cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

���������� | Shortcut_Module | g3n-h@ckm@n | 09.06.2014.4

����� Vista | 7 | 8 | 8.1 - 32/64 bits ����� - Start 18:10:03 - 09/06/2014

Mis � jour le : 09/06/2014 | 15.20 par g3n-h@ckm@n

Contact : http://www.sosvirus.net
Assistance : http://www.sosvirus.net/forum-virus-securite.html
Feedbacks : http://www.sosvirus.net/feedbacks-t75915.html

Boot : Normal

Syst�me : Windows 8.1 (64 bits) Core

M�moire RAM = Total (MB) : 4153 | Libre (MB) : 1825
Pagefile = Total (MB) : 4874 | Libre (MB) : 2479
Virtuelle = Total (MB) : 4194 | Libre (MB) : 3995


Registre sauvegard� , pour restaurer : C:\Shortcut_Module\Save\Clean\ERDNT.exe

���������� | Mises � jour Windows

Aucune mise � jour d�tect�e !!!

���������� | Navigateurs

IE : 11.0.9600.16518 (� Microsoft Corporation. Tous droits r�serv�s.)
FF : 29.0.1.5239 (�Firefox and Mozilla Developers; available under the MPL 2 license.)
GC : 35.0.1916.114 (Copyright 2012 Google Inc. All rights reserved.)

���������� | Security

AV : avast! Antivirus Enabled
AS : Lavasoft Ad-Watch Live! Disabled
AM : Malwarebytes' Anti-Malware (1.0.0.532) [2014.03.08.03]
FW :
WMI : OK
WU: Windows Update Service [Manual(3)] = Arr�t�
AS: Windows Defender [Manual(3)] = Arr�t�
FW: Windows FireWall Service [Auto(2)] = d�marr�

���������� | FlashPlayer

FlashPlayer ActiveX : 13.0.0.214
FlashPlayer Plugin : 13.0.0.214

���������� | Processus tu�s

336 | [Owner : Syst�me |Parent : 736] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 337.88.) - (8.17.13.3788) = C:\Windows\System32\nvvsvc.exe
364 | [Owner : Syst�me |Parent : 736] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - (7.17.13.3788) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
568 | [Owner : Syst�me |Parent : 336] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 337.88.) - (8.17.13.3788) = C:\Windows\System32\nvvsvc.exe
1072 | [Owner : Syst�me |Parent : 336] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) - (8.17.13.3788) = C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
1628 | [Owner : Filippu |Parent : 1620] - (.Microsoft Corporation - Explorateur Windows.) - (6.3.9600.16441) = C:\Windows\explorer.exe
1672 | [Owner : Filippu |Parent : 1628] - (.IvoSoft - Classic Start Menu.) - (4.1.0.0) = C:\Program Files\Classic Shell\ClassicStartMenu.exe
1744 | [Owner : Syst�me |Parent : 736] - (.Lavasoft Limited - Ad-Aware Service Application .) - (9.0.0.0) = C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
1268 | [Owner : Syst�me |Parent : 736] - (.Microsoft Corporation - Application sous-syst�me spouleur.) - (6.3.9600.16384) = C:\Windows\System32\spoolsv.exe
1256 | [Owner : Filippu |Parent : 732] - (.Microsoft Corporation - Processus h�te pour T�ches Windows.) - (6.3.9600.16384) = C:\Windows\System32\taskhostex.exe
2576 | [Owner : Syst�me |Parent : 736] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.701.3.3014) = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
2592 | [Owner : Syst�me |Parent : 732] - (.Microsoft Corporation - Moteur du Planificateur de t�ches.) - (6.3.9600.16384) = C:\Windows\System32\taskeng.exe
2656 | [Owner : Syst�me |Parent : 2592] - (.Google Inc. - Programme d'installation de Google.) - (1.3.21.103) = C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
2680 | [Owner : Syst�me |Parent : 2656] - (.Google Inc. - Google Crash Handler.) - (1.3.24.7) = C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
2904 | [Owner : Syst�me |Parent : 2656] - (.Google Inc. - Google Crash Handler.) - (1.3.24.7) = C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
2952 | [Owner : Syst�me |Parent : 736] - (.CobianSoft, Luis Cobian - Cobian Backup Gravity VSC Requester.) - (11.0.0.0) = C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe
2076 | [Owner : SERVICE LOCAL |Parent : 1088] - (.Microsoft Corporation - Device Association Framework Provider Host.) - (6.3.9600.16384) = C:\Windows\System32\dasHost.exe
2120 | [Owner : Syst�me |Parent : 736] - (.Portrait Displays, Inc. - DTSRVC.) - (1.0.0.1) = C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
2452 | [Owner : Syst�me |Parent : 736] - (.Seiko Epson Corporation - Epson Scanner Service (64bit).) - (1.1.0.1) = C:\Windows\System32\escsvc64.exe
1208 | [Owner : Syst�me |Parent : 736] - (.Intel(R) Corporation - Intel(R) Capability Licensing Service Interface.) - (1.24.388.1) = C:\Program Files\Intel\iCLS Client\HeciServer.exe
1452 | [Owner : Syst�me |Parent : 736] - (.Intel Corporation - Intel(R) Dynamic Application Loader Host Interface.) - (8.1.0.1252) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
2772 | [Owner : Syst�me |Parent : 736] - (. - .) - (0.0.0.0) = C:\Windows\jmesoft\Service.exe
2776 | [Owner : Syst�me |Parent : 736] - (.Microsoft Corporation - Machine Debug Manager.) - (7.10.3077.0) = C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
996 | [Owner : Syst�me |Parent : 736] - (.Portrait Displays, Inc. - pdisrvc.) - (2.2.31.9) = C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
3328 | [Owner : Syst�me |Parent : 736] - (.Microsoft Corporation - Indexeur Microsoft Windows Search.) - (7.0.9600.16384) = C:\Windows\System32\SearchIndexer.exe
3796 | [Owner : Filippu |Parent : 864] - (.Microsoft Corporation - Host Process for Setting Synchronization.) - (6.3.9600.16500) = C:\Windows\System32\SettingSyncHost.exe
3932 | [Owner : SERVICE LOCAL |Parent : 1088] - (.Microsoft Corporation - Windows Driver Foundation - Processus h�te de l�infrastructure de pilotes en mode utilisateur.) - (6.3.9600.16384) = C:\Windows\System32\WUDFHost.exe
4080 | [Owner : Syst�me |Parent : 864] - (.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) - (6.3.9600.16384) = C:\Windows\System32\wbem\unsecapp.exe
4244 | [Owner : Filippu |Parent : 864] - (.Microsoft Corporation - SkyDrive Sync Engine Host.) - (6.3.9600.16507) = C:\Windows\System32\SkyDrive.exe
4264 | [Owner : Filippu |Parent : 1744] - (.Lavasoft Limited - Ad-Aware Tray Application.) - (9.0.0.0) = C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
4960 | [Owner : Filippu |Parent : 1628] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) - (1.0.0.812) = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
5048 | [Owner : Filippu |Parent : 1628] - (.Guillemot Corporation S.A. - Hercules Xtra Controller Main Application.) - (4.0.2.1) = C:\Program Files (x86)\Hercules\Dualpix Exchange\XtrCtrlEx.exe
5096 | [Owner : Filippu |Parent : 1628] - (.FileHippo.com - FileHippo.com Update Checker.) - (1.40.0.0) = C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe
4232 | [Owner : Filippu |Parent : 1628] - (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - (8.0.0.0) = C:\Windows\System32\spool\drivers\x64\3\E_IATILEE.EXE
4320 | [Owner : Filippu |Parent : 1628] - (.Smart PC Solutions - Easy Wallpaper Changer.) - (2.0.0.0) = C:\Program Files (x86)\Smart PC Solutions\Easy Wallpaper Changer\EasyWallpaperChanger.exe
4188 | [Owner : Filippu |Parent : 1724] - (.Lenovo - Lenovo Black Silk USB Keyboard.) - (1.4.11.608) = C:\Windows\jmesoft\hotkey.exe
4840 | [Owner : Filippu |Parent : 1724] - (.CyberLink - CyberLink MediaLibray Service.) - (2.1.1803.0) = C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
1588 | [Owner : Syst�me |Parent : 2772] - (. - Lenovo_LOAD.) - (1.2.11.517) = C:\Windows\jmesoft\JME_LOAD.exe
608 | [Owner : Filippu |Parent : 1724] - (.CyberLink Corp. - PowerDVD RC Service.) - (10.0.4313.0) = C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
1276 | [Owner : Filippu |Parent : 1724] - (.Intel Corporation - Intel Services Manager.) - (1.16.0.36713) = C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
5056 | [Owner : Filippu |Parent : 1724] - (.Nullsoft, Inc. - Winamp Agent.) - (5.6.6.3516) = C:\Program Files (x86)\Winamp\winampa.exe
2984 | [Owner : Filippu |Parent : 1224] - (.Portrait Displays, Inc - SmartControl.) - (1.2.20.26) = C:\Program Files (x86)\Philips Display\SmartControl\dthtml.exe
5392 | [Owner : Filippu |Parent : 1724] - (.SEIKO EPSON CORPORATION - EEventManager Application.) - (3.1.0.0) = C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
5444 | [Owner : Filippu |Parent : 1724] - (.Oracle Corporation - Java Update Scheduler.) - (2.8.5.13) = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
5924 | [Owner : Filippu |Parent : 2052] - (. - .) - (8.0.0.0) = C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\wpCtrl.exe
5980 | [Owner : Filippu |Parent : 5924] - (. - .) - (9.50.0.0) = C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Floater.exe
5892 | [Owner : Syst�me |Parent : 2120] - (. - DPHelper Application.) - (1.0.0.1) = C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\DP\DPHelper.exe
1336 | [Owner : Syst�me |Parent : 5892] - (. - DPHelper Application.) - (1.0.0.1) = C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\DP\DPHelper64.exe
3428 | [Owner : Syst�me |Parent : 736] - (.Realsil Microelectronics Inc. - Realtek Card Reader Patch Tool..) - (1.5.0.0) = C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
1220 | [Owner : Syst�me |Parent : 736] - (.Intel Corporation - Local Manageability Service.) - (8.1.0.1252) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
5936 | [Owner : Syst�me |Parent : 736] - (.Intel Corporation - User Notification Service.) - (8.1.0.1252) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
1156 | [Owner : SERVICE R�SEAU |Parent : 736] - (.Microsoft Corporation - Service Partage r�seau du Lecteur Windows Media.) - (12.0.9600.16384) = C:\Program Files\Windows Media Player\wmpnetwk.exe
3024 | [Owner : Syst�me |Parent : 736] - (.NVIDIA Corporation - NVIDIA Streamer Service.) - (2.1.214.0) = C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
4288 | [Owner : SERVICE R�SEAU |Parent : 3024] - (.NVIDIA Corporation - NVIDIA Streamer Service.) - (2.1.214.0) = C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
2852 | [Owner : Syst�me |Parent : 3024] - (.NVIDIA Corporation - NVIDIA Streamer Service.) - (2.1.214.0) = C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
6084 | [Owner : Syst�me |Parent : 2852] - (.Microsoft Corporation - H�te de la fen�tre de la console.) - (6.3.9600.16384) = C:\Windows\System32\conhost.exe
6028 | [Owner : Filippu |Parent : 4184] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) - (14.6.22.1) = C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
4812 | [Owner : Syst�me |Parent : 736] - (.NVIDIA Corporation - NVIDIA Network Service.) - (1.0.5.16) = C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
4836 | [Owner : Filippu |Parent : 3128] - (.NVIDIA Corporation - NVIDIA Settings.) - (7.17.13.3788) = C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
1824 | [Owner : Filippu |Parent : 1628] - (.Mozilla Corporation - Thunderbird.) - (24.5.0.5227) = C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
5588 | [Owner : Filippu |Parent : 1824] - (.Mozilla Corporation - Firefox.) - (29.0.1.5239) = C:\Program Files (x86)\Mozilla Firefox\firefox.exe
5332 | [Owner : Filippu |Parent : 5588] - (.Mozilla Corporation - Plugin Container for Firefox.) - (29.0.1.5239) = C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
5860 | [Owner : Filippu |Parent : 5588] - (.Mozilla Corporation - Plugin Container for Firefox.) - (29.0.1.5239) = C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
1940 | [Owner : Filippu |Parent : 5860] - (.Adobe Systems, Inc. - Adobe Flash Player 13.0 r0.) - (13.0.0.214) = C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
1860 | [Owner : Filippu |Parent : 4888] - (.Microsoft Corporation - Print driver host for applications.) - (6.3.9600.16384) = C:\Windows\splwow64.exe
4936 | [Owner : SERVICE LOCAL |Parent : 1088] - (.Microsoft Corporation - Device Association Framework Provider Host.) - (6.3.9600.16384) = C:\Windows\System32\dasHost.exe
3108 | [Owner : SERVICE LOCAL |Parent : 1088] - (.Microsoft Corporation - Windows Driver Foundation - Processus h�te de l�infrastructure de pilotes en mode utilisateur.) - (6.3.9600.16384) = C:\Windows\System32\WUDFHost.exe
3468 | [Owner : Syst�me |Parent : 736] - (.Intel(R) Corporation - Intel(R) Capability Licensing Service Interface.) - (1.24.388.1) = C:\Program Files\Intel\iCLS Client\HeciServer.exe

���������� | Processus d�marr�s

400 | [Owner : Syst�me |Parent : 4] - (.Microsoft Corporation - Gestionnaire de sessions Windows.) - (6.3.9600.16384) = C:\Windows\System32\smss.exe
612 | [Owner : Syst�me |Parent : 600] - (.Microsoft Corporation - Processus d�ex�cution client-serveur.) - (6.3.9600.16384) = C:\Windows\System32\csrss.exe
680 | [Owner : Syst�me |Parent : 600] - (.Microsoft Corporation - Application de d�marrage de Windows.) - (6.3.9600.16384) = C:\Windows\System32\wininit.exe
696 | [Owner : Syst�me |Parent : 688] - (.Microsoft Corporation - Processus d�ex�cution client-serveur.) - (6.3.9600.16384) = C:\Windows\System32\csrss.exe
736 | [Owner : Syst�me |Parent : 680] - (.Microsoft Corporation - Applications Services et Contr�leur.) - (6.3.9600.16384) = C:\Windows\System32\services.exe
760 | [Owner : Syst�me |Parent : 680] - (.Microsoft Corporation - Local Security Authority Process.) - (6.3.9600.16384) = C:\Windows\System32\lsass.exe
788 | [Owner : Syst�me |Parent : 688] - (.Microsoft Corporation - Application d�ouverture de session Windows.) - (6.3.9600.16384) = C:\Windows\System32\winlogon.exe
864 | [Owner : Syst�me |Parent : 736] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.3.9600.16384) = C:\Windows\System32\svchost.exe
904 | [Owner : SERVICE R�SEAU |Parent : 736] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.3.9600.16384) = C:\Windows\System32\svchost.exe
304 | [Owner : DWM-1 |Parent : 788] - (.Microsoft Corporation - Gestionnaire de fen�tres du Bureau.) - (6.3.9600.16384) = C:\Windows\System32\dwm.exe
572 | [Owner : SERVICE LOCAL |Parent : 736] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.3.9600.16384) = C:\Windows\System32\svchost.exe
732 | [Owner : Syst�me |Parent : 736] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.3.9600.16384) = C:\Windows\System32\svchost.exe
916 | [Owner : SERVICE LOCAL |Parent : 736] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.3.9600.16384) = C:\Windows\System32\svchost.exe
1088 | [Owner : Syst�me |Parent : 736] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.3.9600.16384) = C:\Windows\System32\svchost.exe
1180 | [Owner : SERVICE LOCAL |Parent : 572] - (.Microsoft Corporation - Isolation graphique de p�riph�rique audio Windows .) - (6.3.9600.16384) = C:\Windows\System32\audiodg.exe
1416 | [Owner : SERVICE R�SEAU |Parent : 736] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.3.9600.16384) = C:\Windows\System32\svchost.exe
1540 | [Owner : Syst�me |Parent : 736] - (.AVAST Software - avast! Service.) - (9.0.2018.391) = C:\Program Files\AVAST Software\Avast\AvastSvc.exe
520 | [Owner : SERVICE LOCAL |Parent : 736] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.3.9600.16384) = C:\Windows\System32\svchost.exe
2372 | [Owner : SERVICE LOCAL |Parent : 736] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.3.9600.16384) = C:\Windows\System32\svchost.exe
3452 | [Owner : SERVICE LOCAL |Parent : 736] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.3.9600.16384) = C:\Windows\System32\svchost.exe
3536 | [Owner : SERVICE R�SEAU |Parent : 736] - (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.3.9600.16384) = C:\Windows\System32\svchost.exe
3504 | [Owner : SERVICE R�SEAU |Parent : 864] - (.Microsoft Corporation - WMI Provider Host.) - (6.3.9600.16384) = C:\Windows\System32\wbem\WmiPrvSE.exe
3928 | [Owner : Syst�me |Parent : 864] - (.Microsoft Corporation - WMI Provider Host.) - (6.3.9600.16384) = C:\Windows\System32\wbem\WmiPrvSE.exe
5232 | [Owner : Filippu |Parent : 1724] - (.AVAST Software - avast! Antivirus.) - (9.0.2018.391) = C:\Program Files\AVAST Software\Avast\AvastUI.exe
3820 | [Owner : Filippu |Parent : 3108] - (. - Shortcut_Module.) - (9.6.2014.4) = C:\Users\Filippu\Desktop\Shortcut_Module.exe
2460 | [Owner : SERVICE LOCAL |Parent : 1088] - (.Microsoft Corporation - Device Association Framework Provider Host.) - (6.3.9600.16384) = C:\Windows\System32\dasHost.exe
1868 | [Owner : Syst�me |Parent : 736] - (.Intel(R) Corporation - Intel(R) Capability Licensing Service Interface.) - (1.24.388.1) = C:\Program Files\Intel\iCLS Client\HeciServer.exe
4580 | [Owner : SERVICE LOCAL |Parent : 1088] - (.Microsoft Corporation - Windows Driver Foundation - Processus h�te de l�infrastructure de pilotes en mode utilisateur.) - (6.3.9600.16384) = C:\Windows\System32\WUDFHost.exe
1780 | [Owner : Filippu |Parent : 3820] - (. - Process Stopper.) - (1.0.0.0) = C:\Shortcut_Module\Protect_Module.exe

���������� | RUN

04 - [64] HKLM\..\Run : [jmekey] C:\WINDOWS\jmesoft\hotkey.exe
04 - [64] HKLM\..\Run : [jmesoft] C:\Windows\jmesoft\ServiceLoader.exe
04 - [64] HKLM\..\Run : [CLMLServer] "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe"
04 - [64] HKLM\..\Run : [UpdateP2GoShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
04 - [64] HKLM\..\Run : [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
04 - [64] HKLM\..\Run : [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
04 - [64] HKLM\..\Run : [Lenovo App Shop] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
04 - [64] HKLM\..\Run : [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
04 - [64] HKLM\..\Run : [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
04 - [64] HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - [64] HKLM\..\Run : [PivotSoftware] "C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe" -delay=10
04 - [64] HKLM\..\Run : [DT PLP] C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe -PLP
04 - [64] HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - [64] HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
04 - [64] HKLM\..\Run : [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
04 - [64] HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - [64] HKLM\..\Run : [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
04 - [64] HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
04 - [32] HKLM\..\Run : [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
04 - [32] HKLM\..\Run : [CamserviceExchange] C:\Program Files (x86)\Hercules\Dualpix Exchange\XtrCtrlEx.exe /startup
04 - [32] HKLM\..\Run : [Classic Start Menu] "C:\Program Files\Classic Shell\ClassicStartMenu.exe" -autorun
04 - [32] HKLM\..\Run : [NvBackend] "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
04 - [32] HKLM\..\Run : [ShadowPlay] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
04 - HKU\S-1-5-21-3180416234-877363823-3132837208-1001\..\Run : [FileHippo.com] "C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe" /background
04 - HKU\S-1-5-21-3180416234-877363823-3132837208-1001\..\Run : [EPLTarget\P0000000000000000] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILEE.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-412 413 415 Series" /EF "HKCU"

���������� | Argument de recherche

Framefox

���������� | Services


Service en fonctionnement : MMCSS
Service en fonctionnement : Dhcp
Service en fonctionnement : TcpIp
Service en fonctionnement : WinHttpAutoProxysvc
Service en fonctionnement : SSDPSRV
Service stopp� : SSDPSRV
Service en fonctionnement : MPSSvc
Service stopp� : MPSSvc
Service en fonctionnement : LanmanServer
Service stopp� : LanmanServer
Service en fonctionnement : DNScache
Service stopp� : DNScache

���������� | Hosts

C:\WINDOWS\System32\Drivers\etc\hosts : Remis a z�ro avec succ�s

���������� | Registre

Supprim� avec succ�s : [64]HKLM\Software\Classes\SpybotSD.UTSFile
Supprim� avec succ�s : [64]HKLM\Software\Classes\Interface\{84A97748-13F3-4BB5-A20F-31709B134F25} : INVAssemblyActionPair
Supprim� avec succ�s : [32]HKLM\Software\Classes\Interface\{84A97748-13F3-4BB5-A20F-31709B134F25} : INVAssemblyActionPair
Supprim� avec succ�s : [64]HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Spybot - Search & Destroy 2
Supprim� avec succ�s : [64]HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\sysTPLService
Supprim� avec succ�s : [64]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\azebar.com
Supprim� avec succ�s : [64]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebayh.it
Supprim� avec succ�s : [64]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-download.com
Supprim� avec succ�s : [64]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-search-n-destroy.com
Supprim� avec succ�s : [64]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybotcom.com
Supprim� avec succ�s : [64]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\www-spybotcom.com
Supprim� avec succ�s : [64]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-now.com
Supprim� avec succ�s : [64]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybotsearch-full.info
Supprim� avec succ�s : [32]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\azebar.com
Supprim� avec succ�s : [32]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebayh.it
Supprim� avec succ�s : [32]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-download.com
Supprim� avec succ�s : [32]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-search-n-destroy.com
Supprim� avec succ�s : [32]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybotcom.com
Supprim� avec succ�s : [32]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\www-spybotcom.com
Supprim� avec succ�s : [32]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-now.com
Supprim� avec succ�s : [32]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybotsearch-full.info
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\azebar.com
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebayh.it
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-download.com
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-search-n-destroy.com
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybotcom.com
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\www-spybotcom.com
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001_Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\azebar.com
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001_Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebayh.it
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001_Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-download.com
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001_Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-search-n-destroy.com
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001_Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybotcom.com
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001_Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\www-spybotcom.com
Supprim� avec succ�s : HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\azebar.com
Supprim� avec succ�s : HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebayh.it
Supprim� avec succ�s : HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-download.com
Supprim� avec succ�s : HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-search-n-destroy.com
Supprim� avec succ�s : HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybotcom.com
Supprim� avec succ�s : HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\www-spybotcom.com
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-now.com
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybotsearch-full.info
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001_Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-now.com
Supprim� avec succ�s : HKU\S-1-5-21-3180416234-877363823-3132837208-1001_Classes\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybotsearch-full.info
Supprim� avec succ�s : HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybot-now.com
Supprim� avec succ�s : HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\spybotsearch-full.info
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\sysTPLService_RASMANCS
Supprim� avec succ�s : [64]HKLM\SOFTWARE\Lavasoft
Supprim� avec succ�s : HKU\S-1-5-18\Software\Safer Networking Limited
Supprim� avec succ�s : [64][HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]|[BrowserMngr Start Page] : http://www.google.com/
Supprim� avec succ�s : [64][HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]|[BrowserMngr Start Page] : http://www.google.com/
Supprim� avec succ�s : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]|[C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] : C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater

���������� | IFEO


���������� | Dossiers

Supprim� avec succ�s : [Filippu | GC] : gomekmidlodglbbmalcneegieacbdmki = Browser Security

���������� | D�tournements de raccourcis


���������� | Proxy


R�par� : [HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet settings]|[ProxyOverride] : <-loopback>; -> *.local
R�par� : [HKU\S-1-5-21-3180416234-877363823-3132837208-1001\Software\Microsoft\Windows\CurrentVersion\Internet settings]|[WarnonZoneCrossing] : 0 -> 1

���������� | D�tournement internet Explorer

R�par� : [HKU\S-1-5-21-3180416234-877363823-3132837208-1001\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://yahoo.fr/ -> http://www.google.com/
R�par� : [64][HKLM\Software\Microsoft\Internet Explorer\Main]|[Local Page] : -> C:\WINDOWS\SysWOW64\blank.htm
R�par� : [64][HKLM\Software\Microsoft\Internet Explorer\Main]|[BrowserMngr Start Page] : -> http://www.google.com/
R�par� : [64][HKLM\Software\Microsoft\Internet Explorer\Search]|[Local Page] : -> C:\WINDOWS\SysWOW64\blank.htm
R�par� : [32][HKLM\Software\Microsoft\Internet Explorer\Main]|[BrowserMngr Start Page] : -> http://www.google.com/

���������� | D�tournement Google Chrome

[Filippu] Remis a z�ro avec succ�s : SearchURL
[Filippu] Remis a z�ro avec succ�s : Preferences

[Filippu] : aohghmighlieiainnegkcijnfilokake = : Google & co - Google & co
[Filippu] : apdfllckaahabafndbhieahigkjlhalf = : Google & co - https://drive.google.com/?usp=chrome_app - Google & co
[Filippu] : bepbmhgboaologfdajaanbcjmnhjmhfn = : This extension allows you to say �Ok Google� and start speaking your search. - Google Voice Search Hotword (Beta)
[Filippu] : blpcfgokakmgnkcojhhkbfbldkacnbeo = : Google & co - http://www.youtube.com - http://www.youtube.com/?feature=ytca - Google & co
[Filippu] : coobgpohoikkiipiblmjeljniedjpjpf = : Google & co - http://www.google.com/webhp?source=search_app - Google & co
[Filippu] : nmmhkkegccagdldgiimedpiccmgmieda = : Google & co - Google & co
[Filippu] : pjkljhegncpnkpknbcohdijeoejaedia = : Google & co - https://mail.google.com/mail/ca - Google & co

���������� | D�tournement Firefox

[Filippu] Supprim� avec succ�s : C:\Users\Filippu\AppData\Roaming\Mozilla\Firefox\Profiles\1n6fi120.default\sessionstore.js
[Filippu] Remplac� : user_pref("browser.startup.homepage", "http://www.yahoo.fr/"); -> user_pref("browser.startup.homepage", "http://www.google.fr");

[Filippu] : elemhidehelper@adblockplus.org.xpi : - -
[Filippu] : personas@christopher.beard.xpi : - -
[Filippu] : tabscope@xuldev.org.xpi : - -
[Filippu] : tempomail@ingetic..maxime.robache.xpi : - -
[Filippu] : {4BBDD651-70CF-4821-84F8-2B918CF89CA3} : - -
[Filippu] : {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} : - -
[Filippu] : {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi : - -

���������� | Opera


���������� | D�tournement des cl�s StartMenuInternet

R�par� : [64][HKLM\Software\Clients\StartMenuInternet\Google Chrome\shell\open\command] : "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -> "C:\Program Files\Google\Chrome\Application\chrome.exe"

���������� | AppInit_DLLs

[64][HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 0
[32][HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 0

���������� | D�tournement Javascript


���������� | Firewall

R�par� : [HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]|[EnableFirewall] : 1 -> 0
R�par� : [HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]|[EnableFirewall] : 1 -> 0
R�par� : [HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]|[EnableFirewall] : 1 -> 0


���������� | ADS


���������� | Fichiers temporaires

[ADMINI~1] Fichiers temporaires Supprim�s : 0 Ko
[All Users] Fichiers temporaires Supprim�s : 0 Ko
[Default] Fichiers temporaires Supprim�s : 0 Ko
[Default User] Fichiers temporaires Supprim�s : 0 Ko
[Default.migrated] Fichiers temporaires Supprim�s : 0 Ko
[Filippu] Fichiers temporaires Supprim�s : 7357 Ko
[Public] Fichiers temporaires Supprim�s : 0 Ko
[C:\WINDOWS\Temp] Fichiers temporaires Supprim�s : 0 Ko
[C:\Temp] Fichiers temporaires Supprim�s : 0 Ko

Service Red�marr� : LanmanServer
Service Red�marr� : MPSsvc

Autre rapport

C:\Shortcut_Module\Shortcut_Module_08_06_2014_20_37_52.txt[155554 o]

���������� | Listing


���������� | C:\Program Files (x86)

[30/07/2013 10:45:42] - C:\Program Files (x86)\Adobe
[09/06/2014 09:59:09] - C:\Program Files (x86)\AGEIA Technologies
[05/09/2013 18:03:06] - C:\Program Files (x86)\Apple Software Update
[14/11/2013 21:22:51] - C:\Program Files (x86)\Audacity
[25/10/2013 17:34:44] - C:\Program Files (x86)\Auslogics
[13/05/2014 09:23:20] - C:\Program Files (x86)\Cobian Backup 11
[22/08/2013 15:36:15] - C:\Program Files (x86)\Common Files
[18/03/2013 20:49:51] - C:\Program Files (x86)\Cyberlink
[22/08/2013 17:36:33] - C:\Program Files (x86)\desktop.ini
[27/05/2014 18:17:52] - C:\Program Files (x86)\epson
[27/05/2014 18:18:13] - C:\Program Files (x86)\EPSON Software
[19/02/2014 19:41:07] - C:\Program Files (x86)\FileHippo.com
[03/08/2013 17:19:27] - C:\Program Files (x86)\FinalWire
[08/03/2014 11:08:59] - C:\Program Files (x86)\Glary Utilities 4
[29/07/2013 10:42:44] - C:\Program Files (x86)\Google
[30/07/2013 11:07:31] - C:\Program Files (x86)\Hercules
[18/03/2013 20:39:12] - C:\Program Files (x86)\InstallShield Installation Information
[18/03/2013 20:39:44] - C:\Program Files (x86)\Intel
[22/08/2013 17:36:30] - C:\Program Files (x86)\Internet Explorer
[08/06/2014 10:08:28] - C:\Program Files (x86)\Java
[31/07/2013 17:49:13] - C:\Program Files (x86)\Lavasoft
[18/03/2013 20:49:39] - C:\Program Files (x86)\Lenovo
[27/04/2014 09:33:48] - C:\Program Files (x86)\Malwarebytes Anti-Malware
[31/07/2013 17:53:26] - C:\Program Files (x86)\Malwarebytes' Anti-Malware
[30/07/2013 13:40:34] - C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
[29/07/2013 13:28:05] - C:\Program Files (x86)\Microsoft Office
[10/09/2013 17:15:33] - C:\Program Files (x86)\Microsoft Silverlight
[23/10/2013 17:57:50] - C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[29/07/2013 13:30:39] - C:\Program Files (x86)\Microsoft Visual Studio
[29/07/2013 13:28:28] - C:\Program Files (x86)\Microsoft Visual Studio 8
[29/07/2013 13:31:01] - C:\Program Files (x86)\Microsoft Works
[22/08/2013 17:36:30] - C:\Program Files (x86)\Microsoft.NET
[06/08/2013 10:35:12] - C:\Program Files (x86)\MozBackup
[27/07/2013 12:31:04] - C:\Program Files (x86)\Mozilla Firefox
[27/07/2013 12:31:13] - C:\Program Files (x86)\Mozilla Maintenance Service
[06/08/2013 10:39:52] - C:\Program Files (x86)\Mozilla Thunderbird
[24/10/2013 02:22:36] - C:\Program Files (x86)\MSBuild
[24/10/2013 01:27:51] - C:\Program Files (x86)\NVIDIA Corporation
[30/07/2013 17:38:36] - C:\Program Files (x86)\Philips Display
[30/07/2013 17:40:06] - C:\Program Files (x86)\Portrait Displays
[31/07/2013 22:30:44] - C:\Program Files (x86)\Quicksys
[08/03/2014 10:18:31] - C:\Program Files (x86)\QuickTime
[18/03/2013 20:39:13] - C:\Program Files (x86)\Realtek
[24/10/2013 02:22:36] - C:\Program Files (x86)\Reference Assemblies
[05/08/2013 23:30:36] - C:\Program Files (x86)\Smart PC Solutions
[18/03/2013 20:40:10] - C:\Program Files (x86)\Temp
[02/08/2013 10:03:04] - C:\Program Files (x86)\Tetris
[29/07/2013 17:27:32] - C:\Program Files (x86)\Winamp
[29/07/2013 17:27:45] - C:\Program Files (x86)\Winamp Detect
[22/08/2013 17:36:30] - C:\Program Files (x86)\Windows Defender
[23/10/2013 17:55:42] - C:\Program Files (x86)\Windows Live
[22/08/2013 17:36:30] - C:\Program Files (x86)\Windows Mail
[22/08/2013 17:36:30] - C:\Program Files (x86)\Windows Media Player
[22/08/2013 17:36:30] - C:\Program Files (x86)\Windows Multimedia Platform
[22/08/2013 17:36:30] - C:\Program Files (x86)\Windows NT
[22/08/2013 17:36:30] - C:\Program Files (x86)\Windows Photo Viewer
[22/08/2013 17:36:30] - C:\Program Files (x86)\Windows Portable Devices
[22/08/2013 17:36:30] - C:\Program Files (x86)\Windows Sidebar
[22/08/2013 17:36:30] - C:\Program Files (x86)\WindowsPowerShell
[28/02/2014 22:38:28] - C:\Program Files (x86)\WinRAR
[31/07/2013 22:40:54] - C:\Program Files (x86)\Wise Disk Cleaner
[31/07/2013 17:23:39] - C:\Program Files (x86)\Wondershare

���������� | C:\Program Files

[25/10/2013 19:02:10] - C:\Program Files\AVAST Software
[31/07/2013 17:54:51] - C:\Program Files\CCleaner
[25/04/2014 22:59:44] - C:\Program Files\Classic Shell
[22/08/2013 15:36:15] - C:\Program Files\Common Files
[22/08/2013 17:36:45] - C:\Program Files\desktop.ini
[26/07/2013 22:25:44] - C:\Program Files\Fichiers communs
[18/03/2013 20:39:59] - C:\Program Files\Intel
[22/08/2013 17:36:31] - C:\Program Files\Internet Explorer
[08/06/2014 11:00:57] - C:\Program Files\Java
[18/03/2013 20:49:25] - C:\Program Files\Lenovo
[29/07/2013 13:28:39] - C:\Program Files\Microsoft Office
[10/09/2013 17:15:33] - C:\Program Files\Microsoft Silverlight
[24/10/2013 02:22:35] - C:\Program Files\MSBuild
[24/10/2013 01:27:50] - C:\Program Files\NVIDIA Corporation
[31/07/2013 22:29:32] - C:\Program Files\Paint.NET
[24/10/2013 01:27:44] - C:\Program Files\Realtek
[31/07/2013 22:46:34] - C:\Program Files\Recuva
[24/10/2013 02:22:35] - C:\Program Files\Reference Assemblies
[26/07/2012 09:22:18] - C:\Program Files\Uninstall Information
[22/08/2013 17:36:31] - C:\Program Files\Windows Defender
[30/09/2013 06:00:03] - C:\Program Files\Windows Journal
[22/08/2013 17:36:31] - C:\Program Files\Windows Mail
[22/08/2013 17:36:31] - C:\Program Files\Windows Media Player
[22/08/2013 17:36:31] - C:\Program Files\Windows Multimedia Platform
[22/08/2013 17:36:31] - C:\Program Files\Windows NT
[22/08/2013 17:36:31] - C:\Program Files\Windows Photo Viewer
[22/08/2013 17:36:31] - C:\Program Files\Windows Portable Devices
[22/08/2013 17:36:31] - C:\Program Files\Windows Sidebar
[22/08/2013 17:36:31] - C:\Program Files\WindowsApps
[22/08/2013 17:36:31] - C:\Program Files\WindowsPowerShell
[08/03/2014 10:15:34] - C:\Program Files\WinRAR

���������� | C:\Users\Filippu\AppData\Roaming

[26/07/2013 15:47:03] - C:\Users\Filippu\AppData\Roaming\Adobe
[07/09/2013 08:03:15] - C:\Users\Filippu\AppData\Roaming\Apple Computer
[14/11/2013 21:23:03] - C:\Users\Filippu\AppData\Roaming\Audacity
[25/10/2013 19:03:29] - C:\Users\Filippu\AppData\Roaming\AVAST Software
[31/07/2013 17:19:09] - C:\Users\Filippu\AppData\Roaming\Brother
[24/10/2013 16:42:37] - C:\Users\Filippu\AppData\Roaming\ClassicShell
[04/04/2014 17:40:11] - C:\Users\Filippu\AppData\Roaming\com.prezi.PreziDesktop
[26/07/2013 16:03:49] - C:\Users\Filippu\AppData\Roaming\CyberLink
[30/07/2013 17:42:28] - C:\Users\Filippu\AppData\Roaming\DisplayTune
[05/08/2013 23:31:19] - C:\Users\Filippu\AppData\Roaming\EasyWallpaperChanger
[27/05/2014 18:40:44] - C:\Users\Filippu\AppData\Roaming\Epson
[31/07/2013 18:03:51] - C:\Users\Filippu\AppData\Roaming\GlarySoft
[24/10/2013 09:32:51] - C:\Users\Filippu\AppData\Roaming\Identities
[29/07/2013 17:15:00] - C:\Users\Filippu\AppData\Roaming\InstallShield
[02/08/2013 10:26:48] - C:\Users\Filippu\AppData\Roaming\LavasoftStatistics
[30/07/2013 22:47:38] - C:\Users\Filippu\AppData\Roaming\Leadertech
[30/07/2013 22:33:56] - C:\Users\Filippu\AppData\Roaming\Logishrd
[30/07/2013 22:33:56] - C:\Users\Filippu\AppData\Roaming\Logitech
[27/07/2013 10:47:46] - C:\Users\Filippu\AppData\Roaming\Macromedia
[31/07/2013 17:53:32] - C:\Users\Filippu\AppData\Roaming\Malwarebytes
[28/05/2014 23:22:07] - C:\Users\Filippu\AppData\Roaming\mbam.context.scan
[24/10/2013 01:31:39] - C:\Users\Filippu\AppData\Roaming\Microsoft
[27/07/2013 12:31:16] - C:\Users\Filippu\AppData\Roaming\Mozilla
[20/10/2013 18:59:12] - C:\Users\Filippu\AppData\Roaming\Netscape
[20/10/2013 18:58:46] - C:\Users\Filippu\AppData\Roaming\Photodex
[13/05/2014 09:13:55] - C:\Users\Filippu\AppData\Roaming\Softland
[29/07/2013 10:30:25] - C:\Users\Filippu\AppData\Roaming\Thunderbird
[29/07/2013 11:49:38] - C:\Users\Filippu\AppData\Roaming\ViStart
[29/07/2013 15:58:18] - C:\Users\Filippu\AppData\Roaming\WB.CFG
[29/07/2013 15:58:18] - C:\Users\Filippu\AppData\Roaming\WBPU-TTL.DAT
[26/07/2013 16:04:12] - C:\Users\Filippu\AppData\Roaming\WebApp
[29/07/2013 17:27:32] - C:\Users\Filippu\AppData\Roaming\Winamp
[08/03/2014 10:24:42] - C:\Users\Filippu\AppData\Roaming\WinRAR
[02/08/2013 16:50:54] - C:\Users\Filippu\AppData\Roaming\Wondershare

���������� | C:\Users\Filippu\AppData\Local

[05/09/2013 18:03:10] - C:\Users\Filippu\AppData\Local\Apple
[24/10/2013 01:31:39] - C:\Users\Filippu\AppData\Local\Application Data
[26/07/2013 16:04:08] - C:\Users\Filippu\AppData\Local\Cyberlink
[23/10/2013 11:12:17] - C:\Users\Filippu\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[05/04/2014 08:42:51] - C:\Users\Filippu\AppData\Local\Diagnostics
[22/08/2013 21:16:52] - C:\Users\Filippu\AppData\Local\DisplayTune
[13/10/2013 16:40:15] - C:\Users\Filippu\AppData\Local\GDIPFONTCACHEV1.DAT
[29/07/2013 10:42:46] - C:\Users\Filippu\AppData\Local\Google
[24/10/2013 01:31:39] - C:\Users\Filippu\AppData\Local\Historique
[24/10/2013 10:34:55] - C:\Users\Filippu\AppData\Local\IconCache.db
[14/10/2013 22:31:09] - C:\Users\Filippu\AppData\Local\Intel
[29/07/2013 11:59:30] - C:\Users\Filippu\AppData\Local\Macromedia
[24/10/2013 01:31:39] - C:\Users\Filippu\AppData\Local\Microsoft
[29/07/2013 13:28:08] - C:\Users\Filippu\AppData\Local\Microsoft Help
[27/07/2013 12:31:16] - C:\Users\Filippu\AppData\Local\Mozilla
[09/06/2014 10:00:06] - C:\Users\Filippu\AppData\Local\NVIDIA
[09/06/2014 10:00:06] - C:\Users\Filippu\AppData\Local\NVIDIA Corporation
[26/07/2013 15:46:25] - C:\Users\Filippu\AppData\Local\Packages
[31/07/2013 22:29:18] - C:\Users\Filippu\AppData\Local\Paint.NET
[26/07/2013 15:47:30] - C:\Users\Filippu\AppData\Local\Power2Go
[05/08/2013 23:30:09] - C:\Users\Filippu\AppData\Local\Programs
[05/08/2013 10:53:56] - C:\Users\Filippu\AppData\Local\resmon.resmoncfg
[18/09/2013 18:10:08] - C:\Users\Filippu\AppData\Local\Sunbelt Software
[24/10/2013 01:31:39] - C:\Users\Filippu\AppData\Local\Temp
[24/10/2013 01:31:39] - C:\Users\Filippu\AppData\Local\Temporary Internet Files
[29/07/2013 10:30:25] - C:\Users\Filippu\AppData\Local\Thunderbird
[26/07/2013 15:46:30] - C:\Users\Filippu\AppData\Local\VirtualStore
[23/10/2013 11:42:22] - C:\Users\Filippu\AppData\Local\Windows Live
[23/10/2013 11:14:26] - C:\Users\Filippu\AppData\Local\WMTools Downloaded Files
[17/11/2013 18:37:15] - C:\Users\Filippu\AppData\Local\Wondershare

���������� | C:\ProgramData

[30/07/2013 10:45:24] - C:\ProgramData\Adobe
[05/09/2013 18:03:06] - C:\ProgramData\Apple
[08/03/2014 10:18:31] - C:\ProgramData\Apple Computer
[22/08/2013 16:45:52] - C:\ProgramData\Application Data
[02/08/2013 10:43:27] - C:\ProgramData\Auslogics
[25/10/2013 19:00:54] - C:\ProgramData\AVAST Software
[06/11/2013 19:09:34] - C:\ProgramData\Boxoft
[06/11/2013 19:09:34] - C:\ProgramData\Boxtools
[30/07/2013 13:28:19] - C:\ProgramData\Brother
[26/07/2013 22:25:44] - C:\ProgramData\Bureau
[03/12/2013 19:31:05] - C:\ProgramData\ClassicShell
[18/03/2013 20:49:52] - C:\ProgramData\CyberLink
[22/08/2013 16:45:52] - C:\ProgramData\Desktop
[22/08/2013 16:45:52] - C:\ProgramData\Documents
[03/08/2013 17:37:20] - C:\ProgramData\Downloaded Installations
[27/05/2014 17:48:29] - C:\ProgramData\EPSON
[26/11/2013 23:28:40] - C:\ProgramData\FreeRide Games
[31/07/2013 18:06:17] - C:\ProgramData\GlarySoft
[18/03/2013 20:40:00] - C:\ProgramData\Intel
[31/07/2013 17:49:13] - C:\ProgramData\Lavasoft
[30/07/2013 22:39:43] - C:\ProgramData\Logishrd
[30/07/2013 22:39:50] - C:\ProgramData\Logitech
[31/07/2013 17:53:26] - C:\ProgramData\Malwarebytes
[18/03/2013 20:47:52] - C:\ProgramData\McAfee
[26/07/2013 22:25:44] - C:\ProgramData\Menu D�marrer
[22/08/2013 15:36:15] - C:\ProgramData\Microsoft
[29/07/2013 13:28:04] - C:\ProgramData\Microsoft Help
[26/07/2013 22:25:44] - C:\ProgramData\Mod�les
[27/07/2013 12:31:13] - C:\ProgramData\Mozilla
[29/07/2013 17:21:59] - C:\ProgramData\MSScanAppDataDir
[18/03/2013 20:42:41] - C:\ProgramData\NVIDIA
[24/10/2013 01:27:55] - C:\ProgramData\NVIDIA Corporation
[18/03/2013 20:50:12] - C:\ProgramData\OneKey Recovery
[21/09/2013 09:04:20] - C:\ProgramData\Oracle
[10/10/2012 01:10:27] - C:\ProgramData\PRICache
[22/08/2013 17:36:30] - C:\ProgramData\regid.1991-06.com.microsoft
[13/05/2014 09:13:48] - C:\ProgramData\Softland
[27/05/2014 18:40:05] - C:\ProgramData\Sony Corporation
[22/08/2013 16:45:52] - C:\ProgramData\Start Menu
[06/08/2013 09:35:14] - C:\ProgramData\Sun
[18/03/2013 20:49:30] - C:\ProgramData\Temp
[22/08/2013 16:45:52] - C:\ProgramData\Templates
[27/05/2014 18:40:12] - C:\ProgramData\UDL
[17/11/2013 19:00:49] - C:\ProgramData\Wondershare Player
[03/08/2013 18:08:21] - C:\ProgramData\{BD986C1B-72EC-4B82-B47B-6CAC4E6F494E}

[X] : [209004 Ko]

El�ments analys�s : 328508 | Infect�s : 74

���������� |EOF| ���������� | 18:49:06 | [46 Ko]

Publicité


Signaler le contenu de ce document

Publicité