Rapport de ZHPDiag v1.3.5.92 par Nicolas Coolman, Update du 17/02/2013
Run by By.keita at 18/02/2013 07:44:43
State : Version � jour.
High Elevated Privileges : OK
UAC : Activate by user


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 17.0.1 v17.0.1
GCIE: Google Chrome v24.0.1312.57 (Defaut)

---\\ Windows Product Information
~ Langage: Fran�ais
Windows 7 Ultimate Edition, 32-bit (Build 7600)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : PMJBM
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: x86 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3563 MB (63% free)
System Restore: Activ� (Enable)
System drive C: has 149 GB (32%) free of 466 GB

---\\ Logged in mode
~ Computer Name: BYKEITA-PC
~ User Name: By.keita
~ All Users Names: By.keita, Administrateur,
~ Unselected Option: O82
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\By.keita\AppData\Roaming\
~ %Desktop% : C:\Users\By.keita\Desktop\
~ %Favorites% : C:\Users\By.keita\Favorites\
~ %LocalAppData% : C:\Users\By.keita\AppData\Local\
~ %StartMenu% : C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 149 Go of 466 Go)
D:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particuli�re de fichiers g�n�riques
[MD5.15BC38A7492BEFE831966ADB477CF76F] - (.Microsoft Corporation - Explorateur Windows.) (.13/07/2009 - 20:14:20.) -- C:\Windows\Explorer.exe [2613248]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de d�marrage de Windows.) (.13/07/2009 - 20:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
[MD5.1D94FA7C81D2FFE494AF094619BA706F] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.09/05/2012 - 18:30:51.) -- C:\Windows\System32\wininet.dll [1127424]
[MD5.8EC6A4AB12B8F3759E21F8E3A388F2CF] - (.Microsoft Corporation - Application d�ouverture de session Windows.) (.13/07/2009 - 20:14:45.) -- C:\Windows\System32\Winlogon.exe [285696]
[MD5.58C94EAE54BF0C5E2B80B2E5E7744D4C] - (.Microsoft Corporation - Biblioth�que de licences.) (.13/07/2009 - 20:16:15.) -- C:\Windows\System32\sppcomapi.dll [193024]
[MD5.DDC040FDB01EF1712A6B13E52AFB104C] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.13/07/2009 - 18:12:38.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 20:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/07/2009 - 18:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
[MD5.BA6E70AA0E6091BC39DE29477D866A77] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/07/2009 - 18:11:26.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
[MD5.8E09E52EE2E3CEB199EF3DD99CF9E3FB] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.13/07/2009 - 18:14:17.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
[MD5.717A2207FD6F13AD3E664C7D5A43C7BF] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.13/07/2009 - 18:50:56.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.13/07/2009 - 18:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.13/07/2009 - 18:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
[MD5.F4A054BE78AF7F410129C4B64B07DC9B] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.13/07/2009 - 18:14:26.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123392]
[MD5.DD52A733BF4CA5AF84562A5E2F963B91] - (.Microsoft Corporation - MBT Transport driver.) (.13/07/2009 - 18:12:21.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
[MD5.3795DCD21F740EE799FB7223234215AF] - (.Microsoft Corporation - Pilote du syst�me de fichiers NT.) (.13/07/2009 - 20:20:44.) -- C:\Windows\system32\Drivers\ntfs.sys [1210432]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parall�le.) (.13/07/2009 - 18:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/07/2009 - 18:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
[MD5.C5FF95883FFEF704D50C40D21CFB3AB5] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/07/2009 - 19:02:58.) -- C:\Windows\system32\Drivers\rdpdr.sys [133120]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.13/07/2009 - 18:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
[MD5.CB39E896A2A83702D1737BFD402B3542] - (.Microsoft Corporation - TDI Translation Driver.) (.13/07/2009 - 18:12:11.) -- C:\Windows\system32\Drivers\tdx.sys [74240]
[MD5.58DF9D2481A56EDDE167E51B334D44FD] - (.Microsoft Corporation - Pilote de clich� instantan� du volume.) (.13/07/2009 - 20:19:10.) -- C:\Windows\system32\Drivers\volsnap.sys [245328]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cach�s (Cach�/Total)
~ Mes images (My Pictures) : 1/164
~ Mes musiques (My Musics) : 107/4478
~ Mes Videos (My Videos) : 1/4
~ Mes Favoris (My Favorites) : 1/26
~ Mes Documents (My Documents) : 6/3810
~ Mon Bureau (My Desktop) : 7/31
~ Menu demarrer (Programs) : 1/46
~ Scan Hidden Files in 00mn 09s



---\\ Processus lanc�s
[MD5.61D4B89D4209666849020B4B69791301] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [6318696] [PID.2972]
[MD5.9D197E4D8D7ED5302609808CD21D56C0] - (.Logicool Co. Ltd. - Logicool WingMan Event Monitor.) -- C:\Program Files\Logitech\Gaming Software\LWEMon.exe [153672] [PID.3028]
[MD5.B63E5C7807334A3A8F731062F15462CC] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008] [PID.3248]
[MD5.C2C1407C129D67B412ED9CC5AF75D786] - (.www.IslamicFinder.org - Automatic Athan (Azan) five times a day f.) -- C:\Program Files\Athan\Athan.exe [1208320] [PID.3936]
[MD5.083649EF692A066880C9326020915AFE] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4297136] [PID.3968]
[MD5.12916E0642E92561C98B18A2A2D01B14] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848] [PID.4060]
[MD5.1E09DFA4048196C9D3CC40C485A39422] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [299008] [PID.2184]
[MD5.07B232A71D3BA8034262213AA41C35C8] - (.COMODO - COMODO Internet Security.) -- C:\Program Files\Comodo\COMODO Internet Security\CisTray.exe [1430736] [PID.2264]
[MD5.F6987FF6C6D683F79FDCE707B071A997] - (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe [955392] [PID.2536]
[MD5.DEED42C533A452FC79E6C5E5132BDAEB] - (.L'Aventure Multimedia - Dictionnaire MediaDICO pour Windows.) -- C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\MediaDico36.exe [280576] [PID.2584]
[MD5.5C2A59CA663F3C4AEED98C3BB7E5F050] - (.L'Aventure Multimedia - Reconnaissance Automatique de Caract�res.) -- C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\RAC36.exe [217171] [PID.4216]
[MD5.C4506C1784F3573116D75EC02A886A8F] - (.COMODO - COMODO Internet Security.) -- C:\Program Files\Comodo\COMODO Internet Security\cis.exe [7626448] [PID.4380]
[MD5.CF60E846B768BA0843AC04722785B55A] - (.Nonoh - Client to make VoIP calls..) -- C:\Program Files\Nonoh.net\Nonoh\nonoh.exe [23008656] [PID.4544]
[MD5.2F0EAAF91FC7A5C70D1F4BE9B18A1CF5] - (.Microsoft Corporation - Pense-b�te.) -- C:\Windows\System32\StikyNot.exe [354304] [PID.4608]
[MD5.ECE9413226D1C6778A9EE4DFC199C1D4] - (.Google - Google Drive.) -- C:\Program Files\Google\Drive\googledrivesync.exe [16328976] [PID.4644]
[MD5.5B53F8D06792D714486218C563F86656] - (.MSI - Super-Charger.) -- C:\Program Files\MSI\Super-Charger\Super-Charger.exe [506384] [PID.4728]
[MD5.8196DFA43EE314CD387C3F139A74A023] - (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.exe [718720] [PID.4760]
[MD5.9A8568C7642B79F43DCEB0BDF9F49050] - (.Druide informatique inc. - Gestionnaire Antidote.) -- C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe [542136] [PID.5080]
[MD5.D52A3D6664E8BD95F8FFC6A4C0D35669] - (.AMD - HydraDM.) -- C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [393216] [PID.5172]
[MD5.0654E4C1F597FC07D6FC7443D4F94840] - (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe [1248208] [PID.5184]
[MD5.74CDE657245C114B98816E89B8D4CCD1] - (.ATI Technologies Inc. - Catalyst Control Center: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [299008] [PID.4720]
[MD5.09E411E1DC92D813F49DFEEB4039CBCA] - (.Google - Google Talk Plugin.) -- C:\Users\By.keita\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe [79384] [PID.4332]
[MD5.EA5B870671079786F335AC7C10846C4F] - (.Adobe Systems Incorporated - AAM Updates Notifier Application.) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe [295584] [PID.7632]
[MD5.0F144ECA8CFEC8882A3809D176886255] - (.Microsoft Corporation - Microsoft PowerPoint.) -- C:\Program Files\Microsoft Office\Office14\POWERPNT.exe [2162024] [PID.8008]
[MD5.F7DB6336DEFE82D7EAE25A6B656ED64A] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [5685760] [PID.7392]
[MD5.DAA199690ED70FFE5765FBC3BCB48E7C] - (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2319504] [PID.1012]
[MD5.20883D2D6E1D94321246AFF39AFCE56C] - (.AMD - AMD External Events Service Module.) -- C:\Windows\system32\atiesrxx.exe [219136] [PID.1116]
[MD5.8FA553E9AE69808D99C164733A0F9590] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44808] [PID.1484]
[MD5.E48C4113F81783222BFAF33C45117146] - (.AMD - AMD External Events Client Module.) -- C:\Windows\system32\atieclxx.exe [482304] [PID.1512]
[MD5.7EF47644B74EBE721CC32211D3C35E76] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55144] [PID.2056]
[MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.2144]
[MD5.205E1B699FD3F2F9B036EEA2EC30C620] - (...) -- C:\Windows\system32\PnkBstrA.exe [76888] [PID.2216]
[MD5.3436993699358419DFF0AB9DE669BE92] - (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe [404688] [PID.3664]
[MD5.DF86570FFC4F8A7E38595CC072B19A5B] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [326424] [PID.2240]
[MD5.1D2596FE2D7CF36C6F5F0D6B71E90E1E] - (.Intel Corporation - User Notification Service.) -- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2656536] [PID.4284]
[MD5.358A9CCA612C68EB2F07DDAD4CE1D8D7] - (.Microsoft Corporation - Microsoft Office Software Protection Platfo.) -- C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.exe [4640000] [PID.7516]
[MD5.4C287F9069FEDBD791178876EE9DE536] - (.Microsoft Corporation - Service de la plateforme de protection logi.) -- C:\Windows\system32\sppsvc.exe [3179520] [PID.7516]
~ Scan Processes Running in 00mn 01s



---\\ Google Chrome, D�marrage,Recherche,Extensions (G0,G1,G2)
C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Preferences
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.com
G0 - GCSP: Preference [User Data\Default] http://www.google.com
G1 - GCS: Preference [User Data\Default] None
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\By.keita\AppData\Roaming\Mozilla\Firefox\Profiles\7tdx18e3.default\prefs.js
C:\Users\By.keita\AppData\Roaming\Mozilla\Firefox\Profiles\7tdx18e3.default\user.js
M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [By.keita] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [By.keita - 7tdx18e3.default] http://allssearch.com
M0 - MFSP: user.js [By.keita - 7tdx18e3.default] http://allssearch.com/
M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\50356e49370ac@50356e49370e6.info] [] DownloadnSave v1.0 (.JustPlugIt.)
M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\coralietab@mozdev.org] [] IE Tab + v2.04.20110724 (.quaful@msn.com.)
M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\foxsplitter@piro.sakura.ne.jp] [] Fox Splitter v2.04.20110724 (.YUKI "Piro" Hiroshi">.)
M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\ietab@ip.cn] [] IE Tab Plus v2.0.0.0 (.quaful@msn.com.)
M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\jid1-yZwVFzbsyfMrqQ@jetpack] [] Lavasoft Search Plugin v0.6 (.Lavasoft.)
M2 - MFEP: prefs.js [By.keita - 7tdx18e3.default\{77b819fa-95ad-4f2c-ac7c-486b356188a9}] [] IE Tab v2.0.20120203 (.Hong Jen Yee (PCMan).)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_168.dll
P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf] - (.Foxit Corporation - Foxit Reader Plug-In For Firefox and Netscape.) -- C:\PROGRAM FILES\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.13.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.13.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.13.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
P2 - FPN: [HKLM] [@microsoft.com/SharePoint,version=14.0] - (.Microsoft Corporation - The plug-in allows you to open and edit files using Microsoft Office a.) -- C:\Program Files\Microsoft Office\Office14\NPSPWRAP.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.5] - (.VideoLAN - VLC media player Web Plugin 2.0.2.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.5.2".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\By.keita\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
P2 - FPN: [HKCU] [@talk.google.com/GoogleTalkPlugin] - (.Google - Version 3.13.2.11592.) -- C:\Users\By.keita\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
P2 - FPN: [HKCU] [@talk.google.com/O3DPlugin] - (.Pas de propri�taire - Google Talk Plugin Video Accelerator version:0.1.44.23.) -- C:\Users\By.keita\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [ubisoft.com/uplaypc] - (.Ubisoft - Uplay PC Plugin.) -- C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, D�marrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://allssearch.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Ubisoft - Uplay PC Plugin.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\Userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 96



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft� Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! WebRep - [HKLM]{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
~ Scan Toolbar in 00mn 00s



---\\ Applications d�marr�es par registre & par dossier (O4)
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
O4 - HKLM\..\Run: [Super-Charger] . (.MSI - Super-Charger.) -- C:\Program Files\MSI\Super-Charger\StartSuperCharger.exe
O4 - HKLM\..\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe
O4 - HKLM\..\Run: [Start WingMan Profiler] . (.Logicool Co. Ltd. - Logicool WingMan Event Monitor.) -- C:\Program Files\Logitech\Gaming Software\LWEMon.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] . (.Adobe Systems Incorporated - Adobe CS6 Service Manager.) -- C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe
O4 - HKLM\..\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [Athan] . (.www.IslamicFinder.org - Automatic Athan (Azan) five times a day f.) -- C:\Program Files\Athan\Athan.exe
O4 - HKLM\..\Run: [bdinstaller] . (.Bitdefender - Bitdefender Setup Launcher.) -- C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setuplauncher.exe
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst� Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [COMODO Internet Security] . (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\By.keita\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKCU\..\Run: [MediaDICO36] . (.L'Aventure Multimedia - Pas de description.) -- C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\LanceMediaDICO36.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
O4 - HKCU\..\Run: [Nonoh] . (.Nonoh - Client to make VoIP calls..) -- C:\Program Files\Nonoh.net\Nonoh\nonoh.exe
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] . (.Microsoft Corporation - Pense-b�te.) -- C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files\Google\Drive\googledrivesync.exe
O4 - HKCU\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.exe
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\By.keita\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] . (.Druide informatique inc. - Gestionnaire Antidote.) -- C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [HydraVisionDesktopManager] . (.AMD - HydraDM.) -- C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_B7D67F305A96766D28B517DA4C64B651] . (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - HKUS\S-1-5-18\..\Run: [Gestionnaire Antidote.exe] . (.Druide informatique inc. - Gestionnaire Antidote.) -- C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\By.keita\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [MediaDICO36] . (.L'Aventure Multimedia - Pas de description.) -- C:\Program Files\Micro Application\36 Dictionnaires et Recueils de Correspondance\LanceMediaDICO36.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Nonoh] . (.Nonoh - Client to make VoIP calls..) -- C:\Program Files\Nonoh.net\Nonoh\nonoh.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [RESTART_STICKY_NOTES] . (.Microsoft Corporation - Pense-b�te.) -- C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files\Google\Drive\googledrivesync.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\By.keita\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Gestionnaire Antidote.exe] . (.Druide informatique inc. - Gestionnaire Antidote.) -- C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [HydraVisionDesktopManager] . (.AMD - HydraDM.) -- C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe
O4 - HKUS\S-1-5-21-2499682455-473981773-2509937517-1000\..\Run: [GoogleChromeAutoLaunch_B7D67F305A96766D28B517DA4C64B651] . (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\Adobe Dreamweaver CS5.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Adobe\Adobe Dreamweaver CS5\Dreamweaver.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\Adobe Fireworks CS6.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Fireworks CS6\Fireworks.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\Adobe Photoshop CS6.lnk . (.Adobe Systems, Incorporated.) -- C:\Program Files\Adobe\Adobe Photoshop CS6\Photoshop.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\bf3 - Raccourci.lnk . (.EA Digital Illusions CE AB.) -- C:\Program Files\Battlefield 3\bf3.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\CDisplay.lnk . (.David Ayton.) -- C:\Program Files\CDisplay\CDisplay.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\FC3Updater - Raccourci.lnk . (.Ubisoft.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Updater.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\Glary Utilities.lnk . (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\Integrator.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\LMSOFT Web Creator Pro 5.lnk . (.LMSOFT.) -- C:\Program Files\LMSOFT\Web Creator Pro 5\WebCreatorPro5.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\LogoMaker.lnk . (.Studio V5 Corp..) -- C:\Program Files\Studio V5\LogoMaker\LogoMaker.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\pes2012 - Raccourci.lnk . (.Konami Digital Entertainment Co., Ltd..) -- C:\Program Files\KONAMI\Pro Evolution Soccer 2012\pes2012.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\Rayman Origins.lnk - Cl� orpheline
O4 - Global Startup: C:\Users\By.keita\Desktop\SUPER STREET FIGHTER IV ARCADE EDITION - Raccourci.lnk - Cl� orpheline
O4 - Global Startup: C:\Users\By.keita\Desktop\UpLauncher - Raccourci.lnk . (.Eden Games.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe
O4 - Global Startup: C:\Users\By.keita\Desktop\XAMPP Control Panel.lnk . (...) -- C:\xampp\xampp-control.exe
O4 - Global Startup: C:\Users\By.keita\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BitTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files\BitTorrent\BitTorrent.exe
O4 - Global Startup: C:\Users\By.keita\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk . (...) -- C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe
O4 - Global Startup: C:\Users\By.keita\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Scan Global Startup in 00mn 00s



---\\ Invisibilit� de l'ic�ne d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ Scan IE Control Panel in 00mn 00s



---\\ Boutons situ�s sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer � OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office14\ONBttnIE.dll
O9 - Extra button: Notes &li�es OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office14\ONBTTN~1.dll
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d�affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Microsoft� Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corporation - Microsoft� Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Scan Winsock in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: NameServer = 8.26.56.26,156.154.70.22
O17 - HKLM\System\CCS\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpDomain = no-domain-set-bellcanada
O17 - HKLM\System\CS1\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: NameServer = 8.26.56.26,156.154.70.22
O17 - HKLM\System\CS1\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpDomain = no-domain-set-bellcanada
O17 - HKLM\System\CS2\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: NameServer = 8.26.56.26,156.154.70.22
O17 - HKLM\System\CS2\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{C17DF8D1-2EB8-4BB1-B3B4-4519CCADB056}: DhcpDomain = no-domain-set-bellcanada
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Cl� de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non d�sactiv�s (O23)
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) . (.COMODO - COMODO Internet Security.) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Intel(R) Management and Security Applica (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
~ Scan Services in 00mn 09s



---\\ Enum�ration Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ T�ches planifi�es en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000Core.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000UA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GlaryInitialize.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000Core.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000UA.job
[MD5.00000000000000000000000000000000] [APT] [Ad-Aware Antivirus Scheduled Scan] (...) -- C:\Program Files\AD-AWA~1\AdAwareLauncher.exe (.not file.)
[MD5.563CDCFEEAEF97163E206AF71A61AA6E] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
[MD5.1315C5C5C54CE2AA37A155F97027DB59] [APT] [AdobeAAMUpdater-1.0-Bykeita-PC-By.keita] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
[MD5.7F19838AC317C34FCED020BE529AF71E] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
[MD5.BE66B026CF488C87B4D0EA9E616FFA4A] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000Core] (.Facebook Inc..) -- C:\Users\By.keita\AppData\Local\Facebook\Update\FacebookUpdate.exe
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000UA] (.Facebook Inc..) -- C:\Users\By.keita\AppData\Local\Facebook\Update\FacebookUpdate.exe
[MD5.095516791C381206B134525B68A480D8] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\initialize.exe
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000Core] (.Google Inc..) -- C:\Users\By.keita\AppData\Local\Google\Update\GoogleUpdate.exe
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-2499682455-473981773-2509937517-1000UA] (.Google Inc..) -- C:\Users\By.keita\AppData\Local\Google\Update\GoogleUpdate.exe
[MD5.00000000000000000000000000000000] [APT] [{07BF5B6A-5D69-432F-AA40-D46B587E7543}] (...) -- D:\Autorun.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{EBA189EA-9942-459D-8156-F0C2B2022CC3}] (...) -- D:\Autorun.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{F94A5A03-6F68-4931-85B5-EEAFCB13CAD4}] (...) -- D:\Autorun.exe (.not file.)
[MD5.09D4A3D2DF45F3CD8A1780AC95E49218] [APT] [COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}] (.COMODO.) -- C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe
[MD5.C4506C1784F3573116D75EC02A886A8F] [APT] [COMODO Welcome {CEB54B45-2B5E-4FF5-9223-6735CD80FE69}] (.COMODO.) -- C:\Program Files\COMODO\COMODO Internet Security\cis.exe
~ Scan Scheduled Task in 00mn 03s



---\\ Composants install�s (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d�IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lanc�s au d�marrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: (cmderd) . (.COMODO - COMODO Internet Security Eradication Driver.) - C:\Windows\System32\DRIVERS\cmderd.sys
O41 - Driver: (cmdGuard) . (.COMODO - COMODO Internet Security Sandbox Driver.) - C:\Windows\System32\DRIVERS\cmdguard.sys
O41 - Driver: (cmdHlp) . (.COMODO - COMODO Internet Security Helper Driver.) - C:\Windows\System32\DRIVERS\cmdhlp.sys
O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (inspect) . (.COMODO - COMODO Internet Security Firewall Driver.) - C:\Windows\System32\DRIVERS\inspect.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-syst�me de mise en m�moire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: (SBRE) . (. - .) - C:\Windows\system32\drivers\SBREdrv.sys (.not file.)
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de p�riph�rique s�rie.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels install�s (O42)
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM] -- {A25FF1C0-80B6-4B8B-A551-DC525697A408}
O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM] -- {8A6EB60F-BC70-101B-CACE-9D7794767A3C}
O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM] -- {3825F8BD-F784-6FBB-A5CD-857559148007}
O42 - Logiciel: AMD Drag and Drop Transcoding - (.ATI Technologies Inc..) [HKLM] -- {B0228A47-8A56-6AA7-BE83-910BBDD19CB4}
O42 - Logiciel: AMD Media Foundation Decoders - (.Advanced Micro Devices, Inc..) [HKLM] -- {F47F1D92-F4DF-4113-80B0-B58F2EB10F28}
O42 - Logiciel: ATI AVIVO Codecs - (.ATI Technologies Inc..) [HKLM] -- {912CD7C9-BA8B-615B-4169-7D356461D6BC}
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- {77DCDCE3-2DED-62F3-8154-05E745472D07}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FE23D063-934D-4829-A0D8-00634CE79B4A}
O42 - Logiciel: Adobe Dreamweaver CS5 - (.Adobe Systems Incorporated.) [HKLM] -- {C79312BD-3E76-4474-A10C-1435D1856A4B}
O42 - Logiciel: Adobe Fireworks CS6 - (.Adobe Systems Incorporated.) [HKLM] -- {CA7C485C-7A89-11E1-B2C8-CD54B377BC52}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AF37176A-78CA-545B-34EF-8B6A21514DD1}
O42 - Logiciel: Adobe Photoshop CS6 - (.Adobe Systems Incorporated.) [HKLM] -- {74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}
O42 - Logiciel: Adobe Reader 9.5.2 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-A95000000001}
O42 - Logiciel: Alan Wake - (.Pas de propri�taire.) [HKLM] -- Alan Wake_is1
O42 - Logiciel: Angry Birds Space - (.Rovio.) [HKLM] -- {3F2A323E-60C4-41E8-8CCB-9715D1D750C3}
O42 - Logiciel: Antidote RX v7 - (.Druide informatique inc..) [HKLM] -- {A474EA56-5DBD-4181-8230-806A4762EA7F}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EB879750-CCBD-4013-BFD5-0294D4DA5BD0}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {EFC04D3F-A152-47E7-8517-EE0F6201AFEF}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: ArcGIS Desktop 10 - (.Environmental Systems Research Institute, Inc..) [HKLM] -- ArcGIS Desktop 10
O42 - Logiciel: ArcGIS Desktop 10 French Supplement - (.Environmental Systems Research Institute, Inc..) [HKLM] -- ArcGIS Desktop 10 French Supplement
O42 - Logiciel: ArcGIS Desktop 10 French Supplement - (.Environmental Systems Research Institute, Inc..) [HKLM] -- {1E3BD9C6-538D-411D-8EA7-9E7073A6AB3B}
O42 - Logiciel: Astroburn Lite - (.DT Soft Ltd.) [HKLM] -- Astroburn Lite
O42 - Logiciel: Athan Basic 4.3 - (.Pas de propri�taire.) [HKLM] -- Athan
O42 - Logiciel: Battlefield 3� - (.Electronic Arts.) [HKLM] -- {76285C16-411A-488A-BCE3-C83CB933D8CF}
O42 - Logiciel: BitTorrent - (.BitTorrent Inc..) [HKLM] -- BitTorrent
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: CDisplay 1.8 - (.dvd8n.) [HKLM] -- CDisplay_is1
O42 - Logiciel: COMODO Internet Security - (.COMODO Security Solutions Inc..) [HKLM] -- {BCC0552D-76C0-4130-BFBD-49BE49ACC594}
O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM] -- {E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Lite
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU] -- Dropbox
O42 - Logiciel: Fable III - (.Microsoft Game Studios.) [HKLM] -- {4D53090A-CE35-42BD-B377-831000018301}
O42 - Logiciel: Facebook Video Calling 1.2.0.287 - (.Skype Limited.) [HKLM] -- {B92C5909-1D37-4C51-8397-A28BB28E5DC3}
O42 - Logiciel: Far Cry 3 - (.Ubisoft.) [HKLM] -- {E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}
O42 - Logiciel: Foxit Reader - (.Foxit Corporation.) [HKLM] -- Foxit Reader_is1
O42 - Logiciel: Free Video to MP3 Converter version 5.0.15.706 - (.DVDVideoSoft Ltd..) [HKLM] -- Free Video to MP3 Converter_is1
O42 - Logiciel: Free YouTube Download version 3.0.22.221 - (.DVDVideoSoft Ltd..) [HKLM] -- Free YouTube Download_is1
O42 - Logiciel: French App Name - (.Adobe Systems Incorporated.) [HKLM] -- com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: French App Name - (.Adobe Systems Incorporated.) [HKLM] -- {DE3A9DC5-9A5D-6485-9662-347162C7E4CA}
O42 - Logiciel: Glary Utilities 2.53.0.1726 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
O42 - Logiciel: Google Drive - (.Google, Inc..) [HKLM] -- {7A21C722-F259-4976-B7AA-6658E5FDEDAF}
O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM] -- {33286280-8617-11E1-8FF6-B8AC6F97B88E}
O42 - Logiciel: Google Talk Plugin - (.Google.) [HKLM] -- {D952C4F9-2488-3723-84BE-1BFA907DCAC9}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Grand Theft Auto IV - (.Rockstar Games Inc..) [HKLM] -- {5454083B-1308-4485-BF17-1110000B8301}
O42 - Logiciel: HydraVision - (.ATI Technologies Inc..) [HKLM] -- {1C284C44-B8E0-2ED3-8154-52133AAFF538}
O42 - Logiciel: Incomedia WebSite X5 v9 - Free - (.Incomedia s.r.l..) [HKLM] -- {9570A579-88E2-4B73-A28F-3ED8FCB8C0D8}_is1
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Java 7 Update 13 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217013FF}
O42 - Logiciel: JavaFX 2.1.1 - (.Oracle Corporation.) [HKLM] -- {1111706F-666A-4037-7777-211328764D10}
O42 - Logiciel: LMSOFT Web Creator Pro 5 - (.Pas de propri�taire.) [HKLM] -- Web Creator Pro 5
O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propri�taire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Logitech Gaming Software 5.10 - (.Logitech.) [HKLM] -- {60D32CDC-E3BE-4578-BA10-29322307CDDC}
O42 - Logiciel: LogoMaker 3.0 - (.Studio V5.) [HKLM] -- LogoMaker_is1
O42 - Logiciel: Micro Application - 36 Dictionnaires et Recueils de Correspondance - (.Pas de propri�taire.) [HKLM] -- {B410328C-0E8C-4DD2-9DB4-DE7766D0DFE0}
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}
O42 - Logiciel: Microsoft Games for Windows Marketplace - (.Microsoft Corporation.) [HKLM] -- {4CB0307C-565E-4441-86BE-0DF2E4FB828C}
O42 - Logiciel: Mozilla Firefox 17.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 17.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: Nonoh - (.Finarea S.A. Switzerland.) [HKLM] -- Nonoh_is1
O42 - Logiciel: Norton Internet Security - (.Symantec Corporation.) [HKLM] -- {7B15D70E-9449-4CFB-B9BC-798465B2BD5C}
O42 - Logiciel: Notepad++ - (.Pas de propri�taire.) [HKLM] -- Notepad++
O42 - Logiciel: PDF Settings CS6 - (.Adobe Systems Incorporated.) [HKLM] -- {BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}
O42 - Logiciel: PDFCreator - (.Frank Heind�rfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
O42 - Logiciel: Pro Evolution Soccer 2012 - (.KONAMI.) [HKLM] -- {E737A098-F161-4B6F-AF22-86AAE34F6FBD}
O42 - Logiciel: Rayman Origins - (.Ubisoft.) [HKLM] -- {DE491AB9-1D47-4FED-A8F5-4D4325B2EB4B}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: SIGIS� pour Windows� 95/98/NT/2000/XP/Vista/7 version 4.0 Gratu - (.Pas de propri�taire.) [HKLM] -- SIGIS� pour Windows� 95/98/NT/2000/XP/Vista/7_is1
O42 - Logiciel: Screenseven! GAME CENTER - (.Pas de propri�taire.) [HKLM] -- FranceGPlayer
O42 - Logiciel: Skype� 6.1 - (.Skype Technologies S.A..) [HKLM] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
O42 - Logiciel: Street Fighter X Tekken - (.CAPCOM U.S.A., INC.) [HKLM] -- {43430FA5-AF68-4A2D-A7D4-891000008200}
O42 - Logiciel: Super Street Fighter IV: Arcade Edition - (.CAPCOM U.S.A., INC.) [HKLM] -- GFWL_{43430FA0-49F0-4B13-B4C5-611000008100}
O42 - Logiciel: Super Street Fighter IV: Arcade Edition - (.CAPCOM U.S.A., INC.) [HKLM] -- {43430FA0-49F0-4B13-B4C5-611000008100}
O42 - Logiciel: Super-Charger - (.MSI.) [HKLM] -- {7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1
O42 - Logiciel: SuperCopier2 - (.Pas de propri�taire.) [HKLM] -- SuperCopier2
O42 - Logiciel: Test Drive Unlimited 2 - (.Atari.) [HKLM] -- Test Drive Unlimited 2_is1
O42 - Logiciel: Uplay - (.Ubisoft.) [HKLM] -- Uplay
O42 - Logiciel: VLC media player 2.0.5 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Winki - (.MSI.) [HKLM] -- {81CF5153-38CF-41e2-AC3C-3D477C987D96}_is1
O42 - Logiciel: XAMPP 1.8.0 - (.Pas de propri�taire.) [HKLM] -- xampp
O42 - Logiciel: ZTE Driver pour mobile - (.ZTE Corporation.) [HKLM] -- {D2D77DC2-8299-11D1-8949-444553540000}_is1
O42 - Logiciel: avast! Free Antivirus v7.0.1474.0 - (.AVAST Software.) [HKLM] -- avast

---\\ HKCU & HKLM Software Keys
[HKCU\Software\AMD]
[HKCU\Software\ATI]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Avast Software]
[HKCU\Software\BitTorrent]
[HKCU\Software\Bitdefender]
[HKCU\Software\CDisplay]
[HKCU\Software\Caphyon]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\ComodoGroup]
[HKCU\Software\Conduit]
[HKCU\Software\Convar]
[HKCU\Software\DSS]
[HKCU\Software\DT Soft]
[HKCU\Software\DVDVideoSoft]
[HKCU\Software\Dashlane]
[HKCU\Software\Druide informatique inc.]
[HKCU\Software\ESRI]
[HKCU\Software\Facebook]
[HKCU\Software\Foxit Software]
[HKCU\Software\GlarySoft]
[HKCU\Software\Google]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\Image-Line]
[HKCU\Software\JavaSoft]
[HKCU\Software\LAventure]
[HKCU\Software\LMSOFT]
[HKCU\Software\Licenses]
[HKCU\Software\LogMeIn]
[HKCU\Software\Logitech]
[HKCU\Software\LtdStrInfo]
[HKCU\Software\Macromedia]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NCH Software]
[HKCU\Software\NCH Swift Sound]
[HKCU\Software\Netscape]
[HKCU\Software\Nonoh]
[HKCU\Software\Norton]
[HKCU\Software\ODBC]
[HKCU\Software\OXXOgames]
[HKCU\Software\PDFCreator]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Rockstar Games]
[HKCU\Software\SFX TEAM]
[HKCU\Software\SecuROM]
[HKCU\Software\SkypeRS]
[HKCU\Software\Skype]
[HKCU\Software\SoftVoice]
[HKCU\Software\Softonic]
[HKCU\Software\StudioV5]
[HKCU\Software\SubSystems]
[HKCU\Software\Summitsoft]
[HKCU\Software\Symantec]
[HKCU\Software\Trolltech]
[HKCU\Software\Ubisoft]
[HKCU\Software\Usbfix]
[HKCU\Software\Valve]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wintertree]
[HKCU\Software\ZebHelpProcess Helper]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\AVAST Software]
[HKLM\Software\Adobe]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Atari]
[HKLM\Software\Babylon]
[HKLM\Software\Belarc]
[HKLM\Software\Bunndle]
[HKLM\Software\CAPCOM]
[HKLM\Software\Caphyon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\ComodoGroup]
[HKLM\Software\Conduit]
[HKLM\Software\DT Soft]
[HKLM\Software\DTS]
[HKLM\Software\DVDVideoSoft]
[HKLM\Software\Dolby]
[HKLM\Software\Druide informatique inc.]
[HKLM\Software\EA Games]
[HKLM\Software\ESRI]
[HKLM\Software\Electronic Arts]
[HKLM\Software\Even Balance]
[HKLM\Software\Foxit Software]
[HKLM\Software\GlarySoft]
[HKLM\Software\Google]
[HKLM\Software\IM Providers]
[HKLM\Software\Image-Line]
[HKLM\Software\Incomedia]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KONAMI]
[HKLM\Software\Khronos]
[HKLM\Software\Knowles]
[HKLM\Software\LMSOFT]
[HKLM\Software\Logitech]
[HKLM\Software\MSI]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Oracle]
[HKLM\Software\Outsim]
[HKLM\Software\PDFCreator]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Propellerhead Software]
[HKLM\Software\Python]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sigisco]
[HKLM\Software\Skype]
[HKLM\Software\SoftVoice]
[HKLM\Software\SonicFocus]
[HKLM\Software\Sonic]
[HKLM\Software\Symantec]
[HKLM\Software\Systweak]
[HKLM\Software\UBISOFT]
[HKLM\Software\VST]
[HKLM\Software\Vantage Software Technologies]
[HKLM\Software\VideoLAN]
[HKLM\Software\Volatile]
[HKLM\Software\WinRAR]
[HKLM\Software\Wow6432Node]
[HKLM\Software\mozilla.org]
[HKLM\Software\oxxogames]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 10/02/2013 - 18:50:16 - [0,014] ----D C:\Program Files\A-FF Find and Mount
O43 - CFD: 04/11/2012 - 11:28:06 - [618,665] ----D C:\Program Files\Ad-Aware Antivirus
O43 - CFD: 19/07/2012 - 22:28:15 - [1489,904] ----D C:\Program Files\Adobe
O43 - CFD: 15/07/2012 - 19:43:45 - [2,665] ----D C:\Program Files\Adobe Media Player
O43 - CFD: 29/07/2012 - 00:26:40 - [0] ----D C:\Program Files\allsearch
O43 - CFD: 06/02/2013 - 00:13:01 - [1,711] ----D C:\Program Files\AMD APP
O43 - CFD: 06/02/2013 - 00:13:56 - [0,397] ----D C:\Program Files\AMD AVT
O43 - CFD: 29/05/2012 - 16:46:40 - [2,316] ----D C:\Program Files\Apple Software Update
O43 - CFD: 10/05/2012 - 00:07:49 - [-1906,237] ----D C:\Program Files\ArcGIS
O43 - CFD: 26/10/2012 - 15:33:17 - [12,893] ----D C:\Program Files\Astroburn Lite
O43 - CFD: 23/05/2012 - 12:58:56 - [-1841,870] ----D C:\Program Files\Atari
O43 - CFD: 20/11/2012 - 11:37:19 - [18,843] ----D C:\Program Files\Athan
O43 - CFD: 09/05/2012 - 13:17:46 - [20,405] ----D C:\Program Files\ATI
O43 - CFD: 06/02/2013 - 00:10:26 - [65,298] ----D C:\Program Files\ATI Technologies
O43 - CFD: 30/10/2012 - 13:09:25 - [490,969] ----D C:\Program Files\AVAST Software
O43 - CFD: 12/05/2012 - 13:06:03 - [-255,437] ----D C:\Program Files\Battlefield 3
O43 - CFD: 02/06/2012 - 17:11:42 - [6,085] ----D C:\Program Files\BitTorrent
O43 - CFD: 29/05/2012 - 16:46:11 - [0,602] ----D C:\Program Files\Bonjour
O43 - CFD: 02/06/2012 - 13:06:39 - [1789,007] ----D C:\Program Files\Capcom
O43 - CFD: 30/09/2012 - 02:40:58 - [4,795] ----D C:\Program Files\CCleaner
O43 - CFD: 15/02/2013 - 14:09:16 - [1,953] ----D C:\Program Files\CDisplay
O43 - CFD: 04/07/2012 - 01:00:34 - [0,055] ----D C:\Program Files\Chrome
O43 - CFD: 10/02/2013 - 18:43:03 - [1380,501] ----D C:\Program Files\Common Files
O43 - CFD: 10/02/2013 - 18:41:48 - [98,390] ----D C:\Program Files\Comodo
O43 - CFD: 10/02/2013 - 18:50:44 - [0] ----D C:\Program Files\Convar
O43 - CFD: 09/05/2012 - 22:53:27 - [24,667] ----D C:\Program Files\DAEMON Tools Lite
O43 - CFD: 21/11/2012 - 02:39:21 - [149,919] ----D C:\Program Files\Druide
O43 - CFD: 14/07/2009 - 04:01:30 - [79,371] ----D C:\Program Files\DVD Maker
O43 - CFD: 20/07/2012 - 14:50:27 - [28,868] ----D C:\Program Files\DVDVideoSoft
O43 - CFD: 09/05/2012 - 12:49:18 - [0] ----D C:\Program Files\Fichiers communs
O43 - CFD: 29/05/2012 - 05:12:29 - [42,872] ----D C:\Program Files\Foxit Software
O43 - CFD: 06/07/2012 - 23:07:58 - [0,000] ----D C:\Program Files\Free Offers from Freeze.com
O43 - CFD: 05/02/2013 - 22:56:58 - [18,812] ----D C:\Program Files\Glary Utilities
O43 - CFD: 16/09/2012 - 02:00:36 - [86,057] ----D C:\Program Files\Google
O43 - CFD: 03/07/2012 - 20:35:24 - [0,150] ----D C:\Program Files\GreenTree Applications
O43 - CFD: 09/12/2012 - 10:52:16 - [7,970] ----D C:\Program Files\Image-Line
O43 - CFD: 31/12/2012 - 00:06:32 - [77,181] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 09/05/2012 - 13:03:17 - [8,854] ----D C:\Program Files\Intel
O43 - CFD: 09/05/2012 - 18:35:57 - [4,933] ----D C:\Program Files\Internet Explorer
O43 - CFD: 03/02/2013 - 10:08:57 - [121,959] ----D C:\Program Files\Java
O43 - CFD: 10/02/2013 - 17:39:09 - [-480,688] ----D C:\Program Files\KONAMI
O43 - CFD: 02/01/2013 - 18:16:26 - [6,577] ----D C:\Program Files\Lavalys
O43 - CFD: 15/06/2012 - 22:28:58 - [260,458] ----D C:\Program Files\LMSOFT
O43 - CFD: 15/05/2012 - 10:21:08 - [39,143] ----D C:\Program Files\Logitech
O43 - CFD: 09/05/2012 - 17:07:23 - [246,034] ----D C:\Program Files\Micro Application
O43 - CFD: 09/05/2012 - 22:56:35 - [38,002] ----D C:\Program Files\Microsoft Analysis Services
O43 - CFD: 06/07/2012 - 23:14:34 - [140,965] ----D C:\Program Files\Microsoft Games
O43 - CFD: 29/07/2012 - 10:17:59 - [8,929] ----D C:\Program Files\Microsoft Games for Windows - LIVE
O43 - CFD: 09/05/2012 - 22:58:10 - [950,623] ----D C:\Program Files\Microsoft Office
O43 - CFD: 10/05/2012 - 00:11:34 - [0,054] ----D C:\Program Files\Microsoft SQL Server
O43 - CFD: 09/05/2012 - 22:58:09 - [1,722] ----D C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 09/05/2012 - 22:58:09 - [0,757] ----D C:\Program Files\Microsoft Sync Framework
O43 - CFD: 09/05/2012 - 22:58:26 - [0,312] ----D C:\Program Files\Microsoft Synchronization Services
O43 - CFD: 09/05/2012 - 22:57:26 - [1,314] ----D C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 27/10/2012 - 10:56:12 - [7,789] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 02/01/2013 - 01:29:55 - [42,553] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 05/01/2013 - 10:49:46 - [0,212] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 06/06/2012 - 23:28:50 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 09/05/2012 - 13:03:33 - [15,074] ----D C:\Program Files\MSI
O43 - CFD: 18/06/2012 - 05:25:26 - [42,699] ----D C:\Program Files\Nonoh.net
O43 - CFD: 15/07/2012 - 22:05:05 - [11,808] ----D C:\Program Files\Notepad++
O43 - CFD: 03/07/2012 - 20:35:33 - [33,205] ----D C:\Program Files\Oracle
O43 - CFD: 09/12/2012 - 10:51:59 - [3,453] ----D C:\Program Files\Outsim
O43 - CFD: 07/11/2012 - 03:31:29 - [32,619] ----D C:\Program Files\PDFCreator
O43 - CFD: 09/05/2012 - 13:03:11 - [36,376] ----D C:\Program Files\Realtek
O43 - CFD: 13/07/2009 - 23:52:30 - [36,805] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 03/06/2012 - 01:58:04 - [614,512] ----D C:\Program Files\Remedy Entertainment
O43 - CFD: 05/06/2012 - 08:41:06 - [35,145] ----D C:\Program Files\Rovio
O43 - CFD: 01/01/2013 - 15:46:42 - [4,793] ----D C:\Program Files\SIGISCO
O43 - CFD: 27/01/2013 - 14:31:15 - [18,091] R---D C:\Program Files\Skype
O43 - CFD: 10/02/2013 - 20:03:28 - [323,554] ----D C:\Program Files\Studio V5
O43 - CFD: 10/02/2013 - 20:21:54 - [1067,478] ----D C:\Program Files\Summitsoft
O43 - CFD: 09/05/2012 - 17:14:35 - [1,169] ----D C:\Program Files\SuperCopier2
O43 - CFD: 09/05/2012 - 13:02:14 - [0] --H-D C:\Program Files\Temp
O43 - CFD: 28/05/2012 - 00:22:30 - [83,428] ----D C:\Program Files\THQ
O43 - CFD: 31/12/2012 - 00:17:39 - [426,012] ----D C:\Program Files\Ubisoft
O43 - CFD: 13/07/2009 - 23:53:23 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 06/07/2012 - 23:05:48 - [94,578] ----D C:\Program Files\VideoLAN
O43 - CFD: 10/02/2013 - 18:48:32 - [0] ----D C:\Program Files\VstPlugins
O43 - CFD: 25/12/2012 - 10:00:42 - [57,691] ----D C:\Program Files\WebSite X5 v9 - Free
O43 - CFD: 14/07/2009 - 03:39:39 - [2,909] ----D C:\Program Files\Windows Defender
O43 - CFD: 14/07/2009 - 04:01:29 - [6,689] ----D C:\Program Files\Windows Journal
O43 - CFD: 14/07/2009 - 03:39:39 - [5,895] ----D C:\Program Files\Windows Mail
O43 - CFD: 14/07/2009 - 03:39:39 - [6,302] ----D C:\Program Files\Windows Media Player
O43 - CFD: 09/05/2012 - 12:49:18 - [11,630] ----D C:\Program Files\Windows NT
O43 - CFD: 14/07/2009 - 03:39:39 - [4,213] ----D C:\Program Files\Windows Photo Viewer
O43 - CFD: 13/07/2009 - 23:52:32 - [0,181] ----D C:\Program Files\Windows Portable Devices
O43 - CFD: 14/07/2009 - 03:39:39 - [6,558] ----D C:\Program Files\Windows Sidebar
O43 - CFD: 12/10/2012 - 12:38:50 - [4,875] ----D C:\Program Files\WinRAR
O43 - CFD: 28/06/2012 - 18:06:42 - [0] ----D C:\Program Files\YourFileDownloader
O43 - CFD: 06/07/2012 - 23:07:41 - [0,032] ----D C:\Program Files\YouTube Downloader Toolbar
O43 - CFD: 18/02/2013 - 07:45:02 - [15,130] ----D C:\Program Files\ZHPDiag
O43 - CFD: 18/05/2012 - 08:47:40 - [8,086] ----D C:\Program Files\ZTE Handset USB Driver
O43 - CFD: 19/07/2012 - 22:27:32 - [720,629] ----D C:\Program Files\Common Files\Adobe
O43 - CFD: 19/07/2012 - 13:43:25 - [37,554] ----D C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 10/05/2012 - 06:37:38 - [8,219] ----D C:\Program Files\Common Files\AnswerWorks 4.0
O43 - CFD: 31/12/2012 - 11:53:27 - [84,043] ----D C:\Program Files\Common Files\Apple
O43 - CFD: 10/05/2012 - 00:50:29 - [99,039] ----D C:\Program Files\Common Files\ArcGIS
O43 - CFD: 09/05/2012 - 13:18:23 - [2,972] ----D C:\Program Files\Common Files\ATI Technologies
O43 - CFD: 25/10/2012 - 04:49:10 - [5,041] ----D C:\Program Files\Common Files\Bitdefender
O43 - CFD: 10/05/2012 - 00:48:22 - [14,559] ----D C:\Program Files\Common Files\Data Dynamics
O43 - CFD: 06/06/2012 - 23:28:12 - [0,095] ----D C:\Program Files\Common Files\DESIGNER
O43 - CFD: 20/07/2012 - 14:50:29 - [86,203] ----D C:\Program Files\Common Files\DVDVideoSoft
O43 - CFD: 12/05/2012 - 13:07:07 - [0,957] --H-D C:\Program Files\Common Files\EAInstaller
O43 - CFD: 09/05/2012 - 13:01:25 - [3,452] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 12/10/2012 - 15:00:25 - [1,184] ----D C:\Program Files\Common Files\Java
O43 - CFD: 15/05/2012 - 10:21:19 - [0,995] ----D C:\Program Files\Common Files\Logitech
O43 - CFD: 10/05/2012 - 01:04:08 - [0,827] ----D C:\Program Files\Common Files\Macrovision Shared
O43 - CFD: 01/11/2012 - 14:33:58 - [241,845] ----D C:\Program Files\Common Files\microsoft shared
O43 - CFD: 09/05/2012 - 13:03:20 - [0,155] ----D C:\Program Files\Common Files\postureAgent
O43 - CFD: 13/07/2009 - 21:37:05 - [0,003] ----D C:\Program Files\Common Files\Services
O43 - CFD: 27/01/2013 - 14:31:15 - [2,056] ----D C:\Program Files\Common Files\Skype
O43 - CFD: 13/07/2009 - 21:37:05 - [39,200] ----D C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 03/07/2012 - 20:36:04 - [0,036] ----D C:\Program Files\Common Files\Spigot
O43 - CFD: 06/06/2012 - 23:24:59 - [10,222] ----D C:\Program Files\Common Files\System
O43 - CFD: 10/05/2012 - 00:48:13 - [21,216] ----D C:\Program Files\Common Files\Tom Sawyer Software
O43 - CFD: 01/11/2012 - 16:19:52 - [0,000] ----D C:\ProgramData\Ad-Aware Antivirus
O43 - CFD: 17/02/2013 - 21:49:10 - [527,468] ----D C:\ProgramData\Adobe
O43 - CFD: 06/02/2013 - 00:13:57 - [0,810] ----D C:\ProgramData\AMD
O43 - CFD: 29/05/2012 - 16:46:32 - [33,049] ----D C:\ProgramData\Apple
O43 - CFD: 29/05/2012 - 16:47:22 - [0,001] ----D C:\ProgramData\Apple Computer
O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 26/10/2012 - 15:33:16 - [0,001] ----D C:\ProgramData\Astroburn Lite
O43 - CFD: 06/02/2013 - 00:16:14 - [0,000] ----D C:\ProgramData\ATI
O43 - CFD: 30/10/2012 - 13:09:25 - [40,706] ----D C:\ProgramData\AVAST Software
O43 - CFD: 28/07/2012 - 11:34:59 - [0] ----D C:\ProgramData\Babylon
O43 - CFD: 09/05/2012 - 12:49:18 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 07/10/2012 - 11:22:15 - [0] ----D C:\ProgramData\Caphyon
O43 - CFD: 10/02/2013 - 12:14:28 - [42,931] ----D C:\ProgramData\COMODO
O43 - CFD: 10/02/2013 - 12:12:21 - [92,763] ----D C:\ProgramData\Comodo Downloader
O43 - CFD: 09/05/2012 - 22:52:57 - [0,001] ----D C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 23/05/2012 - 17:31:44 - [0,106] -SH-D C:\ProgramData\DSS
O43 - CFD: 11/05/2012 - 17:19:22 - [0] ----D C:\ProgramData\EA Core
O43 - CFD: 11/05/2012 - 17:19:22 - [0,001] ----D C:\ProgramData\Electronic Arts
O43 - CFD: 23/10/2012 - 17:19:06 - [0,000] ----D C:\ProgramData\ESRI
O43 - CFD: 09/05/2012 - 12:49:18 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 10/05/2012 - 00:22:06 - [0,001] ----D C:\ProgramData\FLEXnet
O43 - CFD: 22/08/2012 - 17:46:11 - [0,971] ----D C:\ProgramData\InstallMate
O43 - CFD: 05/02/2013 - 14:56:30 - [154,500] ----D C:\ProgramData\KONAMI
O43 - CFD: 01/11/2012 - 14:33:59 - [0,665] ----D C:\ProgramData\Lavasoft
O43 - CFD: 10/05/2012 - 00:07:50 - [0,008] ----D C:\ProgramData\Macrovision
O43 - CFD: 09/05/2012 - 12:49:18 - [0] --H-D C:\ProgramData\Menu D�marrer
O43 - CFD: 17/05/2012 - 23:55:57 - [275,966] -S--D C:\ProgramData\Microsoft
O43 - CFD: 06/06/2012 - 23:30:34 - [0,061] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 09/05/2012 - 12:49:18 - [0] --H-D C:\ProgramData\Mod�les
O43 - CFD: 15/07/2012 - 20:41:28 - [0,022] ----D C:\ProgramData\Mozilla
O43 - CFD: 08/02/2013 - 21:29:40 - [0] ----D C:\ProgramData\NCH Swift Sound
O43 - CFD: 30/10/2012 - 13:05:33 - [0,043] ---AD C:\ProgramData\Norton
O43 - CFD: 08/07/2012 - 15:51:34 - [16,809] ---AD C:\ProgramData\NortonInstaller
O43 - CFD: 22/08/2012 - 22:43:16 - [0,316] ----D C:\ProgramData\OptimizerPro1
O43 - CFD: 31/12/2012 - 00:24:52 - [0,099] ----D C:\ProgramData\Orbit
O43 - CFD: 11/05/2012 - 17:29:24 - [0] ----D C:\ProgramData\Origin
O43 - CFD: 22/08/2012 - 17:46:09 - [0] ----D C:\ProgramData\Premium
O43 - CFD: 19/07/2012 - 22:28:50 - [0,006] ----D C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 04/07/2012 - 01:01:56 - [0,000] ----D C:\ProgramData\Registry Helper
O43 - CFD: 29/07/2012 - 00:45:14 - [0,278] -SH-D C:\ProgramData\SecuROM
O43 - CFD: 10/02/2013 - 12:16:59 - [0,000] -S--D C:\ProgramData\Shared Space
O43 - CFD: 27/01/2013 - 14:31:21 - [58,304] ----D C:\ProgramData\Skype
O43 - CFD: 11/05/2012 - 00:11:32 - [0] ----D C:\ProgramData\Solidshield
O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 10/02/2013 - 20:31:18 - [0] ----D C:\ProgramData\Summitsoft
O43 - CFD: 07/10/2012 - 10:20:54 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 09/05/2012 - 13:09:06 - [0] ----D C:\ProgramData\Symantec
O43 - CFD: 13/07/2009 - 23:53:55 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 03/07/2012 - 20:35:35 - [0,074] ----D C:\ProgramData\YTD Video Downloader
O43 - CFD: 29/05/2012 - 16:47:49 - [0,004] ----D C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
O43 - CFD: 07/10/2012 - 17:17:06 - [0,234] ----D C:\Users\By.keita\AppData\Roaming\.spotflux
O43 - CFD: 03/11/2012 - 22:41:47 - [0,007] ----D C:\Users\By.keita\AppData\Roaming\Ad-Aware Antivirus
O43 - CFD: 19/07/2012 - 22:31:04 - [130,261] ----D C:\Users\By.keita\AppData\Roaming\Adobe
O43 - CFD: 31/08/2012 - 15:13:33 - [0,771] ----D C:\Users\By.keita\AppData\Roaming\Apple Computer
O43 - CFD: 09/05/2012 - 13:20:41 - [0] ----D C:\Users\By.keita\AppData\Roaming\ATI
O43 - CFD: 28/07/2012 - 11:34:59 - [0,005] ----D C:\Users\By.keita\AppData\Roaming\Babylon
O43 - CFD: 15/02/2013 - 14:11:56 - [5,857] ----D C:\Users\By.keita\AppData\Roaming\BitTorrent
O43 - CFD: 15/06/2012 - 22:44:40 - [0] ----D C:\Users\By.keita\AppData\Roaming\CACHE
O43 - CFD: 11/05/2012 - 23:05:09 - [0,000] ----D C:\Users\By.keita\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O43 - CFD: 26/10/2012 - 00:02:23 - [1,502] ----D C:\Users\By.keita\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 22/01/2013 - 17:15:17 - [31,761] ----D C:\Users\By.keita\AppData\Roaming\Dropbox
O43 - CFD: 28/06/2012 - 17:58:13 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Druide
O43 - CFD: 19/07/2012 - 15:25:26 - [0] ----D C:\Users\By.keita\AppData\Roaming\dvdcss
O43 - CFD: 20/07/2012 - 14:50:46 - [2,535] ----D C:\Users\By.keita\AppData\Roaming\DVDVideoSoft
O43 - CFD: 20/07/2012 - 12:46:10 - [0,000] ----D C:\Users\By.keita\AppData\Roaming\DVDVideoSoftIEHelpers
O43 - CFD: 29/10/2012 - 20:15:09 - [7,442] ----D C:\Users\By.keita\AppData\Roaming\ESRI
O43 - CFD: 12/06/2012 - 07:15:50 - [15,871] ----D C:\Users\By.keita\AppData\Roaming\Foxit Software
O43 - CFD: 29/05/2012 - 05:11:40 - [0] ----D C:\Users\By.keita\AppData\Roaming\GetRightToGo
O43 - CFD: 05/02/2013 - 23:26:40 - [0,067] ----D C:\Users\By.keita\AppData\Roaming\GlarySoft
O43 - CFD: 09/05/2012 - 12:55:14 - [0] ----D C:\Users\By.keita\AppData\Roaming\Identities
O43 - CFD: 30/10/2012 - 13:02:02 - [0,001] ----D C:\Users\By.keita\AppData\Roaming\LavasoftStatistics
O43 - CFD: 23/05/2012 - 17:29:38 - [0,319] ----D C:\Users\By.keita\AppData\Roaming\Lionhead Studios
O43 - CFD: 15/06/2012 - 22:39:53 - [0,025] ----D C:\Users\By.keita\AppData\Roaming\LMSOFT
O43 - CFD: 10/02/2013 - 20:06:52 - [0,000] ----D C:\Users\By.keita\AppData\Roaming\LogoMaker
O43 - CFD: 09/05/2012 - 13:06:43 - [0,044] ----D C:\Users\By.keita\AppData\Roaming\Macromedia
O43 - CFD: 14/07/2009 - 04:00:32 - [0] ----D C:\Users\By.keita\AppData\Roaming\Media Center Programs
O43 - CFD: 21/01/2013 - 00:34:03 - [29,606] -S--D C:\Users\By.keita\AppData\Roaming\Microsoft
O43 - CFD: 05/02/2013 - 20:34:14 - [28,625] ----D C:\Users\By.keita\AppData\Roaming\Mozilla
O43 - CFD: 08/02/2013 - 21:35:56 - [0,105] ----D C:\Users\By.keita\AppData\Roaming\NCH Software
O43 - CFD: 04/08/2012 - 19:27:05 - [0,021] ----D C:\Users\By.keita\AppData\Roaming\Nonoh
O43 - CFD: 15/07/2012 - 22:06:52 - [0,407] ----D C:\Users\By.keita\AppData\Roaming\Notepad++
O43 - CFD: 11/05/2012 - 16:40:39 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Origin
O43 - CFD: 07/11/2012 - 03:31:56 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\pdfforge
O43 - CFD: 28/09/2012 - 15:26:46 - [0,060] ----D C:\Users\By.keita\AppData\Roaming\QuickScan
O43 - CFD: 05/06/2012 - 08:41:58 - [0,004] ----D C:\Users\By.keita\AppData\Roaming\Rovio
O43 - CFD: 20/01/2013 - 23:29:32 - [0,083] ----D C:\Users\By.keita\AppData\Roaming\ScreenSeven
O43 - CFD: 28/06/2012 - 23:28:08 - [0,010] R-H-D C:\Users\By.keita\AppData\Roaming\SecuROM
O43 - CFD: 22/08/2012 - 17:43:14 - [0] ----D C:\Users\By.keita\AppData\Roaming\SendSpace
O43 - CFD: 18/02/2013 - 07:40:56 - [9,275] ----D C:\Users\By.keita\AppData\Roaming\Skype
O43 - CFD: 07/10/2012 - 11:22:19 - [2,764] ----D C:\Users\By.keita\AppData\Roaming\Spotflux
O43 - CFD: 10/02/2013 - 19:01:09 - [0] ----D C:\Users\By.keita\AppData\Roaming\Summitsoft
O43 - CFD: 17/02/2013 - 02:11:10 - [0,389] ----D C:\Users\By.keita\AppData\Roaming\vlc
O43 - CFD: 15/10/2012 - 18:43:22 - [1,180] ----D C:\Users\By.keita\AppData\Roaming\WinRAR
O43 - CFD: 28/06/2012 - 18:01:47 - [0] ----D C:\Users\By.keita\AppData\Roaming\YourFileDownloader
O43 - CFD: 15/05/2012 - 18:47:54 - [0] ----D C:\Users\By.keita\AppData\Local\Activision
O43 - CFD: 18/02/2013 - 06:31:21 - [2,224] ----D C:\Users\By.keita\AppData\Local\Adobe
O43 - CFD: 29/05/2012 - 16:46:45 - [0] ----D C:\Users\By.keita\AppData\Local\Apple
O43 - CFD: 29/05/2012 - 16:48:08 - [15,538] ----D C:\Users\By.keita\AppData\Local\Apple Computer
O43 - CFD: 09/05/2012 - 12:49:26 - [0] ----D C:\Users\By.keita\AppData\Local\Application Data
O43 - CFD: 09/05/2012 - 13:43:31 - [1,507] ----D C:\Users\By.keita\AppData\Local\Apps
O43 - CFD: 09/05/2012 - 13:20:41 - [0,088] ----D C:\Users\By.keita\AppData\Local\ATI
O43 - CFD: 10/02/2013 - 12:12:37 - [6,925] ----D C:\Users\By.keita\AppData\Local\Comodo
O43 - CFD: 10/02/2013 - 19:50:18 - [86,013] ----D C:\Users\By.keita\AppData\Local\CrashDumps
O43 - CFD: 14/05/2012 - 20:22:23 - [0] ----D C:\Users\By.keita\AppData\Local\CrashRpt
O43 - CFD: 09/05/2012 - 13:43:54 - [0] ----D C:\Users\By.keita\AppData\Local\Deployment
O43 - CFD: 28/07/2012 - 23:00:24 - [0] ----D C:\Users\By.keita\AppData\Local\Diagnostics
O43 - CFD: 10/02/2013 - 20:19:38 - [1008,405] ----D C:\Users\By.keita\AppData\Local\Downloaded Installations
O43 - CFD: 14/02/2013 - 22:02:00 - [0,658] ----D C:\Users\By.keita\AppData\Local\ElevatedDiagnostics
O43 - CFD: 10/05/2012 - 07:00:41 - [1,898] ----D C:\Users\By.keita\AppData\Local\ESRI
O43 - CFD: 29/10/2012 - 20:45:35 - [7,390] ----D C:\Users\By.keita\AppData\Local\Facebook
O43 - CFD: 16/09/2012 - 02:00:37 - [1090,654] ----D C:\Users\By.keita\AppData\Local\Google
O43 - CFD: 09/05/2012 - 12:49:26 - [0] ----D C:\Users\By.keita\AppData\Local\Historique
O43 - CFD: 09/05/2012 - 18:37:34 - [0,576] ----D C:\Users\By.keita\AppData\Local\Hook Network
O43 - CFD: 23/12/2012 - 11:34:41 - [0,746] ----D C:\Users\By.keita\AppData\Local\Incomedia
O43 - CFD: 24/09/2012 - 10:31:22 - [0] ----D C:\Users\By.keita\AppData\Local\LogMeIn Rescue Applet
O43 - CFD: 31/07/2012 - 06:29:12 - [0] ----D C:\Users\By.keita\AppData\Local\Macromedia
O43 - CFD: 16/12/2012 - 19:51:17 - [403,576] ----D C:\Users\By.keita\AppData\Local\Microsoft
O43 - CFD: 03/06/2012 - 18:30:12 - [0,519] ----D C:\Users\By.keita\AppData\Local\Microsoft Games
O43 - CFD: 03/01/2013 - 08:33:18 - [0,069] ----D C:\Users\By.keita\AppData\Local\Microsoft Help
O43 - CFD: 15/07/2012 - 20:41:37 - [104,724] ----D C:\Users\By.keita\AppData\Local\Mozilla
O43 - CFD: 07/11/2012 - 03:29:48 - [0] ----D C:\Users\By.keita\AppData\Local\Programs
O43 - CFD: 31/12/2012 - 00:25:15 - [2,733] ----D C:\Users\By.keita\AppData\Local\PunkBuster
O43 - CFD: 07/07/2012 - 00:24:08 - [5,666] ----D C:\Users\By.keita\AppData\Local\Rockstar Games
O43 - CFD: 03/06/2012 - 02:23:28 - [0,248] ----D C:\Users\By.keita\AppData\Local\SKIDROW
O43 - CFD: 18/02/2013 - 07:46:40 - [235,947] ----D C:\Users\By.keita\AppData\Local\Temp
O43 - CFD: 09/05/2012 - 12:49:26 - [0] ----D C:\Users\By.keita\AppData\Local\Temporary Internet Files
O43 - CFD: 31/12/2012 - 11:46:42 - [0,000] ----D C:\Users\By.keita\AppData\Local\Ubisoft Game Launcher
O43 - CFD: 10/05/2012 - 16:31:24 - [195,076] ----D C:\Users\By.keita\AppData\Local\VirtualStore
O43 - CFD: 13/07/2009 - 23:42:04 - [0,014] R---D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 09/05/2012 - 12:55:22 - [0,000] R---D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 21/11/2012 - 02:39:00 - [0] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antidote
O43 - CFD: 15/07/2012 - 21:51:48 - [0,004] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Apache Friends
O43 - CFD: 10/05/2012 - 00:07:46 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArcGIS License Manager 10 CRACKED
O43 - CFD: 10/02/2013 - 18:49:20 - [0,001] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
O43 - CFD: 05/01/2013 - 10:52:16 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
O43 - CFD: 15/01/2013 - 10:41:29 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 15/06/2012 - 22:33:18 - [0,010] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LMSOFT
O43 - CFD: 13/07/2009 - 23:37:42 - [0,001] R---D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 15/07/2012 - 22:05:02 - [0] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
O43 - CFD: 10/05/2012 - 00:07:46 - [0,002] R---D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 09/05/2012 - 17:14:37 - [0,007] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SuperCopier2
O43 - CFD: 31/12/2012 - 00:17:43 - [0,002] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
O43 - CFD: 12/10/2012 - 01:36:26 - [0,003] ----D C:\Users\By.keita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ Scan Program Folder in 01mn 38s



---\\ Derniers fichiers modifi�s ou cr�es sous Windows et System32 (O44)
O44 - LFC:[MD5.860E946E35844E2BE8F856109AE335C5] - 18/02/2013 - 06:30:58 ---A- . (...) -- C:\Windows\WindowsUpdate.log [806951]
O44 - LFC:[MD5.3196CBABEA170BB8C1893D066D38DD4A] - 18/02/2013 - 06:30:50 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.983977EC8C287E3B1EE25028F534DCB9] - 17/02/2013 - 21:48:49 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerApp.exe [691568]
O44 - LFC:[MD5.B729FD55C49419A4B18EB160905D9374] - 17/02/2013 - 21:48:49 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [71024]
O44 - LFC:[MD5.433D2F7F7ECC82DF26750E7BCE81A6F6] - 17/02/2013 - 21:45:06 ---A- . (...) -- C:\Windows\setupact.log [7338]
O44 - LFC:[MD5.80BDC2240B716EDD4A1FEA5EA149A61B] - 17/02/2013 - 00:00:31 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1576940]
O44 - LFC:[MD5.17A2BC9B47289FB2DCD0D3BC0BCE945B] - 17/02/2013 - 00:00:31 ---A- . (...) -- C:\Windows\System32\perfc009.dat [110082]
O44 - LFC:[MD5.4DAA8CC3B600ECB920F26436920D2289] - 17/02/2013 - 00:00:31 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [135046]
O44 - LFC:[MD5.B991CDA78E72E397F412DE8499951342] - 17/02/2013 - 00:00:31 ---A- . (...) -- C:\Windows\System32\perfh009.dat [619894]
O44 - LFC:[MD5.CD3C56F961DB2691F306E1C69F944252] - 17/02/2013 - 00:00:31 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [718336]
O44 - LFC:[MD5.4FACD0879AAD58E36EA76F48F5B75396] - 14/02/2013 - 22:57:37 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [3960424]
O44 - LFC:[MD5.FFA9EDB7DE221EF9FFC553989D607D77] - 14/02/2013 - 22:57:12 ---A- . (...) -- C:\Windows\PFRO.log [682598]
O44 - LFC:[MD5.6C4D491C1970112AD0861B9F53DC17E5] - 10/02/2013 - 19:09:59 ---A- . (...) -- C:\.rnd [1024]
O44 - LFC:[MD5.629610C7C04165E36704153EBCF4DCBB] - 10/02/2013 - 19:05:28 ---A- . (...) -- C:\Windows\Logo Design Studio Trial Uninstall Log.txt [438501]
O44 - LFC:[MD5.FF50EE902847C7CED9FFD157851A8678] - 10/02/2013 - 19:00:21 ---A- . (...) -- C:\Windows\Logo Design Studio Trial Setup Log.txt [959848]
O44 - LFC:[MD5.9FED4602659211E63AB6148ADA077159] - 10/02/2013 - 11:06:21 ---A- . (...) -- C:\Windows\System32\Drivers\PnkBstrK.sys [138032]
O44 - LFC:[MD5.5564EE004708EBB76086F6D66ACF60FF] - 10/02/2013 - 11:06:07 ---A- . (...) -- C:\Windows\System32\PnkBstrB.exe [281688]
O44 - LFC:[MD5.5564EE004708EBB76086F6D66ACF60FF] - 10/02/2013 - 11:06:07 ---A- . (...) -- C:\Windows\System32\PnkBstrB.xtr [281688]
O44 - LFC:[MD5.5564EE004708EBB76086F6D66ACF60FF] - 06/02/2013 - 16:55:08 ---A- . (...) -- C:\Windows\System32\PnkBstrB.ex0 [281688]
O44 - LFC:[MD5.E828134279A6BB5EF3032F9B88D335F9] - 03/02/2013 - 10:09:01 ---A- . (.Oracle Corporation - Pas de description.) -- C:\Windows\System32\WindowsAccessBridge.dll [94112]
O44 - LFC:[MD5.4951D2D49B400A1A722BC48FADEBD6F4] - 03/02/2013 - 10:09:00 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\java.exe [174496]
O44 - LFC:[MD5.ABC4230E67C8E68E070A22C1E4A8F673] - 03/02/2013 - 10:09:00 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\javaw.exe [174496]
O44 - LFC:[MD5.FBE59F564DFEEBBFCDBBDFAB54C64501] - 03/02/2013 - 10:09:00 ---A- . (.Oracle Corporation - Java(TM) Web Start Launcher.) -- C:\Windows\System32\javaws.exe [262560]
O44 - LFC:[MD5.BB8996FE972847B5879FDE24F24F034E] - 03/02/2013 - 10:08:59 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\deployJava1.dll [782240]
O44 - LFC:[MD5.2616B4D6D04F18C579B7861F02B0B592] - 03/02/2013 - 10:08:59 ---A- . (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(T.) -- C:\Windows\System32\npDeployJava1.dll [861088]
O44 - LFC:[MD5.3A291C3526126E9408C85EA46D5AA525] - 24/01/2013 - 22:43:02 ---A- . (.COMODO - COMODO Internet Security.) -- C:\Windows\System32\cmdcsr.dll [35488]
O44 - LFC:[MD5.D72EEFF5DB99017A7F3664B33C657B8A] - 24/01/2013 - 22:43:02 ---A- . (.COMODO - COMODO Internet Security.) -- C:\Windows\System32\guard32.dll [354752]
O44 - LFC:[MD5.7D63A7895BABF88AC73019AF07E05940] - 24/01/2013 - 22:42:50 ---A- . (.COMODO - COMODO Internet Security.) -- C:\Windows\System32\cmdkbd32.dll [40656]
O44 - LFC:[MD5.BA2E1523289E76F4658957E1513C4256] - 24/01/2013 - 22:42:50 ---A- . (.COMODO - COMODO Internet Security.) -- C:\Windows\System32\cmdvrt32.dll [263888]
O44 - LFC:[MD5.9AC5B3550AA14513C5449FDEE13A5DB1] - 22/01/2013 - 18:37:32 ---A- . (...) -- C:\UsbFix.txt [21149]
~ Scan Files in 00mn 05s



---\\ Derniers fichiers cr��s dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.C9794E579E8BB1FFE5D5366B3DA438B2] - 02/02/2013 - 22:23:04 ---A- - C:\Windows\Prefetch\SETUP.EXE-EE9A08C3.pf
O45 - LFCP:[MD5.04C64F16C78F101BD364D6DBE7002B57] - 03/02/2013 - 10:06:04 ---A- - C:\Windows\Prefetch\JUCHECK.EXE-C527D46E.pf
O45 - LFCP:[MD5.4CC7160DCEE6FE59176DA4F7C39FD285] - 03/02/2013 - 10:06:32 ---A- - C:\Windows\Prefetch\SIDEBAR.EXE-FA75EA61.pf
O45 - LFCP:[MD5.44E4819A8B84F7634C4C6E80C08BCD83] - 03/02/2013 - 10:06:41 ---A- - C:\Windows\Prefetch\JRE-7U13-WINDOWS-I586-IFTW.EX-2B952407.pf
O45 - LFCP:[MD5.9C82DD919506948674E060D167E00EB6] - 03/02/2013 - 10:07:29 ---A- - C:\Windows\Prefetch\MSI8B80.TMP-963DACCB.pf
O45 - LFCP:[MD5.2C1D1B9FCF50F97EC7AA5D5EFEBBB029] - 03/02/2013 - 10:08:08 ---A- - C:\Windows\Prefetch\MSI2878.TMP-B26AF3F1.pf
O45 - LFCP:[MD5.E6E45C81C4335CE36CA269FCB1F70CB2] - 03/02/2013 - 10:08:13 ---A- - C:\Windows\Prefetch\JQS.EXE-E49AF94B.pf
O45 - LFCP:[MD5.9630C39483E4CBE8BA703C2D6E479EBA] - 03/02/2013 - 10:09:09 ---A- - C:\Windows\Prefetch\UNPACK200.EXE-EF449681.pf
O45 - LFCP:[MD5.2556A1E1E345BD07F084EA97FF9D3061] - 03/02/2013 - 10:09:24 ---A- - C:\Windows\Prefetch\WMIC.EXE-A7D06383.pf
O45 - LFCP:[MD5.4335B0C76A00A799668FEEF17A31A5C4] - 03/02/2013 - 10:09:25 ---A- - C:\Windows\Prefetch\JQS.EXE-66586318.pf
O45 - LFCP:[MD5.72405443F347175EB9A4B8578D7E705B] - 03/02/2013 - 10:12:03 ---A- - C:\Windows\Prefetch\JAUREG.EXE-171665BB.pf
O45 - LFCP:[MD5.808EC58C310470E107C6A58CA971AF67] - 04/02/2013 - 13:42:34 ---A- - C:\Windows\Prefetch\AITAGENT.EXE-DA3E7689.pf
O45 - LFCP:[MD5.87407145559967A6AB035906D4E18184] - 04/02/2013 - 13:49:38 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-230FC512.pf
O45 - LFCP:[MD5.A87CF039B8B8DE9EFBB61DD4B413FAE1] - 04/02/2013 - 13:50:02 ---A- - C:\Windows\Prefetch\W32TM.EXE-1101AF41.pf
O45 - LFCP:[MD5.F89BD8D9824FEF6522BDCEEABA95010A] - 04/02/2013 - 15:13:35 ---A- - C:\Windows\Prefetch\DEFRAG.EXE-588F90AD.pf
O45 - LFCP:[MD5.D3AF8C85EB8516E264D89A1FEB9B62AC] - 04/02/2013 - 23:30:03 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-411A328D.pf
O45 - LFCP:[MD5.54190996034986BB31EF60A028386419] - 05/02/2013 - 15:04:35 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-ECA84ABB.pf
O45 - LFCP:[MD5.3FDBDF13C87AC04973AAAAB69CAD6F01] - 05/02/2013 - 15:33:30 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-1D0CF5AA.pf
O45 - LFCP:[MD5.AB13E3403A05418A6CB4B135CC44DEBA] - 05/02/2013 - 20:41:09 ---A- - C:\Windows\Prefetch\INSTALLER.EXE-8AC69E80.pf
O45 - LFCP:[MD5.E108E3E069DCCA3973E26C5EBF494CCA] - 05/02/2013 - 21:08:56 ---A- - C:\Windows\Prefetch\Layout.ini
O45 - LFCP:[MD5.09A626B27CBA04CD73E38D180072F3B4] - 05/02/2013 - 22:16:40 ---A- - C:\Windows\Prefetch\CONFIG.EXE-88C38325.pf
O45 - LFCP:[MD5.159F37FA50B5E13055291D9D095378E8] - 05/02/2013 - 22:21:05 ---A- - C:\Windows\Prefetch\PES2013.EXE-88205247.pf
O45 - LFCP:[MD5.5D828FB51BCC882F5DE329A5EDB07771] - 05/02/2013 - 22:21:46 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-5554CA30.pf
O45 - LFCP:[MD5.94184BC23FE084931FC3205D4CC057B4] - 05/02/2013 - 22:39:13 ---A- - C:\Windows\Prefetch\ASTROBURNLITE.EXE-9B46A662.pf
O45 - LFCP:[MD5.F641EAE4FB1B7CAC99E3840E130566DB] - 05/02/2013 - 22:56:55 ---A- - C:\Windows\Prefetch\GUSETUP_SLIM.TMP-0A0B495A.pf
O45 - LFCP:[MD5.A6A12C63E99A33CA8DDBFB4630FD3D1D] - 05/02/2013 - 22:56:57 ---A- - C:\Windows\Prefetch\GUSETUP_SLIM.EXE-C7C4A7A4.pf
O45 - LFCP:[MD5.F82C36F5C77AF78D31C7F159E61266B3] - 05/02/2013 - 22:56:57 ---A- - C:\Windows\Prefetch\GUSETUP_SLIM.TMP-AFE3699F.pf
O45 - LFCP:[MD5.DD1526D8CC1EBA119D5D537F46C59C84] - 05/02/2013 - 22:57:02 ---A- - C:\Windows\Prefetch\INITIALIZE.EXE-7DCDC37F.pf
O45 - LFCP:[MD5.8D53DA8494738800977A92ABDD4083FB] - 05/02/2013 - 22:57:35 ---A- - C:\Windows\Prefetch\DISKANALYSIS.EXE-E154FC70.pf
O45 - LFCP:[MD5.3A0373A6FC74097FD7EC04E8E297440F] - 05/02/2013 - 23:01:25 ---A- - C:\Windows\Prefetch\REGREPAIR.EXE-772FD0CA.pf
O45 - LFCP:[MD5.3265338941CE26FD383863514E46FA24] - 05/02/2013 - 23:02:51 ---A- - C:\Windows\Prefetch\RCSETUP144.EXE-A1357EC2.pf
O45 - LFCP:[MD5.9BBB7E7D3A3543EFF5918FADEC8864CE] - 05/02/2013 - 23:02:55 ---A- - C:\Windows\Prefetch\NS6425.TMP-8F6E9AF8.pf
O45 - LFCP:[MD5.AA7AE9C9045506D9287F9A9CD1C94691] - 05/02/2013 - 23:02:55 ---A- - C:\Windows\Prefetch\PING.EXE-7E94E73E.pf
O45 - LFCP:[MD5.CCD6BE1D1B1AB1DF21D9C791A474327F] - 05/02/2013 - 23:03:09 ---A- - C:\Windows\Prefetch\RECUVA.EXE-1A090312.pf
O45 - LFCP:[MD5.FE542C85F8FD78236BD3286659D40A55] - 05/02/2013 - 23:14:21 ---A- - C:\Windows\Prefetch\DFRGUI.EXE-C853DD35.pf
O45 - LFCP:[MD5.26B3D0A58FF5DA3485CE44ACA06802A0] - 05/02/2013 - 23:14:21 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7AC6742A.pf
O45 - LFCP:[MD5.2D900C1205857B14652138C316C72415] - 05/02/2013 - 23:20:52 ---A- - C:\Windows\Prefetch\DINOTIFY.EXE-35A869D6.pf
O45 - LFCP:[MD5.B811AA1215AA5D768FD5B4D85771495D] - 05/02/2013 - 23:20:52 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-4AE3FD7C.pf
O45 - LFCP:[MD5.62EC93BE92BD52E261D0A78C3066DC9D] - 05/02/2013 - 23:26:55 ---A- - C:\Windows\Prefetch\INTEGRATOR.EXE-84638148.pf
O45 - LFCP:[MD5.92910110C65C363A6D8FD3D5AC952CDA] - 05/02/2013 - 23:36:03 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-007FEA55.pf
O45 - LFCP:[MD5.A67ED11983BB11EB786BB746BEB6F519] - 05/02/2013 - 23:36:04 ---A- - C:\Windows\Prefetch\SEARCHINDEXER.EXE-4A6353B9.pf
O45 - LFCP:[MD5.A240C10E621E6CF8DEDF281DA2AC3270] - 05/02/2013 - 23:40:01 ---A- - C:\Windows\Prefetch\TMP9FF6.EXE-B9C21668.pf
O45 - LFCP:[MD5.F3C65CE45E920CFD3BFF13C76D57E128] - 05/02/2013 - 23:40:30 ---A- - C:\Windows\Prefetch\SETUP.EXE-EF01F1CE.pf
O45 - LFCP:[MD5.BBBDCB470604937C99EF790D88C660A2] - 05/02/2013 - 23:40:33 ---A- - C:\Windows\Prefetch\JAVAW.EXE-2699CD1A.pf
O45 - LFCP:[MD5.F178AA5F243563A4DB78BA3248390B6E] - 05/02/2013 - 23:40:40 ---A- - C:\Windows\Prefetch\INSTALLMANAGERAPP.EXE-E1FEB0C9.pf
O45 - LFCP:[MD5.C5D6082973E4A2E522F951D4FEDB1788] - 05/02/2013 - 23:42:55 ---A- - C:\Windows\Prefetch\SETACL.EXE-D42A5B0A.pf
O45 - LFCP:[MD5.DF1D7771DE42374CE076FC183BF68FA4] - 05/02/2013 - 23:53:06 ---A- - C:\Windows\Prefetch\MPCMDRUN.EXE-F401FBB4.pf
O45 - LFCP:[MD5.F3DEE1BD5CFCE74BBF5C9A773C147157] - 06/02/2013 - 00:11:05 ---A- - C:\Windows\Prefetch\INSTALLSHELL.EXE-07372A8A.pf
O45 - LFCP:[MD5.D13B130B9C243E3AACFEF5785C33B371] - 06/02/2013 - 00:56:46 ---A- - C:\Windows\Prefetch\WMPNETWK.EXE-D9F2A96F.pf
O45 - LFCP:[MD5.92DE1674731D9948CD61FF8D4638BBC8] - 06/02/2013 - 03:26:51 ---A- - C:\Windows\Prefetch\PES2013_100.EXE-EB844432.pf
O45 - LFCP:[MD5.C599CE6640D56BDB935678638EB28B7B] - 07/02/2013 - 16:34:12 ---A- - C:\Windows\Prefetch\AAM UPDATES NOTIFIER.EXE-B83D821D.pf
O45 - LFCP:[MD5.1CE04D39D77B8C605041C6DF9CD3181F] - 10/02/2013 - 00:37:32 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-F2DCEF0D.pf
O45 - LFCP:[MD5.02387FAF059ADE49087098EB20BD6E94] - 10/02/2013 - 11:05:34 ---A- - C:\Windows\Prefetch\FC3UPDATER.EXE-93E5D9DE.pf
O45 - LFCP:[MD5.6B54F3C33FF41C1C5AF6FBE4C5E9AF22] - 10/02/2013 - 11:05:44 ---A- - C:\Windows\Prefetch\FARCRY3_D3D11.EXE-A1947F67.pf
O45 - LFCP:[MD5.20F3B501D77CB7AD6625B521F43CD84A] - 10/02/2013 - 11:06:27 ---A- - C:\Windows\Prefetch\PNKBSTRB.EXE-09DE69A6.pf
O45 - LFCP:[MD5.3DCDFB555BE9FA7754A23A7E57B88B06] - 10/02/2013 - 17:35:35 ---A- - C:\Windows\Prefetch\DTLITE.EXE-1B4D861B.pf
O45 - LFCP:[MD5.04A3460A720CCFF909F6BE1FB47BE55C] - 10/02/2013 - 18:09:08 ---A- - C:\Windows\Prefetch\FIX.EXE-C62DD5CA.pf
O45 - LFCP:[MD5.AB3AD60BBF6FCE1639724D528861B96A] - 10/02/2013 - 18:14:17 ---A- - C:\Windows\Prefetch\SETTINGS.EXE-B56A84E1.pf
O45 - LFCP:[MD5.911478594FC5D791F9EB77DD6D932E7D] - 10/02/2013 - 18:49:20 ---A- - C:\Windows\Prefetch\REGSVR32.EXE-8461DBEE.pf
O45 - LFCP:[MD5.FF1FBB20213BFF391C10AF1AF0FAF52B] - 10/02/2013 - 19:10:41 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf
O45 - LFCP:[MD5.B20350E1FD1C3A0832A2BCB1C5243B15] - 10/02/2013 - 19:49:55 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-6A473D35.pf
O45 - LFCP:[MD5.C9105604B230DAEF07741D76D7737479] - 10/02/2013 - 19:50:07 ---A- - C:\Windows\Prefetch\PESEDIT.EXE-6FE34292.pf
O45 - LFCP:[MD5.BD9C3B1827632DF84B7FB57029B41918] - 10/02/2013 - 19:50:19 ---A- - C:\Windows\Prefetch\PES2013.EXE-6CE8CB7A.pf
O45 - LFCP:[MD5.F7C3E65F672B6088D85E50BDD061EEC8] - 10/02/2013 - 19:50:19 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-E69F695A.pf
O45 - LFCP:[MD5.1EAD8655ABFBE9B75FB98F06B4AF73BB] - 10/02/2013 - 20:17:54 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-D8414F97.pf
O45 - LFCP:[MD5.D0C3FE61A60416F5305D57A014C5B8E7] - 10/02/2013 - 20:20:17 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-A2D55CB6.pf
O45 - LFCP:[MD5.67CB5052931A5627D939945C5E41B09E] - 10/02/2013 - 20:20:59 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf
O45 - LFCP:[MD5.E93693DF6AD2F14A6557BA835DB1325B] - 10/02/2013 - 20:20:59 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf
O45 - LFCP:[MD5.51259AD930965B4E98AE6EBA21540469] - 13/02/2013 - 14:15:32 ---A- - C:\Windows\Prefetch\JAVAWS.EXE-8AA244A9.pf
O45 - LFCP:[MD5.0D2A447AABF15C56221FAA33B5D6BEFF] - 13/02/2013 - 19:00:49 ---A- - C:\Windows\Prefetch\DRVINST.EXE-4CB4314A.pf
O45 - LFCP:[MD5.93767A32B0797561DC145612FC6292F1] - 14/02/2013 - 22:11:06 ---A- - C:\Windows\Prefetch\RTKNGUI.EXE-E7D08DCD.pf
O45 - LFCP:[MD5.A55375407FDE594A18904D0D1A80984E] - 14/02/2013 - 22:11:44 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-F0C6D571.pf
O45 - LFCP:[MD5.AA0945E41ED1A1BF22BB73CE171388F1] - 14/02/2013 - 22:17:20 ---A- - C:\Windows\Prefetch\CSC.EXE-A3B8D95D.pf
O45 - LFCP:[MD5.6482EE066E064B2481CCE010E8319E3B] - 14/02/2013 - 22:17:20 ---A- - C:\Windows\Prefetch\CVTRES.EXE-069169FB.pf
O45 - LFCP:[MD5.325D9FB2FEB1237C4D1505790EB2EA10] - 14/02/2013 - 22:17:29 ---A- - C:\Windows\Prefetch\SDIAGNHOST.EXE-8D72177C.pf
O45 - LFCP:[MD5.2CC52DBF78DB3FEB6E32FEC98B9C4426] - 14/02/2013 - 22:59:27 ---A- - C:\Windows\Prefetch\ATIESRXX.EXE-B8FDA008.pf
O45 - LFCP:[MD5.2F32DA0BA4C8343F7C6BA9E23326236F] - 14/02/2013 - 22:59:27 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.B69F5652884411245F80D0D5368F72F9] - 14/02/2013 - 22:59:43 ---A- - C:\Windows\Prefetch\DTSHELLHLP.EXE-6CCB00C1.pf
O45 - LFCP:[MD5.3637E5357EF942596633F769D721B270] - 15/02/2013 - 13:52:37 ---A- - C:\Windows\Prefetch\BITTORRENT.EXE-BE42A0B0.pf
O45 - LFCP:[MD5.1A226CED06B223725B2329AABE7381DC] - 15/02/2013 - 13:59:20 ---A- - C:\Windows\Prefetch\WUDFHOST.EXE-AFFEF87C.pf
O45 - LFCP:[MD5.78AB1C1B66B32DBE44907EA51B5E09EB] - 15/02/2013 - 14:09:11 ---A- - C:\Windows\Prefetch\WINRAR.EXE-94E7D80C.pf
O45 - LFCP:[MD5.BB6818B28E83CA3C3FFBB2E8C42F801C] - 17/02/2013 - 01:46:01 ---A- - C:\Windows\Prefetch\JAVA.EXE-633ED9BF.pf
O45 - LFCP:[MD5.22E0634199576F787092FAD7AC2737F1] - 17/02/2013 - 02:11:09 ---A- - C:\Windows\Prefetch\DEVICEDISPLAYOBJECTPROVIDER.E-17410B90.pf
O45 - LFCP:[MD5.459C47D9DBED9A66229B88461DFE25F3] - 17/02/2013 - 03:24:22 ---A- - C:\Windows\Prefetch\WMPLAYER.EXE-BAD6BD53.pf
O45 - LFCP:[MD5.DA38F44F892B5C8994827F33D4A1AAF2] - 17/02/2013 - 03:26:05 ---A- - C:\Windows\Prefetch\SNDVOL.EXE-5D4CC7D6.pf
O45 - LFCP:[MD5.1017D4AC8BDB7986905815B328558AFB] - 17/02/2013 - 09:47:59 ---A- - C:\Windows\Prefetch\ATBROKER.EXE-2E15A492.pf
O45 - LFCP:[MD5.1FBAFB50C2611A295AC68C37F8F8D9AD] - 17/02/2013 - 12:30:13 ---A- - C:\Windows\Prefetch\WINWORD.EXE-778F7C2B.pf
O45 - LFCP:[MD5.F0257959586F5942477B16FEBF97C3F7] - 17/02/2013 - 21:34:49 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-4F28A26F.pf
O45 - LFCP:[MD5.1B81B0A5A292F8A5CA3C57FCD8FD308E] - 17/02/2013 - 21:43:43 ---A- - C:\Windows\Prefetch\CLI.EXE-B3817BB7.pf
O45 - LFCP:[MD5.1EB71B34127FECFC946CF2D85324F1DE] - 17/02/2013 - 21:44:10 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:[MD5.8D029F0899599120389AD5971DABDC16] - 17/02/2013 - 21:46:04 ---A- - C:\Windows\Prefetch\RAC36.EXE-4DBC0798.pf
O45 - LFCP:[MD5.FAFE7A6F7F29990BD362DD2DD12C6EA2] - 17/02/2013 - 21:46:06 ---A- - C:\Windows\Prefetch\OSK.EXE-3E832AF1.pf
O45 - LFCP:[MD5.C8ED6BEE135045877959564CFD2CFFC3] - 17/02/2013 - 21:46:10 ---A- - C:\Windows\Prefetch\HYDRADM.EXE-B166F6C1.pf
O45 - LFCP:[MD5.6E514C0F16C1428A7271D56ADF3C1357] - 17/02/2013 - 21:46:15 ---A- - C:\Windows\Prefetch\UTILMAN.EXE-5AD4C272.pf
O45 - LFCP:[MD5.DCD35D275123D9F61639493C7EC990EB] - 17/02/2013 - 21:46:34 ---A- - C:\Windows\Prefetch\GOOGLEDRIVESYNC.EXE-78FD7429.pf
O45 - LFCP:[MD5.F6AC3684A6DF8D73F6D924FFEE7CF74D] - 17/02/2013 - 21:47:28 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf
O45 - LFCP:[MD5.E97A6DA20D89D00D07B6A95343192350] - 17/02/2013 - 21:47:41 ---A- - C:\Windows\Prefetch\MMLOADDRV.EXE-6F39FF7D.pf
O45 - LFCP:[MD5.885D53A4295CAE44AC333B275CB2CC6E] - 17/02/2013 - 21:47:44 ---A- - C:\Windows\Prefetch\LMS.EXE-75D6F05A.pf
O45 - LFCP:[MD5.18F8BD3BC544E6495AA596EF017DDA4A] - 17/02/2013 - 21:47:51 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-05F624AB.pf
O45 - LFCP:[MD5.F7195159C971748C64A0ED31212E0395] - 17/02/2013 - 21:48:09 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-1304AE86.pf
O45 - LFCP:[MD5.E3F8799A27CCA4CF1DEC51B9BCD9ADF1] - 17/02/2013 - 21:48:20 ---A- - C:\Windows\Prefetch\UNS.EXE-D04A8F4E.pf
O45 - LFCP:[MD5.6E2EB27D51FF1B3840103823D4A3AC3C] - 17/02/2013 - 21:49:18 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf
O45 - LFCP:[MD5.D172ED4BDB65719FD0E30133C655694D] - 17/02/2013 - 21:54:39 ---A- - C:\Windows\Prefetch\GOOGLETALKPLUGIN.EXE-9981D453.pf
O45 - LFCP:[MD5.79FBA0DE1A8276452F489732B0048A89] - 17/02/2013 - 21:55:11 ---A- - C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf
O45 - LFCP:[MD5.DD97A1AE227060790C506DD2EB599E72] - 17/02/2013 - 21:56:50 ---A- - C:\Windows\Prefetch\WMIAPSRV.EXE-29F35ED0.pf
O45 - LFCP:[MD5.2B4B15608BEEBE1F5BD0D50C0ECB69C2] - 17/02/2013 - 21:58:09 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf
O45 - LFCP:[MD5.B6F1EF546813AF66774678AE0F991113] - 18/02/2013 - 06:30:42 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf
O45 - LFCP:[MD5.7F31F21E0928DA380D5B59C9A8CAB637] - 18/02/2013 - 06:30:52 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:[MD5.1DAC35975AFDEFA23213CE850BD60647] - 18/02/2013 - 06:30:52 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-DE9673F9.pf
O45 - LFCP:[MD5.A2FB86E2C5D42A34D326759C6C794648] - 18/02/2013 - 06:30:52 ---A- - C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf
O45 - LFCP:[MD5.57DAE2919FB498B32448FA8E43F12372] - 18/02/2013 - 06:30:57 ---A- - C:\Windows\Prefetch\AVAST.SETUP-B1D66586.pf
O45 - LFCP:[MD5.51581E10B9C083E4620B6E9F758B4AE8] - 18/02/2013 - 06:31:01 ---A- - C:\Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf
O45 - LFCP:[MD5.3269F9638A4F4317527A967D508D383D] - 18/02/2013 - 06:31:52 ---A- - C:\Windows\Prefetch\AgCx_SC1.db
O45 - LFCP:[MD5.5C7028EA1EFB2BFD17249BF44BB97750] - 18/02/2013 - 06:50:00 ---A- - C:\Windows\Prefetch\FACEBOOKUPDATE.EXE-7896FEDC.pf
O45 - LFCP:[MD5.69BA49F83E6D8F348E43CDE4AB2424B5] - 18/02/2013 - 06:58:47 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-2499682455-473981773-2509937517-1000.db
O45 - LFCP:[MD5.33F79E711E91CDB67FB48AAF4A3C022E] - 18/02/2013 - 06:58:47 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-2499682455-473981773-2509937517-1000.db
O45 - LFCP:[MD5.3B4D850D49F34B3E8ECB65CB4D7E7F45] - 18/02/2013 - 07:10:00 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-2BD1AD9A.pf
O45 - LFCP:[MD5.3C11698F8EB43404CA8BEDCF044097EC] - 18/02/2013 - 07:10:04 ---A- - C:\Windows\Prefetch\POWERPNT.EXE-158B76A4.pf
O45 - LFCP:[MD5.D4987FA685B4C0C6EFA5D034855579C4] - 18/02/2013 - 07:15:56 ---A- - C:\Windows\Prefetch\FOXIT READER.EXE-AD4251B5.pf
O45 - LFCP:[MD5.312CF3B311B59EC45B4FBBD14041D6D7] - 18/02/2013 - 07:32:00 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-FE771DDA.pf
O45 - LFCP:[MD5.E3B61EAEBA5DBE3FC64BEEA54C3A8493] - 18/02/2013 - 07:32:10 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf
O45 - LFCP:[MD5.E5693BE72CE20F940DE8E6CC59C56AEC] - 18/02/2013 - 07:37:00 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-ECAD9571.pf
O45 - LFCP:[MD5.1069ED8FEEF88048EFA93F457440E069] - 18/02/2013 - 07:41:28 ---A- - C:\Windows\Prefetch\CHROME.EXE-84B8706F.pf
O45 - LFCP:[MD5.5F29E5605CE327D2EA6E01019566FF0F] - 18/02/2013 - 07:41:55 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf
O45 - LFCP:[MD5.27E24D2EB5FE74BE4C68ED664EA7E11C] - 18/02/2013 - 07:41:55 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
O45 - LFCP:[MD5.AA770F976DB216139DD85CA76D42E884] - 18/02/2013 - 07:42:00 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf
O45 - LFCP:[MD5.4C836C34E1B5616AD5A53B5BDFA4FD66] - 18/02/2013 - 07:42:10 ---A- - C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf
O45 - LFCP:[MD5.CC2823E95F8E9F179E5079C2A64C2656] - 18/02/2013 - 07:42:15 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf
O45 - LFCP:[MD5.B4AA264F8A7D137B240886420C330C95] - 18/02/2013 - 07:42:24 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf
O45 - LFCP:[MD5.1CB814F2ED3C0C55FC6A78BEF7A62F6B] - 18/02/2013 - 07:44:49 ---A- - C:\Windows\Prefetch\CMD.EXE-4A81B364.pf
O45 - LFCP:[MD5.A08EDCC33036E25C342C671352BB9BD0] - 18/02/2013 - 07:44:49 ---A- - C:\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf
O45 - LFCP:[MD5.28262676B36BE15E86F964D42F1DDDCB] - 18/02/2013 - 07:44:54 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf
O45 - LFCP:[MD5.5524B93451EF95C37361A1A96479FA91] - 18/02/2013 - 07:45:05 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf
O45 - LFCP:[MD5.9ECDB02EFE5F3B20D67F458C8C030C7D] - 18/02/2013 - 07:45:40 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.65B35306487323DFDC81D83C382B076F] - 18/02/2013 - 07:45:56 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.7EE12A19AB6C11549C252598E2593303] - 18/02/2013 - 07:46:02 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.5C974250A9D2A058891ADD0F2B4DA2F2] - 18/02/2013 - 07:46:07 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
~ Scan Prefetcher in 00mn 02s



---\\ Op�rations et fonctions au d�marrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
~ Scan ShellExecuteHooks in 00mn 00s



---\\ D�ni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l��diteur de configuration de s�curit� Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de s�curit� Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - LiveSSP.) -- C:\Windows\System32\livessp.dll
~ Scan Keys in 00mn 00s



---\\ Contr�le du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s



---\\ MountPoints2 Shell Key (O51) (None)

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak�.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"msacm.vorbis"="vorbis.acm" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\Windows\System32\vorbis.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"vorbis.acm"="Ogg Vorbis Audio CODEC" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\Windows\System32\vorbis.acm
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\BitTorrent [Key] . (.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files\BitTorrent\BitTorrent.exe
O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
~ Scan SMSR Keys in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=3
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=3
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=0
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Syst�me (O58)
O58 - SDL:[MD5.21E785EBD7DC90A06391141AAC7892FB] - 13/07/2009 - 20:26:15 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [422976]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 13/07/2009 - 16:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
~ Scan Drivers in 00mn 00s



---\\ Derniers fichiers modifi�s ou cr�es (Utilisateur) (O61)
O61 - LFC:Last File Created 15/02/2013 - 01:35:21 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.youtube.com_0.localstorage [238592]
O61 - LFC:Last File Created 15/02/2013 - 01:35:21 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.youtube.com_0.localstorage-journal [16384]
O61 - LFC:Last File Created 15/02/2013 - 01:37:16 ---A- C:\Users\By.keita\Downloads\ganttproject-tutoriel.pdf [530430]
O61 - LFC:Last File Created 15/02/2013 - 01:53:27 ----- C:\Users\By.keita\AppData\Roaming\BitTorrent\MICROSOFT.OFFICE.Project 2010.torrent [12803]
O61 - LFC:Last File Created 15/02/2013 - 01:55:54 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511ddbfa [148]
O61 - LFC:Last File Created 15/02/2013 - 02:04:36 ---A- C:\Users\By.keita\Downloads\MICROSOFT.OFFICE.Project 2010\serial demo project.TXT [31]
O61 - LFC:Last File Created 15/02/2013 - 02:05:06 ---A- C:\Users\By.keita\Downloads\MICROSOFT.OFFICE.Project 2010\32bit\ProjectProfessional.exe [292255008]
O61 - LFC:Last File Created 15/02/2013 - 02:05:06 ---A- C:\Users\By.keita\Downloads\MICROSOFT.OFFICE.Project 2010\64bit\ProjectProfessional.exe [332152960]
O61 - LFC:Last File Created 15/02/2013 - 03:34:27 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\dht.dat.old [4040]
O61 - LFC:Last File Created 15/02/2013 - 03:34:27 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\rss.dat.old [99]
O61 - LFC:Last File Created 15/02/2013 - 03:37:57 ---A- C:\Users\By.keita\Downloads\Le paysage de la g�ographie.docx [18492]
O61 - LFC:Last File Created 15/02/2013 - 08:56:21 ---A- C:\Users\By.keita\Downloads\Texte 5.1.pdf [904887]
O61 - LFC:Last File Created 15/02/2013 - 08:56:21 ---A- C:\Users\By.keita\Dropbox\Texte 5.1.pdf [904887]
O61 - LFC:Last File Created 15/02/2013 - 08:56:22 ---A- C:\Users\By.keita\Downloads\Texte 5.2.pdf [312345]
O61 - LFC:Last File Created 15/02/2013 - 08:56:22 ---A- C:\Users\By.keita\Dropbox\Texte 5.2.pdf [312345]
O61 - LFC:Last File Created 15/02/2013 - 13:18:01 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511e7bd9 [160]
O61 - LFC:Last File Created 15/02/2013 - 13:18:24 ---A- C:\Users\By.keita\Downloads\EDD6020-H2013-�QUIPES DE TRAVAIL.xlsx [14980]
O61 - LFC:Last File Created 15/02/2013 - 13:18:34 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\Office\Recent\EDD6020-H2013-�QUIPES DE TRAVAIL.LNK [1042]
O61 - LFC:Last File Created 15/02/2013 - 13:22:44 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr-mg42.mail.yahoo.com_0.localstorage [3072]
O61 - LFC:Last File Created 15/02/2013 - 13:22:44 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr-mg42.mail.yahoo.com_0.localstorage-journal [3608]
O61 - LFC:Last File Created 15/02/2013 - 13:24:53 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\static1.dmcdn.net\analytics.sol [540]
O61 - LFC:Last File Created 15/02/2013 - 13:32:16 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\www.dailymotion.com\analytics.sol [523]
O61 - LFC:Last File Created 15/02/2013 - 13:52:28 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511e83ec [148]
O61 - LFC:Last File Created 15/02/2013 - 13:53:29 ----- C:\Users\By.keita\AppData\Roaming\BitTorrent\Closer N�400 - 9 au 15 Fevrier 2013.pdf.torrent [8385]
O61 - LFC:Last File Created 15/02/2013 - 13:53:30 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\settings.dat.old [142597]
O61 - LFC:Last File Created 15/02/2013 - 13:56:15 ---A- C:\Users\By.keita\Downloads\Chambre 121 Integrale 5 Tomes up by taz6744.zip.rar [102986503]
O61 - LFC:Last File Created 15/02/2013 - 14:03:20 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511e8678 [140]
O61 - LFC:Last File Created 15/02/2013 - 14:05:33 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511e86fd [160]
O61 - LFC:Last File Created 15/02/2013 - 14:07:43 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\dht_feed.dat.old [2]
O61 - LFC:Last File Created 15/02/2013 - 14:08:28 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\v1fr.sftcdn.net\shared\flash\rs\storage.swf\flashcookie_sd.sol [492]
O61 - LFC:Last File Created 15/02/2013 - 14:08:29 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\resume.dat.old [99]
O61 - LFC:Last File Created 15/02/2013 - 14:08:36 ---A- C:\Users\By.keita\Downloads\setup.zip [1158444]
O61 - LFC:Last File Created 15/02/2013 - 14:09:01 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511e87cd [140]
O61 - LFC:Last File Created 15/02/2013 - 14:10:05 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511e880d [144]
O61 - LFC:Last File Created 15/02/2013 - 14:11:56 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\dht.dat [4378]
O61 - LFC:Last File Created 15/02/2013 - 14:11:56 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\dht_feed.dat [2]
O61 - LFC:Last File Created 15/02/2013 - 14:11:56 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\resume.dat [99]
O61 - LFC:Last File Created 15/02/2013 - 14:11:56 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\rss.dat [99]
O61 - LFC:Last File Created 15/02/2013 - 14:11:56 ---A- C:\Users\By.keita\AppData\Roaming\BitTorrent\settings.dat [142569]
O61 - LFC:Last File Created 15/02/2013 - 14:12:07 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\511e8887 [144]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler.exe [213384]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler64.exe [281480]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\GoogleUpdate.exe [116648]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\GoogleUpdateBroker.exe [59784]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\GoogleUpdateHelper.msi [26112]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\GoogleUpdateOnDemand.exe [59784]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdate.dll [835464]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_am.dll [25480]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ar.dll [27016]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_bg.dll [30600]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_bn.dll [29064]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ca.dll [30088]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_cs.dll [29064]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_da.dll [29576]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_de.dll [31624]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_el.dll [31112]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_en-GB.dll [28552]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_en.dll [28040]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_es-419.dll [29576]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_es.dll [31624]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_et.dll [28552]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_fa.dll [28040]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_fi.dll [29576]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_fil.dll [30600]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_fr.dll [31112]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_gu.dll [29064]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_hi.dll [29576]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_hr.dll [30088]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_hu.dll [30088]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_id.dll [28552]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_is.dll [29064]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_it.dll [31112]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_iw.dll [26504]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ja.dll [24968]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_kn.dll [30088]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ko.dll [23944]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_lt.dll [28552]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_lv.dll [30600]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ml.dll [32136]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_mr.dll [29064]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ms.dll [28552]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll [572808]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\psmachine.dll [160136]
O61 - LFC:Last File Created 16/02/2013 - 18:05:14 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\psuser.dll [160136]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_nl.dll [30600]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_no.dll [29576]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_pl.dll [30600]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_pt-BR.dll [29576]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_pt-PT.dll [29576]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ro.dll [30088]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ru.dll [29064]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_sk.dll [30088]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_sl.dll [30088]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_sr.dll [29576]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_sv.dll [29576]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_sw.dll [29576]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ta.dll [30600]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_te.dll [29576]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_th.dll [28040]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_tr.dll [29576]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_uk.dll [29064]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_ur.dll [29064]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_vi.dll [28552]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_zh-CN.dll [22408]
O61 - LFC:Last File Created 16/02/2013 - 18:05:15 ---A- C:\Users\By.keita\AppData\Local\Google\Update\1.3.21.135\goopdateres_zh-TW.dll [22408]
O61 - LFC:Last File Created 16/02/2013 - 18:05:26 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\512010b6 [160]
O61 - LFC:Last File Created 16/02/2013 - 18:46:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_00002c [1048576]
O61 - LFC:Last File Created 16/02/2013 - 18:46:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_00002d [1028875]
O61 - LFC:Last File Created 16/02/2013 - 18:46:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\macromedia.com\support\flashplayer\sys\#rt.com\settings.sol [76]
O61 - LFC:Last File Created 16/02/2013 - 18:53:45 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\51201c09 [144]
O61 - LFC:Last File Created 16/02/2013 - 19:04:16 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\macromedia.com\support\flashplayer\sys\#cdn.pearltrees.com\settings.sol [88]
O61 - LFC:Last File Created 16/02/2013 - 19:04:17 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\cdn.pearltrees.com\myLangue.sol [38]
O61 - LFC:Last File Created 16/02/2013 - 19:04:45 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\PHNALPVV\3C82B2A2455B252B8595FD0113249AA19D7E8BDD.heu [151]
O61 - LFC:Last File Created 17/02/2013 - 00:03:26 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_00002e [1048576]
O61 - LFC:Last File Created 17/02/2013 - 00:03:26 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_00002f [1048576]
O61 - LFC:Last File Created 17/02/2013 - 00:03:27 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000030 [433452]
O61 - LFC:Last File Created 17/02/2013 - 00:06:28 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.hiphopdx.com_0.localstorage [3072]
O61 - LFC:Last File Created 17/02/2013 - 00:06:28 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.hiphopdx.com_0.localstorage-journal [3608]
O61 - LFC:Last File Created 17/02/2013 - 00:36:37 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\s.ytimg.com\soundData.sol [80]
O61 - LFC:Last File Created 17/02/2013 - 01:28:45 -SH-- C:\Users\By.keita\Downloads\Afrocubism\AlbumArtSmall.jpg [8619]
O61 - LFC:Last File Created 17/02/2013 - 01:28:45 -SH-- C:\Users\By.keita\Downloads\Afrocubism\Folder.jpg [35640]
O61 - LFC:Last File Created 17/02/2013 - 01:41:51 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\static1.dmcdn.net\com.dm.player.sol [317]
O61 - LFC:Last File Created 17/02/2013 - 02:03:14 ---A- C:\Users\By.keita\Documents\KONAMI\Pro Evolution Soccer 2012\ad\dftm.dat [11200]
O61 - LFC:Last File Created 17/02/2013 - 02:23:32 ---A- C:\Users\By.keita\Documents\KONAMI\Pro Evolution Soccer 2012\save\FL01.bin [7937168]
O61 - LFC:Last File Created 17/02/2013 - 02:39:00 ---A- C:\Users\By.keita\Documents\KONAMI\Pro Evolution Soccer 2012\save\OPTION.bin [263096]
O61 - LFC:Last File Created 17/02/2013 - 02:39:08 ---A- C:\Users\By.keita\Documents\KONAMI\Pro Evolution Soccer 2012\ad\cache\cache.dat [960]
O61 - LFC:Last File Created 17/02/2013 - 02:39:08 ---A- C:\Users\By.keita\Documents\KONAMI\Pro Evolution Soccer 2012\ad\dfts.dat [536]
O61 - LFC:Last File Created 17/02/2013 - 02:39:08 ---A- C:\Users\By.keita\Documents\KONAMI\Pro Evolution Soccer 2012\ad\user.var [760]
O61 - LFC:Last File Created 17/02/2013 - 03:28:10 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old [267]
O61 - LFC:Last File Created 17/02/2013 - 03:38:37 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\5120970d [172]
O61 - LFC:Last File Created 17/02/2013 - 03:46:40 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Index 2012-12 [64905216]
O61 - LFC:Last File Created 17/02/2013 - 04:58:07 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\www.dailymotion.com\com.dm.player.sol [349]
O61 - LFC:Last File Created 17/02/2013 - 09:51:14 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000487.sst [43391]
O61 - LFC:Last File Created 17/02/2013 - 12:02:30 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000489.sst [4303306]
O61 - LFC:Last File Created 17/02/2013 - 12:30:03 ---A- C:\Users\By.keita\AppData\Local\Temp\CVR6A8A.tmp.cvr [0]
O61 - LFC:Last File Created 17/02/2013 - 12:53:55 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\UProof\CMAdj.12.bin [444]
O61 - LFC:Last File Created 17/02/2013 - 13:04:06 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\51211b96 [160]
O61 - LFC:Last File Created 17/02/2013 - 13:04:23 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK [768]
O61 - LFC:Last File Created 17/02/2013 - 13:10:53 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\Word\Doc1302810180531935326\Doc1.docx.lnk [496]
O61 - LFC:Last File Created 17/02/2013 - 13:10:53 R---- C:\Users\By.keita\AppData\Roaming\Microsoft\Word\Doc1302810180531935326\Doc1((Autosaved-302809760920469104)).asd [362496]
O61 - LFC:Last File Created 17/02/2013 - 13:14:40 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.pum.umontreal.ca_0.localstorage [3072]
O61 - LFC:Last File Created 17/02/2013 - 13:14:40 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.pum.umontreal.ca_0.localstorage-journal [3608]
O61 - LFC:Last File Created 17/02/2013 - 13:23:33 ---A- C:\Users\By.keita\AppData\Roaming\Nonoh\History_djefboy.dat [20975]
O61 - LFC:Last File Created 17/02/2013 - 13:23:33 ---A- C:\Users\By.keita\AppData\Roaming\Nonoh\VoiceEngine.xml [1043]
O61 - LFC:Last File Created 17/02/2013 - 13:31:05 R---- C:\Users\By.keita\AppData\Roaming\Microsoft\Word\Doc1302810180531935326\Doc1((Autosaved-302809790160687216)).asd [364544]
O61 - LFC:Last File Created 17/02/2013 - 13:32:08 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\rutube.ru\analytics.sol [454]
O61 - LFC:Last File Created 17/02/2013 - 13:48:52 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage [151552]
O61 - LFC:Last File Created 17/02/2013 - 13:48:52 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage-journal [16384]
O61 - LFC:Last File Created 17/02/2013 - 15:36:40 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\Office\Recent\Doc1.LNK [888]
O61 - LFC:Last File Created 17/02/2013 - 15:47:52 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [262115]
O61 - LFC:Last File Created 17/02/2013 - 15:47:52 ---A- C:\Users\By.keita\AppData\Local\Temp\CRX_75DAF8CB7768\crl-set [616]
O61 - LFC:Last File Created 17/02/2013 - 15:47:52 ---A- C:\Users\By.keita\AppData\Local\Temp\CRX_75DAF8CB7768\manifest.json [34]
O61 - LFC:Last File Created 17/02/2013 - 16:33:53 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\files.leton.tv\com.jeroenwijering.sol [71]
O61 - LFC:Last File Created 17/02/2013 - 17:00:59 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\s.ytimg.com\videostats.sol [275]
O61 - LFC:Last File Created 17/02/2013 - 17:03:09 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mediacdn.disqus.com_0.localstorage [46080]
O61 - LFC:Last File Created 17/02/2013 - 17:03:09 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mediacdn.disqus.com_0.localstorage-journal [16384]
O61 - LFC:Last File Created 17/02/2013 - 17:03:28 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\macromedia.com\support\flashplayer\sys\settings.sol [1450]
O61 - LFC:Last File Created 17/02/2013 - 17:18:42 ---A- C:\Users\By.keita\AppData\Local\Temp\CVRAF5C.tmp.cvr [0]
O61 - LFC:Last File Created 17/02/2013 - 17:29:25 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\Le%20paysage%20de%20la%20g�ographie302810541040835468\Le%20paysage%20de%20la%20g�ographie.pptx.lnk [810]
O61 - LFC:Last File Created 17/02/2013 - 17:29:25 R---- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\Le%20paysage%20de%20la%20g�ographie302810541040835468\Le%20paysage%20de%20la%20g�ographie((Autosaved-302810121428791862)).ppt [194620]
O61 - LFC:Last File Created 17/02/2013 - 18:13:17 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Bookmarks.bak [12197]
O61 - LFC:Last File Created 17/02/2013 - 20:19:10 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.justin.tv_0.localstorage [3072]
O61 - LFC:Last File Created 17/02/2013 - 20:19:10 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.justin.tv_0.localstorage-journal [3608]
O61 - LFC:Last File Created 17/02/2013 - 20:19:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\www-cdn.jtvnw.net\jtv_settings.sol [1742]
O61 - LFC:Last File Created 17/02/2013 - 20:19:18 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.meebo.com_0.localstorage [3072]
O61 - LFC:Last File Created 17/02/2013 - 20:19:18 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.meebo.com_0.localstorage-journal [3608]
O61 - LFC:Last File Created 17/02/2013 - 20:19:20 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.meebo.com_0.localstorage [921600]
O61 - LFC:Last File Created 17/02/2013 - 20:19:20 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.meebo.com_0.localstorage-journal [16384]
O61 - LFC:Last File Created 17/02/2013 - 20:49:22 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plusone.google.com_0.localstorage [3072]
O61 - LFC:Last File Created 17/02/2013 - 20:49:22 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plusone.google.com_0.localstorage-journal [3608]
O61 - LFC:Last File Created 17/02/2013 - 21:09:12 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000491.sst [4403913]
O61 - LFC:Last File Created 17/02/2013 - 21:09:14 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old [987]
O61 - LFC:Last File Created 17/02/2013 - 21:10:54 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SHQLFP4F\secure-uk.imrworldwide.com\_ggMCvar_1.sol [182]
O61 - LFC:Last File Created 17/02/2013 - 21:17:11 R---- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\Le%20paysage%20de%20la%20g�ographie302810541040835468\Le%20paysage%20de%20la%20g�ographie((Autosaved-302810440646934729)).ppt [195702]
O61 - LFC:Last File Created 17/02/2013 - 21:22:58 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\51219082 [160]
O61 - LFC:Last File Created 17/02/2013 - 21:27:53 R---- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\Le%20paysage%20de%20la%20g�ographie302810541040835468\Le%20paysage%20de%20la%20g�ographie((Autosaved-302810452767194363)).ppt [531657]
O61 - LFC:Last File Created 17/02/2013 - 21:38:42 R---- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\Le%20paysage%20de%20la%20g�ographie302810541040835468\Le%20paysage%20de%20la%20g�ographie((Autosaved-302810470674201374)).ppt [1889532]
O61 - LFC:Last File Created 17/02/2013 - 21:39:45 ---A- C:\Users\By.keita\Downloads\Le paysage de la g�ographie.pptx [1906470]
O61 - LFC:Last File Created 17/02/2013 - 21:43:32 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Last Tabs [388842]
O61 - LFC:Last File Created 17/02/2013 - 21:43:34 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Last Session [247144]
O61 - LFC:Last File Created 17/02/2013 - 21:43:35 --HA- C:\Users\By.keita\AppData\Local\IconCache.db [4411731]
O61 - LFC:Last File Created 17/02/2013 - 21:43:37 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\PPT14.pcb [92]
O61 - LFC:Last File Created 17/02/2013 - 21:43:40 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Visited Links [524192]
O61 - LFC:Last File Created 17/02/2013 - 21:45:11 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\512195b7 [124]
O61 - LFC:Last File Created 17/02/2013 - 21:45:53 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\512195e0 [160]
O61 - LFC:Last File Created 17/02/2013 - 21:45:54 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\select.pyd [11776]
O61 - LFC:Last File Created 17/02/2013 - 21:45:54 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32pipe.pyd [24064]
O61 - LFC:Last File Created 17/02/2013 - 21:45:55 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\unicodedata.pyd [585728]
O61 - LFC:Last File Created 17/02/2013 - 21:45:55 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32event.pyd [17920]
O61 - LFC:Last File Created 17/02/2013 - 21:45:55 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wx._controls_.pyd [1056256]
O61 - LFC:Last File Created 17/02/2013 - 21:45:56 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\shell32.dll [8461312]
O61 - LFC:Last File Created 17/02/2013 - 21:45:57 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\kernel32.dll [989696]
O61 - LFC:Last File Created 17/02/2013 - 21:45:57 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\psapi.dll [23040]
O61 - LFC:Last File Created 17/02/2013 - 21:45:58 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32inet.pyd [39424]
O61 - LFC:Last File Created 17/02/2013 - 21:45:58 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32wnet.pyd [24576]
O61 - LFC:Last File Created 17/02/2013 - 21:45:59 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\_hashlib.pyd [311808]
O61 - LFC:Last File Created 17/02/2013 - 21:45:59 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32file.pyd [111104]
O61 - LFC:Last File Created 17/02/2013 - 21:45:59 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wx._windows_.pyd [807424]
O61 - LFC:Last File Created 17/02/2013 - 21:45:59 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wx._wizard.pyd [121856]
O61 - LFC:Last File Created 17/02/2013 - 21:46:00 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\_ssl.pyd [645120]
O61 - LFC:Last File Created 17/02/2013 - 21:46:00 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\bz2.pyd [71168]
O61 - LFC:Last File Created 17/02/2013 - 21:46:00 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32pdh.pyd [22528]
O61 - LFC:Last File Created 17/02/2013 - 21:46:00 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32process.pyd [36352]
O61 - LFC:Last File Created 17/02/2013 - 21:46:00 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wx._core_.pyd [1169408]
O61 - LFC:Last File Created 17/02/2013 - 21:46:01 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\PyWinTypes26.dll [110592]
O61 - LFC:Last File Created 17/02/2013 - 21:46:01 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32security.pyd [110592]
O61 - LFC:Last File Created 17/02/2013 - 21:46:01 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32ui.pyd [778240]
O61 - LFC:Last File Created 17/02/2013 - 21:46:02 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32evtlog.pyd [19968]
O61 - LFC:Last File Created 17/02/2013 - 21:46:02 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wx._misc_.pyd [731136]
O61 - LFC:Last File Created 17/02/2013 - 21:46:03 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\_ctypes.pyd [73728]
O61 - LFC:Last File Created 17/02/2013 - 21:46:03 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\pythoncom26.dll [354304]
O61 - LFC:Last File Created 17/02/2013 - 21:46:03 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32profile.pyd [17920]
O61 - LFC:Last File Created 17/02/2013 - 21:46:03 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\windows._cacheinvalidation.pyd [1024616]
O61 - LFC:Last File Created 17/02/2013 - 21:46:03 ---A- C:\Users\By.keita\AppData\Local\Temp\~DF5B8E4BD16AA84B04.TMP [98304]
O61 - LFC:Last File Created 17/02/2013 - 21:46:04 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\_win32sysloader.pyd [9216]
O61 - LFC:Last File Created 17/02/2013 - 21:46:04 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wx._gdi_.pyd [792576]
O61 - LFC:Last File Created 17/02/2013 - 21:46:04 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\Sticky Notes\StickyNotes.snt [13824]
O61 - LFC:Last File Created 17/02/2013 - 21:46:05 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\pyexpat.pyd [153088]
O61 - LFC:Last File Created 17/02/2013 - 21:46:05 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32crypt.pyd [11776]
O61 - LFC:Last File Created 17/02/2013 - 21:46:05 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32trace.pyd [16384]
O61 - LFC:Last File Created 17/02/2013 - 21:46:06 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\pysqlite2._sqlite.pyd [571392]
O61 - LFC:Last File Created 17/02/2013 - 21:46:06 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32api.pyd [96256]
O61 - LFC:Last File Created 17/02/2013 - 21:46:06 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32com.shell.shell.pyd [263168]
O61 - LFC:Last File Created 17/02/2013 - 21:46:06 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\win32ts.pyd [23040]
O61 - LFC:Last File Created 17/02/2013 - 21:46:06 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wx._html2.pyd [70656]
O61 - LFC:Last File Created 17/02/2013 - 21:46:07 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\_elementtree.pyd [86016]
O61 - LFC:Last File Created 17/02/2013 - 21:46:07 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\_socket.pyd [40448]
O61 - LFC:Last File Created 17/02/2013 - 21:46:07 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\python26.dll [2149888]
O61 - LFC:Last File Created 17/02/2013 - 21:46:08 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wxbase293u_vc.dll [1972224]
O61 - LFC:Last File Created 17/02/2013 - 21:46:08 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wxmsw293u_adv_vc.dll [1214976]
O61 - LFC:Last File Created 17/02/2013 - 21:46:08 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wxmsw293u_core_vc.dll [4555264]
O61 - LFC:Last File Created 17/02/2013 - 21:46:09 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wxbase293u_net_vc.dll [152576]
O61 - LFC:Last File Created 17/02/2013 - 21:46:09 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wxmsw293u_html_vc.dll [593408]
O61 - LFC:Last File Created 17/02/2013 - 21:46:10 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\mfc90.dll [1156600]
O61 - LFC:Last File Created 17/02/2013 - 21:46:10 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\mfc90u.dll [1162744]
O61 - LFC:Last File Created 17/02/2013 - 21:46:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT [16]
O61 - LFC:Last File Created 17/02/2013 - 21:46:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000512 [333]
O61 - LFC:Last File Created 17/02/2013 - 21:46:11 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\mfcm90.dll [59904]
O61 - LFC:Last File Created 17/02/2013 - 21:46:11 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\mfcm90u.dll [59904]
O61 - LFC:Last File Created 17/02/2013 - 21:46:11 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\mime\drive.mime.types [24371]
O61 - LFC:Last File Created 17/02/2013 - 21:46:11 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\wxmsw293u_webview_vc.dll [81920]
O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\exclaim.png [605]
O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\file.png [121]
O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\folder-mac.icns [117965]
O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\folder-winseven.ico [57802]
O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\folder-winxp.ico [15406]
O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\folder.png [115]
O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gdoc.icns [60047]
O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gdoc.ico [22027]
O61 - LFC:Last File Created 17/02/2013 - 21:46:12 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gdraw.icns [61261]
O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gdraw.ico [22391]
O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gform.icns [55831]
O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gform.ico [91330]
O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gform.svg [738]
O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\glink.icns [107563]
O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\glink.ico [37565]
O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gscript.icns [44089]
O61 - LFC:Last File Created 17/02/2013 - 21:46:13 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gscript.ico [89809]
O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gscript.svg [626]
O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gsheet.icns [52123]
O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gsheet.ico [21906]
O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gslides.icns [48649]
O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gslides.ico [21849]
O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gtable.icns [76682]
O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gtable.ico [23069]
O61 - LFC:Last File Created 17/02/2013 - 21:46:14 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\gtable.svg [568]
O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\image_resources.py [5767]
O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\image_resources.pyo [5083]
O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\info1-mac.png [16824]
O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\info1-windows7.png [9749]
O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\info1-windowsxp.png [10976]
O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\info2-default.png [2778]
O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\info2-mac.png [9762]
O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\info2-win7.png [8184]
O61 - LFC:Last File Created 17/02/2013 - 21:46:15 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\info2-winxp.png [8062]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate1-inverse.png [324]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate1.png [322]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate2-inverse.png [381]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate2.png [382]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate3-inverse.png [341]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate3.png [336]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate4-inverse.png [381]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate4.png [383]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate5-inverse.png [323]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate5.png [322]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate6-inverse.png [390]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate6.png [401]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate7-inverse.png [333]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate7.png [337]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate8-inverse.png [378]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-animate8.png [382]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-error-inverse.png [252]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-error.png [257]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-inactive-inverse.png [254]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-inactive.png [259]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-normal-inverse.png [262]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-normal.png [269]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-paused-inverse.png [263]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\mac-paused.png [261]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\menu_warning.png [237]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\sharedfolder-mac.icns [117416]
O61 - LFC:Last File Created 17/02/2013 - 21:46:16 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\sharedfolder-winseven.ico [55019]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\sharedfolder-winxp.ico [15406]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\shareguyicon.png [179]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\sync.icns [117146]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\sync.ico [45533]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\sync.png [1312]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\sync_128.png [7846]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\toprighticon.png [3355]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate1.png [656]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate2.png [689]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate3.png [625]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate4.png [632]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate5.png [643]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate6.png [642]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate7.png [612]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-animate8.png [619]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win-normal.png [612]
O61 - LFC:Last File Created 17/02/2013 - 21:46:17 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win7-error.png [600]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\html\drive_thankyou.html [1349]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\vi\LC_MESSAGES\syncclient.mo [25048]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\zh-Hans\LC_MESSAGES\syncclient.mo [22171]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\zh-Hant\LC_MESSAGES\syncclient.mo [22447]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\zh\LC_MESSAGES\syncclient.mo [22171]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\zh_CN\LC_MESSAGES\syncclient.mo [22171]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\zh_HK\LC_MESSAGES\syncclient.mo [22460]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\zh_TW\LC_MESSAGES\syncclient.mo [22447]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\__init__.py [0]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\__init__.pyo [198]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\overlays\Blacklisted.ico [40903]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\overlays\Shared.ico [35679]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\overlays\Synced.ico [35679]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\overlays\Syncing.ico [35424]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win7-inactive.png [599]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\win7-paused.png [584]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\winxp-error.png [606]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\winxp-inactive.png [598]
O61 - LFC:Last File Created 17/02/2013 - 21:46:18 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\images\winxp-paused.png [583]
O61 - LFC:Last File Created 17/02/2013 - 21:46:19 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\sr\LC_MESSAGES\syncclient.mo [29886]
O61 - LFC:Last File Created 17/02/2013 - 21:46:19 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\sv\LC_MESSAGES\syncclient.mo [22504]
O61 - LFC:Last File Created 17/02/2013 - 21:46:19 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ta\LC_MESSAGES\syncclient.mo [40299]
O61 - LFC:Last File Created 17/02/2013 - 21:46:19 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\te\LC_MESSAGES\syncclient.mo [38455]
O61 - LFC:Last File Created 17/02/2013 - 21:46:19 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\th\LC_MESSAGES\syncclient.mo [35560]
O61 - LFC:Last File Created 17/02/2013 - 21:46:19 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\tr\LC_MESSAGES\syncclient.mo [23812]
O61 - LFC:Last File Created 17/02/2013 - 21:46:19 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\uk\LC_MESSAGES\syncclient.mo [29766]
O61 - LFC:Last File Created 17/02/2013 - 21:46:20 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\pt_BR\LC_MESSAGES\syncclient.mo [23380]
O61 - LFC:Last File Created 17/02/2013 - 21:46:20 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\pt_PT\LC_MESSAGES\syncclient.mo [23248]
O61 - LFC:Last File Created 17/02/2013 - 21:46:20 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ro\LC_MESSAGES\syncclient.mo [23596]
O61 - LFC:Last File Created 17/02/2013 - 21:46:20 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ru\LC_MESSAGES\syncclient.mo [29775]
O61 - LFC:Last File Created 17/02/2013 - 21:46:20 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\sk\LC_MESSAGES\syncclient.mo [23732]
O61 - LFC:Last File Created 17/02/2013 - 21:46:20 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\sl\LC_MESSAGES\syncclient.mo [23222]
O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ja\LC_MESSAGES\syncclient.mo [26410]
O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\kn\LC_MESSAGES\syncclient.mo [40477]
O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ko\LC_MESSAGES\syncclient.mo [24305]
O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\lt\LC_MESSAGES\syncclient.mo [23532]
O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\lv\LC_MESSAGES\syncclient.mo [23275]
O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ml\LC_MESSAGES\syncclient.mo [40884]
O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\mr\LC_MESSAGES\syncclient.mo [35830]
O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\nl\LC_MESSAGES\syncclient.mo [23093]
O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\no\LC_MESSAGES\syncclient.mo [22354]
O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\pl\LC_MESSAGES\syncclient.mo [22900]
O61 - LFC:Last File Created 17/02/2013 - 21:46:21 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\pt\LC_MESSAGES\syncclient.mo [23380]
O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\fi\LC_MESSAGES\syncclient.mo [22461]
O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\fil\LC_MESSAGES\syncclient.mo [23647]
O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\fr\LC_MESSAGES\syncclient.mo [23869]
O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\gu\LC_MESSAGES\syncclient.mo [35737]
O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\he\LC_MESSAGES\syncclient.mo [24893]
O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\hi\LC_MESSAGES\syncclient.mo [36635]
O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\hr\LC_MESSAGES\syncclient.mo [22872]
O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\hu\LC_MESSAGES\syncclient.mo [23811]
O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\id\LC_MESSAGES\syncclient.mo [22459]
O61 - LFC:Last File Created 17/02/2013 - 21:46:22 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\it\LC_MESSAGES\syncclient.mo [23353]
O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\main.exe.manifest [963]
O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ar\LC_MESSAGES\syncclient.mo [27155]
O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\bg\LC_MESSAGES\syncclient.mo [30313]
O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\bn\LC_MESSAGES\syncclient.mo [36898]
O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\ca\LC_MESSAGES\syncclient.mo [23491]
O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\cs\LC_MESSAGES\syncclient.mo [23385]
O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\da\LC_MESSAGES\syncclient.mo [22606]
O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\de\LC_MESSAGES\syncclient.mo [24022]
O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\el\LC_MESSAGES\syncclient.mo [32343]
O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\en\LC_MESSAGES\syncclient.mo [21670]
O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\en_GB\LC_MESSAGES\syncclient.mo [21699]
O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\en_US\LC_MESSAGES\syncclient.mo [532]
O61 - LFC:Last File Created 17/02/2013 - 21:46:23 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\resources\i18n\locale\es\LC_MESSAGES\syncclient.mo [23657]
O61 - LFC:Last File Created 17/02/2013 - 21:46:26 ---A- C:\Users\By.keita\AppData\Local\Temp\_MEI46442\support\gen_py\__init__.py [0]
O61 - LFC:Last File Created 17/02/2013 - 21:46:28 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG [0]
O61 - LFC:Last File Created 17/02/2013 - 21:46:33 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings [8]
O61 - LFC:Last File Created 17/02/2013 - 21:46:34 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Bookmarks [12197]
O61 - LFC:Last File Created 17/02/2013 - 21:46:34 ---A- C:\Users\By.keita\AppData\Local\Temp\~DF312F3503B33A5036.TMP [32768]
O61 - LFC:Last File Created 17/02/2013 - 21:46:35 ---A- C:\Users\By.keita\AppData\Local\ATI\ACE\Manifest.Bin [27266]
O61 - LFC:Last File Created 17/02/2013 - 21:46:35 ---A- C:\Users\By.keita\AppData\Local\ATI\ACE\Manifest.xml [19630]
O61 - LFC:Last File Created 17/02/2013 - 21:46:45 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache [546678]
O61 - LFC:Last File Created 17/02/2013 - 21:46:45 ---A- C:\Users\By.keita\AppData\Local\Google\Drive\cacerts [3245]
O61 - LFC:Last File Created 17/02/2013 - 21:46:45 ---A- C:\Users\By.keita\AppData\Local\Google\Drive\lockfile [0]
O61 - LFC:Last File Created 17/02/2013 - 21:46:45 ---A- C:\Users\By.keita\AppData\Local\Google\Drive\pid [4]
O61 - LFC:Last File Created 17/02/2013 - 21:46:45 ---A- C:\Users\By.keita\AppData\Local\Google\Drive\snapshot.db [45056]
O61 - LFC:Last File Created 17/02/2013 - 21:46:52 ---A- C:\Users\By.keita\AppData\Roaming\Skype\shared_dynco\dc.db [1757184]
O61 - LFC:Last File Created 17/02/2013 - 21:46:53 ---A- C:\Users\By.keita\AppData\Roaming\Skype\shared_dynco\dc.db-journal [1116800]
O61 - LFC:Last File Created 17/02/2013 - 21:46:57 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\51219621 [144]
O61 - LFC:Last File Created 17/02/2013 - 21:47:04 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\eas.db [53248]
O61 - LFC:Last File Created 17/02/2013 - 21:47:04 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\eas.db-journal [41552]
O61 - LFC:Last File Created 17/02/2013 - 21:47:30 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000493.sst [1514458]
O61 - LFC:Last File Created 17/02/2013 - 21:47:30 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000492 [294]
O61 - LFC:Last File Created 17/02/2013 - 21:47:31 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT [16]
O61 - LFC:Last File Created 17/02/2013 - 21:47:32 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG [0]
O61 - LFC:Last File Created 17/02/2013 - 21:47:35 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_icmlaeflemplmjndnaapfdbbnpncnbda_0.localstorage [4368384]
O61 - LFC:Last File Created 17/02/2013 - 21:47:35 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_icmlaeflemplmjndnaapfdbbnpncnbda_0.localstorage-journal [16384]
O61 - LFC:Last File Created 17/02/2013 - 21:47:56 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\5121965b [172]
O61 - LFC:Last File Created 17/02/2013 - 21:47:58 ---A- C:\Users\By.keita\Downloads\install_flashplayer11x32au_mssa_aih.exe [1005792]
O61 - LFC:Last File Created 17/02/2013 - 21:49:14 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_get3.adobe.com_0.localstorage [3072]
O61 - LFC:Last File Created 17/02/2013 - 21:49:14 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_get3.adobe.com_0.localstorage-journal [3608]
O61 - LFC:Last File Created 17/02/2013 - 21:51:23 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\keyval.db [49152]
O61 - LFC:Last File Created 17/02/2013 - 21:51:24 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\keyval.db-journal [41552]
O61 - LFC:Last File Created 17/02/2013 - 21:54:31 ---A- C:\Users\By.keita\AppData\Local\Google\Google Talk Plugin\googletalkplugin_port [20]
O61 - LFC:Last File Created 17/02/2013 - 21:54:38 ---A- C:\Users\By.keita\AppData\Local\Google\Google Talk Plugin\googletalkplugin_ws_port [0]
O61 - LFC:Last File Created 17/02/2013 - 21:57:03 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\chatsync\af\afeeb4e2d911f335.dat [1849]
O61 - LFC:Last File Created 17/02/2013 - 21:58:36 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-01 [46346240]
O61 - LFC:Last File Created 17/02/2013 - 21:58:37 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-01-journal [16384]
O61 - LFC:Last File Created 17/02/2013 - 22:02:21 ---A- C:\Users\By.keita\Downloads\Jeune Afrique N�2718 Du 10 au 16 Fevrier 2013 PDF.pdf.torrent [13020]
O61 - LFC:Last File Created 17/02/2013 - 22:04:54 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Web Data [163840]
O61 - LFC:Last File Created 17/02/2013 - 22:04:54 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal [16384]
O61 - LFC:Last File Created 17/02/2013 - 22:04:55 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Login Data [18432]
O61 - LFC:Last File Created 17/02/2013 - 22:04:55 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal [8736]
O61 - LFC:Last File Created 17/02/2013 - 22:45:27 ---A- C:\Users\By.keita\AppData\Roaming\Dropbox\shellext\l\5121a3d7 [160]
O61 - LFC:Last File Created 18/02/2013 - 06:30:58 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Top Sites [1540096]
O61 - LFC:Last File Created 18/02/2013 - 06:30:59 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal [16384]
O61 - LFC:Last File Created 18/02/2013 - 06:31:00 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOG.old [151]
O61 - LFC:Last File Created 18/02/2013 - 06:31:04 ---A- C:\Users\By.keita\AppData\Local\ATI\ACE\Profiles.xml [45327]
O61 - LFC:Last File Created 18/02/2013 - 06:40:59 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\Paths\LOG.old [151]
O61 - LFC:Last File Created 18/02/2013 - 07:09:56 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\Office\Recent\Le paysage de la g�ographie.LNK [1005]
O61 - LFC:Last File Created 18/02/2013 - 07:10:16 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plus.google.com_0.localstorage [3072]
O61 - LFC:Last File Created 18/02/2013 - 07:10:16 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_plus.google.com_0.localstorage-journal [3608]
O61 - LFC:Last File Created 18/02/2013 - 07:10:27 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Index 2012-11 [41754624]
O61 - LFC:Last File Created 18/02/2013 - 07:10:27 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Index 2012-11-journal [16384]
O61 - LFC:Last File Created 18/02/2013 - 07:10:38 ---A- C:\Users\By.keita\Downloads\Le paysage de la g�ographie (1).pptx [2233695]
O61 - LFC:Last File Created 18/02/2013 - 07:10:50 ---A- C:\Users\By.keita\AppData\Local\Temp\CVR639C.tmp.cvr [0]
O61 - LFC:Last File Created 18/02/2013 - 07:10:51 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\Office\Recent\Le paysage de la g�ographie (1).LNK [1025]
O61 - LFC:Last File Created 18/02/2013 - 07:10:51 --H-- C:\Users\By.keita\AppData\Roaming\Microsoft\Office\Recent\index.dat [2546]
O61 - LFC:Last File Created 18/02/2013 - 07:14:05 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_3cp9lcoq32dpn-c.c.yom.mail.yahoo.com_0.localstorage [12288]
O61 - LFC:Last File Created 18/02/2013 - 07:14:05 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_3cp9lcoq32dpn-c.c.yom.mail.yahoo.com_0.localstorage-journal [12896]
O61 - LFC:Last File Created 18/02/2013 - 07:15:53 ---A- C:\Users\By.keita\Downloads\Besse-Tiberghien_2003.pdf [1368901]
O61 - LFC:Last File Created 18/02/2013 - 07:16:23 ---A- C:\Users\By.keita\Downloads\Texte 6.1.pdf [200163]
O61 - LFC:Last File Created 18/02/2013 - 07:16:25 ---A- C:\Users\By.keita\Downloads\Texte 6.2.pdf [192845]
O61 - LFC:Last File Created 18/02/2013 - 07:21:33 R---- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\Le%20paysage%20de%20la%20g�ographie%20(1)302811702105759631\Le%20paysage%20de%20la%20g�ographie%20(1)((Autosaved-302811282493546015)).ppt [2212203]
O61 - LFC:Last File Created 18/02/2013 - 07:21:34 ---A- C:\Users\By.keita\AppData\Roaming\Microsoft\PowerPoint\Le%20paysage%20de%20la%20g�ographie%20(1)302811702105759631\Le%20paysage%20de%20la%20g�ographie%20(1).pptx.lnk [635]
O61 - LFC:Last File Created 18/02/2013 - 07:30:41 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\Paths\CURRENT [16]
O61 - LFC:Last File Created 18/02/2013 - 07:30:41 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\Paths\MANIFEST-002727 [88]
O61 - LFC:Last File Created 18/02/2013 - 07:30:41 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT [16]
O61 - LFC:Last File Created 18/02/2013 - 07:30:41 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\MANIFEST-003072 [142]
O61 - LFC:Last File Created 18/02/2013 - 07:30:42 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\.usage [24]
O61 - LFC:Last File Created 18/02/2013 - 07:30:42 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\00\00000002 [774439]
O61 - LFC:Last File Created 18/02/2013 - 07:31:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\QuotaManager [20480]
O61 - LFC:Last File Created 18/02/2013 - 07:31:11 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\QuotaManager-journal [6704]
O61 - LFC:Last File Created 18/02/2013 - 07:33:09 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom [7639896]
O61 - LFC:Last File Created 18/02/2013 - 07:33:09 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Safe Browsing Download [1199268]
O61 - LFC:Last File Created 18/02/2013 - 07:33:10 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set [1482228]
O61 - LFC:Last File Created 18/02/2013 - 07:33:10 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Safe Browsing Csd Whitelist [134512]
O61 - LFC:Last File Created 18/02/2013 - 07:33:10 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Safe Browsing Download Whitelist [19780]
O61 - LFC:Last File Created 18/02/2013 - 07:40:42 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\Paths\LOG [151]
O61 - LFC:Last File Created 18/02/2013 - 07:40:42 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOG [151]
O61 - LFC:Last File Created 18/02/2013 - 07:40:43 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\msn.db [81920]
O61 - LFC:Last File Created 18/02/2013 - 07:40:43 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\msn.db-journal [57968]
O61 - LFC:Last File Created 18/02/2013 - 07:40:47 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\dc.db [45056]
O61 - LFC:Last File Created 18/02/2013 - 07:40:56 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\bistats.db [69632]
O61 - LFC:Last File Created 18/02/2013 - 07:40:56 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\bistats.db-journal [37448]
O61 - LFC:Last File Created 18/02/2013 - 07:40:56 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\config.xml [8844]
O61 - LFC:Last File Created 18/02/2013 - 07:40:56 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\httpfe\cookies.dat [12]
O61 - LFC:Last File Created 18/02/2013 - 07:40:56 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\main.db [2224128]
O61 - LFC:Last File Created 18/02/2013 - 07:40:56 ---A- C:\Users\By.keita\AppData\Roaming\Skype\djefboy\main.db-journal [501200]
O61 - LFC:Last File Created 18/02/2013 - 07:40:56 ---A- C:\Users\By.keita\AppData\Roaming\Skype\shared.xml [68685]
O61 - LFC:Last File Created 18/02/2013 - 07:41:18 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor [482304]
O61 - LFC:Last File Created 18/02/2013 - 07:41:18 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal [16384]
O61 - LFC:Last File Created 18/02/2013 - 07:41:18 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Shortcuts [135168]
O61 - LFC:Last File Created 18/02/2013 - 07:41:18 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal [16384]
O61 - LFC:Last File Created 18/02/2013 - 07:41:28 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity [829]
O61 - LFC:Last File Created 18/02/2013 - 07:41:30 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Archived History [2998272]
O61 - LFC:Last File Created 18/02/2013 - 07:41:30 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal [16384]
O61 - LFC:Last File Created 18/02/2013 - 07:41:48 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Favicons [7258112]
O61 - LFC:Last File Created 18/02/2013 - 07:41:48 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal [16384]
O61 - LFC:Last File Created 18/02/2013 - 07:41:48 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History [12091392]
O61 - LFC:Last File Created 18/02/2013 - 07:41:48 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-02 [19111936]
O61 - LFC:Last File Created 18/02/2013 - 07:41:48 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-02-journal [16384]
O61 - LFC:Last File Created 18/02/2013 - 07:41:48 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\History-journal [16384]
O61 - LFC:Last File Created 18/02/2013 - 07:41:53 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3 [2322432]
O61 - LFC:Last File Created 18/02/2013 - 07:41:53 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3-journal [16384]
O61 - LFC:Last File Created 18/02/2013 - 07:42:02 ---A- C:\Users\By.keita\Downloads\ZHPDiag2.exe [5400486]
O61 - LFC:Last File Created 18/02/2013 - 07:42:21 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies [6144]
O61 - LFC:Last File Created 18/02/2013 - 07:42:21 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies-journal [2576]
O61 - LFC:Last File Created 18/02/2013 - 07:46:04 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Preferences [97678]
O61 - LFC:Last File Created 18/02/2013 - 07:46:40 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Cookies [987136]
O61 - LFC:Last File Created 18/02/2013 - 07:46:40 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal [16384]
O61 - LFC:Last File Created 18/02/2013 - 07:47:18 ---A- C:\Users\By.keita\AppData\Local\Google\Chrome\User Data\Local State [23745]
~ Scan Files in 03mn 28s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: UsbFix By El Desaparecido - (.El Desaparecido.) [HKLM] -- Usbfix
O63 - Logiciel: ZHPDiag 1.3.5 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ Scan ADS in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 19/12/2012 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag) .(.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswFsBlk.sys (aswFsBlk) .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK
O64 - Services: CurCS - 30/10/2012 - C:\Windows\system32\drivers\aswMonFlt.sys (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - 15/10/2012 - C:\Windows\system32\Drivers\aswrdr2.sys (aswRdr) .(.AVAST Software - avast! WFP Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswSnx.sys (aswSnx) .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswSP.sys (aswSP) .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - 30/10/2012 - C:\Windows\System32\Drivers\aswTdi.sys (aswTdi) .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI
O64 - Services: CurCS - 16/01/2013 - C:\Windows\System32\DRIVERS\cmderd.sys (cmderd) .(.COMODO - COMODO Internet Security Eradication Driver.) - LEGACY_CMDERD
O64 - Services: CurCS - 16/01/2013 - C:\Windows\System32\DRIVERS\cmdguard.sys (cmdGuard) .(.COMODO - COMODO Internet Security Sandbox Driver.) - LEGACY_CMDGUARD
O64 - Services: CurCS - 16/01/2013 - C:\Windows\System32\DRIVERS\cmdhlp.sys (cmdHlp) .(.COMODO - COMODO Internet Security Helper Driver.) - LEGACY_CMDHLP
O64 - Services: CurCS - 16/01/2013 - C:\Windows\System32\DRIVERS\inspect.sys (inspect) .(.COMODO - COMODO Internet Security Firewall Driver.) - LEGACY_INSPECT
O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
~ Scan Services in 00mn 02s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Adobe Systems, Inc. - Adobe Dreamweaver CS5.) -- C:\Program Files\Adobe\Adobe Dreamweaver CS5\Dreamweaver.exe
O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\By.keita\AppData\Local\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - http://search.live.com
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} [DefaultScope] - (Yahoo! Search) - http://fr.search.yahoo.com
O69 - SBI: SearchScopes [HKCU] {9D5BD211-422C-4164-9298-BB4186A30F31} - (Bing) - http://www.bing.com
~ Scan Keys in 00mn 00s



---\\ Recherche des services d�marr�s par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Exp�rience d�application.) -- C:\Windows\System32\aelupsvc.dll [62464]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [168448]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de strat�gie de groupe.) -- C:\Windows\System32\gpsvc.dll [591360]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [667136]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [473088]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de num�rotation automatique d�acc�s distant.) -- C:\Windows\System32\rasauto.dll [90624]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d�acc�s distant.) -- C:\Windows\System32\rasmans.dll [285184]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d�interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d��v�nements syst�me (SENS).) -- C:\Windows\System32\sens.dll [49664]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l�application d�assistance � Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [300544]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de t�l�phonie Microsoft� Windows(TM).) -- C:\Windows\System32\tapisrv.dll [241664]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur h�te de session Burea.) -- C:\Windows\System32\termsrv.dll [543232]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise � jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [1929952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arri�re-plan.) -- C:\Windows\System32\qmgr.dll [589312]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivit� IPv6 sur un r�seau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [497152]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d�ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [21504]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d�application.) -- C:\Windows\System32\appinfo.dll [46592]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de d�couverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multim�dias.) -- C:\Windows\System32\mmcss.dll [49664]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux probl�mes.) -- C:\Windows\System32\wercplsupport.dll [61440]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [162816]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de t�ches.) -- C:\Windows\System32\schedsvc.dll [743424]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des cl�s.) -- C:\Windows\System32\kmsvc.dll [71168]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau � distance.) -- C:\Windows\System32\sessenv.dll [99328]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d�ordinateurs.) -- C:\Windows\System32\browser.dll [102400]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des th�mes Windows Shell.) -- C:\Windows\System32\themeservice.dll [37376]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [149504]
~ Scan Services in 00mn 00s



---\\ Recherche particuliere � la racine de certains dossiers (O84)
[MD5.F92067543402AF7026A45B413646ACBF] [SPRF][30/08/2012] (.Foxit Corporation - Foxit Updater.) -- C:\Users\By.keita\AppData\Local\Temp\Foxit Updater.exe [4327024]
[MD5.403DA8628C89287DE1EEE4BF5CD2C582] [SPRF][08/02/2013] (...) -- C:\Users\By.keita\AppData\Local\Temp\mp3el.exe [122880]
[MD5.B04F0E0352DB5B0FEE4C4A93630838B7] [SPRF][05/02/2013] (.Advanced Micro Devices, Inc. - 13-1_vista_win7_win8_32_dd_ccc_whql.) -- C:\Users\By.keita\AppData\Local\Temp\tmp9FF6.exe [99315736]
[MD5.DAC55804225089A15D9F21BBE5031284] [SPRF][08/02/2013] (.NCH Software - WavePad - Logiciel d'�dition audio.) -- C:\Users\By.keita\AppData\Local\Temp\uninst.exe [2025476]
[MD5.034C3FBDE00A3A0E7AFC2E89ACC11970] [SPRF][05/02/2013] (...) -- C:\Users\By.keita\AppData\Local\Temp\~gu-ver.dat [112]
[MD5.46DA30476B579584ED6A6FA8CC0D09B8] [SPRF][18/02/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\By.keita\Desktop\ZHPDiag2.exe [5400486]
~ Scan Files in 00mn 15s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "{06AFF6D8-6948-493C-A9F3-2E0B6E854214}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files\BitTorrent\BitTorrent.exe
O87 - FAEL: "{6E1B0C56-9735-4DF3-B682-9C3E1A94ACA6}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files\BitTorrent\BitTorrent.exe
O87 - FAEL: "TCP Query User{48ED0E21-929E-46BE-8B1D-161F189B078C}C:\cracked license manager 10\lmgrd.exe" | In - Private - P6 - TRUE | .(.Acresso Software Inc. - Acresso Software Inc..) -- C:\cracked license manager 10\lmgrd.exe
O87 - FAEL: "UDP Query User{B8ADFFDC-5194-43EB-9882-3766FDB66F12}C:\cracked license manager 10\lmgrd.exe" | In - Private - P17 - TRUE | .(.Acresso Software Inc. - Acresso Software Inc..) -- C:\cracked license manager 10\lmgrd.exe
O87 - FAEL: "TCP Query User{AE66A696-9912-4370-A2D4-54B33A26C6FD}C:\cracked license manager 10\arcgis.exe" | In - Private - P6 - TRUE | .(...) -- C:\cracked license manager 10\arcgis.exe
O87 - FAEL: "UDP Query User{CBBA648D-9A81-4836-8C9E-A3E2831ECE05}C:\cracked license manager 10\arcgis.exe" | In - Private - P17 - TRUE | .(...) -- C:\cracked license manager 10\arcgis.exe
O87 - FAEL: "{A8120831-1CAC-460F-B7A7-37CDE513A784}" | In - Private - P6 - TRUE | .(.CAPCOM U.S.A, INC. - SUPER STREET FIGHTER IV ARCADE EDITION.) -- C:\Program Files\Capcom\Super Street Fighter IV\SSFIV.exe
O87 - FAEL: "{C76DCD9E-7656-4298-A517-4C7CB57D100A}" | In - Private - P17 - TRUE | .(.CAPCOM U.S.A, INC. - SUPER STREET FIGHTER IV ARCADE EDITION.) -- C:\Program Files\Capcom\Super Street Fighter IV\SSFIV.exe
O87 - FAEL: "{7A3F7C51-4EF4-4510-8915-A98C581EA3E0}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O87 - FAEL: "{276F32ED-5512-434F-BFCA-F0617634769D}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
O87 - FAEL: "{A232CF34-98E3-4D1A-AEB9-B4F93EAC19F8}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{97088761-0CAB-4440-9A29-2914274CE5EE}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{840DE83B-8A0A-41EC-89B8-8CAD5BD56744}" | In - Private - P6 - TRUE | .(.CAPCOM U.S.A, INC. - Street Fighter X Tekken.) -- C:\Program Files\Capcom\Street Fighter X Tekken\SFTK.exe
O87 - FAEL: "{ABA4CAA5-2F0D-44EB-89A2-60BD36898D9C}" | In - Private - P17 - TRUE | .(.CAPCOM U.S.A, INC. - Street Fighter X Tekken.) -- C:\Program Files\Capcom\Street Fighter X Tekken\SFTK.exe
O87 - FAEL: "{CC646218-24E4-4556-8523-A7957BB0561B}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files\Ubisoft\Rayman Origins\Rayman Origins.exe
O87 - FAEL: "{9D2FAF69-B33A-433C-84E6-DCBD5ACC4302}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files\Ubisoft\Rayman Origins\Rayman Origins.exe
O87 - FAEL: "{8465CBA3-678C-440C-B34D-C2B1E20E7E54}" | In - Private - P6 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files\Ubisoft\Rayman Origins\gu.exe
O87 - FAEL: "{72EBAAB2-5DA2-4534-A66E-30B9CA1C5DE9}" | In - Private - P17 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files\Ubisoft\Rayman Origins\gu.exe
O87 - FAEL: "TCP Query User{64D9FD69-209D-4D39-86D3-6FDF2CE77E34}C:\cracked license manager 10\lmgrd.exe" | In - Public - P6 - TRUE | .(.Acresso Software Inc. - Acresso Software Inc..) -- C:\cracked license manager 10\lmgrd.exe
O87 - FAEL: "UDP Query User{1BBFB9DD-7388-41D9-963A-114FF247F1FE}C:\cracked license manager 10\lmgrd.exe" | In - Public - P17 - TRUE | .(.Acresso Software Inc. - Acresso Software Inc..) -- C:\cracked license manager 10\lmgrd.exe
O87 - FAEL: "TCP Query User{6BA76B2F-D945-4F80-B78C-C18F5DB93135}C:\program files\nonoh.net\nonoh\nonoh.exe" | In - Private - P6 - TRUE | .(.Nonoh - Client to make VoIP calls..) -- C:\program files\nonoh.net\nonoh\nonoh.exe
O87 - FAEL: "UDP Query User{05F814CB-7A24-4091-A5C8-15F41226480A}C:\program files\nonoh.net\nonoh\nonoh.exe" | In - Private - P17 - TRUE | .(.Nonoh - Client to make VoIP calls..) -- C:\program files\nonoh.net\nonoh\nonoh.exe
O87 - FAEL: "TCP Query User{A99B2424-65AB-472C-A903-6D9EC00FE541}C:\program files\nonoh.net\nonoh\nonoh.exe" | In - Public - P6 - TRUE | .(.Nonoh - Client to make VoIP calls..) -- C:\program files\nonoh.net\nonoh\nonoh.exe
O87 - FAEL: "UDP Query User{16D45BAC-A773-4F2D-97AE-AB96D9B372DC}C:\program files\nonoh.net\nonoh\nonoh.exe" | In - Public - P17 - TRUE | .(.Nonoh - Client to make VoIP calls..) -- C:\program files\nonoh.net\nonoh\nonoh.exe
O87 - FAEL: "TCP Query User{6543CF60-9005-477A-AE61-F6B7757466EE}C:\cracked license manager 10\arcgis.exe" | In - Public - P6 - TRUE | .(...) -- C:\cracked license manager 10\arcgis.exe
O87 - FAEL: "UDP Query User{6AC18BF8-2038-45BC-9E11-1A02AC54CD0C}C:\cracked license manager 10\arcgis.exe" | In - Public - P17 - TRUE | .(...) -- C:\cracked license manager 10\arcgis.exe
O87 - FAEL: "TCP Query User{EAAC49A7-E1CF-4C3C-91C3-A3834D14DFC2}C:\program files\atari\tdu2\uplauncher.exe" | In - Private - P6 - FALSE | .(.Eden Games - UpLauncher.) -- C:\program files\atari\tdu2\uplauncher.exe
O87 - FAEL: "UDP Query User{929750AD-F2A3-4198-A126-E6FEB6188386}C:\program files\atari\tdu2\uplauncher.exe" | In - Private - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\program files\atari\tdu2\uplauncher.exe
O87 - FAEL: "{724711E0-729B-40CE-999C-17C843E44FF0}" | Out - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe
O87 - FAEL: "TCP Query User{010B6782-0F8B-4762-BB33-FA10C017C4DA}C:\program files\atari\tdu2\testdrive2.exe" | In - Private - P6 - TRUE | .(.Eden Games - Test Drive Unlimited 2.) -- C:\program files\atari\tdu2\testdrive2.exe
O87 - FAEL: "UDP Query User{6D87E4E7-6369-47BE-AE0A-B3254A2CF7BA}C:\program files\atari\tdu2\testdrive2.exe" | In - Private - P17 - TRUE | .(.Eden Games - Test Drive Unlimited 2.) -- C:\program files\atari\tdu2\testdrive2.exe
O87 - FAEL: "{17AD70AD-DF2D-48E4-BE24-B26A302225AF}" | In - Private - P6 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\Users\By.keita\AppData\Roaming\Dropbox\bin\Dropbox.exe
O87 - FAEL: "{B6233774-94B1-4CC8-BDC1-F1245862C415}" | In - Private - P17 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\Users\By.keita\AppData\Roaming\Dropbox\bin\Dropbox.exe
O87 - FAEL: "TCP Query User{099D689A-16F7-4A34-9B24-B109E331F894}C:\users\by.keita\appdata\roaming\dropbox\bin\dropbox.exe" | In - Public - P6 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\users\by.keita\appdata\roaming\dropbox\bin\dropbox.exe
O87 - FAEL: "UDP Query User{66A43E3D-A079-493D-8158-5BD623F2CA51}C:\users\by.keita\appdata\roaming\dropbox\bin\dropbox.exe" | In - Public - P17 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\users\by.keita\appdata\roaming\dropbox\bin\dropbox.exe
O87 - FAEL: "TCP Query User{DF3B964A-CC02-4314-A176-11DF43A2F176}C:\program files\dell voice\dellvoice.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\dell voice\dellvoice.exe (.not file.)
O87 - FAEL: "UDP Query User{CF32F4B3-517C-423A-A3FA-70974492BE4E}C:\program files\dell voice\dellvoice.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\dell voice\dellvoice.exe (.not file.)
O87 - FAEL: "TCP Query User{33BF8FBC-7785-4FB8-8703-668923691217}C:\program files\dell voice\dellvoice.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\dell voice\dellvoice.exe (.not file.)
O87 - FAEL: "UDP Query User{7E9687CA-4B26-4979-BFAD-8BEF29732BF1}C:\program files\dell voice\dellvoice.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\dell voice\dellvoice.exe (.not file.)
O87 - FAEL: "{A8467C22-9D76-4C62-8289-0BAFAD1DC6DD}" | In - None - P17 - TRUE | .(.Skype Limited - Facebook Video Calling.) -- C:\Users\By.keita\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
O87 - FAEL: "TCP Query User{088B848C-7C63-4BE2-9F2D-8EEDD1ED2E7D}C:\program files\atari\tdu2\_uplauncher.exe" |In - Private - P6 - FALSE | .(...) -- C:\program files\atari\tdu2\_uplauncher.exe (.not file.)
O87 - FAEL: "UDP Query User{755F195C-89DC-407D-AF12-D230151E0180}C:\program files\atari\tdu2\_uplauncher.exe" |In - Private - P17 - FALSE | .(...) -- C:\program files\atari\tdu2\_uplauncher.exe (.not file.)
O87 - FAEL: "{13C6B725-F7A8-40A5-97BC-BF039160E79C}" | In - Private - P6 - TRUE | .(...) -- C:\Windows\System32\PnkBstrA.exe
O87 - FAEL: "{FC68D4F2-ADA6-4C44-8F2C-A8A4B9546B99}" | In - Private - P17 - TRUE | .(...) -- C:\Windows\System32\PnkBstrA.exe
O87 - FAEL: "{5773F8FB-0F47-4BDA-A281-0B4906A584E3}" | In - Private - P6 - TRUE | .(...) -- C:\Windows\System32\PnkBstrB.exe
O87 - FAEL: "{055CEF3E-C2EF-448E-A507-F13775D78298}" | In - Private - P17 - TRUE | .(...) -- C:\Windows\System32\PnkBstrB.exe
O87 - FAEL: "{E268A179-41ED-412A-9CD9-BB716875DAC2}" | In - Private - P6 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- C:\Program Files\Ubisoft\FarCry 3\bin\farcry3.exe
O87 - FAEL: "{3A0F4C0D-2DFA-406C-B5B5-88FFD521F940}" | In - Private - P17 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- C:\Program Files\Ubisoft\FarCry 3\bin\farcry3.exe
O87 - FAEL: "{9F9D6068-8A3E-4E60-A126-7D4C70EC8A40}" | In - Private - P6 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- C:\Program Files\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe
O87 - FAEL: "{EDB94CAB-D6B7-4F3C-8BCB-DBCC8E1E8E15}" | In - Private - P17 - TRUE | .(.Ubisoft Entertainment - Far Cry 3.) -- C:\Program Files\Ubisoft\FarCry 3\bin\farcry3_d3d11.exe
O87 - FAEL: "{97A6F0C6-8F94-40DE-ABA5-64C77B62CF56}" | In - Private - P6 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Updater.exe
O87 - FAEL: "{D09C9209-B6FF-4D5B-A3E5-6FF89AC68529}" | In - Private - P17 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Updater.exe
O87 - FAEL: "{DC9DFB7C-AEE5-4510-A665-C7D571D73B71}" | In - Private - P6 - TRUE | .(.Ubisoft - FC3Editor.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Editor.exe
O87 - FAEL: "{5518B617-29EE-4670-BA21-FDAD6D6F14FE}" | In - Private - P17 - TRUE | .(.Ubisoft - FC3Editor.) -- C:\Program Files\Ubisoft\FarCry 3\bin\FC3Editor.exe
O87 - FAEL: "{0030B8C1-8749-4229-8031-073462FEB319}" | In - Private - P6 - TRUE | .(.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2012.) -- C:\Program Files\KONAMI\Pro Evolution Soccer 2012\pes2012.exe
O87 - FAEL: "{4B36C3E0-E65B-4026-9C28-94490FAFB01E}" | In - Private - P17 - TRUE | .(.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2012.) -- C:\Program Files\KONAMI\Pro Evolution Soccer 2012\pes2012.exe
O87 - FAEL: "TCP Query User{61EB0206-A421-4EEE-B7A5-251E22C75773}C:\program files\konami\pro evolution soccer 2013\pes2013.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\konami\pro evolution soccer 2013\pes2013.exe (.not file.)
O87 - FAEL: "UDP Query User{D973DEE7-8DE9-4664-A6E3-C5B9FD674A00}C:\program files\konami\pro evolution soccer 2013\pes2013.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\konami\pro evolution soccer 2013\pes2013.exe (.not file.)
O87 - FAEL: "TCP Query User{8AC1C25C-CF9F-4229-A77B-DC6B276E7D78}E:\crack\pes2013.exe" |In - Private - P6 - TRUE | .(...) -- E:\crack\pes2013.exe (.not file.)
O87 - FAEL: "UDP Query User{24F00664-75F4-4B7A-B915-5CD79FD98C07}E:\crack\pes2013.exe" |In - Private - P17 - TRUE | .(...) -- E:\crack\pes2013.exe (.not file.)
O87 - FAEL: "{8705B984-E653-4B45-8295-AA2E7EAA6664}" | In - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe
O87 - FAEL: "{E23DB75F-400E-444C-BBC0-E0022B58C031}" | In - None - P17 - TRUE | .(.Eden Games - Test Drive Unlimited 2.) -- C:\Program Files\Atari\TDU2\TestDrive2.exe
O87 - FAEL: "{822CAF55-54CD-412D-875B-0C7F56BD6A2B}" | In - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe
O87 - FAEL: "{DC5BB53E-0051-48DE-84E9-2A509331C6FF}" | Out - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe
O87 - FAEL: "{A0630CC6-580B-43A1-9AC5-E5C836549117}" | Out - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe
O87 - FAEL: "{51585C97-1DD9-4DBF-AA6C-E9AEC14CAC44}" | Out - None - P17 - TRUE | .(.Eden Games - Test Drive Unlimited 2.) -- C:\Program Files\Atari\TDU2\TestDrive2.exe
O87 - FAEL: "{A41F7D46-7ADF-496E-878A-539DD693CFAB}" | Out - None - P17 - TRUE | .(.Eden Games - UpLauncher.) -- C:\Program Files\Atari\TDU2\UpLauncher.exe
O87 - FAEL: "{0E36B27A-A896-4AD6-BD39-3EE06DEF77FD}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\Common Files\Comodo\GeekBuddyRSP.exe (.not file.)
O87 - FAEL: "{4D344528-7BC9-4F3E-8786-073050C7ED21}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\Common Files\Comodo\GeekBuddyRSP.exe (.not file.)
~ Scan Firewall in 00mn 01s



---\\ Scan Additionnel (O88)
Database Version : v2.10777 - (17/02/2013)
Cl�s trouv�es (Keys found) : 6
Valeurs trouv�es (Values found) : 0
Dossiers trouv�s (Folders found) : 9
Fichiers trouv�s (Files found) : 0

[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}] =>Adware.AskSBAR
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKLM\Software\Classes\Prod.cap] =>Adware.Bandoo
[HKLM\Software\Classes\esriEditorExt.FeatureFromAreaContainsPointErrorCommand] =>Adware.SPointer
[HKLM\Software\Classes\esriEditorExt.FeatureFromAreaContainsPointErrorCommand.1] =>Adware.SPointer
C:\Program Files\yourfiledownloader =>PUP.YourFileDownloader
C:\Program Files\YouTube Downloader Toolbar =>PUP.Dealio
C:\Program Files\Free Offers from Freeze.com =>Adware.Freeze
C:\Program Files\Common Files\Spigot =>PUP.Dealio
C:\ProgramData\Babylon =>Toolbar.Babylon
C:\ProgramData\InstallMate =>Toolbar.Agent
C:\Users\By.keita\AppData\Roaming\yourfiledownloader =>PUP.YourFileDownloader
C:\Users\By.keita\AppData\Roaming\Babylon =>Toolbar.Babylon
C:\Users\By.keita\AppData\LocalLow\Search Settings =>PUP.Dealio
~ Scan Additionnel in 00mn 46s



---\\ Recherche d�tournement de DNS routeur (O89) (None)

---\\ Product Upgrade Codes (O90)
O90 - PUC: "057978BEDBCC3104FB5D20494DADB50D" . (.Apple Application Support.) -- C:\Windows\Installer\{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}\WinInstall.ico
O90 - PUC: "0826823371681E11F86F8BCAF6798BE8" . (.Google Earth Plug-in.) -- C:\Windows\Installer\{33286280-8617-11E1-8FF6-B8AC6F97B88E}\ARPPRODUCTICON.exe
O90 - PUC: "0C1FF52A6B08B8B45A15CD2565794A80" . (.AMD APP SDK Runtime.) -- C:\Windows\Installer\{A25FF1C0-80B6-4B8B-A551-DC525697A408}\ARPPRODUCTICON.exe
O90 - PUC: "0ED9D238CFA898648991D4BBEDDBE3F4" . (.Microsoft Games for Windows - LIVE Redistributable.) -- C:\Windows\Installer\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}\GameForWindowsLiveRedist.exe
O90 - PUC: "121E2D80A6F7BE3479DF26B944094330" . (.Microsoft_VC90_CRT_x86.) -- C:\Windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe
O90 - PUC: "20B91A1DE71869244AB57058F37DD475" . (.Microsoft_VC80_MFC_x86.) -- C:\Windows\Installer\{D1A19B02-817E-4296-A45B-07853FD74D57}\ARPPRODUCTICON.exe
O90 - PUC: "227C12A7952F67947BAA66855EDFDEFA" . (.Google Drive.) -- C:\Windows\Installer\{7A21C722-F259-4976-B7AA-6658E5FDEDAF}\DriveIcon
O90 - PUC: "25BBB29DFF28DE24A8C3E460F249A47B" . (.Microsoft_VC80_MFCLOC_x86.) -- C:\Windows\Installer\{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}\ARPPRODUCTICON.exe
O90 - PUC: "29D1F74FFD4F3114080B5BF8E21BF082" . (.AMD Media Foundation Decoders.) -- C:\Windows\Installer\{F47F1D92-F4DF-4113-80B0-B58F2EB10F28}\ARPPRODUCTICON.exe
O90 - PUC: "2B754B4DF062165CAC7807B33D7B42AC" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{D4B457B2-260F-C561-CA87-703BD3B724CA}\ARPPRODUCTICON.exe
O90 - PUC: "32FA0F2EF2EF2224A934556EC34CE11F" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}\ARPPRODUCTICON.exe
O90 - PUC: "42962336FAC3858CA3F858898C07917D" . (.Catalyst Control Center.) -- C:\Windows\Installer\{63326924-3CAF-C858-3A8F-8598C87019D7}\ARPPRODUCTICON.exe
O90 - PUC: "44C482C10E8B3DE218452531A3FA5F83" . (.HydraVision.) -- C:\Windows\Installer\{1C284C44-B8E0-2ED3-8154-52133AAFF538}\ARPPRODUCTICON.exe
O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico
O90 - PUC: "4FF2CB855A86A8D40B0B332CDCACF2D2" . (.Logo Design Studio Pro.) -- C:\Windows\Installer\{58BC2FF4-68A5-4D8A-B0B0-33C2CDCA2F2D}\ARPPRODUCTICON.exe
O90 - PUC: "67B3FB7D9FEE8684B9B224BA6FB072A9" . (.Microsoft_VC80_CRT_x86.) -- C:\Windows\Installer\{D7BF3B76-EEF9-4868-9B2B-42ABF60B279A}\ARPPRODUCTICON.exe
O90 - PUC: "68AB67CA7DA73301B7449A0500000010" . (.Adobe Reader 9.5.2.) -- C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A95000000001}\SC_Reader.ico
O90 - PUC: "6D4B04801DD7781458326ECF0070FE7B" . (.Windows Live ID Sign-in Assistant.) -- C:\Windows\Installer\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}\prodicon.ico
O90 - PUC: "74A8220B65A87AA6EB3819B0DB1DC94B" . (.AMD Drag and Drop Transcoding.) -- C:\Windows\Installer\{B0228A47-8A56-6AA7-BE83-910BBDD19CB4}\ARPPRODUCTICON.exe
O90 - PUC: "890A737E161FF6B4FA2268AA3EF4F6DB" . (.Pro Evolution Soccer 2012.) -- C:\Windows\Installer\{E737A098-F161-4B6F-AF22-86AAE34F6FBD}\ARPPRODUCTICON.exe
O90 - PUC: "91785D291CBB3CC40AB8659C8E48CCC2" . (.Microsoft_VC80_CRT_x86.) -- C:\Windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe
O90 - PUC: "9C7DC219B8ABB5161496D75346166DCB" . (.ATI AVIVO Codecs.) -- C:\Windows\Installer\{912CD7C9-BA8B-615B-4169-7D356461D6BC}\ARPPRODUCTICON.exe
O90 - PUC: "B2F5519759897D9468219D52080EEDB5" . (.Bonjour.) -- C:\Windows\Installer\{79155F2B-9895-49D7-8612-D92580E0DE5B}\Bonjour.ico
O90 - PUC: "B4A2F9673A486849DA2DE9A54B4B1E3E" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{769F2A4B-84A3-9486-ADD2-9E5AB4B4E1E3}\ARPPRODUCTICON.exe
O90 - PUC: "B5DEF536D6C2EB94786EA7F6DC22CBA5" . (.Microsoft_VC90_MFC_x86.) -- C:\Windows\Installer\{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}\ARPPRODUCTICON.exe
O90 - PUC: "C7030BC4E565144468EBD02F4EBF28C8" . (.Microsoft Games for Windows Marketplace.) -- C:\Windows\Installer\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}\GameForWindowsLiveDash.exe
O90 - PUC: "CDC23D06EB3E8754AB0192233270DCCD" . (.Logitech Gaming Software 5.10.) -- C:\Windows\Installer\{60D32CDC-E3BE-4578-BA10-29322307CDDC}\ARPPRODUCTICON.exe
O90 - PUC: "DB8F5283487FBBF65ADC585795410870" . (.AMD Catalyst Install Manager.) -- C:\Windows\Installer\{3825F8BD-F784-6FBB-A5CD-857559148007}\ARPPRODUCTICON.exe
O90 - PUC: "E323A2F34C068E14C8BC79511D7D053C" . (.Angry Birds Space.) -- C:\Windows\Installer\{3F2A323E-60C4-41E8-8CCB-9715D1D750C3}\AngryBirdsSpace.exe
O90 - PUC: "E7FF67E4ABEA78C47B88DC745E24B5D9" . (.Skype� 6.1.) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
O90 - PUC: "E805DFCE2A862B1964DDD1307D389DB4" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{ECFD508E-68A2-91B2-46DD-1D03D783D94B}\ARPPRODUCTICON.exe
O90 - PUC: "E873E3303DA65DA4DBBEBC6DB91340C6" . (.Microsoft_VC90_ATL_x86.) -- C:\Windows\Installer\{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}\ARPPRODUCTICON.exe
O90 - PUC: "EA5B44F46A28A8A43A3E2ED48479823E" . (.Microsoft SQL Server 2008 Native Client.) -- C:\Windows\Installer\{4F44B5AE-82A6-4A8A-A3E3-E24D489728E3}\ARPIco
O90 - PUC: "ECA69F379429D40D5E96D116D19028BB" . (.ccc-utility.) -- C:\Windows\Installer\{73F96ACE-9249-D04D-E569-1D611D0982BB}\ARPPRODUCTICON.exe
O90 - PUC: "F06BE6A807CBB101ACECD9774967A7C3" . (.AMD Accelerated Video Transcoding.) -- C:\Windows\Installer\{8A6EB60F-BC70-101B-CACE-9D7794767A3C}\ARPPRODUCTICON.exe
O90 - PUC: "F3D40CFE251A7E745871EEF02610FAFE" . (.Apple Mobile Device Support.) -- C:\Windows\Installer\{EFC04D3F-A152-47E7-8517-EE0F6201AFEF}\Installer.ico
O90 - PUC: "F6071111A6667304777712318267D401" . (.JavaFX 2.1.1.) -- C:\Windows\Installer\{1111706F-666A-4037-7777-211328764D10}\javaIcon.ico
~ Scan Files in 00mn 00s



---\\ Etat g�n�ral des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 17/02/2013 251248 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 19/12/2012 219136 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 26/02/2012 55144 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 30/10/2012 44808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Disabled 0 | (avast! Firewall) . (...) - C:\Program Files\AVAST Software\Avast\afwServ.exe
SR - | Auto 30/08/2011 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 24/01/2013 2319504 | (cmdAgent) . (.COMODO.) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
SS - | Demand 24/01/2013 127184 | (cmdvirth) . (.COMODO.) - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
SS - | Demand 7168 | (EverestDriver) . (...) - C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt
SS - | Demand 10/05/2012 867080 | (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - | Auto 21/05/2012 116648 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 21/05/2012 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SR - | Auto 06/07/2011 326424 | (LMS) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SS - | Demand 02/01/2013 115168 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 76888 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
SS - | Auto 08/01/2013 161536 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
SS - | Demand 19/02/2010 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SR - | Auto 06/07/2011 2656536 | (UNS) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 13/07/2009 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 13/07/2009 20992 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Scan Services in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
~ Scan MBR in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by By.keita at 18/02/2013 07:51:56

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ Scan MBR in 00mn 04s



---\\ Liste des �mulateurs de CD/DVD (Hook du MBR)
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Lite
~ Scan Emulateurs in 00mn 04s



End of the scan (2094 lines in 07mn 12s)(0)