~ Rapport de ZHPDiag v2014.1.10.8 - Nicolas Coolman (10/01/2014)
~ Lancé par Administrateur (10/01/2014 21:04:22)
~ Adresse du Site Web http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Not Found


---\\ Navigateurs Internet
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox 6.0
GCIE: Google Chrome v31.0.1650.63 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : OK

---\\ Logiciels de protection du système
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft Security Client v4.4.0304.0
McAfee Security Scan Plus v3.8.130.10

---\\ Logiciels d'optimisation du système
CCleaner v3.23 =>Piriform Ltd

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 11 Plugin
Adobe Reader XI

---\\ Informations sur le système
~ Processor: x86 Family 15 Model 4 Stepping 9, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2038 MB (67% free)
System Restore: Activé (Enable)
System drive C: has 40 GB (53%) free of 75 GB

---\\ Mode de connexion au système
~ Computer Name: IBM-8BD0A534CBD
~ User Name: Administrateur
~ All Users Names: SUPPORT_388945a0, HelpAssistant, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Documents and Settings\Administrateur\Application Data\ZHP\
~ %AppData% : C:\Documents and Settings\Administrateur\Application Data\
~ %Desktop% : C:\Documents and Settings\Administrateur\Bureau\
~ %Favorites% : C:\Documents and Settings\Administrateur\Favoris\
~ %LocalAppData% : C:\Documents and Settings\Administrateur\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\Administrateur\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 40 Go of 75 Go)
D: Hard drive, Flash drive, Thumb drive (Free 84 Go of 139 Go)
E: Hard drive, Flash drive, Thumb drive (Free 6 Go of 10 Go)
F: CD-ROM drive (Not Inserted)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
~ Security Center: 42 Legitimates Filtered in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.897CA9DA6F568E24549719D5676385A1] - (.Microsoft Corporation - Internet Extensions for Win32.) (.29/10/2013 - 08:57:02.) -- C:\WINDOWS\system32\wininet.dll [920064]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 18:40:30.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 20:14:21.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 19:40:46.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 02:57:38.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 17:36:05.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 03:00:52.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 19:40:58.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 19:57:15.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 20:19:42.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 20:21:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 20:15:53.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 03:09:40.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 20:19:43.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 19:32:51.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/04/2008 - 02:57:34.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 02:56:04.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 3/6786
~ Mes musiques (My Musics) : 16/196
~ Mes Favoris (My Favorites) : 1/22
~ Mes Documents (My Documents) : 3/9695
~ Mon Bureau (My Desktop) : 0/24
~ Menu demarrer (Programs) : 0/30
~ Hidden Files: Scanned in 00mn 11s



---\\ Processus lancés
[MD5.F5456293D2604BCE2BEC07FC6186A341] - (.IObit - Advanced SystemCare Service.) -- C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe [881440] [PID.972]
[MD5.B0F49DA36F30922F5DDC3B623B778FCE] - (.Microsoft Corporation - Antimalware Service Executable.) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe [22208] [PID.1224]
[MD5.0A5709543986843D37A92290B7838340] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376] [PID.196]
[MD5.B55DEB7AF3DD62575ACDDDAD1F2C7857] - (.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\MaConfigAgent.exe [754000] [PID.1368]
[MD5.2E0B0A051FFAA86E358465BB0880D453] - (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53784] [PID.528]
[MD5.25B9D53B861552EC83B80A565AC07A47] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [172032] [PID.2916]
[MD5.E24AAF17E339759C296AC67EA56ED97B] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [143360] [PID.2976]
[MD5.5C8167883287D5B22BA5E0AC28E4B04E] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [249856] [PID.3104]
[MD5.C7F05A3FD4A8DC4EE7A7866876E1534C] - (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968] [PID.3128]
[MD5.C61220545E4D1AE512809B67F53D26E6] - (...) -- C:\Program Files\VLC Player GPU+\GPULog.exe [1328864] [PID.3676]
[MD5.574C7158E51A951CA457D4FA4E3EEF14] - (.IObit - Advanced SystemCare 7.) -- C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe [2285344] [PID.3716]
[MD5.D3D4BD94434A9CB4B35E82283EAE8EFB] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe [273296] [PID.3864]
[MD5.58FC1B36032F03342E4C02813F80DAC1] - (.Dropbox, Inc. - Dropbox.) -- C:\Documents and Settings\Administrateur\Application Data\Dropbox\bin\Dropbox.exe [30714328] [PID.3876]
[MD5.29A4611EE6F24AF1EB4014088A1911C6] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8323072] [PID.356]
~ Processes Running: Scanned in 00mn 01s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] http://search.conduit.com
G2 - GCE: Preference [User Data\Default] [cnglhdfndkfkpiddcmfioekcjkmojhbj] Application Findizer v.1.19, (Activé)
G2 - GCE: Preference [User Data\Default] [edjnbokkihlfclbddajclncbnmgggbie] SelectionTool v.1.150 (Activé)
G2 - GCE: Preference [User Data\Default] [flpcjncodpafbgdpnkljologafpionhb] Managera v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [gdnafjfahbdfphihncgadbegiaebehio] SquirrelWeb v.1.0.0 (Activé)
~ Google Browser: 17 Legitimates Filtered in 00mn 18s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\b3jplwfd.default\prefs.js
M3 - MFPP: Plugins - [Administrateur] -- C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\b3jplwfd.default\searchplugins\yahoo_ff.xml
M2 - MFEP: prefs.js [Administrateur - b3jplwfd.default\savingsslider@mybrowserbar.com] [] Slick Savings v2.8 (..) =>Adware.WidgiToolbar
M2 - MFEP: prefs.js [Administrateur - b3jplwfd.default\{58d2a791-6199-482f-a9aa-9b725ec61362}] [] Start Page v1.0 (..)
M2 - MFEP: prefs.js [Administrateur - b3jplwfd.default\{badea1ae-72ed-4f6a-8c37-4db9a4ac7bc9}] [] Address Bar Search v1.0 (..) =>PUP.AddressBarSearch
~ Firefox Browser: 24 Legitimates Filtered in 00mn 01s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 20



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Slick Savings - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} . (.Spigot, Inc. - Slick Savings for Internet Explorer.) -- C:\Documents and Settings\Administrateur\Application Data\Slick Savings\Coupons.dll =>PUP.Dealio
O2 - BHO: SelectionTool - {91549832-cb23-42fb-9a61-f68b719011e9} . (...) -- C:\Program Files\SelectionTool\150.dll
~ BHO: 12 Legitimates Filtered in 00mn 01s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{01E04581-4EEE-11D0-BFE9-00AA005B4383} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{0E5CBF21-D15F-11D0-8301-00AA005B4383} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
~ Toolbar: Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Program [AllUsers]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - GS\Program [AllUsers]: MSN.lnk . (.Microsoft Corporation - Win32 Cabinet Self-Extractor.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe =>.Microsoft Corporation
O4 - GS\Program [AllUsers]: Windows Messenger.lnk . (...) -- C:\Program Files\Messenger\msmsgs.exe (.not file.)
O4 - GS\Program [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Global Startup: 18 Legitimates Filtered in 00mn 00s



---\\ Applications lancées au démarrage du sytème (O4)
O4 - GS\Program [AllUsers]: McAfee Security Scan Plus.lnk . (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
O4 - GS\Program [Administrateur]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) -- C:\Documents and Settings\Administrateur\Application Data\Dropbox\bin\Dropbox.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [DivXMediaServer] . (.DivX, LLC - DivX DLNA Media Server.) -- C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [DivXUpdate] . (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
O4 - HKLM\..\Run: [GPULoader] . (...) -- C:\Program Files\VLC Player GPU+\GPULog.exe
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [Advanced SystemCare 7] . (.IObit - Advanced SystemCare 7.) -- C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe
O4 - HKUS\S-1-5-21-1085031214-329068152-725345543-500\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1085031214-329068152-725345543-500\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-1085031214-329068152-725345543-500\..\Run: [Advanced SystemCare 7] . (.IObit - Advanced SystemCare 7.) -- C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe
~ Application: Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -- C:\Program Files\Messenger\msmsgs.exe (.not file.)
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {41564D57-9980-0010-8000-00AA00389B71} ((no name)) - http://download.microsoft.com/download/0/A/9/0A9F8B32-9F8C-4D74-A130-E4CAB36EB01F/wmvadvd.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ((no name)) - http://www.ma-config.com/plugins/MaConfig_6_0_3_2.cab
~ Objets ActiveX: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{B91AC5C2-3F7B-4409-97DC-A4A65CE990B6}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{B91AC5C2-3F7B-4409-97DC-A4A65CE990B6}: DhcpDomain = lan
O17 - HKLM\System\CS1\Services\Tcpip\..\{B91AC5C2-3F7B-4409-97DC-A4A65CE990B6}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{B91AC5C2-3F7B-4409-97DC-A4A65CE990B6}: DhcpDomain = lan
O17 - HKLM\System\CS3\Services\Tcpip\..\{B91AC5C2-3F7B-4409-97DC-A4A65CE990B6}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS3\Services\Tcpip\..\{B91AC5C2-3F7B-4409-97DC-A4A65CE990B6}: DhcpDomain = lan
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\WINDOWS\system32\igfxdev.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\system32\WgaLogon.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (...) - C:\Program Files\SearchProtect\SearchProtect\bin\SPVC32Loader.dll (.not file.) =>Toolbar.Conduit
~ AppInit DLL: Scanned in 00mn 00s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Desktop General: BackupWallPaper - .(...) - C:\WINDOWS\web\wallpaper\Colline verdoyante.bmp
O24 - Desktop General: WallPaper - .(...) - C:\WINDOWS\web\wallpaper\Colline verdoyante.bmp
~ Desktop Component: 4 Legitimates Filtered in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\ASC7_PerformanceMonitor.job [286]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SelectionTool Update.job [388]
[MD5.8DCE1FD8044CD98ECB394185C575A9E8] [APT] [SelectionTool Update] (...) -- C:\Program Files\SelectionTool\STupdate.exe [251904]
~ Scheduled Task: 17 Legitimates Filtered in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: SelectionTool - (.SelectionTool Software.) [HKLM] -- d1ef9241-a811-4b19-ad13-52a51d998843
O42 - Logiciel: Shareaza 2.6.0.0 - (.Shareaza Development Team.) [HKLM] -- Shareaza_is1
O42 - Logiciel: Slick Savings - (.Spigot, Inc..) [HKLM] -- {3A787631-66A2-4634-B928-A37E73B58FB6} =>PUP.Dealio
O42 - Logiciel: SquirrelWeb - (.SquirrelWeb.) [HKLM] -- SquirrelWeb
~ Logic: 28 Legitimates Filtered in 00mn 01s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\Shareaza]
[HKCU\Software\SquirrelWeb]
[HKCU\Software\selection-tool]
[HKLM\Software\Shareaza]
~ Key Software: 230 Legitimates Filtered in 00mn 01s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 08/01/2014 - 08:59:13 - [1,136] ----D C:\Program Files\SelectionTool
O43 - CFD: 27/10/2013 - 07:28:45 - [24,846] ----D C:\Program Files\Shareaza
O43 - CFD: 08/01/2014 - 17:02:08 - [2,263] ----D C:\Program Files\SquirrelWeb
O43 - CFD: 02/12/2013 - 18:33:08 - [0,001] ----D C:\Program Files\Uninstaller
O43 - CFD: 08/01/2014 - 22:37:36 - [0] ----D C:\Documents and Settings\All Users\Application Data\ProductData
O43 - CFD: 09/12/2013 - 06:18:30 - [0] ----D C:\Documents and Settings\All Users\Application Data\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
O43 - CFD: 08/01/2014 - 20:10:09 - [1,228] ----D C:\Documents and Settings\Administrateur\Application Data\newnext.me =>PUP.NextLive
O43 - CFD: 27/10/2013 - 07:28:52 - [0,087] ----D C:\Documents and Settings\Administrateur\Application Data\Shareaza
O43 - CFD: 02/12/2013 - 18:33:10 - [1,857] ----D C:\Documents and Settings\Administrateur\Application Data\Slick Savings =>PUP.Dealio
O43 - CFD: 08/01/2014 - 09:16:37 - [1,224] ----D C:\Documents and Settings\Administrateur\Local Settings\Application Data\genienext
O43 - CFD: 27/10/2013 - 07:28:52 - [698,455] ----D C:\Documents and Settings\Administrateur\Local Settings\Application Data\Shareaza
O43 - CFD: 27/11/2013 - 17:37:17 - [0,021] ----D C:\Documents and Settings\Administrateur\Local Settings\Application Data\Slick Savings =>PUP.Dealio
~ Program Folder: 138 Legitimates Filtered in 00mn 17s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.DDC0B6672AB7862A3C2D7AA2ADB6B645] - 07/01/2014 - 11:50:02 ---A- . (.Pas de propriétaire - Setup/Uninstall.) -- C:\WINDOWS\unins000.exe [715038]
O44 - LFC:[MD5.72C57D8501528179C6957E2F541CE215] - 07/01/2014 - 11:50:13 ---A- . (...) -- C:\WINDOWS\system32\unrar.dll [178688]
O44 - LFC:[MD5.FA425C74CE2EB719B2A77A7A2ADDAE32] - 07/01/2014 - 11:50:13 ---A- . (.Pas de propriétaire - Lagarith.) -- C:\WINDOWS\system32\lagarith.dll [216064]
O44 - LFC:[MD5.C58B299D130C9DE1DE05C80803037608] - 07/01/2014 - 11:50:14 ---A- . (...) -- C:\WINDOWS\unins000.dat [1808]
O44 - LFC:[MD5.0903FEFCBD4B28C747DE7EE8201F14D1] - 07/01/2014 - 11:50:24 ---A- . (...) -- C:\WINDOWS\system32\ff_vfw.dll.manifest [714]
O44 - LFC:[MD5.C0992C27E792440DA1DD5CFE8EE03E32] - 07/01/2014 - 11:50:24 ---A- . (.Pas de propriétaire - ffdshow VFW.) -- C:\WINDOWS\system32\ff_vfw.dll [79360]
O44 - LFC:[MD5.5E8CD1804C1A035311F5DA9C1048F024] - 07/01/2014 - 11:51:10 ---A- . (...) -- C:\WINDOWS\system32\xvid.ax [153088]
O44 - LFC:[MD5.E3833540C755C06EC18D414047448B14] - 07/01/2014 - 11:51:10 ---A- . (...) -- C:\WINDOWS\system32\xvidcore.dll [645632]
O44 - LFC:[MD5.348AC3C5B87056E24C9E0039332BFB66] - 07/01/2014 - 11:51:10 ---A- . (...) -- C:\WINDOWS\system32\xvidvfw.dll [240640]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 08/01/2014 - 22:36:34 ---A- . (...) -- C:\WINDOWS\Sti_Trace.log [0]
O44 - LFC:[MD5.E09D2CE0D8DBE634DEF5224A9CCBBBEE] - 09/01/2014 - 16:49:45 ---A- . (...) -- C:\WINDOWS\system32\CNC173DD.TBL [12800]
O44 - LFC:[MD5.47552C2FC2C782EF11AB2DC15B8747C0] - 09/01/2014 - 20:54:30 ---A- . (...) -- C:\PhysicalMBR.bin [512]
O44 - LFC:[MD5.2B8EA8E1269020916F56082655B96BDC] - 10/01/2014 - 21:00:45 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.7D1330D5B2B4D2E3C1372C3F5E2D7EC5] - 10/01/2014 - 21:00:46 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]
~ Files: 40 Legitimates Filtered in 00mn 13s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.1EFE267D8AF44CE6C1BF42314EA536D6] - 08/01/2014 - 09:17:03 ---A- - C:\WINDOWS\Prefetch\MGADB.EXE-1B5F04C6.pf
O45 - LFCP:[MD5.F8FC6A13AD02CBF739B1351C7FED0762] - 08/01/2014 - 09:20:45 ---A- - C:\WINDOWS\Prefetch\MGUSB.EXE-2E8364D3.pf
O45 - LFCP:[MD5.3D23189661C087A07BABFCAA14BC5CF6] - 08/01/2014 - 20:10:54 ---A- - C:\WINDOWS\Prefetch\UPFST_FR_49.EXE-324B239C.pf =>PUA.FSTfr9
O45 - LFCP:[MD5.F1CD7B29328D24933B6C8FDFF79F0CD0] - 08/01/2014 - 22:12:44 ---A- - C:\WINDOWS\Prefetch\VUUPCLICENSE.EXE-040331ED.pf =>PUP.VuuPC
O45 - LFCP:[MD5.5CED5EFE7EA464E61D88B40498FDD0F4] - 09/01/2014 - 16:46:54 ---A- - C:\WINDOWS\Prefetch\MP68-WIN-MP550-1_05-EA24.EXE-1D740A60.pf
O45 - LFCP:[MD5.716FFCB3C198F31DB71F3270621FD3F6] - 09/01/2014 - 16:48:17 ---A- - C:\WINDOWS\Prefetch\MP68-WIN-MP550-1_05-EA24 (2).-299C08A5.pf
O45 - LFCP:[MD5.953FA6902EC34DB45C91B0CA8E7506F0] - 09/01/2014 - 16:49:00 ---A- - C:\WINDOWS\Prefetch\DELDRV.EXE-12725D20.pf
O45 - LFCP:[MD5.BB080E6A576607768017F6A4E5933790] - 09/01/2014 - 16:50:12 ---A- - C:\WINDOWS\Prefetch\CNMVS9Z.EXE-39873657.pf
O45 - LFCP:[MD5.EF42FC756176A126E266EB04C5D3B7BB] - 09/01/2014 - 21:05:57 ---A- - C:\WINDOWS\Prefetch\OTL (2).EXE-02BE70CD.pf
O45 - LFCP:[MD5.4F8A76F6DACCD0B68AF2533D077D903A] - 09/01/2014 - 21:06:02 ---A- - C:\WINDOWS\Prefetch\OTL (3).EXE-0EA74E83.pf
O45 - LFCP:[MD5.B9EFDC1D371CC19C2CCA3D29E4DF0150] - 09/01/2014 - 22:48:17 ---A- - C:\WINDOWS\Prefetch\HOMEPAGE.EXE-0537F141.pf
O45 - LFCP:[MD5.CB06D37F2D67F524563C6837CA30E45B] - 10/01/2014 - 17:53:20 ---A- - C:\WINDOWS\Prefetch\OTL (4).EXE-1A902C39.pf
O45 - LFCP:[MD5.ACCC958880F53810480250012766DA21] - 10/01/2014 - 18:01:29 ---A- - C:\WINDOWS\Prefetch\ASCTRAY.EXE-3292936F.pf
O45 - LFCP:[MD5.C28159FB3BFE6E6690470B9C502A64B3] - 10/01/2014 - 18:01:29 ---A- - C:\WINDOWS\Prefetch\GPULOG.EXE-33995367.pf
O45 - LFCP:[MD5.3B23D0D1A0F686B2F53CBE3AC3ABB6AC] - 10/01/2014 - 18:08:01 ---A- - C:\WINDOWS\Prefetch\DISPLAY.EXE-057B4AA1.pf
O45 - LFCP:[MD5.94E500F4D39CC48CBE9CECFCDE6EC45A] - 10/01/2014 - 18:19:59 ---A- - C:\WINDOWS\Prefetch\OTL (1).EXE-1ABF44CD.pf
O45 - LFCP:[MD5.63CC5DCDCEE578764453DD71C4EC04EA] - 10/01/2014 - 18:21:51 ---A- - C:\WINDOWS\Prefetch\ASCDOWNLOAD.EXE-0E06098A.pf
O45 - LFCP:[MD5.A59278B54A48438CCF715ED209AB82A2] - 10/01/2014 - 21:02:12 ---A- - C:\WINDOWS\Prefetch\AUTOCARE.EXE-26E659E3.pf
O45 - LFCP:[MD5.F13C4DE6D5BD8BBE2ED251657BC943B5] - 10/01/2014 - 21:02:12 ---A- - C:\WINDOWS\Prefetch\REALTIMEPROTECTOR.EXE-2962A5C2.pf
O45 - LFCP:[MD5.32D1E510F7719FA29AF0D4AE12846006] - 10/01/2014 - 21:02:49 ---A- - C:\WINDOWS\Prefetch\MONITORDISK.EXE-28653ADD.pf
~ Prefetcher: 91 Legitimates Filtered in 00mn 01s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
~ ShellExecuteHooks: Scanned in 00mn 00s



---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "C:\Program Files\Shareaza\Shareaza.exe" [Enabled] .(.Shareaza Development Team.) -- C:\Program Files\Shareaza\Shareaza.exe
~ Keys Export: 5 Legitimates Filtered in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ IFEO: Scanned in 00mn 00s



---\\ Enumération des clés de registre StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\LWBKEYBOARD [Key] . (.Pas de propriétaire - Multi-Media Keyboard Application.) -- C:\Program Files\Labtec\Desktop\6.0\KbdAp32A.exe
O53 - SMSR:HKLM\...\startupreg\LWBMOUSE [Key] . (...) -- C:\Program Files\Labtec\Desktop\6.0\MOffice.exe
O53 - SMSR:HKLM\...\startupreg\WiFiCtrl [Key] . (...) -- C:\Program Files\Hercules\Hercules WiFi Controller Software\WiFiCtrl.exe (.not file.)
~ SMSR Keys: 6 Legitimates Filtered in 00mn 03s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.D81DA6943A4C03DBB1E1DB8AE74C75F3] - 11/12/2007 - 09:01:16 ---A- . (.Analog Devices, Inc. - High Definition Audio Function Driver.) -- C:\WINDOWS\system32\Drivers\ADIHdAud.sys [323584]
O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 05/08/2004 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\Drivers\cinemst2.sys [262528]
O58 - SDL:[MD5.573C7D0A32852B48F3058CFD8026F511] - 13/04/2008 - 17:36:05 ----- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\hdaudbus.sys [144384]
O58 - SDL:[MD5.2A013E7530BEAB6E569FAA83F517E836] - 07/01/2005 - 17:07:16 ----- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Function Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\Hdaudio.sys [145920]
O58 - SDL:[MD5.C53775780148884AC87C455489A0C070] - 03/08/2004 - 22:41:40 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\mtlmnt5.sys [126686]
O58 - SDL:[MD5.54886A652BF5685192141DF304E923FD] - 03/08/2004 - 22:41:38 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\mtlstrm.sys [1309184]
O58 - SDL:[MD5.6DDA78A0BE692B61B668FAB860F276CF] - 03/08/2004 - 22:29:38 ----- . (.Matrox Graphics Inc. - Matrox Parhelia Miniport Driver.) -- C:\WINDOWS\system32\Drivers\mtxparhm.sys [452736]
O58 - SDL:[MD5.576B34CEAE5B7E5D9FD2775E93B3DB53] - 03/08/2004 - 22:41:40 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\ntmtlfax.sys [180360]
O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 05/08/2004 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\Drivers\ptilink.sys [17792]
O58 - SDL:[MD5.E9AAA0092D74A9D371659C4C38882E12] - 03/08/2004 - 22:41:40 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\recagent.sys [13776]
O58 - SDL:[MD5.F537B84461653B28E0C75DA7E83169C6] - 17/03/2005 - 15:16:26 ---A- . (.Analog Devices, Inc. - SENFILT.sys.) -- C:\WINDOWS\system32\Drivers\senfilt.sys [8704]
O58 - SDL:[MD5.D9673011648A71ED1E1F77B831BC85E6] - 03/08/2004 - 22:41:42 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slnt7554.sys [129535]
O58 - SDL:[MD5.2C1779C0FEB1F4A6033600305EBA623A] - 03/08/2004 - 22:41:44 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slntamr.sys [404990]
O58 - SDL:[MD5.F9B8E30E82EE95CF3E1D3E495599B99C] - 03/08/2004 - 22:41:46 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slnthal.sys [95424]
O58 - SDL:[MD5.DB56BB2C55723815CF549D7FC50CFCEB] - 03/08/2004 - 22:41:46 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slwdmsup.sys [13240]
O58 - SDL:[MD5.14BB60A4F1C5291217A05D5728C403E6] - 22/05/2013 - 17:49:32 ---A- . (...) -- C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys [14776]
O58 - SDL:[MD5.3FC662312C0FF42DDA5AF2322BD72EC3] - 13/03/2007 - 07:40:30 R--A- . (...) -- C:\WINDOWS\system32\Drivers\tkfilter.sys [7040]
O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 05/08/2004 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\Drivers\vdmindvd.sys [58112]
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]
O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]
O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]
O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]
O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]
O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]
O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]
O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]
O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]
~ Drivers: 5 Legitimates Filtered in 00mn 03s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 07/01/2014 - 21:05:51 ---A- . (...) -- C:\Documents and Settings\Administrateur\.android\adbkey [1708]
O61 - LFC: 07/01/2014 - 21:05:51 ---A- . (...) -- C:\Documents and Settings\Administrateur\.android\adbkey.pub [716]
O61 - LFC: 07/01/2014 - 21:06:00 ---A- . (...) -- C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\b3jplwfd.default\extensions.sqlite [393216]
O61 - LFC: 07/01/2014 - 21:06:05 ---A- . (...) -- C:\Documents and Settings\Administrateur\daemonprocess.txt [0]
O61 - LFC: 07/01/2014 - 21:06:05 -SHA- . (...) -- C:\Documents and Settings\Administrateur\IECompatCache\index.dat [65536]
O61 - LFC: 07/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Cookies [6144]
O61 - LFC: 07/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\000740.ldb [196]
O61 - LFC: 07/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\000760.ldb [196]
O61 - LFC: 07/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\000937.ldb [307]
O61 - LFC: 07/01/2014 - 21:06:15 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\Origins\000064.ldb [301]
O61 - LFC: 07/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\000005.ldb [12361]
O61 - LFC: 07/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\LOCK [0]
O61 - LFC: 07/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_www.google.fr_0.localstorage [3072]
O61 - LFC: 07/01/2014 - 21:06:19 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_static.jumpflip.net_0.localstorage [2814976]
O61 - LFC: 07/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_vube.com_0.localstorage [3072]
O61 - LFC: 07/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.playvod.com_0.localstorage [3072]
O61 - LFC: 07/01/2014 - 21:06:22 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.systweak.com_0.localstorage [3072]
O61 - LFC: 07/01/2014 - 21:06:47 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Internet Explorer\Services\search_{1A3B65BC-8C7C-4C82-A272-8AE7383552D3}.ico [6518]
O61 - LFC: 07/01/2014 - 21:07:51 ---A- . (...) -- C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Haali Media Splitter\GDSMux.lnk [1712]
O61 - LFC: 07/01/2014 - 21:07:51 ---A- . (...) -- C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Haali Media Splitter\Media Splitter Settings.lnk [1626]
O61 - LFC: 07/01/2014 - 21:07:51 ---A- . (...) -- C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Haali Media Splitter\Uninstall.lnk [1735]
O61 - LFC: 07/01/2014 - 21:09:05 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\mp610swin101ea24 (3).exe [24761672]
O61 - LFC: 07/01/2014 - 21:09:05 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\mp610swin101ea24 (4).exe [24761672]
O61 - LFC: 07/01/2014 - 21:09:06 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\mp610swin101ea24 (5).exe [24761672]
O61 - LFC: 07/01/2014 - 21:09:06 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\mp610swin101ea24 (6).exe [24761672]
O61 - LFC: 07/01/2014 - 21:09:25 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\Setup (3).exe [576544]
O61 - LFC: 07/01/2014 - 21:09:25 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\Setup (4).exe [578600]
O61 - LFC: 07/01/2014 - 21:09:34 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\UltimateCodec.exe [672936]
O61 - LFC: 07/01/2014 - 21:10:42 -SHA- . (...) -- C:\Documents and Settings\Administrateur\PrivacIE\index.dat [16187392]
O61 - LFC: 08/01/2014 - 21:06:00 ---A- . (...) -- C:\Documents and Settings\Administrateur\Application Data\newnext.me\nengine.cookie [3072] =>PUP.NextLive
O61 - LFC: 08/01/2014 - 21:06:12 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT [28400]
O61 - LFC: 08/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\000776.ldb [196]
O61 - LFC: 08/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\000973.ldb [464]
O61 - LFC: 08/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\databases\http_fr.gpotato.eu_0\19 [5120]
O61 - LFC: 08/01/2014 - 21:06:14 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\edjnbokkihlfclbddajclncbnmgggbie\1.150_0\b.html [91]
O61 - LFC: 08/01/2014 - 21:06:14 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\edjnbokkihlfclbddajclncbnmgggbie\1.150_0\b.js [2305]
O61 - LFC: 08/01/2014 - 21:06:14 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\edjnbokkihlfclbddajclncbnmgggbie\1.150_0\c.js [5286]
O61 - LFC: 08/01/2014 - 21:06:14 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\edjnbokkihlfclbddajclncbnmgggbie\1.150_0\manifest.json [998]
O61 - LFC: 08/01/2014 - 21:06:14 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gdnafjfahbdfphihncgadbegiaebehio\1.0.0_0\background.js [270]
O61 - LFC: 08/01/2014 - 21:06:14 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gdnafjfahbdfphihncgadbegiaebehio\1.0.0_0\content.js [306]
O61 - LFC: 08/01/2014 - 21:06:14 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gdnafjfahbdfphihncgadbegiaebehio\1.0.0_0\manifest.json [1182]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\cnglhdfndkfkpiddcmfioekcjkmojhbj\000144.ldb [104082]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\cnglhdfndkfkpiddcmfioekcjkmojhbj\000146.ldb [106966]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\cnglhdfndkfkpiddcmfioekcjkmojhbj\000161.ldb [2476]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\cnglhdfndkfkpiddcmfioekcjkmojhbj\CURRENT [16]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\cnglhdfndkfkpiddcmfioekcjkmojhbj\LOG [270]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\cnglhdfndkfkpiddcmfioekcjkmojhbj\LOG.old [267]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\cnglhdfndkfkpiddcmfioekcjkmojhbj\MANIFEST-000160 [210]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\gdnafjfahbdfphihncgadbegiaebehio\LOCK [0]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj\CURRENT [16]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj\LOG [148]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj\LOG.old [148]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj\MANIFEST-000633 [91]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\icdlfehblmklkikfigmjhbmmpmkmpooj\CURRENT [16]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\icdlfehblmklkikfigmjhbmmpmkmpooj\LOG [145]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\icdlfehblmklkikfigmjhbmmpmkmpooj\LOG.old [145]
O61 - LFC: 08/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\icdlfehblmklkikfigmjhbmmpmkmpooj\MANIFEST-000089 [104]
O61 - LFC: 08/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\CURRENT [16]
O61 - LFC: 08/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\LOG [262]
O61 - LFC: 08/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\LOG.old [262]
O61 - LFC: 08/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\MANIFEST-000049 [92]
O61 - LFC: 08/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp\CURRENT [16]
O61 - LFC: 08/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp\LOG [148]
O61 - LFC: 08/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp\LOG.old [148]
O61 - LFC: 08/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp\MANIFEST-000633 [95]
O61 - LFC: 08/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_connexity.net_0.localstorage [3072]
O61 - LFC: 08/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_connexity.net_0.localstorage [3072]
O61 - LFC: 08/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_ec2-54-242-41-25.compute-1.amazonaws.com_0.localstorage [3072]
O61 - LFC: 08/01/2014 - 21:06:19 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_fr.gpotato.eu_0.localstorage [3072]
O61 - LFC: 08/01/2014 - 21:06:19 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_fr.ilovefashion.tv_0.localstorage [3072]
O61 - LFC: 08/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_tr.adsplats.com_0.localstorage [3072]
O61 - LFC: 08/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.01net.com_0.localstorage [3072]
O61 - LFC: 08/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.emmaus-orleans.org_0.localstorage [3072]
O61 - LFC: 08/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.ldlc.com_0.localstorage [3072]
O61 - LFC: 08/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.megacinema.fr_0.localstorage [3072]
O61 - LFC: 08/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.megavod.fr_0.localstorage [3072]
O61 - LFC: 08/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.pagesjaunes.fr_0.localstorage [14336]
O61 - LFC: 08/01/2014 - 21:06:22 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.voyeurfrance.net_0.localstorage [3072]
O61 - LFC: 08/01/2014 - 21:06:22 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.yac.mx_0.localstorage [3072]
O61 - LFC: 08/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\edjnbokkihlfclbddajclncbnmgggbie\000005.ldb [132]
O61 - LFC: 08/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\edjnbokkihlfclbddajclncbnmgggbie\LOCK [0]
O61 - LFC: 08/01/2014 - 21:07:56 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\adwcleaner (1).exe [1233962]
O61 - LFC: 08/01/2014 - 21:07:59 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\adwcleaner (2).exe [1233962]
O61 - LFC: 08/01/2014 - 21:08:43 ---A- . (.SM JOUTEAU GARAT.) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\Conclusions recap CA fond.doc [106496]
O61 - LFC: 09/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\databases\http_www.seniorrencontres.fr_0\20 [5120]
O61 - LFC: 09/01/2014 - 21:06:15 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\Origins\000114.ldb [170]
O61 - LFC: 09/01/2014 - 21:06:15 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\Origins\LOG.old [148]
O61 - LFC: 09/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\History Provider Cache [1297679]
O61 - LFC: 09/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_eu1.badoo.com_0.localstorage [36864]
O61 - LFC: 09/01/2014 - 21:06:19 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_fr.wiktionary.org_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:19 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_linkinghub.elsevier.com_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:19 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_moviecovers.com_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:19 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_psy-en-ligne.eu_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:19 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_savoir.fr_0.localstorage [794624]
O61 - LFC: 09/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.alzheimer-adna.com_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.cjoint.com_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.definitions-de-psychologie.com_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.doctissimo.fr_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.ebay.fr_0.localstorage [3072] =>Toolbar.eBay
O61 - LFC: 09/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.em-consulte.com_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.fmc-franche-comte.org_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.idealo.fr_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.jle.com_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.leboncoin.fr_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.medix.free.fr_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.oodoc.com_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.planet.fr_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.saging.com_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.sciencedirect.com_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.serpsy.org_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.smashinn.com_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:22 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.vermeil.info_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:22 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage [49152]
O61 - LFC: 09/01/2014 - 21:06:22 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www2.leboncoin.fr_0.localstorage [3072]
O61 - LFC: 09/01/2014 - 21:06:22 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Network Action Predictor [152576]
O61 - LFC: 09/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Shortcuts [49152]
O61 - LFC: 09/01/2014 - 21:07:52 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\2-1_Prendre_en_charge_un_etat_d_agitation_Thomas (2).pdf [108958]
O61 - LFC: 09/01/2014 - 21:07:52 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\2-1_Prendre_en_charge_un_etat_d_agitation_Thomas (3).pdf [108958]
O61 - LFC: 09/01/2014 - 21:08:02 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\adwcleaner (3).exe [1233962]
O61 - LFC: 09/01/2014 - 21:08:06 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\adwcleaner (4).exe [1233962]
O61 - LFC: 09/01/2014 - 21:09:00 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\ETATS D'AGITATION PSYCHOMOTRICE.pdf; [504952]
O61 - LFC: 09/01/2014 - 21:09:00 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\Extras.Txt [35552]
O61 - LFC: 09/01/2014 - 21:09:06 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\mp68-win-mp550-1_05-ea24 (1).exe [21286032]
O61 - LFC: 09/01/2014 - 21:09:07 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\mp68-win-mp550-1_05-ea24 (2).exe [21286032]
O61 - LFC: 09/01/2014 - 21:09:07 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\mp68-win-mp550-1_05-ea24.exe [21286032]
O61 - LFC: 09/01/2014 - 21:09:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\Setup (5).exe [475168]
O61 - LFC: 10/01/2014 - 21:06:00 ---A- . (...) -- C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\b3jplwfd.default\prefs.js [6854]
O61 - LFC: 10/01/2014 - 21:06:03 ---A- . (...) -- C:\Documents and Settings\Administrateur\Application Data\ZHP\Log.txt [42132] =>.Nicolas Coolman
O61 - LFC: 10/01/2014 - 21:06:03 ---A- . (...) -- C:\Documents and Settings\Administrateur\Application Data\ZHP\TestsZHPDiag.txt [3494] =>.Nicolas Coolman
O61 - LFC: 10/01/2014 - 21:06:04 ---A- . (...) -- C:\Documents and Settings\Administrateur\Bureau\ZHPDiag.lnk [1523] =>.Nicolas Coolman
O61 - LFC: 10/01/2014 - 21:06:04 ---A- . (...) -- C:\Documents and Settings\Administrateur\Bureau\ZHPFix.lnk [1628] =>.Nicolas Coolman
O61 - LFC: 10/01/2014 - 21:06:05 -SHA- . (...) -- C:\Documents and Settings\Administrateur\IETldCache\index.dat [262144]
O61 - LFC: 10/01/2014 - 21:06:12 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Certificate Revocation Lists [266767]
O61 - LFC: 10/01/2014 - 21:06:12 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies [1267712]
O61 - LFC: 10/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies-journal [16384]
O61 - LFC: 10/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Current Session [1151518]
O61 - LFC: 10/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Current Tabs [715649]
O61 - LFC: 10/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\CURRENT [16]
O61 - LFC: 10/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\LOG [148]
O61 - LFC: 10/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\LOG.old [148]
O61 - LFC: 10/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\CURRENT [16]
O61 - LFC: 10/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\LOG [148]
O61 - LFC: 10/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\LOG.old [148]
O61 - LFC: 10/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\MANIFEST-000986 [722] =>.Google Inc
O61 - LFC: 10/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\databases\Databases.db [7168]
O61 - LFC: 10/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\databases\http_www.cougars-avenue.com_0\21 [4096]
O61 - LFC: 10/01/2014 - 21:06:13 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\databases\http_www.xflirt.com_0\17 [4096]
O61 - LFC: 10/01/2014 - 21:06:15 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Favicons [28196864]
O61 - LFC: 10/01/2014 - 21:06:15 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Favicons-journal [16384]
O61 - LFC: 10/01/2014 - 21:06:15 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\Origins\CURRENT [16]
O61 - LFC: 10/01/2014 - 21:06:15 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\Origins\LOG [145]
O61 - LFC: 10/01/2014 - 21:06:15 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\Origins\MANIFEST-000118 [292]
O61 - LFC: 10/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\History [4644864]
O61 - LFC: 10/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\History-journal [16384]
O61 - LFC: 10/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Last Tabs [1578610]
O61 - LFC: 10/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\gdnafjfahbdfphihncgadbegiaebehio\000049.ldb [21074]
O61 - LFC: 10/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\gdnafjfahbdfphihncgadbegiaebehio\CURRENT [16]
O61 - LFC: 10/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\gdnafjfahbdfphihncgadbegiaebehio\LOG [629]
O61 - LFC: 10/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\gdnafjfahbdfphihncgadbegiaebehio\LOG.old [1162]
O61 - LFC: 10/01/2014 - 21:06:16 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\gdnafjfahbdfphihncgadbegiaebehio\MANIFEST-000046 [241]
O61 - LFC: 10/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gdnafjfahbdfphihncgadbegiaebehio_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gdnafjfahbdfphihncgadbegiaebehio_0.localstorage-journal [3608]
O61 - LFC: 10/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_c.mscimg.com_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_c.mscimg.com_0.localstorage-journal [3608]
O61 - LFC: 10/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_live.adyen.com_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_plus.google.com_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_plus.google.com_0.localstorage-journal [3608]
O61 - LFC: 10/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_sellercentral.amazon.fr_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_wac.edgecastcdn.net_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:17 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_wac.edgecastcdn.net_0.localstorage-journal [3608]
O61 - LFC: 10/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_ams1.ib.adnxs.com_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_bh.contextweb.com_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_cdn.sharedaddomain.com_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_cjoint.com_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_content.ttinline.com_0.localstorage [107520]
O61 - LFC: 10/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_content.ttinline.com_0.localstorage-journal [6704]
O61 - LFC: 10/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_exchange.datropy.com_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_f.rvzrjs.info_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_forum.telecharger.01net.com_0.localstorage [6144]
O61 - LFC: 10/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_forum.telecharger.01net.com_0.localstorage-journal [6704]
O61 - LFC: 10/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_www.priceminister.com_0.localstorage [12288]
O61 - LFC: 10/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_www.priceminister.com_0.localstorage-journal [10832]
O61 - LFC: 10/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:18 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_wwws.lemonde.fr_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:19 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_fr.wulin.gpotato.eu_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:19 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_googleads.g.doubleclick.net_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:19 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_ib.adnxs.com_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:19 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_static.live-lyrics.com_0.localstorage [2933760] =>Adware.AddLyrics
O61 - LFC: 10/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_static.tanzuki.net_0.localstorage [2936832]
O61 - LFC: 10/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_static.tanzuki.net_0.localstorage-journal [16384]
O61 - LFC: 10/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_wac.edgecastcdn.net_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_wac.edgecastcdn.net_0.localstorage-journal [3608]
O61 - LFC: 10/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.amazon.fr_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.commentcamarche.net_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.commentcamarche.net_0.localstorage-journal [3608]
O61 - LFC: 10/01/2014 - 21:06:20 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.delcampe.net_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.medisite.fr_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.meeticaffinity.fr_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.meeticaffinity.fr_0.localstorage-journal [3608]
O61 - LFC: 10/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.priceminister.com_0.localstorage [27648]
O61 - LFC: 10/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.priceminister.com_0.localstorage-journal [14960]
O61 - LFC: 10/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.seniorrencontres.fr_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.spartoo.com_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:21 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal [3608]
O61 - LFC: 10/01/2014 - 21:06:22 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.twoo.com_0.localstorage [3072]
O61 - LFC: 10/01/2014 - 21:06:22 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Login Data [12288]
O61 - LFC: 10/01/2014 - 21:06:22 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Login Data-journal [4624]
O61 - LFC: 10/01/2014 - 21:06:25 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences [244935]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\QuotaManager [21504]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\002061.ldb [147]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\002063.ldb [74159]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\CURRENT [16]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\LOG [276]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\LOG.old [641]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\MANIFEST-002062 [166] =>.Google Inc
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3 [1822720]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3-journal [16384]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\edjnbokkihlfclbddajclncbnmgggbie\CURRENT [16]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\edjnbokkihlfclbddajclncbnmgggbie\LOG [145]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\edjnbokkihlfclbddajclncbnmgggbie\LOG.old [145]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\edjnbokkihlfclbddajclncbnmgggbie\MANIFEST-000025 [77]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Top Sites [380928]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Top Sites-journal [16384]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\TransportSecurity [3194]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Visited Links [524192]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data [448512]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data-journal [6680]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data.ReadOnly [448512]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Local State [53290]
O61 - LFC: 10/01/2014 - 21:06:26 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\lockfile [0]
O61 - LFC: 10/01/2014 - 21:06:27 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Bloom [12375428]
O61 - LFC: 10/01/2014 - 21:06:27 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set [1252032]
O61 - LFC: 10/01/2014 - 21:06:27 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Cookies [6144]
O61 - LFC: 10/01/2014 - 21:06:27 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Cookies-journal [4640]
O61 - LFC: 10/01/2014 - 21:06:27 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Csd Whitelist [135444]
O61 - LFC: 10/01/2014 - 21:06:27 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Download [947852]
O61 - LFC: 10/01/2014 - 21:06:27 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Download Whitelist [18828]
O61 - LFC: 10/01/2014 - 21:06:27 ---A- . (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Extension Blacklist [6896]
O61 - LFC: 10/01/2014 - 21:09:33 -SHA- . (...) -- C:\Documents and Settings\Administrateur\Mes documents\Downloads\Thumbs.db [820736]
~ 4 Fichiers temporaires (Temporary files)
~ 14 Fichiers cookies (Cookies files)
~ Files: 538 Legitimates Filtered in 04mn 51s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 10 Legitimates Filtered in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (...) -- c:\documents and settings\administrateur\local settings\application data\google\chrome\application\chrome.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- c:\program files\mozilla firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- c:\program files\google\chrome\application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- c:\program files\internet explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {1A3B65BC-8C7C-4C82-A272-8AE7383552D3} [DefaultScope] - (Yahoo) - http://fr.search.yahoo.com
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {720FE7EA-83A1-4244-8FFB-217FF331D815} - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {EE00D15F-5271-45AA-87EE-B723B4069128} - (Yahoo! Search) - http://fr.search.yahoo.com
~ Keys: Scanned in 00mn 00s



---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "A9E0FC7FB84D2494597352E90D65D84F" . (.Iminent.) -- C:\WINDOWS\Installer\{F7CF0E9A-D48B-4942-9537-259ED0568DF4}\imbooster.ico =>Adware.IMBooster
~ Update Products: 26 Legitimates Filtered in 00mn 00s



---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.52AB06524935605807978409727D5FC3] [WIS][18/06/2012] (.Iminent - Iminent.) -- C:\Windows\Installer\109be0d.msi [1474560] =>Adware.IMBooster
[MD5.CB9A43E41E10585FEF4651D362A230E4] [WIS][18/06/2012] (.IMinent - IMinent Toolbar.) -- C:\Windows\Installer\109be14.msi [206336] =>Adware.IMBooster
[MD5.D99781FEC99A644A8AFCA46CBCEA7360] [WIS][18/12/2013] (.Spigot, Inc. - Widgi Toolbar.) -- C:\Windows\Installer\fcf015.msi [1478656] =>PUP.Dealio
~ WIS: 28 Legitimates Filtered in 00mn 05s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 11/12/2013 257416 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 14/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SS - | Auto 26/02/2012 136176 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 26/02/2012 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Auto 03/12/2013 2151200 | (LiveUpdateSvc) . (.IObit.) - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
SS - | Demand 06/09/2013 235216 | (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe

SR - | Auto 09/12/2013 881440 | (AdvancedSystemCareService7) . (.IObit.) - C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe
SR - | Auto 22/02/2012 153376 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe
SR - | Auto 22/04/2013 754000 | (MaConfigAgent) . (.CybelSoft.) - C:\Program Files\ma-config.com\MaConfigAgent.exe
SR - | Auto 23/10/2013 22208 | (MsMpSvc) . (.Microsoft Corporation.) - C:\Program Files\Microsoft Security Client\MsMpEng.exe

~ Services: Scanned in 00mn 06s



---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by Administrateur at 10/01/2014 21:13:16

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys intelide.sys PCIIDEX.SYS
1 ntkrnlpa!IofCallDriver[0x804EF200] >> \Device\Harddisk0\DR0[0x89DEEAB8]
kernel: MBR read successfully
user & kernel MBR OK

~ MBR: 13 Legitimates Filtered in 00mn 02s



---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Administrateur at 10/01/2014 21:13:18

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin

~ MBR: Scanned in 00mn 04s



---\\ Scan Additionnel (O88)
Database Version : 13019 - (10/01/2014)
Clés trouvées (Keys found) : 11
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 5
Fichiers trouvés (Files found) : 3

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}] =>PUP.Dealio^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3A787631-66A2-4634-B928-A37E73B58FB6}] =>PUP.Dealio^
[HKLM\Software\Classes\Installer\Features\A9E0FC7FB84D2494597352E90D65D84F] =>Adware.IMBooster
[HKLM\Software\Classes\Installer\Products\A9E0FC7FB84D2494597352E90D65D84F] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A9E0FC7FB84D2494597352E90D65D84F] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1CAE30F47D14B41B5FC8FA53658044] =>PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9] =>PUP.Dealio
[HKCU\Software\IObit Apps] =>PUP.Dealio
[HKCU\Software\AppDataLow\Software\IObit Apps] =>PUP.Dealio
[HKLM\Software\IObit Apps] =>PUP.Dealio
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011221158}] =>PUP.CrossRider
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\b3jplwfd.default\extensions\savingsslider@mybrowserbar.com =>Adware.WidgiToolbar^
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\b3jplwfd.default\extensions\{badea1ae-72ed-4f6a-8c37-4db9a4ac7bc9} =>PUP.AddressBarSearch^
C:\Documents and Settings\Administrateur\Application Data\newnext.me =>PUP.NextLive^
C:\Documents and Settings\Administrateur\Application Data\Slick Savings =>PUP.Dealio^
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Slick Savings =>PUP.Dealio^
C:\Windows\Installer\109be0d.msi =>Adware.IMBooster^
C:\Windows\Installer\109be14.msi =>Adware.IMBooster^
C:\Windows\Installer\fcf015.msi =>PUP.Dealio^
~ Additionnel Scan: 164972 Items scanned in 00mn 49s



---\\ Récapitulatif des détections trouvées sur votre station
~ http://nicolascoolman.webs.com/apps/blog/show/27881234-adware-widgitoolbar =>Adware.WidgiToolbar
~ http://nicolascoolman.webs.com/apps/blog/show/27443462-pup-dealio =>PUP.Dealio
~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit =>Toolbar.Conduit
~ http://nicolascoolman.webs.com/apps/blog/show/40528410-pup-nextlive =>PUP.NextLive
~ http://nicolascoolman.webs.com/apps/blog/show/34014358-pua-fstfr9 =>PUA.FSTfr9
~ http://nicolascoolman.webs.com/apps/blog/show/33388048-pup-vuupc =>PUP.VuuPC
~ http://nicolascoolman.webs.com/apps/blog/show/26601058-adware-addlyrics =>Adware.AddLyrics
~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster =>Adware.IMBooster
~ http://nicolascoolman.webs.com/apps/blog/show/27583526-pup-crossrider =>PUP.CrossRider
~ MSI: 9 link(s) detected in 00mn 50s



~ 1472 Legitimates filtered by white list
End of the scan (818 lines in 09mn 49s)(0)