [188392]
O44 - LFC:[MD5.CB32B57003EC2B07070BEE32059C4F64] - 04.01.2013 - 23:26:13 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\deployJava1.dll [959976]
O44 - LFC:[MD5.E572D74385CD1E6B9ACC9110FA1781DC] - 04.01.2013 - 23:26:13 ---A- . (.Oracle Corporation - Java(TM) Web Start Launcher.) -- C:\Windows\SysNative\javaws.exe [308200]
O44 - LFC:[MD5.B68FC7C0DCC5B99FA1E7D85B357DAC1F] - 04.01.2013 - 23:26:13 ---A- . (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(T.) -- C:\Windows\SysNative\npDeployJava1.dll [1081320]
O44 - LFC:[MD5.B68FC7C0DCC5B99FA1E7D85B357DAC1F] - 04.01.2013 - 23:26:13 ---A- . (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(T.) -- C:\Windows\System32\npDeployJava1.dll [1081320]
O44 - LFC:[MD5.843F4E49A11D594988CC9B49EFFFBB3D] - 01.01.2013 - 03:10:38 ---A- . (...) -- C:\Windows\PFRO.log [765692]
O44 - LFC:[MD5.2ED72B3F76C9368ABC01464DA64DB7AE] - 16.12.2012 - 18:11:22 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\SysNative\atmlib.dll [46080]
O44 - LFC:[MD5.2ED72B3F76C9368ABC01464DA64DB7AE] - 16.12.2012 - 18:11:22 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\System32\atmlib.dll [46080]
O44 - LFC:[MD5.CB2ABB2DA1E9C977302A78D86D4AE3B0] - 16.12.2012 - 15:45:03 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\SysNative\atmfd.dll [367616]
O44 - LFC:[MD5.CB2ABB2DA1E9C977302A78D86D4AE3B0] - 16.12.2012 - 15:45:03 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\System32\atmfd.dll [367616]
O44 - LFC:[MD5.1153AC6E133AA849853DFD407B086B80] - 30.11.2012 - 00:15:43 ---A- . (...) -- C:\Windows\SysNative\locale.nls [420064]
O44 - LFC:[MD5.1153AC6E133AA849853DFD407B086B80] - 30.11.2012 - 00:15:43 ---A- . (...) -- C:\Windows\System32\locale.nls [420064]
O44 - LFC:[MD5.523B9B64F2B6C630A2E0A87116C05F12] - 23.11.2012 - 04:26:31 . (...) -- C:\Windows\System32\win32k.sys [53904]
O44 - LFC:[MD5.685527DA09EBFB681E98C515978BDEE2] - 24.08.2012 - 19:03:09 . (...) -- C:\Windows\System32\lsasrv.dll [420064]
O44 - LFC:[MD5.8F69EE5E0EB0779DC3E90DFD8D8E8683] - 23.08.2012 - 10:51:57 . (...) -- C:\Windows\System32\rdpcorets.dll [1661710]
O44 - LFC:[MD5.45D4B35B1561E1E2248C88E560A85D71] - 17.06.2010 - 17:40:50 ---A- . (...) -- C:\Windows\SysNative\wbload.dll [53904]
O44 - LFC:[MD5.45D4B35B1561E1E2248C88E560A85D71] - 17.06.2010 - 17:40:50 ---A- . (...) -- C:\Windows\System32\wbload.dll [53904]
~ Scan Files in 00mn 03s



---\\ Local Security Authority-LSA Deny (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l��diteur de configuration de s�curit� Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de s�curit� Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - LiveSSP.) -- C:\Windows\System32\livessp.dll
~ Scan Keys in 00mn 00s



---\\ Safe Boot Control (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s



---\\ MountPoints2 Shell Key (MPKS) (O51) (None)

---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\AdobeCS5ServiceManager [Key] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite [Key] . (.DT Soft Ltd - DAEMON Tools Lite.) -- D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O53 - SMSR:HKLM\...\startupreg\EPSON SX110 Series [Key] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFBE.exe
O53 - SMSR:HKLM\...\startupreg\ROC_ROC_NT [Key] . (...) -- C:\Program Files (x86)\AVG Secure Search\ROC_ROC_NT.exe
O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (...) -- C:\Program Files (x86)\Skype\Phone\Skype.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\StartCCC [Key] . (.Advanced Micro Devices, Inc. - Catalyst� Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O53 - SMSR:HKLM\...\startupreg\Steam [Key] . (.Valve Corporation - Steam.) -- E:\Steam\Steam.exe
O53 - SMSR:HKLM\...\startupreg\SwitchBoard [Key] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O53 - SMSR:HKLM\...\startupreg\vProt [Key] . (. - VProtect Application.) -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
~ Scan SMSR Keys in 00mn 00s



---\\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
~ Scan Keys in 00mn 00s



---\\ System Drivers List (SDL) (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14.07.2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088]
O58 - SDL:[MD5.19166026A93206F9C6A8CD3A1F010AE4] - 02.04.2009 - 13:30:14 ---A- . (...) -- C:\Windows\SysWOW64\drivers\ASUSHWIO.SYS [10296]
~ Scan Drivers in 00mn 00s



---\\ List all tools cleaner (LATC) (O63)
O63 - Logiciel: ZHPDiag 1.32 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ Scan ADS in 00mn 00s



---\\ List all legacy services(LALS) (O64)
O64 - Services: CurCS - 28.09.2012 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag) .(.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
O64 - Services: CurCS - 22.10.2012 - C:\Windows\System32\DRIVERS\avgidsdrivera.sys (AVGIDSDriver) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) - LEGACY_AVGIDSDRIVER
O64 - Services: CurCS - 15.10.2012 - C:\Windows\System32\DRIVERS\avgidsha.sys (AVGIDSHA) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Helper Dri.) - LEGACY_AVGIDSHA
O64 - Services: CurCS - 02.10.2012 - C:\Windows\System32\DRIVERS\avgldx64.sys (Avgldx64) .(.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - LEGACY_AVGLDX64
O64 - Services: CurCS - 21.09.2012 - C:\Windows\System32\DRIVERS\avgloga.sys (Avgloga) .(.AVG Technologies CZ, s.r.o. - AVG Logging Driver.) - LEGACY_AVGLOGA
O64 - Services: CurCS - 05.10.2012 - C:\Windows\System32\DRIVERS\avgmfx64.sys (Avgmfx64) .(.AVG Technologies CZ, s.r.o. - AVG Resident Shield Minifilter Driver.) - LEGACY_AVGMFX64
O64 - Services: CurCS - 14.09.2012 - C:\Windows\System32\DRIVERS\avgrkx64.sys (Avgrkx64) .(.AVG Technologies CZ, s.r.o. - AVG Anti-Rootkit Driver.) - LEGACY_AVGRKX64
O64 - Services: CurCS - 21.09.2012 - C:\Windows\System32\DRIVERS\avgtdia.sys (Avgtdia) .(.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - LEGACY_AVGTDIA
O64 - Services: CurCS - 26.12.2012 - C:\Windows\system32\drivers\avgtpx64.sys (avgtp) .(.AVG Technologies - .) - LEGACY_AVGTP
O64 - Services: CurCS - 21.07.2011 - C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys (driverhardwarev2x64) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2X64
O64 - Services: CurCS - 30.12.1899 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
~ Scan Services in 00mn 01s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (SMI) (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (SBI) (O69)
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("avg.install.newtab", false);
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.admin", false);
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.aflt", "babsst");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.autoRvrt", "false");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.dfltLng", "en");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.excTlbr", false);
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.id", "849c6cd500000000000010bf48bce869");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.instlDay", "15688");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.instlRef", "sst");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.rvrt", "false");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.tlbrId", "base");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "http://search.babylon.com/?babsrc=TB_def&mntrId=849c6cd500000000000010bf48bce8[...]
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.vrsn", "1.8.4.9");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar.vrsni", "1.8.4.9");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar_i.babExt", "");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar_i.babTrack", "affID=113357&tt=5012_2");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar_i.excTlbr", false);
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar_i.newTab", false);
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.4.915:34:29");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.crossrider.bic", "13aa3ea0dc381f3a6a1e483b1cac0c74");
O69 - SBI: prefs.js [Damien - 31jy3jpe.default] user_pref("extensions.crossriderapp21810.adsOldValue", 14);
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {95B7759C-8C7F-4BF1-B163-73684A933233} [DefaultScope] - (AVG Secure Search) - http://isearch.avg.com
~ Scan Keys in 00mn 00s



---\\ Search Svchost Services (SSS) (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Exp�rience d�application.) -- C:\Windows\System32\aelupsvc.dll [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de strat�gie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de num�rotation automatique d�acc�s distant.) -- C:\Windows\System32\rasauto.dll [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d�acc�s distant.) -- C:\Windows\System32\rasmans.dll [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d�interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d��v�nements syst�me (SENS).) -- C:\Windows\System32\sens.dll [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l�application d�assistance � Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de t�l�phonie Microsoft� Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur h�te de session Burea.) -- C:\Windows\System32\termsrv.dll [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise � jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [2428952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arri�re-plan.) -- C:\Windows\System32\qmgr.dll [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivit� IPv6 sur un r�seau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d�ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d�application.) -- C:\Windows\System32\appinfo.dll [70656]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de d�couverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multim�dias.) -- C:\Windows\System32\mmcss.dll [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau � distance.) -- C:\Windows\System32\sessenv.dll [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d�ordinateurs.) -- C:\Windows\System32\browser.dll [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de t�ches.) -- C:\Windows\System32\schedsvc.dll [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des cl�s.) -- C:\Windows\System32\kmsvc.dll [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux probl�mes.) -- C:\Windows\System32\wercplsupport.dll [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des th�mes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864]
~ Scan Services in 00mn 00s



---\\ Search Particular Root Folder (SPRF) (O84)
[MD5.08B04D5673C9283D3DBDBC4F845F049A] [SPRF][20.09.2012] (.AVG Technologies CZ, s.r.o. - AVG UID module.) -- C:\Users\Damien\AppData\Local\Temp\avguidx.dll [255072]
[MD5.AAB7AC8D97F195CF8282901C6B6D8AF8] [SPRF][20.09.2012] (. - CommonInstaller Application.) -- C:\Users\Damien\AppData\Local\Temp\CommonInstaller.exe [4720736]
[MD5.251940E083E8DE21B1A65940A49ACA28] [SPRF][06.01.2013] (.Sony DADC Austria AG - SecuROM dynamic-data module.) -- C:\Users\Damien\AppData\Local\Temp\drm_dyndata_7370014.dll [204800]
[MD5.3E9B2A232E90FA98DFE3F0866E201883] [SPRF][08.01.2013] (.Sony DADC Austria AG - SecuROM dynamic-data module.) -- C:\Users\Damien\AppData\Local\Temp\drm_dyndata_7380014.dll [204800]
[MD5.04C560F55611F8383166A456D2CECE2C] [SPRF][29.09.2012] (.Adobe Systems Incorporated - Adobe� Flash� Player Installer/Uninstaller 11.4 r402.) -- C:\Users\Damien\AppData\Local\Temp\fp_pl_pfs_installer.exe [10213296]
[MD5.F2F5E2EBE8944E2F5AA8C87F4850658A] [SPRF][14.12.2012] (. - IncrediMail Installer.) -- C:\Users\Damien\AppData\Local\Temp\incredibar_install.exe [474992]
[MD5.F4F883EAF7F7413A085D9868511AF8A9] [SPRF][07.01.2013] (...) -- C:\Users\Damien\AppData\Local\Temp\jansi-64-git-Bukkit-1.4.5-R1.0-b2543jnks.dll [17408]
[MD5.F4F883EAF7F7413A085D9868511AF8A9] [SPRF][07.01.2013] (...) -- C:\Users\Damien\AppData\Local\Temp\jansi-64-git-Bukkit-1.4.6-R0.3-b2586jnks.dll [17408]
[MD5.8062BB041661275E2CC7C699521FF4D7] [SPRF][29.09.2012] (.Logitech - .) -- C:\Users\Damien\AppData\Local\Temp\lgps_lgps.exe [19481616]
[MD5.3FE0471F53F5F13170A8C7C5266E1A04] [SPRF][27.09.2011] (...) -- C:\Users\Damien\AppData\Local\Temp\LMkRstPt.exe [101144]
[MD5.CA77CD09F52149CB33FC117396087EBE] [SPRF][20.09.2012] (. - MachineIdCreator Application.) -- C:\Users\Damien\AppData\Local\Temp\MachineIdCreator.exe [163936]
[MD5.8A4AF3B0695F29186AD02E2FD766FA3B] [SPRF][28.10.2012] (.SweetIM Technologies Ltd. - SQLite DLL.) -- C:\Users\Damien\AppData\Local\Temp\mgsqlite3.dll [393016]
[MD5.A455E465CD4D710DC9B5ED2B8F9C0B0C] [SPRF][20.09.2012] (. - IntToolbarInstaller Application.) -- C:\Users\Damien\AppData\Local\Temp\oi_{FF67DEBD-0A6E-40CA-96F6-6026AFB4C391}.exe [12143200]
[MD5.D9DA3FDE1AEE64CEE57D4C57A538A53B] [SPRF][28.10.2012] (.SweetIM Technologies Ltd. - SweetIM Installer by SweetPacks.) -- C:\Users\Damien\AppData\Local\Temp\Shortcut_sweetim_2210-1be9878d.exe [7739736]
[MD5.EBC6CE2D14774A39878696DDCC48A611] [SPRF][14.11.2012] (.SweetIM Technologies Ltd. - SweetPacks Browser Updater.) -- C:\Users\Damien\AppData\Local\Temp\simbo.exe [1150808]
[MD5.C6D792E4583FC46DB0953FBF6E46348A] [SPRF][28.10.2012] (.SweetIM Technologies Lt - This installer.) -- C:\Users\Damien\AppData\Local\Temp\SIMEEI2Installer.exe [2962432]
[MD5.7704B843006444B69486FD27D4660845] [SPRF][28.10.2012] (.SweetIM Technologies Lt - This installer.) -- C:\Users\Damien\AppData\Local\Temp\SIMEEIInstaller.exe [3380216]
[MD5.F467645711172ECA7FCE253824A09179] [SPRF][03.11.2011] (...) -- C:\Users\Damien\AppData\Local\Temp\sonarinst.exe [1786688]
[MD5.E3E294B6876F636A41C8A1D325280254] [SPRF][20.09.2012] (. - ToolbarInstaller.) -- C:\Users\Damien\AppData\Local\Temp\ToolbarInstaller.exe [8212064]
[MD5.065B1CE95FDC5B95AC39E4FE7B4ABF12] [SPRF][04.01.2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\Damien\AppData\Local\Temp\uninst1.exe [378008]
[MD5.F9A091FDD1C96FD0BC9AC8C6EF7F362E] [SPRF][24.11.2012] (...) -- C:\Users\Damien\AppData\Local\Temp\utt8A63.tmp.bat [53]
[MD5.E03F2F24BCA457A35E1E26732AFE4A2F] [SPRF][09.11.2012] (...) -- C:\Users\Damien\AppData\Local\Temp\vlc-2.0.4-win32.exe [22912657]
[MD5.AC23C732F2B4EDA487E0D07AB821C617] [SPRF][04.10.2012] (...) -- C:\Users\Damien\AppData\Local\Temp\vy0x3xq3.dll [140800]
[MD5.91426C831971CD78196B3C4BB0A9E9B5] [SPRF][10.11.2012] (...) -- C:\Users\Damien\AppData\Local\Temp\wajam_install.exe [417088]
[MD5.887173F53072CD2D238014F4199B35CF] [SPRF][05.05.2010] (...) -- C:\Users\Damien\AppData\Local\Temp\xmlUpdater.exe [118784]
[MD5.AE7E0C99C5BC7D28325C0CD7885C851F] [SPRF][24.10.2012] (.Yontoo LLC - Installer.) -- C:\Users\Damien\AppData\Local\Temp\YontooSetup-S.exe [1062504]
[MD5.D9D00D5F6FE341CF91C0787BAA6D1AC1] [SPRF][04.10.2012] (...) -- C:\Users\Damien\AppData\Local\Temp\zklxci1u.dll [3584]
[MD5.FBAB280D0CAC5E21C72F0A1A7B5B9608] [SPRF][23.06.2007] (.Macrovision Corporation - Setup.exe.) -- C:\Users\Damien\AppData\Local\Temp\_is1879.exe [455600]
[MD5.FBAB280D0CAC5E21C72F0A1A7B5B9608] [SPRF][26.05.2006] (.Macrovision Corporation - Setup.exe.) -- C:\Users\Damien\AppData\Local\Temp\_is7A57.exe [455600]
[MD5.FBAB280D0CAC5E21C72F0A1A7B5B9608] [SPRF][24.05.2006] (.Macrovision Corporation - Setup.exe.) -- C:\Users\Damien\AppData\Local\Temp\_isE6D6.exe [455600]
[MD5.BAFEE8DD8F4BB21BFD3E7D073A1C0EDF] [SPRF][02.11.2012] (...) -- C:\Users\Damien\AppData\Roaming\TheHunterSettings_live.bin [11866]
[MD5.C25A31B29E74B02FBB296956D750A7EC] [SPRF][20.09.2012] (...) -- C:\Users\Damien\Desktop\pbsetup.exe [2211840]
~ Scan Files in 00mn 05s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "{08576EB9-0D93-4043-B2BF-A79A7063C845}" | In - Private - P6 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Installer Application.) -- C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe
O87 - FAEL: "{3A5F286D-B9C3-46DA-8295-C5E94FF2BBC6}" | In - Private - P17 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Installer Application.) -- C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe
O87 - FAEL: "{B4653D14-8932-4EDF-9AA3-F6E62078417F}" |In - Private - P6 - TRUE | .(...) -- E:\World of Warcraft\Launcher.exe (.not file.)
O87 - FAEL: "{F92560DE-83BF-4ADB-8C41-9598FFE09C5F}" |In - Private - P17 - TRUE | .(...) -- E:\World of Warcraft\Launcher.exe (.not file.)
O87 - FAEL: "{7AC714EB-31F5-49DD-AD18-D92906ED06C3}" | In - Private - P6 - TRUE | .(.Blizzard Entertainment - Blizzard Downloader.) -- E:\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe
O87 - FAEL: "{161F092F-3130-412E-AA51-307361E72684}" | In - Private - P17 - TRUE | .(.Blizzard Entertainment - Blizzard Downloader.) -- E:\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe
O87 - FAEL: "{F2CE3706-B1CD-4140-97CA-A0D81AB0BE49}" |In - Private - P6 - TRUE | .(...) -- E:\World of Warcraft\Launcher.patch.exe (.not file.)
O87 - FAEL: "{3893AB77-0852-4275-A3C9-A411000E559E}" |In - Private - P17 - TRUE | .(...) -- E:\World of Warcraft\Launcher.patch.exe (.not file.)
O87 - FAEL: "TCP Query User{36782695-E17F-4B7A-97F4-A65C329CA7EE}E:\world of warcraft\temp\wow-4.3-5.0.15890-enus-downloader.exe" |In - Private - P6 - TRUE | .(...) -- E:\world of warcraft\temp\wow-4.3-5.0.15890-enus-downloader.exe (.not file.)
O87 - FAEL: "UDP Query User{D13957B5-10E0-48B0-A926-05AF1374057E}E:\world of warcraft\temp\wow-4.3-5.0.15890-enus-downloader.exe" |In - Private - P17 - TRUE | .(...) -- E:\world of warcraft\temp\wow-4.3-5.0.15890-enus-downloader.exe (.not file.)
O87 - FAEL: "{FE9222FD-B266-4549-86FF-B1CCC2CE63C9}" |In - Private - P6 - TRUE | .(...) -- C:\ProgramData\Battle.net\Agent\Agent.1040\Agent.exe (.not file.)
O87 - FAEL: "{97BCF344-2307-4C8C-8570-B4167EFE4B2E}" |In - Private - P17 - TRUE | .(...) -- C:\ProgramData\Battle.net\Agent\Agent.1040\Agent.exe (.not file.)
O87 - FAEL: "{0499201D-CE3E-49C6-BE87-75FA778E6D1F}" |In - Private - P6 - TRUE | .(...) -- C:\ProgramData\Battle.net\Agent\Agent.1267\Agent.exe (.not file.)
O87 - FAEL: "{E1F81A31-54CF-4680-84CA-9CF7CDA0CF2B}" |In - Private - P17 - TRUE | .(...) -- C:\ProgramData\Battle.net\Agent\Agent.1267\Agent.exe (.not file.)
O87 - FAEL: "{44A4662F-A92E-4EE2-A81A-27F12C7E0C92}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{A0118050-BBFC-4724-9BDF-486A8C30B17A}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{D0BB6B46-251D-4769-8880-B28AD8C072F7}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{56A1E866-3D23-4FC9-B5A8-855803950C20}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{4AE07DED-3273-4C59-A92B-FEEFD0A09F66}" | In - Private - P6 - TRUE | .(.Valve Corporation - Steam.) -- E:\Steam\Steam.exe
O87 - FAEL: "{D9C2FB2F-BBA3-42DB-8928-4E878AC1A850}" | In - Private - P17 - TRUE | .(.Valve Corporation - Steam.) -- E:\Steam\Steam.exe
O87 - FAEL: "{266C1554-38B8-40AC-9A56-10D4BCC4B195}" | In - Private - P6 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.1363\Agent.exe
O87 - FAEL: "{47B7D641-4044-4EB8-A4C3-E70A64D833EE}" | In - Private - P17 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.1363\Agent.exe
O87 - FAEL: "{A282056F-8407-4DB5-8985-37E67498EE88}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\Skype\Phone\Skype.exe (.not file.)
O87 - FAEL: "{B51F9CF1-A0C9-426C-A799-12057D4C7D41}" | In - Private - P6 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O87 - FAEL: "{C72F2638-9185-4E18-A0CF-E27669095584}" | In - Private - P17 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O87 - FAEL: "{311EDAD2-10BB-4B18-B94D-0FEB81C283B9}" | In - Private - P6 - TRUE | .(.EA Digital Illusions CE AB - Battlefield 3�.) -- E:\Origin Games\Battlefield 3\bf3.exe
O87 - FAEL: "{A0C65FF9-393C-4BE6-9E62-EE486B66C89C}" | In - Private - P17 - TRUE | .(.EA Digital Illusions CE AB - Battlefield 3�.) -- E:\Origin Games\Battlefield 3\bf3.exe
O87 - FAEL: "{8905A4A8-4057-40F1-A51C-5C8883EA2195}" | In - Private - P6 - TRUE | .(.SweetIM Technologies Ltd. - Update Manager for SweetPacks.) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
O87 - FAEL: "{A1C74070-758C-4EB7-AB85-6B2CA562830E}" | In - Private - P17 - TRUE | .(.SweetIM Technologies Ltd. - Update Manager for SweetPacks.) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
O87 - FAEL: "{41024D92-1373-4D04-8C53-4BFCA4F134CA}" | In - Public - P6 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.1363\Agent.exe
O87 - FAEL: "{CE280771-8C04-43CC-9BE7-CA2E10736DB0}" | In - Public - P17 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.1363\Agent.exe
O87 - FAEL: "TCP Query User{2A6F982A-20E9-40F9-A9CF-07F7E803F5D5}E:\program files (x86)\thehunter\launcher\launcher.exe" |In - Private - P6 - TRUE | .(...) -- E:\program files (x86)\thehunter\launcher\launcher.exe (.not file.)
O87 - FAEL: "UDP Query User{BDBF6314-E1F7-4C96-A871-CD7594B54E1E}E:\program files (x86)\thehunter\launcher\launcher.exe" |In - Private - P17 - TRUE | .(...) -- E:\program files (x86)\thehunter\launcher\launcher.exe (.not file.)
O87 - FAEL: "TCP Query User{398B470A-CEBE-455F-A5B9-51A58BE5FD8F}E:\thehunter\launcher\launcher.exe" | In - Private - P6 - TRUE | .(.Expansive Worlds - theHunter Launcher.) -- E:\thehunter\launcher\launcher.exe
O87 - FAEL: "UDP Query User{9F2ECB0A-D047-46D4-BF43-5DEB6F5EFFDD}E:\thehunter\launcher\launcher.exe" | In - Private - P17 - TRUE | .(.Expansive Worlds - theHunter Launcher.) -- E:\thehunter\launcher\launcher.exe
O87 - FAEL: "{AF44B7CD-E10A-4AC9-9CD4-DDD3431DC571}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de d�tection mat�riel.) -- C:\Program Files\ma-config.com\x64\maconfservice.exe
O87 - FAEL: "{2C05C7AF-81E7-49FE-A447-B038D6F3B978}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de d�tection mat�riel.) -- C:\Program Files\ma-config.com\x64\maconfservice.exe
O87 - FAEL: "{66B7A432-505D-4907-8A74-2F6D353FF377}" |In - None - P6 - TRUE | .(...) -- C:\Program Files (x86)\uTorrent\uTorrent.exe (.not file.)
O87 - FAEL: "{BFC6D9D2-66CC-47AB-8D7C-C060735C84ED}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\uTorrent\uTorrent.exe (.not file.)
O87 - FAEL: "TCP Query User{3E09BACA-4C97-4876-982A-2C3377BCD113}D:\program files (x86)\utorrent\utorrent.exe" | In - Private - P6 - TRUE | .(.BitTorrent, Inc. - �Torrent.) -- D:\program files (x86)\utorrent\utorrent.exe
O87 - FAEL: "UDP Query User{48D6AB46-567A-4E15-9362-9611D734D23D}D:\program files (x86)\utorrent\utorrent.exe" | In - Private - P17 - TRUE | .(.BitTorrent, Inc. - �Torrent.) -- D:\program files (x86)\utorrent\utorrent.exe
O87 - FAEL: "TCP Query User{87AE11D5-91A6-44B0-832A-6518AC5E7189}D:\program files (x86)\skype\phone\skype.exe" | In - Private - P6 - TRUE | .(.Skype Technologies S.A. - Skype.) -- D:\program files (x86)\skype\phone\skype.exe
O87 - FAEL: "UDP Query User{AEA0A940-91C2-4371-85E4-A6ABFF139B7C}D:\program files (x86)\skype\phone\skype.exe" | In - Private - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- D:\program files (x86)\skype\phone\skype.exe
O87 - FAEL: "{0C2A3EA6-4711-4AB9-B806-B5E1751A75EB}" | In - Private - P6 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Online Shield Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
O87 - FAEL: "{A74E45B8-8012-44C1-B7EC-A665388F7C41}" | In - Private - P17 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Online Shield Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
O87 - FAEL: "{503C3D63-BC16-4AC3-82A1-A3BA9EDCE563}" | In - Private - P6 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Diagnostics.) -- C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe
O87 - FAEL: "{15995C81-222B-45AC-A233-CA310C476E0B}" | In - Private - P17 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Diagnostics.) -- C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe
O87 - FAEL: "{04CACF8D-D770-4439-B10C-9294008AABB6}" | In - Private - P6 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG E-mail Scanner.) -- C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
O87 - FAEL: "{2B6C34BE-A735-4195-A72D-2685A7DD22C2}" | In - Private - P17 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG E-mail Scanner.) -- C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
O87 - FAEL: "{C5161EB7-258B-4968-A794-4F81296C6110}" | In - Private - P6 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
O87 - FAEL: "{22E1872C-7EB1-48D5-9CA6-2708DFB7A91E}" | In - Private - P17 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
O87 - FAEL: "{3BB29982-F7AF-461F-BA0C-B97F3E5684E8}" | In - Private - P6 - FALSE | .(. - IncrediMail Installer.) -- C:\Users\Damien\AppData\Local\Temp\incredibar_install.exe
O87 - FAEL: "{81F4D2FA-206C-494A-9117-1E284B8737A7}" | In - Private - P17 - FALSE | .(. - IncrediMail Installer.) -- C:\Users\Damien\AppData\Local\Temp\incredibar_install.exe
O87 - FAEL: "TCP Query User{F766EFDF-10D0-4DFB-801B-3884E74D5465}E:\need for speed most wanted\nfs13.exe" | In - Private - P6 - TRUE | .(.Electronic Arts - Need for Speed� Most Wanted.) -- E:\need for speed most wanted\nfs13.exe
O87 - FAEL: "UDP Query User{61CC5D54-6B48-4CA8-BD0A-0C66B99DDA4C}E:\need for speed most wanted\nfs13.exe" | In - Private - P17 - TRUE | .(.Electronic Arts - Need for Speed� Most Wanted.) -- E:\need for speed most wanted\nfs13.exe
O87 - FAEL: "{CC00FDE4-C77C-4124-8CD1-223C295220D1}" | In - Private - P6 - TRUE | .(.ESN Social Software AB - ESN Sonar Host Application.) -- C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
O87 - FAEL: "{C7CD058E-E9D7-4272-B50A-485F8D0E788B}" | In - Private - P17 - TRUE | .(.ESN Social Software AB - ESN Sonar Host Application.) -- C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
O87 - FAEL: "TCP Query User{DB3C2FEA-B371-4102-A5F6-891B7A229485}C:\users\damien\appdata\local\apps\2.0\w6w9ta70.wd6\4c9pvyh5.9hk\laun...app_59711684aa47878d_0001.001d_82c2447510b53390\launcher.exe" | In - Private - P6 - TRUE | .(.Ubisoft.) -- C:\users\d
O87 - FAEL: "UDP Query User{62C6F03A-B5AC-46E9-A8F1-13238D0D5A66}C:\users\damien\appdata\local\apps\2.0\w6w9ta70.wd6\4c9pvyh5.9hk\laun...app_59711684aa47878d_0001.001d_82c2447510b53390\launcher.exe" | In - Private - P17 - TRUE | .(.Ubisoft.) -- C:\users\
O87 - FAEL: "TCP Query User{F413B7EF-1DAB-45D9-9B3F-42AD35DB7AA8}E:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe" | In - Private - P6 - TRUE | .(. - GRO Client.) -- E:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe
O87 - FAEL: "UDP Query User{98CBE537-6FD5-4E3E-A15B-FD484FBA21F6}E:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe" | In - Private - P17 - TRUE | .(. - GRO Client.) -- E:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe
O87 - FAEL: "{BC510CCD-894D-4E96-B82E-54B1116EC852}" | In - Private - P6 - TRUE | .(...) -- E:\Assassin's Creed III\AC3SP.exe
O87 - FAEL: "{3C37E98F-7933-4799-B69B-6E4EED874C8B}" | In - Private - P17 - TRUE | .(...) -- E:\Assassin's Creed III\AC3SP.exe
O87 - FAEL: "{317117C4-2FC6-4CD3-BEB2-2C6D17AB6E97}" | In - Private - P6 - TRUE | .(...) -- E:\Assassin's Creed III\AC3MP.exe
O87 - FAEL: "{4581F924-5CCA-470D-83B3-8E3DA58319D5}" | In - Private - P17 - TRUE | .(...) -- E:\Assassin's Creed III\AC3MP.exe
O87 - FAEL: "{FD5EF707-1BC0-4A8B-8EDF-284D1EB5503C}" | In - Private - P6 - TRUE | .(.Ubisoft - Autopatch system.) -- E:\Assassin's Creed III\AssassinsCreed3.exe
O87 - FAEL: "{4624AB16-DBD5-4868-9A96-020DFE332521}" | In - Private - P17 - TRUE | .(.Ubisoft - Autopatch system.) -- E:\Assassin's Creed III\AssassinsCreed3.exe
O87 - FAEL: "{974421BC-CE53-4D0F-8EFF-A4C14C84CD82}" | In - Private - P6 - TRUE | .(.THQ Inc. - Saints Row�: The Third�.) -- E:\Steam\SteamApps\common\saints row the third\game_launcher.exe
O87 - FAEL: "{05A735CF-67EE-4F4F-8E0B-36A945DC3F8B}" | In - Private - P17 - TRUE | .(.THQ Inc. - Saints Row�: The Third�.) -- E:\Steam\SteamApps\common\saints row the third\game_launcher.exe
O87 - FAEL: "{F6046FDD-A40F-40E8-ABE9-DCCC5EB2EC37}" | In - Private - P6 - TRUE | .(.Blizzard Entertainment - Diablo III Retail.) -- E:\Diablo III\Diablo III.exe
O87 - FAEL: "{9AA54F82-1221-47ED-BD01-0752D95427EA}" | In - Private - P17 - TRUE | .(.Blizzard Entertainment - Diablo III Retail.) -- E:\Diablo III\Diablo III.exe
O87 - FAEL: "TCP Query User{D4855BE4-241C-4F7F-8396-E48927C84107}E:\the war z\warz.exe" |In - Private - P6 - TRUE | .(...) -- E:\the war z\warz.exe (.not file.)
O87 - FAEL: "UDP Query User{FB796971-DE70-40AD-903E-6A35A0494612}E:\the war z\warz.exe" |In - Private - P17 - TRUE | .(...) -- E:\the war z\warz.exe (.not file.)
O87 - FAEL: "{C89CF950-28A3-479B-855B-6FD16C399F8E}" | In - Private - P6 - TRUE | .(.Ubisoft - Autopatch system.) -- E:\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
O87 - FAEL: "{AED1E406-1A30-4994-9723-2A8E16DC5E38}" | In - Private - P17 - TRUE | .(.Ubisoft - Autopatch system.) -- E:\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
O87 - FAEL: "{875954E2-EAFC-4F2A-9D0E-CAE38F7BBA61}" | In - Private - P6 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- E:\Steam\SteamApps\common\Far Cry 3\bin\farcry3.exe
O87 - FAEL: "{4E0621B8-1200-4C40-9E00-134AE52C0724}" | In - Private - P17 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- E:\Steam\SteamApps\common\Far Cry 3\bin\farcry3.exe
O87 - FAEL: "{1B057D67-9FA4-48CF-94BD-97C508E62074}" | In - Private - P6 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- E:\Steam\SteamApps\common\Far Cry 3\bin\farcry3_d3d11.exe
O87 - FAEL: "{C4B449E9-4DC9-482B-80A3-5988CF062C5A}" | In - Private - P17 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- E:\Steam\SteamApps\common\Far Cry 3\bin\farcry3_d3d11.exe
O87 - FAEL: "{59DD192F-AA7D-46A8-A836-29376BA9A302}" | In - Private - P6 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe
O87 - FAEL: "{393701B7-E02F-4640-B763-552CF4DB8C00}" | In - Private - P17 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe
O87 - FAEL: "{CC2C5141-BE18-4EBD-8523-E43F0F4DF6C1}" | In - Private - P6 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe
O87 - FAEL: "{DE82B23A-9E58-4D05-B781-F46B65C38932}" | In - Private - P17 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe
O87 - FAEL: "{7AE95C10-213D-45E4-9607-A860CBE1EEBB}" | In - Private - P6 - TRUE | .(.Bohemia Interactive - ArmA 2 OA.) -- E:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
O87 - FAEL: "{F91A6A48-6A28-4C7F-B9A3-BDBD2384E12F}" | In - Private - P17 - TRUE | .(.Bohemia Interactive - ArmA 2 OA.) -- E:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
O87 - FAEL: "{70797F8E-4AF7-4C9D-976D-EAF6FBED10A8}" | In - Private - P6 - TRUE | .(. - Setup.) -- E:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\BEsetup\Setup_BattlEyeARMA2OA.exe
O87 - FAEL: "{AB94B337-395E-4748-A8F6-78E52E0612EC}" | In - Private - P17 - TRUE | .(. - Setup.) -- E:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\BEsetup\Setup_BattlEyeARMA2OA.exe
O87 - FAEL: "TCP Query User{6E5749C8-B48C-44AA-85A1-C7E220D42A33}C:\program files (x86)\java\jre7\bin\javaw.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\java\jre7\bin\javaw.exe (.not file.)
O87 - FAEL: "UDP Query User{7BCFD413-91D0-4717-8385-5B049CFE8BC5}C:\program files (x86)\java\jre7\bin\javaw.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\java\jre7\bin\javaw.exe (.not file.)
O87 - FAEL: "{8459BA26-21A5-4DA0-B7A0-D7E94F14BD83}" | In - Private - P6 - TRUE | .(.Electronic Arts - FIFA 13.) -- E:\FIFA 13\Game\fifa13.exe
O87 - FAEL: "{6ECFD2E9-BD2F-47F0-AB4A-CED15CB6BE51}" | In - Private - P17 - TRUE | .(.Electronic Arts - FIFA 13.) -- E:\FIFA 13\Game\fifa13.exe
O87 - FAEL: "TCP Query User{A621DBA5-B07F-4F03-98D0-B7A87FA5E45F}C:\program files\java\jre7\bin\javaw.exe" | In - Private - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\javaw.exe
O87 - FAEL: "UDP Query User{7FC7FA5E-403B-4388-8B87-05DAADF632D8}C:\program files\java\jre7\bin\javaw.exe" | In - Private - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\javaw.exe
O87 - FAEL: "TCP Query User{8A50C1D8-7407-44F7-953C-FCD5A54AD455}E:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe" | In - Private - P6 - TRUE | .(.Take-Two Interactive Software, Inc..) -- E:\steam\steamapps\common\grand theft auto iv\gtaiv\g
O87 - FAEL: "UDP Query User{3E158AF3-3A00-4615-9637-7A5A61900039}E:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe" | In - Private - P17 - TRUE | .(.Take-Two Interactive Software, Inc..) -- E:\steam\steamapps\common\grand theft auto iv\gtaiv\
O87 - FAEL: "TCP Query User{42C49403-0AE4-4D33-9616-C19480986390}C:\windows\system32\javaw.exe" | In - Private - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\windows\system32\javaw.exe
O87 - FAEL: "UDP Query User{C7F0ADC6-96F2-447A-B9CB-15C0A6A6F390}C:\windows\system32\javaw.exe" | In - Private - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\windows\system32\javaw.exe
O87 - FAEL: "{A221CA32-3288-4A68-B996-6B9B0358638B}" | In - Private - P6 - TRUE | .(.Sony DADC Austria AG - SecuROM Launcher.) -- E:\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
O87 - FAEL: "{1D9C9244-4DAA-4DBD-B995-D1D7CE86C65C}" | In - Private - P17 - TRUE | .(.Sony DADC Austria AG - SecuROM Launcher.) -- E:\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
O87 - FAEL: "TCP Query User{2D66C1E8-1B83-46AB-9440-5EB84E8047E0}C:\program files\java\jre7\bin\java.exe" | In - Private - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\java.exe
O87 - FAEL: "UDP Query User{B629DC3C-204C-44DB-9636-C05516D4A675}C:\program files\java\jre7\bin\java.exe" | In - Private - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\java.exe
O87 - FAEL: "{014E0726-FE1E-49FF-B303-2E1583AD095D}" | In - Private - P6 - TRUE | .(.Bohemia Interactive - ArmA 2.) -- E:\Steam\SteamApps\common\Arma 2\arma2.exe
O87 - FAEL: "{AE54B2E4-A325-4E86-80D9-C772B79077CC}" | In - Private - P17 - TRUE | .(.Bohemia Interactive - ArmA 2.) -- E:\Steam\SteamApps\common\Arma 2\arma2.exe
O87 - FAEL: "TCP Query User{10E67AAC-7C7D-42BB-9735-42083B0893AA}E:\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe" | In - Private - P6 - TRUE | .(.Bohemia Interactive.) -- E:\steam\steamapps\common\arma 2 operation arrowhea
O87 - FAEL: "UDP Query User{58245E5E-1E0F-41D7-AB69-4EF8C3BFB393}E:\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe" | In - Private - P17 - TRUE | .(.Bohemia Interactive.) -- E:\steam\steamapps\common\arma 2 operation arrowhe
~ Scan Firewall in 00mn 01s



---\\ Additionnal Scan (O88)
Database Version : v2.10033 - (09/01/2013)
Cl�s trouv�es (Keys found) : 140
Valeurs trouv�es (Values found) : 1
Dossiers trouv�s (Folders found) : 16
Fichiers trouv�s (Files found) : 5

[HKLM\Software\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}] =>Toolbar.Agent
[HKLM\Software\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}] =>Toolbar.Wajam
[HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>Adware.Agent
[HKLM\Software\Wow6432Node\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>Adware.Agent
[HKLM\Software\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}] =>Toolbar.Alot
[HKLM\Software\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}] =>Toolbar.Alot
[HKLM\Software\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}] =>Toolbar.Alot
[HKLM\Software\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}] =>Toolbar.Alot
[HKLM\Software\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}] =>Toolbar.Wajam
[HKLM\Software\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}] =>Toolbar.Wajam
[HKLM\Software\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}] =>Toolbar.Agent
[HKLM\Software\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}] =>Toolbar.Babylon
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}] =>Toolbar.Alot
[HKLM\Software\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49dd-99D7-DC866BE87DBC}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}] =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}] =>Toolbar.Conduit
[HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper
[HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper
[HKLM\Software\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}] =>Toolbar.Conduit
[HKLM\Software\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}] =>Toolbar.Alot
[HKLM\Software\Wow6432Node\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}] =>Toolbar.Alot
[HKLM\Software\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}] =>Toolbar.Alot
[HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}] =>Toolbar.Alot
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}] =>Toolbar.Alot
[HKLM\Software\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}] =>Toolbar.Alot
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}] =>Toolbar.Alot
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}] =>Toolbar.Alot
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}] =>Toolbar.Alot
[HKLM\Software\Classes\AppID\escort.dll] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\escortapp.dll] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\escorteng.dll] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\esrv.EXE] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\ScriptHelper.EXE] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\YontooIEClient.DLL] =>Toolbar.Agent
[HKLM\Software\Classes\AVG Secure Search.BrowserWndAPI] =>Toolbar.Agent
[HKLM\Software\Classes\AVG Secure Search.PugiObj] =>Toolbar.Agent
[HKLM\Software\Classes\b] =>Toolbar.Babylon
[HKLM\Software\Classes\escort.escortIEPane] =>Toolbar.Babylon
[HKLM\Software\Classes\esrv.BabylonESrvc] =>Toolbar.Babylon
[HKLM\Software\Classes\S] =>Toolbar.Agent
[HKLM\Software\Classes\ViProtocol.ViProtocolOLE] =>Toolbar.Agent
[HKLM\Software\Classes\wajam.WajamBHO] =>Toolbar.Wajam
[HKLM\Software\Classes\wajam.WajamDownloader] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph] =>PUP.SpecialSavings
[HKLM\SYSTEM\CurrentControlSet\Services\WajamUpdater] =>Toolbar.Wajam
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater] =>Toolbar.Wajam
[HKCU\Software\{B2CB09FF-2453-4f85-9F40-21C05BE4CBA8}] =>Trojan.Agent
[HKCU\Software\BabylonToolbar] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\BabylonToolbar] =>Toolbar.Babylon
[HKCU\Software\Cr_Installer] =>Adware.VidSaver
[HKCU\Software\DataMngr] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\DataMngr] =>Adware.Bandoo
[HKCU\Software\AppDataLow\Software\Giant Savings Extension] =>Adware.VidSaver
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKCU\Software\StartSearch] =>Hijacker.Agent
[HKCU\Software\SweetIM] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
[HKLM\Software\Tarma Installer] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Tracing\incredibar_install_RASAPI32] =>Adware.IncrediBar
[HKLM\Software\Wow6432Node\Microsoft\Tracing\incredibar_install_RASMANCS] =>Adware.IncrediBar
[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EA8FA6BE-29BE-4AF2-9352-841F83215EB0}] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Giant Savings Extension] =>Adware.VidSaver
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Wajam] =>Toolbar.Wajam
[HKCU\Software\InstalledBrowserExtensions\215 Apps] =>PUP.SpecialSavings
[HKLM\Software\Classes\Prod.cap] =>Adware.Bandoo
[HKLM\Software\Classes\CrossriderApp0021810.BHO] =>Adware.VidSaver
[HKLM\Software\Classes\CrossriderApp0021810.Sandbox] =>Adware.VidSaver
[HKLM\Software\Classes\YontooIEClient.Api] =>Adware.Yontoo
[HKLM\Software\Classes\YontooIEClient.Layers] =>Adware.Yontoo
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0021810.BHO] =>Adware.VidSaver
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0021810.Sandbox] =>Adware.VidSaver
[HKLM\Software\Wow6432Node\Classes\escort.escortIEPane] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\YontooIEClient.Api] =>Adware.Yontoo
[HKLM\Software\Wow6432Node\Classes\YontooIEClient.Layers] =>Adware.Yontoo
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar]:{98889811-442D-49DD-99D7-DC866BE87DBC} =>Toolbar.Babylon
C:\Program Files (x86)\yontoo =>Toolbar.Alot
C:\Program Files (x86)\AVG Secure Search =>Toolbar.Agent
C:\Program Files (x86)\BabylonToolbar =>Toolbar.Babylon
C:\Program Files (x86)\Giant Savings Extension =>Adware.VidSaver
C:\Program Files (x86)\SweetIM =>PUP.SweetIM
C:\Program Files (x86)\Common Files\AVG Secure Search =>Toolbar.Agent
C:\ProgramData\AVG Secure Search =>Toolbar.Agent
C:\ProgramData\Babylon =>Toolbar.Babylon
C:\ProgramData\SweetIM =>PUP.SweetIM
C:\Users\Damien\AppData\Local\AVG Secure Search =>Toolbar.Agent
C:\Users\Damien\AppData\Local\Giant Savings Extension =>Adware.VidSaver
C:\Users\Damien\AppData\LocalLow\AVG Secure Search =>Toolbar.Agent
C:\Users\Damien\AppData\LocalLow\BabylonToolbar =>Toolbar.Babylon
C:\Users\Damien\AppData\Local\Temp\avg@toolbar =>Toolbar.Agent
C:\Users\Damien\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc =>Toolbar.Alot
C:\Users\Damien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph =>Spyware.GamePlayLabs
C:\Users\Damien\AppData\Local\Temp\Shortcut_sweetim_2210-1be9878d.exe
C:\Users\Damien\AppData\Local\Temp\SIMEEI2Installer.exe
C:\Users\Damien\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\Damien\AppData\Local\Temp\incredibar_install.exe
C:\Users\Damien\AppData\Local\Temp\YontooSetup-S.exe
~ Scan Additionnel in 00mn 04s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "03E9C206838F2DA4D82C62C591D2A4CA" . (.Ma-Config.com (64 bits).) -- C:\Windows\Installer\{602C9E30-F838-4AD2-8DC2-265C192D4AAC}\maconfico
O90 - PUC: "0C03C53D24A02C44BB9C323481238CE9" . (.DayZ Commander.) -- C:\Windows\Installer\{D35C30C0-0A42-44C2-BBC9-23431832C89E}\_853F67D554F05449430E7E.exe
O90 - PUC: "0ED9D238CFA898648991D4BBEDDBE3F4" . (.Microsoft Games for Windows - LIVE Redistributable.) -- C:\Windows\Installer\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}\GameForWindowsLiveRedist.exe
O90 - PUC: "121E2D80A6F7BE3479DF26B944094330" . (.Microsoft_VC90_CRT_x86.) -- C:\Windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe
O90 - PUC: "1459101E2A01F4642AE34A2FD36A1506" . (.Mumble 1.2.3.) -- C:\Windows\Installer\{E1019541-10A2-464F-A23E-A4F23DA65160}\mumble.ico
O90 - PUC: "19DA96544F74E9D4F89C17E73CD2A71E" . (.Microsoft_VC80_CRT_x86_x64.) -- C:\Windows\Installer\{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}\ARPPRODUCTICON.exe
O90 - PUC: "20B91A1DE71869244AB57058F37DD475" . (.Microsoft_VC80_MFC_x86.) -- C:\Windows\Installer\{D1A19B02-817E-4296-A45B-07853FD74D57}\ARPPRODUCTICON.exe
O90 - PUC: "224BF55B308B5F1155283B66E61A9BCA" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{B55FB422-B803-11F5-5582-B3666EA1B9AC}\ARPPRODUCTICON.exe
O90 - PUC: "25BBB29DFF28DE24A8C3E460F249A47B" . (.Microsoft_VC80_MFCLOC_x86.) -- C:\Windows\Installer\{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}\ARPPRODUCTICON.exe
O90 - PUC: "29E590689591463829E0288EF1468FBF" . (.Catalyst Control Center.) -- C:\Windows\Installer\{86095E92-1959-8364-920E-82E81F64F8FB}\ARPPRODUCTICON.exe
O90 - PUC: "2A481405E0B139D506A315E7397EDE3B" . (.AMD Accelerated Video Transcoding.) -- C:\Windows\Installer\{504184A2-1B0E-5D93-603A-517E93E7EDB3}\ARPPRODUCTICON.exe
O90 - PUC: "32FA0F2EF2EF2224A934556EC34CE11F" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}\ARPPRODUCTICON.exe
O90 - PUC: "4E9B274AFFA0B7F42BD56FF4E829A8BA" . (.Microsoft_VC90_MFC_x86_x64.) -- C:\Windows\Installer\{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}\ARPPRODUCTICON.exe
O90 - PUC: "52608575376CAEF778198EB4A7FA0596" . (.ccc-utility64.) -- C:\Windows\Installer\{57580625-C673-7FEA-8791-E84B7AAF5069}\ARPPRODUCTICON.exe
O90 - PUC: "56AFD012508FB2A1F438E87272A93E58" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{210DFA65-F805-1A2B-4F83-8E27279AE385}\ARPPRODUCTICON.exe
O90 - PUC: "5DAB1C8C6E456414DA70A3A83D56963C" . (.Microsoft_VC80_MFC_x86_x64.) -- C:\Windows\Installer\{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}\ARPPRODUCTICON.exe
O90 - PUC: "63DD66855508B5745A3C280C04191DE4" . (.BF3 Settings Editor.) -- C:\Windows\Installer\{5866DD36-8055-475B-A5C3-82C04091D14E}\favicon.exe
O90 - PUC: "687EE9C2BDD189C4F84A1B9B5B6AB677" . (.Microsoft Games for Windows - LIVE.) -- C:\Windows\Installer\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}\GameForWindowsLiveDash.exe
O90 - PUC: "68AB67CA7DA76301B744AA0100000010" . (.Adobe Reader X (10.1.4) - Fran�ais.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O90 - PUC: "8075A30087099C542AEFBEFB24B2D3A0" . (.ASUS Utility.) -- C:\Windows\Installer\{003A5708-9078-45C9-A2FE-EBBF422B3D0A}\ARPPRODUCTICON.exe
O90 - PUC: "811CF9E1D156439479EB5EC3EAC5D754" . (.Microsoft_VC80_MFCLOC_x86_x64.) -- C:\Windows\Installer\{1E9FC118-651D-4934-97BE-E53CAE5C7D45}\ARPPRODUCTICON.exe
O90 - PUC: "8F7463F0D15ECCF48826A9D8C0A5FC52" . (.Microsoft_VC80_ATL_x86.) -- C:\Windows\Installer\{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}\ARPPRODUCTICON.exe
O90 - PUC: "91785D291CBB3CC40AB8659C8E48CCC2" . (.Microsoft_VC80_CRT_x86.) -- C:\Windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe
O90 - PUC: "9DF7AD641CB88AB7891D724F667478B1" . (.AMD Catalyst Install Manager.) -- C:\Windows\Installer\{46DA7FD9-8BC1-7BA8-98D1-27F46647871B}\ARPPRODUCTICON.exe
O90 - PUC: "A9B58E1ADAFA83D4FA10B620D05D12A3" . (.Logitech GamePanel Software 3.06.109.) -- C:\Windows\Installer\{A1E85B9A-AFAD-4D38-AF01-6B020DD5213A}\LGDCoreIco
O90 - PUC: "B0F614749856E1956C8F24532D32B041" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{47416F0B-6589-591E-C6F8-4235D2230B14}\ARPPRODUCTICON.exe
O90 - PUC: "B5DEF536D6C2EB94786EA7F6DC22CBA5" . (.Microsoft_VC90_MFC_x86.) -- C:\Windows\Installer\{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}\ARPPRODUCTICON.exe
O90 - PUC: "B850D529A465A3444B2BE7096C34E255" . (.Microsoft_VC80_ATL_x86_x64.) -- C:\Windows\Installer\{925D058B-564A-443A-B4B2-7E90C6432E55}\ARPPRODUCTICON.exe
O90 - PUC: "C7937558D24AF684793B2ABC2C735239" . (.Microsoft_VC90_ATL_x86_x64.) -- C:\Windows\Installer\{8557397C-A42D-486F-97B3-A2CBC2372593}\ARPPRODUCTICON.exe
O90 - PUC: "CA0B84B9318C4714092474A68857297C" . (.Windows Live ID Sign-in Assistant.) -- C:\Windows\Installer\{9B48B0AC-C813-4174-9042-476A887592C7}\prodicon.ico
O90 - PUC: "CF4F71AEFBDF8FC45A92D28913230D35" . (.Skype� 6.0.) -- C:\Windows\Installer\{EA17F4FC-FDBF-4CF8-A529-2D983132D053}\SkypeIcon.exe
O90 - PUC: "D0AC3A29DC55D5C4AB59C562002CF062" . (.Microsoft_VC90_CRT_x86_x64.) -- C:\Windows\Installer\{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}\ARPPRODUCTICON.exe
O90 - PUC: "D276F30548C6A844F8F8B43CA58C4314" . (.AMD APP SDK Runtime.) -- C:\Windows\Installer\{503F672D-6C84-448A-8F8F-4BC35AC83441}\ARPPRODUCTICON.exe
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "D7D3814B387BF3A4E8B13521CB9C0E23" . (.ASUS VGA Driver.) -- C:\Windows\Installer\{B4183D7D-B783-4A3F-8E1B-5312BCC9E032}\ARPPRODUCTICON.exe
O90 - PUC: "DD5BACD096CCA172FC302FDBB606DBA8" . (.AMD Media Foundation Decoders.) -- C:\Windows\Installer\{0DCAB5DD-CC69-271A-CF03-F2BD6B60BD8A}\ARPPRODUCTICON.exe
O90 - PUC: "E873E3303DA65DA4DBBEBC6DB91340C6" . (.Microsoft_VC90_ATL_x86.) -- C:\Windows\Installer\{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}\ARPPRODUCTICON.exe
O90 - PUC: "F3987040C253281B0EA48A3C33D32AB9" . (.AMD Drag and Drop Transcoding.) -- C:\Windows\Installer\{0407893F-352C-B182-E04A-A8C3333DA29B}\ARPPRODUCTICON.exe
O90 - PUC: "F79EDE5B3A9281A49BEABC3ED32DDE16" . (.Tukui Update Utility.) -- C:\Windows\Installer\{B5EDE97F-29A3-4A18-B9AE-CBE33DD2ED61}\_853F67D554F05449430E7E.exe
~ Scan Files in 00mn 00s



---\\ Random Key Export (O91)
[HKCU\Software\532d78ab26fb844]:GUID="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\532d78ab26fb844]:HPCHREGEXP0="FO81jovjQUF+5S6+hb1oqXHuCoautLvICxmXOjZS8Nofjp1mrjnE"
[HKCU\Software\532d78ab26fb844]:HPCHREGEXP1="FO81jovjQUF+5S6+hb1oqXHuCoao6JCRNVbcOGoRr/tSgZN57jqd6juo5odlV7RITopCig=="
[HKCU\Software\532d78ab26fb844]:HPCHREGEXP2="FO81jovjQUF+5S6+hb1oqXHuCoautLvIDR2ZNzsQ7eNQn5Fj3TmN4Df1q8U="
[HKCU\Software\532d78ab26fb844]:HPFFREGEXP0="FO81jovjQUF+5S6+hb1oqXHuCoautLvICxmXOjZS8Nofjp1mrjnE"
[HKCU\Software\532d78ab26fb844]:HPFFREGEXP1="FO81jovjQUF+5S6+hb1oqXHuCoao6JCRNVbcOGoRr/tSgZN57jqd6juo5odlV7RITopCig=="
[HKCU\Software\532d78ab26fb844]:HPFFREGEXP2="FO81jovjQUF+5S6+hb1oqXHuCoautLvIDR2ZNzsQ7eNQn5Fj3TmN4Df1q8U="
[HKCU\Software\532d78ab26fb844]:HPIEREGEXP0="FO81jovjQUF+5S6+hb1oqXHuCoautLvICxmXOjZS8Nofjp1mrjnE"
[HKCU\Software\532d78ab26fb844]:HPIEREGEXP1="FO81jovjQUF+5S6+hb1oqXHuCoao6JCRNVbcOGoRr/tSgZN57jqd6juo5odlV7RITopCig=="
[HKCU\Software\532d78ab26fb844]:HPIEREGEXP2="FO81jovjQUF+5S6+hb1oqXHuCoautLvIDR2ZNzsQ7eNQn5Fj3TmN4Df1q8U="
[HKCU\Software\532d78ab26fb844]:INSTALL_FOLDER_NAME="BrowserProtect"
[HKCU\Software\532d78ab26fb844]:KWFFREGEXP0="FO81jovjQUF+5S6+hb1oqXHuCoautLvICxmXOjZS8Nofjp1mrjnE"
[HKCU\Software\532d78ab26fb844]:KWFFREGEXP1="FO81jovjQUF+5S6+hb1oqXHuCoao6JCRNVbcOGoRr/tSgZN57jqd6juo5odlV7RITopCig=="
[HKCU\Software\532d78ab26fb844]:KWFFREGEXP2="FO81jovjQUF+5S6+hb1oqXHuCoautLvIDR2ZNzsQ7eNQn5Fj3TmN4Df1q8U="
[HKCU\Software\532d78ab26fb844]:PROTECTOR_DLL_NAME="BrowserProtect.dll"
[HKCU\Software\532d78ab26fb844]:PROTECT_EXE_NAME="BrowserProtect.exe"
[HKCU\Software\532d78ab26fb844]:SECHREGEXP0="FO81jovjQUF+5S6+hb1oqXHuCoautLvICxmXOjZS8Nofjp1mrjnE"
[HKCU\Software\532d78ab26fb844]:SECHREGEXP1="FO81jovjQUF+5S6+hb1oqXHuCoao6JCRNVbcOGoRr/tSgZN57jqd6juo5odlV7RITopCig=="
[HKCU\Software\532d78ab26fb844]:SECHREGEXP2="FO81jovjQUF+5S6+hb1oqXHuCoautLvIDR2ZNzsQ7eNQn5Fj3TmN4Df1q8U="
[HKCU\Software\532d78ab26fb844]:SEFFREGEXP0="FO81jovjQUF+5S6+hb1oqXHuCoautLvICxmXOjZS8Nofjp1mrjnE"
[HKCU\Software\532d78ab26fb844]:SEFFREGEXP1="FO81jovjQUF+5S6+hb1oqXHuCoao6JCRNVbcOGoRr/tSgZN57jqd6juo5odlV7RITopCig=="
[HKCU\Software\532d78ab26fb844]:SEFFREGEXP2="FO81jovjQUF+5S6+hb1oqXHuCoautLvIDR2ZNzsQ7eNQn5Fj3TmN4Df1q8U="
[HKCU\Software\532d78ab26fb844]:SEIEREGEXP0="FO81jovjQUF+5S6+hb1oqXHuCoautLvICxmXOjZS8Nofjp1mrjnE"
[HKCU\Software\532d78ab26fb844]:SEIEREGEXP1="FO81jovjQUF+5S6+hb1oqXHuCoao6JCRNVbcOGoRr/tSgZN57jqd6juo5odlV7RITopCig=="
[HKCU\Software\532d78ab26fb844]:SEIEREGEXP2="FO81jovjQUF+5S6+hb1oqXHuCoautLvIDR2ZNzsQ7eNQn5Fj3TmN4Df1q8U="
[HKCU\Software\532d78ab26fb844]:SERVICE_NAME="BrowserProtect"
[HKCU\Software\532d78ab26fb844]:usrcheckbox="0"
[HKCU\Software\532d78ab26fb844]:version="2.5.986.67"
[HKLM\Software\Wow6432Node\532d78ab26fb844]:GUID="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKLM\Software\Wow6432Node\532d78ab26fb844]:HPCHREGEXP0="FO81jovjQUF+5S6+hb1oqXHuCoautLvICxmXOjZS8Nofjp1mrjnE"
[HKLM\Software\Wow6432Node\532d78ab26fb844]:HPCHREGEXP1="FO81jovjQUF+5S6+hb1oqXHuCoao6JCRNVbcOGoRr/tSgZN57jqd6juo5odlV7RITopCig=="
[HKLM\Software\Wow6432Node\532d78ab26fb844]:HPCHREGEXP2="FO81jovjQUF+5S6+hb1oqXHuCoautLvIDR2ZNzsQ7eNQn5Fj3TmN4Df1q8U="
[HKLM\Software\Wow6432Node\532d78ab26fb844]:HPFFREGEXP0="FO81jovjQUF+5S6+hb1oqXHuCoautLvICxmXOjZS8Nofjp1mrjnE"
[HKLM\Software\Wow6432Node\532d78ab26fb844]:HPFFREGEXP1="FO81jovjQUF+5S6+hb1oqXHuCoao6JCRNVbcOGoRr/tSgZN57jqd6juo5odlV7RITopCig=="
[HKLM\Software\Wow6432Node\532d78ab26fb844]:HPFFREGEXP2="FO81jovjQUF+5S6+hb1oqXHuCoautLvIDR2ZNzsQ7eNQn5Fj3TmN4Df1q8U="
[HKLM\Software\Wow6432Node\532d78ab26fb844]:HPIEREGEXP0="FO81jovjQUF+5S6+hb1oqXHuCoautLvICxmXOjZS8Nofjp1mrjnE"
[HKLM\Software\Wow6432Node\532d78ab26fb844]:HPIEREGEXP1="FO81jovjQUF+5S6+hb1oqXHuCoao6JCRNVbcOGoRr/tSgZN57jqd6juo5odlV7RITopCig=="
[HKLM\Software\Wow6432Node\532d78ab26fb844]:HPIEREGEXP2="FO81jovjQUF+5S6+hb1oqXHuCoautLvIDR2ZNzsQ7eNQn5Fj3TmN4Df1q8U="
[HKLM\Software\Wow6432Node\532d78ab26fb844]:INSTALL_FOLDER_NAME="BrowserProtect"
[HKLM\Software\Wow6432Node\532d78ab26fb844]:KWFFREGEXP0="FO81jovjQUF+5S6+hb1oqXHuCoautLvICxmXOjZS8Nofjp1mrjnE"
[HKLM\Software\Wow6432Node\532d78ab26fb844]:KWFFREGEXP1="FO81jovjQUF+5S6+hb1oqXHuCoao6JCRNVbcOGoRr/tSgZN57jqd6juo5odlV7RITopCig=="
[HKLM\Software\Wow6432Node\532d78ab26fb844]:KWFFREGEXP2="FO81jovjQUF+5S6+hb1oqXHuCoautLvIDR2ZNzsQ7eNQn5Fj3TmN4Df1q8U="
[HKLM\Software\Wow6432Node\532d78ab26fb844]:PROTECTOR_DLL_NAME="BrowserProtect.dll"
[HKLM\Software\Wow6432Node\532d78ab26fb844]:PROTECT_EXE_NAME="BrowserProtect.exe"
[HKLM\Software\Wow6432Node\532d78ab26fb844]:SECHREGEXP0="FO81jovjQUF+5S6+hb1oqXHuCoautLvICxmXOjZS8Nofjp1mrjnE"
[HKLM\Software\Wow6432Node\532d78ab26fb844]:SECHREGEXP1="FO81jovjQUF+5S6+hb1oqXHuCoao6JCRNVbcOGoRr/tSgZN57jqd6juo5odlV7RITopCig=="
[HKLM\Software\Wow6432Node\532d78ab26fb844]:SECHREGEXP2="FO81jovjQUF+5S6+hb1oqXHuCoautLvIDR2ZNzsQ7eNQn5Fj3TmN4Df1q8U="
[HKLM\Software\Wow6432Node\532d78ab26fb844]:SEFFREGEXP0="FO81jovjQUF+5S6+hb1oqXHuCoautLvICxmXOjZS8Nofjp1mrjnE"
[HKLM\Software\Wow6432Node\532d78ab26fb844]:SEFFREGEXP1="FO81jovjQUF+5S6+hb1oqXHuCoao6JCRNVbcOGoRr/tSgZN57jqd6juo5odlV7RITopCig=="
[HKLM\Software\Wow6432Node\532d78ab26fb844]:SEFFREGEXP2="FO81jovjQUF+5S6+hb1oqXHuCoautLvIDR2ZNzsQ7eNQn5Fj3TmN4Df1q8U="
[HKLM\Software\Wow6432Node\532d78ab26fb844]:SEIEREGEXP0="FO81jovjQUF+5S6+hb1oqXHuCoautLvICxmXOjZS8Nofjp1mrjnE"
[HKLM\Software\Wow6432Node\532d78ab26fb844]:SEIEREGEXP1="FO81jovjQUF+5S6+hb1oqXHuCoao6JCRNVbcOGoRr/tSgZN57jqd6juo5odlV7RITopCig=="
[HKLM\Software\Wow6432Node\532d78ab26fb844]:SEIEREGEXP2="FO81jovjQUF+5S6+hb1oqXHuCoautLvIDR2ZNzsQ7eNQn5Fj3TmN4Df1q8U="
[HKLM\Software\Wow6432Node\532d78ab26fb844]:SERVICE_NAME="BrowserProtect"
[HKLM\Software\Wow6432Node\532d78ab26fb844]:usrcheckbox="0"
[HKLM\Software\Wow6432Node\532d78ab26fb844]:version="2.5.986.67"
~ Scan Export Key Software in 00mn 00s



---\\ General States of Services not Microsoft (EGS) (SR:='Running, SS:='Stopped)
SR - | Auto 27.07.2012 63960 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 09.01.2013 251400 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 28.09.2012 239616 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 06.11.2012 5814392 | (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
SR - | Auto 22.10.2012 196664 | (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
SR - | Auto 2443800 | (BrowserProtect) . (...) - C:\ProgramData\BrowserProtect\2.5.986.67\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
SR - | Auto 17.12.2007 163840 | (EPSON_EB_RPCV4_01) . (.SEIKO EPSON CORPORATION.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.exe
SR - | Auto 11.01.2007 126464 | (EPSON_PM_RPCV4_01) . (.SEIKO EPSON CORPORATION.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.exe
SS - | Demand 20.09.2012 136896 | (Futuremark SystemInfo Service) . (.Futuremark Corporation.) - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
SS - | Auto 29.09.2012 136176 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 29.09.2012 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 03.04.2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
SR - | Auto 19.06.2012 634632 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
SR - | Auto 19.07.2012 166720 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SS - | Demand 27.09.2011 359192 | (LBTServ) . (.Logitech, Inc..) - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
SR - | Auto 19.07.2012 277824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SS - | Demand 28.10.2012 427976 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\x64\maconfservice.exe
SS - | Demand 05.12.2012 115168 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 02.10.2012 891240 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SR - | Auto 30.08.2012 1258856 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
SR - | Auto 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
SS - | Auto 0 | (SkypeUpdate) . (...) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SR - | Demand 27.12.2012 541760 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
SR - | Auto 02.10.2012 382824 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
SS - | Demand 19.02.2010 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SR - | Auto 19.07.2012 365376 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 945480 | (vToolbarUpdater14.0.0) . (...) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.0\ToolbarUpdater.exe
SS - | Demand 05.10.2012 109064 | (WajamUpdater) . (.Wajam.) - C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe
SS - | Demand 14.07.2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SS - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14.07.2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Scan Services in 00mn 00s



---\\ List of CD/DVD Emulators (MBR Hook)
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
~ Scan Emulateurs in 00mn 00s



End of the scan (1707 lines in 00mn 26s)(0)