cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Rapport de ZHPDiag v1.34.76 par Nicolas Coolman, Update du 1/02/2013
Run by user at 3/02/2013 17:44:54
State : Version � jour.
UAC : Deactivate by program


---\\ Web Browser
MSIE: Internet Explorer v8.0.7601.17514
MFIE: Mozilla Firefox 18.0.1 v18.0.1 (Defaut)
GCIE: Google Chrome v24.0.1312.57

---\\ Windows Product Information
~ Langage: Fran�ais
Windows 7 Business Edition, 32-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 24367
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1912 MB (30% free)
System Restore: Activ� (Enable)
System drive C: has 89 GB (40%) free of 222 GB

---\\ Logged in mode
~ Computer Name: USER-THINK
~ User Name: user
~ All Users Names: user, HomeGroupUser$, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\user\AppData\Roaming\
~ %Desktop% : C:\Users\user\Desktop\
~ %Favorites% : C:\Users\user\Favorites\
~ %LocalAppData% : C:\Users\user\AppData\Local\
~ %StartMenu% : C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 89 Go of 222 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ CD-ROM drive (Free 0 Go of 4 Go)
Q:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 10 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
~ Scan Security Center in 00mn 00s



---\\ Recherche particuli�re de fichiers g�n�riques
[MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 06:30:54.) -- C:\Windows\Explorer.exe [2616320]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de d�marrage de Windows.) (.14/07/2009 - 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
[MD5.42C671E0525618E23371D0E68282F37C] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.27/10/2012 - 07:26:55.) -- C:\Windows\System32\wininet.dll [981504]
[MD5.6D13E1406F50C66E2A95D97F22C47560] - (.Microsoft Corporation - Application d�ouverture de session Windows.) (.20/11/2010 - 13:17:54.) -- C:\Windows\System32\Winlogon.exe [286720]
[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Biblioth�que de licences.) (.20/11/2010 - 13:21:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
[MD5.9EBBBA55060F786F0FCAA3893BFA2806] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.25/04/2011 - 03:18:03.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 09:38:10.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 09:42:32.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 10:59:29.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 00:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
[MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 09:39:44.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
[MD5.0D87503986BB3DFED58E343FE39DDE13] - (.Microsoft Corporation - Pilote du syst�me de fichiers NT.) (.31/08/2012 - 18:18:09.) -- C:\Windows\system32\Drivers\ntfs.sys [1211760]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parall�le.) (.14/07/2009 - 00:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/07/2009 - 00:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
[MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.20/11/2010 - 11:24:46.) -- C:\Windows\system32\Drivers\rdpdr.sys [133632]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 00:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
[MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 09:39:17.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de clich� instantan� du volume.) (.20/11/2010 - 13:30:16.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cach�s (Cach�/Total)
~ Mes images (My Pictures) : 1/5617
~ Mes musiques (My Musics) : 1/216
~ Mes Videos (My Videos) : 2/256
~ Mes Favoris (My Favorites) : 1/31
~ Mes Documents (My Documents) : 2/22377
~ Mon Bureau (My Desktop) : 1/30
~ Menu demarrer (Programs) : 1/36
~ Scan Hidden Files in 01mn 41s



---\\ Processus lanc�s
[MD5.17DD73B0BBBB722B9BCBDD5F15223BB1] - (.Lenovo Group Limited - NumLock on screen display for ThinkPad.) -- C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe [52600] [PID.692]
[MD5.EF12244CD9CAD4F6A538CF1A415A3AC7] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7612960] [PID.2740]
[MD5.0BF10B23779565BC472BEEBE3B9A20D9] - (.Lenovo Group Limited - On screen display message generator for Thi.) -- C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [68976] [PID.2756]
[MD5.2B083A7AD8DF8698159480A3D53E8B84] - (.Lenovo Group Limited - ThinkPad FnF6 Resident Module.) -- C:\Program Files\Lenovo\HOTKEY\tpfnf6r.exe [62752] [PID.2768]
[MD5.0B1B7568CED61ABF5FD717F28175C96A] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904] [PID.2832]
[MD5.DCEDB74733F562547150CB1D205452AC] - (.Lenovo. - ThinkVantage Active Protection System.) -- C:\Windows\System32\TpShocks.exe [337184] [PID.2976]
[MD5.72D9419E4AA1C40C9E34821722D335C8] - (.Lenovo Group Limited - On screen display drawer.) -- C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe [67432] [PID.3044]
[MD5.697984645E02E9FA59EE09B38EAA6FC5] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [174104] [PID.3052]
[MD5.2B365FF1A4CC06813B892F92AAE4C0B7] - (.Lenovo Group Limited - ThinkPad UltraZoom.) -- C:\Program Files\Lenovo\Zoom\TpScrex.exe [144752] [PID.3060]
[MD5.9B93A0C3B1B838A651F62761CC33FCEC] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\system32\igfxsrvc.exe [252952] [PID.3152]
[MD5.275B5EEED69218D4E9D0B28767728E9E] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [151064] [PID.3456]
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - (...) -- ystem32\rundll32.exe [0] [PID.3592]
[MD5.3B376496187AB240FAC6ECD7BD1251F6] - (.Pas de propri�taire - Message Center Plus Launcher.) -- C:\Program Files\Lenovo\Message Center Plus\MCPLaunch.exe [49976] [PID.3604]
[MD5.D4D3ECDA8CFD103A26780442671FA200] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664] [PID.3648]
[MD5.C377C7EDCA831F4992D34A018B23DA07] - (.Lenovo - ThinkVantage Access Connections Wireless LA.) -- C:\Program Files\Lenovo\Access Connections\ACWLIcon.exe [181608] [PID.3700]
[MD5.5694C01EF1D2BE0813F7FF387F3CEEB0] - (.Lenovo - ThinkVantage Access Connections AC Tray Mo.) -- C:\Program Files\Lenovo\Access Connections\ACTray.exe [435560] [PID.3744]
[MD5.BF0C53DDCF44B80EBDFB51D6BAA51216] - (...) -- C:\Program Files\dvd43\DVD43_Tray.exe [827904] [PID.3792]
[MD5.9DADF1A809ECEC86F04BDE35190D59FE] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files\AVG\AVG2013\avgui.exe [3147384] [PID.3892]
[MD5.A68E801B35F5C2DE06AD5D610178B8C6] - (.Synaptics Incorporated - TouchPad Driver Helper Application.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [128296] [PID.4392]
[MD5.F5258D184061D7F0F4FEF2686E7717E8] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [103720] [PID.4672]
[MD5.3B72BD3603231CB1BC4E6F6607B2BDDA] - (.Intel Corporation - igfxext Module.) -- C:\Windows\system32\igfxext.exe [173080] [PID.4708]
[MD5.48E6868781B4E8BF4B77DBEC7694BCE8] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe [295072] [PID.4756]
[MD5.12916E0642E92561C98B18A2A2D01B14] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848] [PID.4800]
[MD5.35048D8E8A0BF7A797CD5757ACD7EED0] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [107816] [PID.4808]
[MD5.73165EE830627D2B974124F57209F98F] - (.Broadcom Corporation. - Bluetooth Tray Application.) -- C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe [795936] [PID.5096]
[MD5.C723B02BA5BF788C9F91746BF37EACD9] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\3.0.313\SSScheduler.exe [271808] [PID.5104]
[MD5.749949494676218FFA99501F4AA22ECC] - (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe [10376704] [PID.5556]
[MD5.4EE367B8B1964160A1F1B80095183D3A] - (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin [10368512] [PID.5564]
[MD5.8667D9B4FFA3ABD1EC3D61004667E1DA] - (.BitLeader - Pas de description.) -- C:\Program Files\lg_fwupdate\fwupdate.exe [871536] [PID.1900]
[MD5.72CB29B523061FF64B3F66B8F3A5E034] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [5648896] [PID.2808]
[MD5.5EFDBEAECD69E250E5BA4A2950203CD4] - (.Microsoft Corporation - Sauvegarde Microsoft� Windows.) -- C:\Windows\system32\sdclt.exe [1131008] [PID.4024]
~ Scan Processes Running in 00mn 02s



---\\ Google Chrome, D�marrage,Recherche,Extensions (G0,G1,G2)
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences
G0 - GCSP: Preference [User Data\Default][HomePage] https://www.google.be
G0 - GCSP: Preference [User Data\Default] https://www.google.be
G1 - GCS: Preference [User Data\Default] None
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mjizk69f.default\prefs.js
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mjizk69f.default\user.js
M3 - MFPP: Plugins - [user] -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mjizk69f.default\searchplugins\conduit.xml
M3 - MFPP: Plugins - [user] -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mjizk69f.default\searchplugins\SearchResults.xml
M3 - MFPP: Plugins - [user] -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mjizk69f.default\searchplugins\Search_Results.xml
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\searchcom.xml
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [user - mjizk69f.default] http://www.google.be
M2 - MFEP: prefs.js [user - mjizk69f.default\addon@freecorder.com] [] Freecorder v7.0.0.12 (.freecorder.com.)
M2 - MFEP: prefs.js [user - mjizk69f.default\{1392b8d2-5c05-419f-a8f6-b9f15a596612}] [] Freecorder Community Toolbar v3.16.0.100 (.Conduit Ltd..)
M2 - MFEP: prefs.js [user - mjizk69f.default\{6AC85730-7D0F-4de0-B3FA-21142DD85326}] [] ColorZilla v2.8 (.Alex Sirota.)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.0.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Mozilla Firefox\Plugins\nppl3260.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN:Firefox Plugin Navigator . (.RealPlayer - RealPlayer Download Plugin.) -- C:\Program Files\Mozilla Firefox\Plugins\nprpplugin.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.6.8.638.) -- C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll
P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.11.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.11.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.11.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@mcafee.com/McAfeeMssPlugin] - (.McAfee, Inc. - McAfee MSS+ NPAPI Plugin.) -- C:\Program Files\McAfee Security Scan\3.0.313\npMcAfeeMss.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.10411.0.) -- c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3508.1109] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@real.com/nppl3260;version=16.0.0.282] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- c:\program files\real\realplayer\Netscape6\nppl3260.dll
P2 - FPN: [HKLM] [@real.com/nprndlchromebrowserrecordext;version=1.3.0] - (.RealNetworks, Inc. - RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In.) -- C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchrom
P2 - FPN: [HKLM] [@real.com/nprndlhtml5videoshim;version=1.3.0] - (.RealNetworks, Inc. - RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In.) -- C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll
P2 - FPN: [HKLM] [@real.com/nprndlpepperflashvideoshim;version=1.3.0] - (.RealNetworks, Inc. - RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In.) -- C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvid
P2 - FPN: [HKLM] [@real.com/nprpchromebrowserrecordext;version=15.0.6.14] - (.RealNetworks, Inc. - RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrec
P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=15.0.6.14] - (.RealNetworks, Inc. - RealPlayer(tm) HTML5VideoShim Plug-In.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
P2 - FPN: [HKLM] [@real.com/nprpplugin;version=16.0.0.282] - (.RealPlayer - RealPlayer Download Plugin.) -- c:\program files\real\realplayer\Netscape6\nprpplugin.dll
P2 - FPN: [HKLM] [@realnetworks.com/npdlplugin;version=1] - (.RealDownloader - RealDownloader Plugin.) -- C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.5] - (.VideoLAN - VLC media player Web Plugin 2.0.2.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.01.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
P2 - FPN: [HKCU] [@talk.google.com/GoogleTalkPlugin] - (.Google - Version 3.13.1.11376.) -- C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
P2 - FPN: [HKCU] [@talk.google.com/O3DPlugin] - (.Pas de propri�taire - Google Talk Plugin Video Accelerator version:0.1.44.23.) -- C:\Users\user\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\user\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\user\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll
~ Scan Firefox Browser in 00mn 01s



---\\ Internet Explorer, D�marrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll
R3 - URLSearchHook: (no name) - {BFEAF3D0-307E-4F52-B64A-AF56BABE82B5} . (.Microsoft Corporation - Navigateur Internet.) (No version) -- (.not file.)
R3 - URLSearchHook: (no name) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} . (.Microsoft Corporation - Navigateur Internet.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 24



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} . (.McAfee, Inc. - Quick Browser Identifier for MSS+ Tool.) -- C:\Program Files\McAfee Security Scan\3.0.313\McAfeeMSS_IE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealDownloader - RealPlayer Download and Record Plugin.) -- C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecor
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} Cl� orpheline
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft� Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Freecorder extension - {B15BBE59-42F5-4206-B3F0-BE98F5DC4B93} . (.Applian Technologies Inc. - ScriptHost.) -- C:\Program Files\Freecorder extension\ScriptHost.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll
~ Scan BHO in 00mn 00s



---\\ Applications d�marr�es par registre & par dossier (O4)
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [TPHOTKEY] . (.Lenovo Group Limited - On screen display message generator for Thi.) -- C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
O4 - HKLM\..\Run: [LENOVO.TPFNF6R] . (.Lenovo Group Limited - ThinkPad FnF6 Resident Module.) -- C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [TpShocks] . (.Lenovo. - ThinkVantage Active Protection System.) -- C:\Windows\System32\TpShocks.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [PWMTRV] rundll32 C:\Program Files\ThinkPad\UTILIT~1\PWMTR32V.dll (.not file.)
O4 - HKLM\..\Run: [Message Center Plus] . (.Pas de propri�taire - Message Center Plus Launcher.) -- C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe
O4 - HKLM\..\Run: [AcWin7Hlpr] . (...) -- C:\Program Files\Lenovo\Access Connections\AcTBenabler.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ACWLIcon] . (.Lenovo - ThinkVantage Access Connections Wireless LA.) -- C:\Program Files\Lenovo\Access Connections\ACWLIcon.exe
O4 - HKLM\..\Run: [ACTray] . (.Lenovo - ThinkVantage Access Connections AC Tray Mo.) -- C:\Program Files\Lenovo\Access Connections\ACTray.exe
O4 - HKLM\..\Run: [dvd43] . (...) -- C:\Program Files\dvd43\dvd43_tray.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files\AVG\AVG2013\avgui.exe
O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- c:\program files\real\realplayer\Update\realsched.exe
O4 - HKLM\..\Run: [UpdateLBPShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [LGODDFU] . (.Bitleader - Pas de description.) -- C:\Program Files\lg_fwupdate\lgfw.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-591723367-1614411120-1145975636-1003\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PNGGauntlet.lnk . (...) -- C:\Users\user\AppData\Roaming\Microsoft\Installer\{B2D251E2-A78B-42C2-9D94-695A8CCC17E9}\pnggauntlet.ico
O4 - Global Startup: C:\Users\user\Desktop\abrViewer.NET - Raccourci.lnk . (...) -- C:\Program Files\abrViewer.NET\Release_NET20_2.0\abrViewer.NET.exe
O4 - Global Startup: C:\Users\user\Desktop\AoA Audio Extractor.lnk . (...) -- C:\Program Files\AoA Audio Extractor\AoAAudioExtractor.exe
O4 - Global Startup: C:\Users\user\Desktop\Audacity.lnk . (.The Audacity Team.) -- C:\Program Files\Audacity\audacity.exe
O4 - Global Startup: C:\Users\user\Desktop\AVStoDVD.lnk . (.http://sourceforge.net/projects/avstodvd.) -- C:\Program Files\AVStoDVD\AVStoDVD.exe
O4 - Global Startup: C:\Users\user\Desktop\Dropbox.lnk . (.Dropbox, Inc..) -- C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: C:\Users\user\Desktop\DVD Flick.lnk . (.Dennis "Exl" Meuwissen.) -- C:\Program Files\DVD Flick\dvdflick.exe
O4 - Global Startup: C:\Users\user\Desktop\DVD2AVI - Raccourci.lnk . (...) -- C:\Users\user\Documents\Program Setups et parfois executables\DVD2AVI.exe
O4 - Global Startup: C:\Users\user\Desktop\DVD43.lnk . (...) -- C:\Program Files\dvd43\DVD43_Tray.exe
O4 - Global Startup: C:\Users\user\Desktop\Easy Graphic Converter 1.2.lnk . (...) -- C:\Program Files\Easy Graphic Converter\ImageConverter.exe
O4 - Global Startup: C:\Users\user\Desktop\Easy Thumbnails.lnk . (.Fookes Software.) -- C:\Program Files\Easy Thumbnails\EzThumbs.exe
O4 - Global Startup: C:\Users\user\Desktop\emoticons-ajwan - Raccourci.lnk . (...) -- C:\Users\user\Pictures\Site AJWAN\Emoticons et icones\My-emoticons\emoticons-ajwan
O4 - Global Startup: C:\Users\user\Desktop\FILEminimizer Pictures.lnk . (.balesio AG.) -- C:\Program Files\FILEminimizer Pictures\FILEminimizer.exe
O4 - Global Startup: C:\Users\user\Desktop\Free FLV Converter.lnk . (.Koyote Soft.) -- C:\Program Files\Free FLV Converter\FreeFLVConverter.exe
O4 - Global Startup: C:\Users\user\Desktop\Google Chrome.lnk . (.Google Inc..) -- C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\user\Desktop\HiJackThis.lnk . (.Trend Micro Inc..) -- C:\Users\user\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
O4 - Global Startup: C:\Users\user\Desktop\Internet Explorer Troubleshooting.url . (.Trend Micro Inc..) -- C:\Users\user\Desktop\Internet Explorer Troubleshooting.url
O4 - Global Startup: C:\Users\user\Desktop\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\user\Desktop\Notepad++.lnk . (.Don HO don.h@free.fr.) -- C:\Program Files\Notepad++\notepad++.exe
O4 - Global Startup: C:\Users\user\Desktop\Play65.lnk . (.Play65.) -- C:\Users\user\AppData\Local\Play65\Play65.exe
O4 - Global Startup: C:\Users\user\Desktop\PngGauntlet - Raccourci.lnk . (.Benjamin Hollis.) -- C:\Program Files\PNGGauntlet\PngGauntlet.exe
O4 - Global Startup: C:\Users\user\Desktop\poedit - Raccourci.lnk . (.Vaclav Slavik.) -- C:\Program Files\Poedit\bin\poedit.exe
O4 - Global Startup: C:\Users\user\Desktop\Scribus 1.3.3.14.lnk . (.The Scribus Team.) -- C:\Program Files\Scribus 1.3.3.14\Scribus.exe
O4 - Global Startup: C:\Users\user\Desktop\WampServer.lnk . (.Aestan Software.) -- C:\wamp\wampmanager.exe
O4 - Global Startup: C:\Users\user\Desktop\Windows Movie Maker 2.6.lnk . (.Microsoft Corporation.) -- C:\Windows\Installer\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}\MOVIEMK.exe
O4 - Global Startup: C:\Users\user\Desktop\WM Converter.lnk . (.All Alex, Inc.) -- C:\Program Files\WMR11\WM Converter\WM Converter.exe
O4 - Global Startup: C:\Users\user\Desktop\WM Recorder 12.1.lnk . (.All Alex,Inc.) -- C:\Program Files\WMR11\WMR11.exe
O4 - Global Startup: C:\Users\user\Desktop\YoodaMap.lnk . (...) -- C:\Users\user\AppData\Roaming\Microsoft\Installer\{633A27AE-C1C4-48E7-85D4-3C34994B5331}\_DB80C12A9E00_495E_9E74_DCEEA3A22A50.exe
O4 - Global Startup: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
~ Scan Global Startup in 00mn 01s



---\\ Invisibilit� de l'ic�ne d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ Scan IE Control Panel in 00mn 00s



---\\ Boutons situ�s sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
O9 - Extra button: Skype Click to Call - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
O9 - Extra button: @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} . (...) -- C:\Program Files\ThinkPad\Bluetooth Software\bt_hot_icon.ico
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d�affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corp. - Microsoft� Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft� Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
~ Scan Winsock in 00mn 00s



---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
O15 - Trusted Zone: [HKCU\...\Domains] http.jalbum.net
O15 - Trusted Zone: [HKCU\...\Domains\www] http.jalbum.net
~ Scan IE Zone Confiance in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{9D707A54-31AE-421A-AA7F-1E88C063A250}: DhcpNameServer = 61.12.0.50 61.12.0.99
O17 - HKLM\System\CCS\Services\Tcpip\..\{BD5BBB0F-0D46-4091-85CA-71E7ED662E2C}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{9D707A54-31AE-421A-AA7F-1E88C063A250}: DhcpNameServer = 61.12.0.50 61.12.0.99
O17 - HKLM\System\CS1\Services\Tcpip\..\{BD5BBB0F-0D46-4091-85CA-71E7ED662E2C}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{9D707A54-31AE-421A-AA7F-1E88C063A250}: DhcpNameServer = 61.12.0.50 61.12.0.99
O17 - HKLM\System\CS2\Services\Tcpip\..\{BD5BBB0F-0D46-4091-85CA-71E7ED662E2C}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contr�le ActiveX pour le flux vid�o.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft� InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} . (...) --
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft� Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft� InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\Program Files\Common Files\microsoft shared\Web Components\10\OWC10.dll
O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\Program Files\Common Files\microsoft shared\Web Components\11\OWC11.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files\Common Files\Skype\Skype4COM.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contr�le ActiveX pour le flux vid�o.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-cl�s Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Scan Winlogon in 00mn 00s



---\\ Cl� de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non d�sactiv�s (O23)
O23 - Service: (AcPrfMgrSvc) . (.Lenovo - ThinkVantage Access Connections Profile Man.) - C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe
O23 - Service: (AcSvc) . (.Lenovo - ThinkVantage Access Connections Main Servic.) - C:\Program Files\Lenovo\Access Connections\AcSvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - C:\Program Files\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) . (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - C:\Program Files\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) . (.Lenovo - ThinkPad Power Management Service.) - C:\Windows\System32\ibmpmsvc.exe
O23 - Service: IviRegMgr (IviRegMgr) . (.InterVideo - RegMgr Module.) - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) . (.Lenovo Group Limited - Microphone Mute Controll Service for ThinkP.) - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: RealNetworks Downloader Resolver Service (RealNetworks Downloader Resolver Service) . (...) - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Servic (RegSrvc) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: System Update (SUService) . (.Lenovo Group Limited - ThinkVantage System Update Service.) - c:\Program Files\Lenovo\System Update\SUService.exe
O23 - Service: ThinkVantage Registry Monitor Service (ThinkVantage Registry Monitor Service) . (.Lenovo Group Limited - About ThinkVantage Technologies.) - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
O23 - Service: On Screen Display (TPHKSVC) . (.Lenovo Group Limited - On screen display Fn+Fx handler.) - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
~ Scan Services in 00mn 06s



---\\ Enum�ration Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ T�ches planifi�es en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-591723367-1614411120-1145975636-1003Core.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-591723367-1614411120-1145975636-1003UA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\ROC_REG_JAN_DELETE.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SystemToolsDailyTest.job
[MD5.424877CB9D5517F980FF7BACA2EB379D] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
[MD5.74660C1E9139D95F4E006E8E49EA4986] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-591723367-1614411120-1145975636-1003Core] (.Google Inc..) -- C:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-591723367-1614411120-1145975636-1003UA] (.Google Inc..) -- C:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe
[MD5.70D09D759312BA7F9CF01DE47700F8F8] [APT] [PCDEventLauncher] (.PC-Doctor, Inc..) -- C:\Program Files\PC-Doctor\sessionchecker.exe
[MD5.7CF0CD380764C6D2BC6EB99D5319CD68] [APT] [PCDoctorBackgroundMonitorTask] (.PC-Doctor, Inc..) -- C:\Program Files\PC-Doctor\uaclauncher.exe
[MD5.6D3D07F7B369F25E69271458DF674F9C] [APT] [PMTask] (.Lenovo Group Limited.) -- C:\Program Files\ThinkPad\Utilities\PWMIDTSV.exe
[MD5.6A8E0E72D390B95EFE3A7FFA17D5C504] [APT] [RealDownloaderDownloaderScheduledTaskS-1-5-21-591723367-1614411120-1145975636-1003] (.RealNetworks, Inc..) -- C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
[MD5.B7D0F1FA8926F0D58B7A000E5DAB4B3E] [APT] [RealDownloaderRealUpgradeLogonTaskS-1-5-21-591723367-1614411120-1145975636-1003] (.RealNetworks, Inc..) -- C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
[MD5.B7D0F1FA8926F0D58B7A000E5DAB4B3E] [APT] [RealDownloaderRealUpgradeScheduledTaskS-1-5-21-591723367-1614411120-1145975636-1003] (.RealNetworks, Inc..) -- C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
[MD5.9A7F1691F76E019C11481B6355125072] [APT] [RealPlayerRealUpgradeLogonTaskS-1-5-21-591723367-1614411120-1145975636-1003] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
[MD5.9A7F1691F76E019C11481B6355125072] [APT] [RealPlayerRealUpgradeScheduledTaskS-1-5-21-591723367-1614411120-1145975636-1003] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
[MD5.9A7F1691F76E019C11481B6355125072] [APT] [RealUpgradeLogonTaskS-1-5-21-591723367-1614411120-1145975636-1003] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
[MD5.9A7F1691F76E019C11481B6355125072] [APT] [RealUpgradeScheduledTaskS-1-5-21-591723367-1614411120-1145975636-1003] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
[MD5.F0876747D83C1067BD71DAAF9F59325F] [APT] [ROC_REG_JAN_DELETE] (...) -- C:\ProgramData\AVG January 2013 Campaign\ROC.exe
[MD5.7CF0CD380764C6D2BC6EB99D5319CD68] [APT] [SystemToolsDailyTest] (.PC-Doctor, Inc..) -- C:\Program Files\PC-Doctor\uaclauncher.exe
[MD5.1027DF7F909776789D9D1C2C30410166] [APT] [{0AD30371-9971-4905-AFA6-E96FA495CDBA}] (...) -- C:\users\user\program setups\OOo_3.3.0_Win_x86_install-wJRE_fr.exe
[MD5.C8F9B804DB9065E4EBBFC4508F6B2F8F] [APT] [{268B82BE-8D81-4E12-A9A3-6422905B25AB}] (.OpenOffice.org.) -- C:\Program Files\OpenOffice.org 3\program\scalc.exe
[MD5.C8F9B804DB9065E4EBBFC4508F6B2F8F] [APT] [{3A3BB3CC-B211-4FD4-A74E-21205995744F}] (.OpenOffice.org.) -- C:\Program Files\OpenOffice.org 3\program\scalc.exe
[MD5.C1FAE36B870F10F2038B9D1DADB38D18] [APT] [{4329E8F9-90CB-4663-918B-AF1193D34900}] (.Lenovo Group Ltd..) -- C:\Program Files\MLPS\APPS\MUIInstaller\LENMNC.exe
[MD5.44C1DE9D847FC6A27C6C1C6A2BBD5414] [APT] [{48ED6F4F-0AFC-4CBD-B468-2F6CCCAACB50}] (.The Scribus Team.) -- C:\users\user\program setups\scribus-1.3.3.14-win32-install.exe
[MD5.38A248E45366823BB566F97ABDFC1CB3] [APT] [{63553E1C-AB0D-4268-B9EC-7A1F97629D90}] (.The Scribus Team.) -- C:\Program Files\Scribus 1.3.3.14\uninst.exe
[MD5.00000000000000000000000000000000] [APT] [{89B30CD8-A337-4651-9673-C99758321662}] (...) -- C:\users\user\Desktop\graphic-converter.exe (.not file.)
[MD5.406260333000CC792300BFA43230709E] [APT] [{A013F63F-E9D6-47B0-9B55-9887DEF2A1F3}] (.Play65.) -- C:\users\user\AppData\Local\Play65\Play65.exe
[MD5.00000000000000000000000000000000] [APT] [{BC6F4ACA-9478-42D4-81DD-43B13C46B617}] (...) -- D:\STARTER\FRENCH\SETUP.exe (.not file.)
[MD5.C8F9B804DB9065E4EBBFC4508F6B2F8F] [APT] [{CEA75DAD-9820-4E4F-85E8-BAA84B1363A4}] (.OpenOffice.org.) -- C:\Program Files\OpenOffice.org 3\program\scalc.exe
[MD5.00000000000000000000000000000000] [APT] [{FECA29B4-16A5-4A0A-9425-6497D2346B28}] (...) -- C:\users\user\Desktop\Windows_Movie_Maker_2.0.exe (.not file.)
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
[MD5.A0AEB27264E00B8AB92144304509FA89] [APT] [SwitchDowngrade] (.NCH Software.) -- C:\Program Files\NCH Software\Switch\switch.exe
[MD5.00000000000000000000000000000000] [APT] [SwitchReminder] (...) -- C:\Program Files\NCH Swift Sound\Switch\Switch.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [switchShakeIcon] (...) -- C:\Program Files\NCH Swift Sound\Switch\Switch.exe (.not file.)
[MD5.B392F2B44064DE5BF64DF26EDE74C829] [APT] [LaunchRnR] (.Lenovo Limited Group Corporation.) -- C:\Program Files\Lenovo\Rescue and Recovery\rrcmd.exe
~ Scan Scheduled Task in 00mn 15s



---\\ Composants install�s (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d�initialisation d�Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d�IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.6.0_22\bin\regutils.dll
O40 - ASIC: Macromedia Shockwave Director 8.5.1 - {166B1BCA-3F9C-11CF-8075-444553540000} . (.Adobe Systems, Inc. - Shockwave ActiveX Control.) -- C:\Windows\system32\Adobe\Director\SwDir_1168638.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d�initialisation d�Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r32.) -- C:\Windows\system32\Macromed\Flash\Flash10c.ocx
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lanc�s au d�marrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (AVGIDSDriver) . (.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) - C:\Windows\System32\DRIVERS\avgidsdriverx.sys
O41 - Driver: (AVGIDSShim) . (.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Loader Dri.) - C:\Windows\System32\DRIVERS\avgidsshimx.sys
O41 - Driver: (Avgldx86) . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - C:\Windows\System32\DRIVERS\avgldx86.sys
O41 - Driver: (Avgtdix) . (.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - C:\Windows\System32\DRIVERS\avgtdix.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (lenovo.smi) . (.Lenovo Group Limited - SMI Driver for Lenovo system.) - C:\Windows\System32\DRIVERS\smiif32.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-syst�me de mise en m�moire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (TPPWRIF) . (.Lenovo Group Limited - Power Manager.) - C:\Windows\System32\drivers\Tppwr32v.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 38s



---\\ Logiciels install�s (O42)
O42 - Logiciel: 7-Zip 9.20 - (.Pas de propri�taire.) [HKLM] -- 7-Zip
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM] -- AVG
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM] -- {731E713B-C13E-4527-B624-8A6DF2D33DAF}
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM] -- {7FD093C2-3493-4B17-BB15-B129A7D1DC51}
O42 - Logiciel: AVStoDVD 2.5.1 - (.MrC.) [HKLM] -- AVStoDVD
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {ACEB2BAF-96DF-48FD-ADD5-43842D4C443D}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems, Inc..) [HKLM] -- {B7B3E9B3-FB14-4927-894B-E9124509AF5A}
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader XI (11.0.01) - Fran�ais - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: AoA Audio Extractor 1.0 - (.AoAMedia.Com.) [HKLM] -- AoA Audio Extractor_is1
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {F5266D28-E0B2-4130-BFC5-EE155AD514DC}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Audacity 2.0.2 - (.Audacity Team.) [HKLM] -- Audacity_is1
O42 - Logiciel: AviSynth 2.5 - (.Pas de propri�taire.) [HKLM] -- AviSynth
O42 - Logiciel: BGroom - (.Pas de propri�taire.) [HKLM] -- BGroom
O42 - Logiciel: Best Free Image Converter 3.14 - (.zxt2007.com.) [HKLM] -- {E90BC81F-2928-45F1-91E2-70E901A114B0}_is1
O42 - Logiciel: Business Contact Manager for Outlook 2007 SP2 - (.Microsoft Corporation.) [HKLM] -- Business Contact Manager
O42 - Logiciel: Business Contact Manager for Outlook 2007 SP2 - (.Microsoft Corporation.) [HKLM] -- {B32C4059-6E7A-41EF-AD20-56DF1872B923}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
O42 - Logiciel: Create Recovery Media - (.Lenovo Group Limited.) [HKLM] -- {50DC5136-21E8-48BC-97E5-1AD055F6B0B6}
O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: DHTML Editing Component - (.Microsoft Corporation.) [HKLM] -- {2EA870FA-585F-4187-903D-CB9FFD21E2E0}
O42 - Logiciel: DVD Flick 1.3.0.7 - (.Dennis Meuwissen.) [HKLM] -- DVD Flick_is1
O42 - Logiciel: DVD43 v4.6.0 - (.Pas de propri�taire.) [HKLM] -- DVD43_is1
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU] -- Dropbox
O42 - Logiciel: EPSON Copy Utility - (.Pas de propri�taire.) [HKLM] -- {B69CC1A5-0404-11D6-ABCB-005004C21D30}
O42 - Logiciel: EPSON Logiciel imprimante - (.Pas de propri�taire.) [HKLM] -- EPSON Printer and Utilities
O42 - Logiciel: EPSON Photo Print - (.Pas de propri�taire.) [HKLM] -- {C24FE0B8-0A25-42E6-8532-A4ABAA1FA400}
O42 - Logiciel: EPSON PhotoQuicker3.2 - (.Pas de propri�taire.) [HKLM] -- {B2EFE303-A594-11D5-95EB-005004BC1C65}
O42 - Logiciel: EPSON PhotoStarter3.0 - (.Pas de propri�taire.) [HKLM] -- {5983C895-DDA4-45D9-A8D1-877D5DE7693E}
O42 - Logiciel: EPSON Smart Panel - (.Pas de propri�taire.) [HKLM] -- {6C11D561-620B-47DA-A693-4C597F3CDF40}
O42 - Logiciel: Easy Graphic Converter 1.2 - (.Etru Software Development.) [HKLM] -- Easy Graphic Converter 1.2_is1
O42 - Logiciel: Easy Thumbnails (Remove only) - (.Fookes Software.) [HKLM] -- Easy Thumbnails_is1
O42 - Logiciel: FFmpeg for Audacity on Windows - (.Pas de propri�taire.) [HKLM] -- FFmpeg for Audacity on Windows_is1
O42 - Logiciel: FILEminimizer Pictures - (.balesio AG.) [HKLM] -- FILEminimizer Pictures_is1
O42 - Logiciel: FileZilla Client 3.6.0.2 - (.FileZilla Project.) [HKLM] -- FileZilla Client
O42 - Logiciel: Free FLV Converter V 7.4.0 - (.Koyote Soft.) [HKLM] -- Free FLV Converter_is1
O42 - Logiciel: Freecorder 2.3 (with Skype Call Recording) - (.Pas de propri�taire.) [HKLM] -- Freecorder_1.0
O42 - Logiciel: Freecorder 7 Applications (7.0.0.48) - (.Applian Technologies.) [HKLM] -- Freecorder 7 Applications
O42 - Logiciel: Freecorder extension - (.Applian Technologies Inc..) [HKLM] -- Freecorder extension
O42 - Logiciel: Freecorder extension for Firefox - (.Applian Technologies, Inc..) [HKLM] -- Freecorder extension for Firefox
O42 - Logiciel: GIMP 2.6.11 - (.The GIMP Team.) [HKLM] -- WinGimp-2.0_is1
O42 - Logiciel: GPL Ghostscript - (.Artifex Software Inc..) [HKLM] -- GPL Ghostscript 9.02
O42 - Logiciel: Gmail Backup - (.Pas de propri�taire.) [HKLM] -- gmailbackup
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
O42 - Logiciel: Google SketchUp 8 - (.Google, Inc..) [HKLM] -- {B700113B-24A8-4D4C-8484-0CC944F764C8}
O42 - Logiciel: Google Talk Plugin - (.Google.) [HKLM] -- {53646626-11D9-33C6-8BB1-472536192DC4}
O42 - Logiciel: Haali Media Splitter - (.Pas de propri�taire.) [HKLM] -- HaaliMkx
O42 - Logiciel: ImgBurn - (.LIGHTNING UK!.) [HKLM] -- ImgBurn
O42 - Logiciel: Intel PROSet Wireless - (.Pas de propri�taire.) [HKLM] -- ProInst
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI
O42 - Logiciel: Intel(R) PROSet/Wireless WiFi Software - (.Intel Corporation.) [HKLM] -- {CCAFF072-4DDB-4846-963D-15F02A8E9472}
O42 - Logiciel: Intel(R) TV Wizard - (.Intel Corporation.) [HKLM] -- TVWiz
O42 - Logiciel: Intel� Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: InterVideo WinDVD 8 - (.InterVideo Inc..) [HKLM] -- InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}
O42 - Logiciel: InterVideo WinDVD 8 - (.InterVideo Inc..) [HKLM] -- {20471B27-D702-4FE8-8DEC-0702CC8C0A85}
O42 - Logiciel: JMicron Flash Media Controller Driver - (.JMicron Technology Corp..) [HKLM] -- {26604C7E-A313-4D12-867F-7C6E7820BE4C}
O42 - Logiciel: Java 7 Update 11 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217011FF}
O42 - Logiciel: Java(TM) 6 Update 22 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216022F0}
O42 - Logiciel: KompoZer 0.8b3 - (.KompoZer.) [HKLM] -- {20aa4150-b5f4-11de-8a39-0800200c9a66}_is1
O42 - Logiciel: L&H TTS3000 Fran�ais - (.Pas de propri�taire.) [HKLM] -- LHTTSFRF
O42 - Logiciel: LAME v3.98.3 for Audacity - (.Pas de propri�taire.) [HKLM] -- LAME for Audacity_is1
O42 - Logiciel: LG CyberLink LabelPrint - (.CyberLink Corp..) [HKLM] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: LG CyberLink LabelPrint - (.CyberLink Corp..) [HKLM] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: LG CyberLink Media Suite - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: LG CyberLink Media Suite - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: LG CyberLink PowerBackup - (.CyberLink Corp..) [HKLM] -- {ADD5DB49-72CF-11D8-9D75-000129760D75}
O42 - Logiciel: LG ODD Auto Firmware Update - (.Pas de propri�taire.) [HKLM] -- {6179550A-3E7C-499E-BCC9-9E8113E0A285}
O42 - Logiciel: Lenovo System Interface Driver - (.Pas de propri�taire.) [HKLM] -- LENOVO.SMIIF
O42 - Logiciel: Lenovo ThinkVantage Toolbox - (.PC-Doctor, Inc..) [HKLM] -- PC-Doctor for Windows
O42 - Logiciel: Lenovo Welcome - (.Lenovo.) [HKLM] -- Lenovo Welcome_is1
O42 - Logiciel: MKVToolNix 5.9.0 - (.Moritz Bunkus.) [HKLM] -- MKVToolNix
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.70.0.1100 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM] -- McAfee Security Scan
O42 - Logiciel: Message Center Plus - (.Lenovo Group Limited.) [HKLM] -- {FD331A3B-F7A5-4C31-B8D4-DF413C85AF7A}
O42 - Logiciel: Microsoft Research AutoCollage Touch 2009 - (.Microsoft Research.) [HKLM] -- {1F8DA253-3C27-4B01-A63A-BA3533120833}
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft� Office Language Pack 2007 � Nederlands (voor Office Outlook 2007 - (.Microsoft Corporation.) [HKLM] -- {4976ab7c-473f-4214-8fda-d56950327210}
O42 - Logiciel: Mobile Broadband - (.Lenovo.) [HKLM] -- {986AB50A-A527-4F6D-8E8B-87FC3F0C2DBA}
O42 - Logiciel: Mozilla Firefox 18.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 18.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: Norton Internet Security - (.Symantec Corporation.) [HKLM] -- {7B15D70E-9449-4CFB-B9BC-798465B2BD5C}
O42 - Logiciel: Notepad++ - (.Pas de propri�taire.) [HKLM] -- Notepad++
O42 - Logiciel: On Screen Display - (.Pas de propri�taire.) [HKLM] -- OnScreenDisplay
O42 - Logiciel: OpenOffice.org 3.4.1 - (.Apache Software Foundation.) [HKLM] -- {7DA1C06F-C913-46C7-8A0F-DA2CBA17EA1D}
O42 - Logiciel: PDFCreator - (.Frank Heind�rfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
O42 - Logiciel: PNGGauntlet - (.Ben Hollis.) [HKLM] -- {B2D251E2-A78B-42C2-9D94-695A8CCC17E9}
O42 - Logiciel: Photobie -- photo editing software from Photobie Design - (.Pas de propri�taire.) [HKLM] -- Photobie
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
O42 - Logiciel: Play65 - (.LogicEmpire.) [HKCU] -- Play65
O42 - Logiciel: Poedit - (.Vaclav Slavik.) [HKLM] -- {68EB2C37-083A-4303-B5D8-41FA67E50B8F}_is1
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}
O42 - Logiciel: RarZilla Free Unrar - (.Philipp Winterberg.) [HKLM] -- RarZilla Free Unrar
O42 - Logiciel: RealDownloader - (.RealNetworks, Inc..) [HKLM] -- {AF7EBCA4-9FAF-4DC8-8D09-67854BB84D34}
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 16.0
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB}
O42 - Logiciel: Realtek 8136 8168 8169 Ethernet Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows - (.Pas de propri�taire.) [HKLM] -- EnablePS
O42 - Logiciel: Registry Patch to arrange icons in Device and Printers folder of Windows 7 - (.Pas de propri�taire.) [HKLM] -- W7DevOR
O42 - Logiciel: Rescue and Recovery - (.Lenovo Group Limited.) [HKLM] -- {B383F243-0ABC-4E56-AA30-923B8D85076E}
O42 - Logiciel: ScanToWeb - (.Pas de propri�taire.) [HKLM] -- {EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}
O42 - Logiciel: Scribus 1.3.3.14 - (.The Scribus Team.) [HKLM] -- Scribus 1.3.3.14
O42 - Logiciel: Search.com Toolbar v6.6 - (.CBS Interactive.) [HKLM] -- {2260164E-2F4F-4675-9577-42FBFEFD8B74}
O42 - Logiciel: Shockwave - (.Pas de propri�taire.) [HKLM] -- Shockwave
O42 - Logiciel: Skype� 6.0 - (.Skype Technologies S.A..) [HKLM] -- {EA17F4FC-FDBF-4CF8-A529-2D983132D053}
O42 - Logiciel: SoundTap Streaming Audio Recorder - (.NCH Software.) [HKLM] -- SoundTap
O42 - Logiciel: Switch Sound File Converter - (.NCH Software.) [HKLM] -- Switch
O42 - Logiciel: System Update - (.Lenovo.) [HKLM] -- {25C64847-B900-48AD-A164-1B4F9B774650}
O42 - Logiciel: ThinkPad Bluetooth with Enhanced Data Rate Software - (.Broadcom Corporation.) [HKLM] -- {9E9D49A4-1DF4-4138-B7DB-5D87A893088E}
O42 - Logiciel: ThinkPad FullScreen Magnifier - (.Pas de propri�taire.) [HKLM] -- ThinkPad FullScreen Magnifier
O42 - Logiciel: ThinkPad Power Management Driver - (.Pas de propri�taire.) [HKLM] -- Power Management Driver
O42 - Logiciel: ThinkPad Power Manager - (.Pas de propri�taire.) [HKLM] -- {DAC01CEE-5BAE-42D5-81FC-B687E84E8405}
O42 - Logiciel: ThinkPad UltraNav Driver - (.Pas de propri�taire.) [HKLM] -- SynTPDeinstKey
O42 - Logiciel: ThinkPad UltraNav Utility - (.Lenovo.) [HKLM] -- {17CBC505-D1AE-459D-B445-3D2000A85842}
O42 - Logiciel: ThinkVantage Access Connections - (.Lenovo.) [HKLM] -- {8E537894-A559-4D60-B3CB-F4485E3D24E3}
O42 - Logiciel: ThinkVantage Active Protection System - (.Lenovo.) [HKLM] -- {46A84694-59EC-48F0-964C-7E76E9F8A2ED}
O42 - Logiciel: VLC media player 2.0.5 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Verizon Wireless Mobile Broadband Self Activation - (.Smith Micro Software, Inc..) [HKLM] -- {C64A877E-DF8D-4017-AA82-000A77C6D809}
O42 - Logiciel: Virtual Audio Cable 4.10 - (.Pas de propri�taire.) [HKLM] -- Virtual Audio Cable 4.10
O42 - Logiciel: WM Recorder 12.1 - (.Pas de propri�taire.) [HKLM] -- WM Recorder 12.1
O42 - Logiciel: WampServer 2.2 - (.Herv� Leclerc (HeL).) [HKLM] -- WampServer 2_is1
O42 - Logiciel: WinX DVD Ripper 5.5.9 - (.Digiarty Software, Inc..) [HKLM] -- WinX DVD Ripper_is1
O42 - Logiciel: Windows Driver Package - Intel System (06/04/2009 1.0.0.0002) - (.Intel.) [HKLM] -- E7B58217635B8F723D4744A328A4B3237DB35FA9
O42 - Logiciel: Windows Driver Package - Intel hdc (06/04/2009 7.0.0.1013) - (.Intel.) [HKLM] -- 1AE98C75AE2DD1284F66876FA76F46BFDF6B9D31
O42 - Logiciel: Windows Driver Package - Lenovo 1.55 (08/18/2009 1.55) - (.Lenovo.) [HKLM] -- 112AA64E0C8CC704E307FE914F7DEC1C0035598E
O42 - Logiciel: Windows Driver Package - Realtek Semiconductor Corp. HD Audio Driver (07/10 - (.Realtek Semiconductor Corp..) [HKLM] -- 8FE0BAC9C97DE6D9A2B7BB6B689E7F9460D0624B
O42 - Logiciel: Yooda Map - (.Aldeis SARL.) [HKLM] -- {633A27AE-C1C4-48E7-85D4-3C34994B5331}
O42 - Logiciel: jAlbum - (.Jalbum AB.) [HKLM] -- {0A3B0211-68A9-417B-AE67-280357E8A134}
O42 - Logiciel: myphotobook.be - (.myphotobook GmbH.) [HKLM] -- be.myphotobook.creator.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1
O42 - Logiciel: myphotobook.be - (.myphotobook GmbH.) [HKLM] -- {D02A3E27-0722-EC6E-975F-837C0E793D9F}
O42 - Logiciel: svBuilder - (.Airtight Interactive Inc..) [HKLM] -- svBuilder
O42 - Logiciel: svBuilder - (.Airtight Interactive Inc..) [HKLM] -- {C9CEC6F3-3944-92B4-6CCA-995182394542}
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
O42 - Logiciel: �Torrent - (.BitTorrent Inc..) [HKLM] -- uTorrent

---\\ HKCU & HKLM Software Keys
[HKCU\Software\1stpage]
[HKCU\Software\7-Zip]
[HKCU\Software\AVStoDVD]
[HKCU\Software\Addictive Software]
[HKCU\Software\Adobe]
[HKCU\Software\AnyTubeDownloader]
[HKCU\Software\AppDataLow\Avg]
[HKCU\Software\AppDataLow\RealNetworks]
[HKCU\Software\AppDataLow\Software\Avg]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\RealNetworks]
[HKCU\Software\AppDataLow\Software\Search.com]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\ApplianTechnologies]
[HKCU\Software\Audacity]
[HKCU\Software\Auslogics]
[HKCU\Software\Avg]
[HKCU\Software\BitTorrent]
[HKCU\Software\Bradbury]
[HKCU\Software\BrowserTemp]
[HKCU\Software\Bugsplat]
[HKCU\Software\Bytescout]
[HKCU\Software\Canneverbe Limited]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CoffeeCup Software]
[HKCU\Software\CyberLink]
[HKCU\Software\DVD43]
[HKCU\Software\EPSON]
[HKCU\Software\EZEMO]
[HKCU\Software\Evrsoft]
[HKCU\Software\Extensoft]
[HKCU\Software\Flo's Filters]
[HKCU\Software\FreeDownloadManager.ORG]
[HKCU\Software\Freecorder]
[HKCU\Software\GPL Ghostscript]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\IBM]
[HKCU\Software\IM Providers]
[HKCU\Software\INTEL]
[HKCU\Software\ImgBurn]
[HKCU\Software\InterVideo]
[HKCU\Software\JavaSoft]
[HKCU\Software\Lenovo]
[HKCU\Software\Licenses]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Lokas Ltd]
[HKCU\Software\MCAFEE]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MarineCat]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NCH Software]
[HKCU\Software\NCH Swift Sound]
[HKCU\Software\NSWB]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\Oxemis]
[HKCU\Software\PC-Doctor]
[HKCU\Software\PDFCreator]
[HKCU\Software\Philipp Winterberg]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\ProgSense]
[HKCU\Software\RealNetworks]
[HKCU\Software\Realtek]
[HKCU\Software\Redfield]
[HKCU\Software\Search.com]
[HKCU\Software\SkillEmpire]
[HKCU\Software\Skype]
[HKCU\Software\SourceTec]
[HKCU\Software\Synaptics]
[HKCU\Software\Trend Micro]
[HKCU\Software\Trolltech]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VFPlugin]
[HKCU\Software\Vaclav Slavik]
[HKCU\Software\WM Converter]
[HKCU\Software\WMR11]
[HKCU\Software\Widcomm]
[HKCU\Software\Winamp]
[HKCU\Software\Wsa32]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\ZXT2007]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\ambuhelper1]
[HKCU\Software\mkvmergeGUI]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Adobe]
[HKLM\Software\AppDataLow]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Applian Technologies]
[HKLM\Software\Artifex]
[HKLM\Software\Avg]
[HKLM\Software\Bradbury]
[HKLM\Software\BrowserChoice]
[HKLM\Software\Bunndle]
[HKLM\Software\CDDB]
[HKLM\Software\CXT]
[HKLM\Software\Canneverbe Limited]
[HKLM\Software\Caphyon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CyberLink]
[HKLM\Software\Digital River]
[HKLM\Software\DivXNetworks]
[HKLM\Software\EPSON Photo Print]
[HKLM\Software\EPSON]
[HKLM\Software\FFmpeg for Audacity]
[HKLM\Software\FileZilla 3]
[HKLM\Software\Freecorder]
[HKLM\Software\GPL Ghostscript]
[HKLM\Software\GmailBackup]
[HKLM\Software\Google]
[HKLM\Software\IBM]
[HKLM\Software\IM Providers]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\L&H]
[HKLM\Software\LG Electronics]
[HKLM\Software\Lame for Audacity]
[HKLM\Software\Lenovo]
[HKLM\Software\Macromedia]
[HKLM\Software\Macserlen]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NCH Software]
[HKLM\Software\NCH Swift Sound]
[HKLM\Software\ODBC]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\PC-Doctor]
[HKLM\Software\PDFCreator]
[HKLM\Software\Philipp Winterberg]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Python]
[HKLM\Software\RTLSetup]
[HKLM\Software\RealNetworks]
[HKLM\Software\Realtek]
[HKLM\Software\Redfield]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SEIKO EPSON Corp.]
[HKLM\Software\SRS Labs]
[HKLM\Software\Search.com]
[HKLM\Software\Skype]
[HKLM\Software\Smith Micro]
[HKLM\Software\Sonic]
[HKLM\Software\SourceTec]
[HKLM\Software\Symantec]
[HKLM\Software\Synaptics]
[HKLM\Software\ThinkVantage]
[HKLM\Software\VideoLAN]
[HKLM\Software\Voice]
[HKLM\Software\Volatile]
[HKLM\Software\WMR11]
[HKLM\Software\Waves Audio]
[HKLM\Software\Widcomm]
[HKLM\Software\Windows]
[HKLM\Software\Wise Solutions]
[HKLM\Software\Wow6432Node]
[HKLM\Software\Xing Technology Corp.]
[HKLM\Software\Yooda]
[HKLM\Software\instinno]
[HKLM\Software\mcafeeupdater]
[HKLM\Software\mozilla.org]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 13/06/2011 - 23:25:31 - [3,348] ----D C:\Program Files\7-Zip
O43 - CFD: 11/11/2010 - 14:28:11 - [0,192] ----D C:\Program Files\abrViewer.NET
O43 - CFD: 27/11/2012 - 21:13:29 - [119,587] ----D C:\Program Files\Adobe
O43 - CFD: 11/11/2010 - 15:02:24 - [12,176] ----D C:\Program Files\AoA Audio Extractor
O43 - CFD: 27/11/2012 - 20:53:05 - [2,316] ----D C:\Program Files\Apple Software Update
O43 - CFD: 27/01/2013 - 17:49:32 - [110,702] ----D C:\Program Files\Applian Technologies
O43 - CFD: 14/01/2013 - 17:14:30 - [43,776] ----D C:\Program Files\Audacity
O43 - CFD: 14/12/2012 - 18:15:54 - [89,138] ----D C:\Program Files\AVG
O43 - CFD: 14/01/2013 - 16:03:11 - [4,635] ----D C:\Program Files\AviSynth 2.5
O43 - CFD: 14/01/2013 - 21:21:43 - [50,603] ----D C:\Program Files\AVStoDVD
O43 - CFD: 11/11/2010 - 13:35:46 - [4,312] ----D C:\Program Files\Best Free Image Converter
O43 - CFD: 31/01/2013 - 16:26:50 - [11,559] ----D C:\Program Files\BGroom
O43 - CFD: 29/12/2012 - 17:04:26 - [0] ----D C:\Program Files\Bradbury
O43 - CFD: 20/01/2013 - 21:42:42 - [5,023] ----D C:\Program Files\CCleaner
O43 - CFD: 29/01/2013 - 20:56:00 - [16,447] ----D C:\Program Files\CDBurnerXP
O43 - CFD: 10/06/2010 - 12:05:47 - [5,521] ----D C:\Program Files\Cisco
O43 - CFD: 23/07/2011 - 19:27:11 - [0,573] ----D C:\Program Files\CoffeeCup Software
O43 - CFD: 30/01/2013 - 18:36:52 - [655,282] ----D C:\Program Files\Common Files
O43 - CFD: 29/01/2013 - 20:03:50 - [263,939] ----D C:\Program Files\CyberLink
O43 - CFD: 10/06/2010 - 12:00:59 - [0,879] ----D C:\Program Files\DIFX
O43 - CFD: 19/12/2012 - 15:45:17 - [37,077] ----D C:\Program Files\Digiarty
O43 - CFD: 27/04/2012 - 02:10:09 - [42,823] ----D C:\Program Files\DVD Flick
O43 - CFD: 20/07/2011 - 15:24:30 - [79,371] ----D C:\Program Files\DVD Maker
O43 - CFD: 11/11/2010 - 15:57:45 - [1,457] ----D C:\Program Files\dvd43
O43 - CFD: 11/11/2010 - 15:05:03 - [1,177] ----D C:\Program Files\Easy Graphic Converter
O43 - CFD: 26/08/2011 - 09:56:40 - [2,486] ----D C:\Program Files\Easy Thumbnails
O43 - CFD: 12/08/2011 - 14:26:00 - [171,398] ----D C:\Program Files\EPSON
O43 - CFD: 24/11/2010 - 00:19:20 - [0,007] ----D C:\Program Files\Evrsoft First Page 2006
O43 - CFD: 11/04/2011 - 00:33:38 - [0] ----D C:\Program Files\EZ Emoticons
O43 - CFD: 11/11/2010 - 15:28:26 - [19,501] ----D C:\Program Files\FFmpeg for Audacity
O43 - CFD: 1/02/2012 - 14:11:31 - [4,104] ----D C:\Program Files\FILEminimizer Pictures
O43 - CFD: 30/11/2012 - 00:35:52 - [16,769] ----D C:\Program Files\FileZilla FTP Client
O43 - CFD: 28/02/2012 - 16:31:32 - [0,659] ----D C:\Program Files\Free Download Manager
O43 - CFD: 28/02/2012 - 15:58:35 - [15,257] ----D C:\Program Files\Free FLV Converter
O43 - CFD: 11/11/2010 - 20:49:47 - [0] ----D C:\Program Files\Free Sothink DHTML Menu
O43 - CFD: 12/11/2010 - 14:37:38 - [2,617] ----D C:\Program Files\Free Sothink_Fichiers dezippes
O43 - CFD: 27/01/2013 - 17:48:53 - [2,164] ----D C:\Program Files\Freecorder extension
O43 - CFD: 23/03/2012 - 15:19:16 - [138,104] ----D C:\Program Files\GIMP-2.0
O43 - CFD: 31/10/2012 - 14:28:59 - [17,880] ----D C:\Program Files\GmailBackup
O43 - CFD: 23/09/2010 - 12:47:51 - [220,529] ----D C:\Program Files\Google
O43 - CFD: 8/07/2011 - 23:11:49 - [30,312] ----D C:\Program Files\gs
O43 - CFD: 14/01/2013 - 16:09:24 - [2,322] ----D C:\Program Files\Haali
O43 - CFD: 14/01/2013 - 16:04:48 - [2,913] ----D C:\Program Files\ImgBurn
O43 - CFD: 19/12/2012 - 13:37:38 - [94,536] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 10/06/2010 - 12:10:05 - [128,348] ----D C:\Program Files\Intel
O43 - CFD: 13/12/2012 - 03:46:41 - [5,683] ----D C:\Program Files\Internet Explorer
O43 - CFD: 10/06/2010 - 12:19:39 - [150,288] ----D C:\Program Files\InterVideo
O43 - CFD: 4/05/2012 - 04:36:58 - [104,711] ----D C:\Program Files\jAlbum
O43 - CFD: 16/01/2013 - 12:13:00 - [208,811] ----D C:\Program Files\Java
O43 - CFD: 10/06/2010 - 12:04:12 - [1,692] ----D C:\Program Files\JMicron
O43 - CFD: 1/02/2012 - 14:19:12 - [0,000] ----D C:\Program Files\JPEG Compression
O43 - CFD: 21/07/2011 - 22:00:56 - [22,826] ----D C:\Program Files\KompoZer
O43 - CFD: 11/11/2010 - 15:23:59 - [1,180] ----D C:\Program Files\Lame For Audacity
O43 - CFD: 22/09/2010 - 14:21:49 - [776,617] ----D C:\Program Files\Lenovo
O43 - CFD: 3/02/2013 - 17:45:28 - [7,511] ----D C:\Program Files\lg_fwupdate
O43 - CFD: 29/01/2013 - 14:53:32 - [12,374] ----D C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 31/01/2013 - 16:31:47 - [11,333] ----D C:\Program Files\McAfee Security Scan
O43 - CFD: 26/08/2010 - 14:20:07 - [18,884] ----D C:\Program Files\Microsoft
O43 - CFD: 20/07/2011 - 14:09:56 - [1103,979] ----D C:\Program Files\Microsoft Office
O43 - CFD: 22/09/2010 - 14:22:36 - [7,431] ----D C:\Program Files\Microsoft Office Suite Activation Assistant
O43 - CFD: 27/11/2012 - 21:21:48 - [40,838] ----D C:\Program Files\Microsoft Silverlight
O43 - CFD: 10/06/2010 - 12:35:08 - [69,137] ----D C:\Program Files\Microsoft Small Business
O43 - CFD: 9/04/2011 - 05:39:42 - [206,240] ----D C:\Program Files\Microsoft SQL Server
O43 - CFD: 8/04/2011 - 13:16:49 - [1,745] ----D C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 10/06/2010 - 12:30:59 - [0,014] ----D C:\Program Files\Microsoft Visual Studio
O43 - CFD: 22/09/2010 - 14:22:45 - [3,554] ----D C:\Program Files\Microsoft Works
O43 - CFD: 17/12/2010 - 01:04:14 - [8,782] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 14/01/2013 - 16:10:59 - [48,008] ----D C:\Program Files\MKVToolNix
O43 - CFD: 10/06/2010 - 12:01:18 - [903,428] ----D C:\Program Files\MLPS
O43 - CFD: 8/07/2012 - 14:33:56 - [1,047] ----D C:\Program Files\Moozy
O43 - CFD: 4/03/2011 - 18:45:57 - [7,110] ----D C:\Program Files\Movie Maker
O43 - CFD: 4/03/2011 - 18:54:23 - [8,904] ----D C:\Program Files\Movie Maker 2.6
O43 - CFD: 19/01/2013 - 01:10:03 - [50,961] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 20/01/2013 - 11:51:47 - [0,212] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 14/07/2009 - 05:52:30 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 26/08/2010 - 16:04:42 - [0] ----D C:\Program Files\MSXML 4.0
O43 - CFD: 27/10/2011 - 00:04:28 - [17,184] ----D C:\Program Files\myphotobook.be
O43 - CFD: 29/01/2013 - 21:26:43 - [6,873] ----D C:\Program Files\NCH Software
O43 - CFD: 11/11/2010 - 16:08:21 - [4,092] ----D C:\Program Files\NCH Swift Sound
O43 - CFD: 25/07/2011 - 21:44:04 - [12,563] ----D C:\Program Files\Notepad++
O43 - CFD: 15/11/2012 - 14:02:09 - [288,773] ----D C:\Program Files\OpenOffice.org 3
O43 - CFD: 7/07/2011 - 13:41:59 - [149,145] ----D C:\Program Files\OpenOffice.org3.3
O43 - CFD: 5/02/2012 - 16:08:53 - [114,730] ----D C:\Program Files\PC-Doctor
O43 - CFD: 24/10/2011 - 02:07:30 - [31,419] ----D C:\Program Files\PDFCreator
O43 - CFD: 31/10/2012 - 17:17:49 - [61,282] ----D C:\Program Files\Photobie
O43 - CFD: 18/06/2012 - 01:17:53 - [1,264] ----D C:\Program Files\PNGGauntlet
O43 - CFD: 8/12/2012 - 16:19:30 - [20,333] ----D C:\Program Files\Poedit
O43 - CFD: 27/11/2012 - 20:56:27 - [72,326] ----D C:\Program Files\QuickTime
O43 - CFD: 11/11/2010 - 16:02:26 - [1,760] ----D C:\Program Files\RarZilla Free Unrar
O43 - CFD: 18/12/2012 - 22:41:58 - [113,738] ----D C:\Program Files\Real
O43 - CFD: 18/12/2012 - 22:42:08 - [17,344] ----D C:\Program Files\RealNetworks
O43 - CFD: 10/06/2010 - 12:07:17 - [11,879] ----D C:\Program Files\Realtek
O43 - CFD: 14/07/2009 - 05:52:30 - [37,357] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 8/07/2011 - 23:15:16 - [64,653] ----D C:\Program Files\Scribus 1.3.3.14
O43 - CFD: 20/12/2012 - 17:47:36 - [0,170] ----D C:\Program Files\Search.com Toolbar
O43 - CFD: 26/11/2012 - 09:21:16 - [34,911] R---D C:\Program Files\Skype
O43 - CFD: 12/11/2010 - 14:34:44 - [0] ----D C:\Program Files\SourceTec
O43 - CFD: 20/10/2011 - 12:55:57 - [1,175] ----D C:\Program Files\svBuilder
O43 - CFD: 10/06/2010 - 12:42:06 - [20,941] ----D C:\Program Files\Synaptics
O43 - CFD: 10/06/2010 - 12:10:37 - [121,472] ----D C:\Program Files\ThinkPad
O43 - CFD: 30/01/2013 - 21:30:57 - [0,370] ----D C:\Program Files\Trend Micro
O43 - CFD: 14/07/2009 - 05:53:23 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 13/12/2012 - 01:24:10 - [0,924] ----D C:\Program Files\uTorrent
O43 - CFD: 10/06/2010 - 12:21:10 - [4,278] ----D C:\Program Files\Verizon Wireless
O43 - CFD: 11/11/2010 - 16:58:46 - [94,419] ----D C:\Program Files\VideoLAN
O43 - CFD: 3/03/2011 - 19:26:41 - [0,291] ----D C:\Program Files\Virtual Audio Cable
O43 - CFD: 20/07/2011 - 15:24:27 - [2,909] ----D C:\Program Files\Windows Defender
O43 - CFD: 10/05/2012 - 05:41:44 - [6,689] ----D C:\Program Files\Windows Journal
O43 - CFD: 20/05/2011 - 14:16:58 - [105,781] ----D C:\Program Files\Windows Live
O43 - CFD: 20/07/2011 - 15:24:30 - [5,895] ----D C:\Program Files\Windows Mail
O43 - CFD: 20/07/2011 - 15:24:29 - [6,298] ----D C:\Program Files\Windows Media Player
O43 - CFD: 14/07/2009 - 05:52:30 - [11,632] ----D C:\Program Files\Windows NT
O43 - CFD: 20/07/2011 - 15:24:29 - [4,213] ----D C:\Program Files\Windows Photo Viewer
O43 - CFD: 20/07/2011 - 15:24:29 - [0,181] ----D C:\Program Files\Windows Portable Devices
O43 - CFD: 30/01/2013 - 18:36:19 - [8,896] ----D C:\Program Files\Windows Searchqu Toolbar
O43 - CFD: 20/07/2011 - 15:24:30 - [6,519] ----D C:\Program Files\Windows Sidebar
O43 - CFD: 11/11/2010 - 16:30:51 - [31,801] ----D C:\Program Files\WMR11
O43 - CFD: 26/10/2011 - 10:44:50 - [5,617] ----D C:\Program Files\Yooda
O43 - CFD: 3/02/2013 - 17:46:49 - [11,887] ----D C:\Program Files\ZHPDiag
O43 - CFD: 27/11/2012 - 21:13:31 - [6,400] ----D C:\Program Files\Common Files\Adobe
O43 - CFD: 20/10/2011 - 10:53:04 - [37,540] ----D C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 11/11/2010 - 17:05:28 - [64,234] ----D C:\Program Files\Common Files\Apple
O43 - CFD: 18/11/2011 - 17:04:58 - [0,082] ----D C:\Program Files\Common Files\DESIGNER
O43 - CFD: 10/06/2010 - 12:10:35 - [1,305] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 10/06/2010 - 12:05:46 - [8,646] ----D C:\Program Files\Common Files\Intel
O43 - CFD: 10/06/2010 - 12:19:39 - [0,171] ----D C:\Program Files\Common Files\InterVideo
O43 - CFD: 16/09/2010 - 02:44:24 - [1,184] ----D C:\Program Files\Common Files\Java
O43 - CFD: 22/09/2010 - 14:20:28 - [40,206] ----D C:\Program Files\Common Files\Lenovo
O43 - CFD: 26/11/2012 - 16:47:07 - [398,298] ----D C:\Program Files\Common Files\microsoft shared
O43 - CFD: 12/08/2011 - 14:24:59 - [4,553] ----D C:\Program Files\Common Files\Python
O43 - CFD: 14/07/2009 - 03:37:05 - [0,003] ----D C:\Program Files\Common Files\Services
O43 - CFD: 26/11/2012 - 09:21:16 - [2,056] ----D C:\Program Files\Common Files\Skype
O43 - CFD: 11/11/2010 - 14:46:49 - [0,630] ----D C:\Program Files\Common Files\SourceTec
O43 - CFD: 14/07/2009 - 03:37:05 - [39,200] ----D C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 9/11/2011 - 06:45:59 - [50,439] ----D C:\Program Files\Common Files\System
O43 - CFD: 26/08/2010 - 14:19:30 - [0] ----D C:\Program Files\Common Files\Windows Live
O43 - CFD: 18/12/2012 - 22:41:56 - [0,336] ----D C:\Program Files\Common Files\xing shared
O43 - CFD: 28/01/2013 - 17:32:25 - [283,191] ----D C:\ProgramData\Adobe
O43 - CFD: 11/11/2010 - 17:05:20 - [36,792] ----D C:\ProgramData\Apple
O43 - CFD: 27/11/2012 - 20:56:07 - [25,485] ----D C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - 05:53:55 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 20/01/2013 - 17:53:00 - [8,430] ----D C:\ProgramData\AVG January 2013 Campaign
O43 - CFD: 14/12/2012 - 18:21:29 - [219,047] ----D C:\ProgramData\AVG2013
O43 - CFD: 2/02/2012 - 00:55:47 - [201,758] ----D C:\ProgramData\avg9
O43 - CFD: 30/01/2013 - 19:02:35 - [0] ----D C:\ProgramData\boost_interprocess
O43 - CFD: 20/05/2011 - 15:41:40 - [0] ----D C:\ProgramData\Canneverbe Limited
O43 - CFD: 15/03/2011 - 12:39:40 - [0,000] --H-D C:\ProgramData\Common Files
O43 - CFD: 29/01/2013 - 20:01:33 - [0,042] ----D C:\ProgramData\CyberLink
O43 - CFD: 14/07/2009 - 05:53:55 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 05:53:55 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 14/07/2009 - 05:53:55 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 2/09/2010 - 13:22:53 - [0] ----D C:\ProgramData\Google
O43 - CFD: 10/06/2010 - 12:05:45 - [0,001] ----D C:\ProgramData\Intel
O43 - CFD: 10/06/2010 - 12:26:38 - [63,696] ----D C:\ProgramData\Lenovo
O43 - CFD: 1/09/2010 - 09:47:09 - [16,305] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 14/10/2011 - 15:08:57 - [0,023] ----D C:\ProgramData\McAfee
O43 - CFD: 14/10/2011 - 15:08:58 - [0,001] ----D C:\ProgramData\McAfee Security Scan
O43 - CFD: 3/02/2013 - 17:04:05 - [119,963] ----D C:\ProgramData\MFAData
O43 - CFD: 26/11/2012 - 16:47:06 - [452,449] -S--D C:\ProgramData\Microsoft
O43 - CFD: 10/01/2013 - 01:02:06 - [0,145] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 27/04/2012 - 00:47:00 - [0,034] ----D C:\ProgramData\Mozilla
O43 - CFD: 14/01/2013 - 13:37:08 - [0,005] ----D C:\ProgramData\NCH Software
O43 - CFD: 11/11/2010 - 16:14:48 - [0] ----D C:\ProgramData\NCH Swift Sound
O43 - CFD: 29/08/2010 - 07:15:21 - [0,012] ----D C:\ProgramData\Norton
O43 - CFD: 26/08/2010 - 14:22:47 - [7,588] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 8/05/2011 - 10:06:19 - [3,196] ----D C:\ProgramData\PC-Doctor for Windows
O43 - CFD: 30/01/2013 - 13:37:01 - [155,358] ----D C:\ProgramData\PCDr
O43 - CFD: 18/12/2012 - 22:43:13 - [3,533] ----D C:\ProgramData\Real
O43 - CFD: 18/12/2012 - 22:42:04 - [3,154] ----D C:\ProgramData\RealNetworks
O43 - CFD: 26/11/2012 - 09:21:25 - [121,354] ----D C:\ProgramData\Skype
O43 - CFD: 14/07/2009 - 05:53:55 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 16/09/2010 - 02:44:24 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 27/08/2010 - 09:09:18 - [0,000] ----D C:\ProgramData\Symantec
O43 - CFD: 27/01/2013 - 15:52:41 - [103,939] ---AD C:\ProgramData\TEMP
O43 - CFD: 14/07/2009 - 05:53:55 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 14/01/2013 - 11:58:10 - [0,002] ----D C:\ProgramData\Windows Genuine Advantage
O43 - CFD: 29/11/2012 - 01:30:59 - [15,094] ----D C:\Users\user\AppData\Roaming\Adobe
O43 - CFD: 28/11/2012 - 08:49:13 - [0,023] ----D C:\Users\user\AppData\Roaming\Apple Computer
O43 - CFD: 20/11/2010 - 12:42:03 - [0,000] ----D C:\Users\user\AppData\Roaming\ArchiFacile
O43 - CFD: 2/11/2012 - 03:15:49 - [6,984] ----D C:\Users\user\AppData\Roaming\Artisteer
O43 - CFD: 14/01/2013 - 17:57:09 - [0,004] ----D C:\Users\user\AppData\Roaming\Audacity
O43 - CFD: 14/12/2012 - 18:34:04 - [0,041] ----D C:\Users\user\AppData\Roaming\AVG2013
O43 - CFD: 27/10/2011 - 00:04:50 - [37,476] ----D C:\Users\user\AppData\Roaming\be.myphotobook.creator.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1
O43 - CFD: 20/05/2011 - 15:41:40 - [0,002] ----D C:\Users\user\AppData\Roaming\Canneverbe Limited
O43 - CFD: 24/11/2010 - 00:24:33 - [0,057] ----D C:\Users\user\AppData\Roaming\CoffeeCup Software
O43 - CFD: 27/04/2012 - 00:47:01 - [0,467] ----D C:\Users\user\AppData\Roaming\Complitly
O43 - CFD: 14/01/2013 - 11:21:42 - [0,003] ----D C:\Users\user\AppData\Roaming\CyberLink
O43 - CFD: 28/05/2012 - 11:30:12 - [0,022] ----D C:\Users\user\AppData\Roaming\Digiarty
O43 - CFD: 31/01/2013 - 00:33:56 - [27,558] ----D C:\Users\user\AppData\Roaming\Dropbox
O43 - CFD: 29/01/2013 - 20:48:35 - [0,004] ----D C:\Users\user\AppData\Roaming\DVD Flick
O43 - CFD: 14/01/2013 - 19:28:13 - [0,000] ----D C:\Users\user\AppData\Roaming\dvdcss
O43 - CFD: 28/02/2012 - 16:33:43 - [0] ----D C:\Users\user\AppData\Roaming\DVDVideoSoft
O43 - CFD: 3/03/2011 - 18:47:44 - [0,000] ----D C:\Users\user\AppData\Roaming\Easeware
O43 - CFD: 8/07/2012 - 14:30:34 - [0,000] ----D C:\Users\user\AppData\Roaming\Easy MP3 Recorder
O43 - CFD: 26/08/2011 - 10:01:13 - [0,001] ----D C:\Users\user\AppData\Roaming\Easy Thumbnails
O43 - CFD: 12/08/2011 - 12:32:22 - [0,112] ----D C:\Users\user\AppData\Roaming\EPSON
O43 - CFD: 19/12/2012 - 03:58:47 - [0,001] ----D C:\Users\user\AppData\Roaming\FILEminimizerPictures
O43 - CFD: 25/01/2013 - 23:16:13 - [0,028] ----D C:\Users\user\AppData\Roaming\FileZilla
O43 - CFD: 20/10/2011 - 11:37:23 - [0,362] ----D C:\Users\user\AppData\Roaming\Flickr
O43 - CFD: 28/01/2013 - 14:23:57 - [1,359] ----D C:\Users\user\AppData\Roaming\Freecorder 7 Converter
O43 - CFD: 27/01/2013 - 18:18:25 - [0,010] ----D C:\Users\user\AppData\Roaming\Freecorder 7 Video
O43 - CFD: 19/12/2012 - 14:09:55 - [0,050] ----D C:\Users\user\AppData\Roaming\FreeFLVConverter
O43 - CFD: 11/11/2010 - 13:16:50 - [0,000] ----D C:\Users\user\AppData\Roaming\FreeImageConverter
O43 - CFD: 31/10/2012 - 14:33:26 - [0,000] ----D C:\Users\user\AppData\Roaming\Gmail Backup
O43 - CFD: 2/09/2010 - 13:25:50 - [0,001] ----D C:\Users\user\AppData\Roaming\Google
O43 - CFD: 13/10/2010 - 01:47:59 - [0] ----D C:\Users\user\AppData\Roaming\GrabPro
O43 - CFD: 23/03/2012 - 15:25:45 - [0,000] ----D C:\Users\user\AppData\Roaming\gtk-2.0
O43 - CFD: 26/08/2010 - 15:55:06 - [0] ----D C:\Users\user\AppData\Roaming\Identities
O43 - CFD: 14/01/2013 - 16:10:16 - [0,008] ----D C:\Users\user\AppData\Roaming\ImgBurn
O43 - CFD: 27/08/2010 - 08:58:13 - [0,001] ----D C:\Users\user\AppData\Roaming\Intel
O43 - CFD: 18/07/2011 - 12:33:35 - [11,738] ----D C:\Users\user\AppData\Roaming\jAlbum
O43 - CFD: 21/07/2011 - 21:30:24 - [1,762] ----D C:\Users\user\AppData\Roaming\KompoZer
O43 - CFD: 21/07/2011 - 22:01:00 - [0,323] ----D C:\Users\user\AppData\Roaming\kompozer.net
O43 - CFD: 28/08/2010 - 15:42:50 - [0,061] ----D C:\Users\user\AppData\Roaming\Macromedia
O43 - CFD: 1/09/2010 - 09:47:28 - [8,447] ----D C:\Users\user\AppData\Roaming\Malwarebytes
O43 - CFD: 21/07/2009 - 12:47:43 - [0] ----D C:\Users\user\AppData\Roaming\Media Center Programs
O43 - CFD: 26/11/2012 - 16:07:27 - [8,848] -S--D C:\Users\user\AppData\Roaming\Microsoft
O43 - CFD: 14/01/2013 - 16:21:52 - [0] ----D C:\Users\user\AppData\Roaming\mkvtoolnix
O43 - CFD: 29/01/2013 - 01:21:12 - [63,469] ----D C:\Users\user\AppData\Roaming\Mozilla
O43 - CFD: 29/01/2013 - 21:26:43 - [0,005] ----D C:\Users\user\AppData\Roaming\NCH Software
O43 - CFD: 11/11/2010 - 16:08:21 - [0,000] ----D C:\Users\user\AppData\Roaming\NCH Swift Sound
O43 - CFD: 26/07/2011 - 00:47:23 - [0,397] ----D C:\Users\user\AppData\Roaming\Notepad++
O43 - CFD: 11/04/2011 - 00:31:13 - [0,253] ----D C:\Users\user\AppData\Roaming\nswb
O43 - CFD: 7/07/2011 - 13:59:22 - [89,339] ----D C:\Users\user\AppData\Roaming\OpenOffice.org
O43 - CFD: 11/11/2010 - 20:39:20 - [5,132] ----D C:\Users\user\AppData\Roaming\Orbit
O43 - CFD: 21/09/2011 - 18:32:42 - [0,238] ----D C:\Users\user\AppData\Roaming\Oxemis
O43 - CFD: 8/05/2011 - 10:07:37 - [0,059] ----D C:\Users\user\AppData\Roaming\PCDr
O43 - CFD: 11/11/2010 - 13:50:25 - [0,000] ----D C:\Users\user\AppData\Roaming\Philipp Winterberg
O43 - CFD: 13/10/2010 - 01:48:08 - [0,000] ----D C:\Users\user\AppData\Roaming\ProgSense
O43 - CFD: 18/12/2012 - 22:42:39 - [70,214] ----D C:\Users\user\AppData\Roaming\Real
O43 - CFD: 18/12/2012 - 22:42:53 - [0,028] ----D C:\Users\user\AppData\Roaming\RealNetworks
O43 - CFD: 1/06/2012 - 13:04:39 - [0,001] ----D C:\Users\user\AppData\Roaming\ReMage Image Resizer
O43 - CFD: 3/02/2013 - 15:31:13 - [12,104] ----D C:\Users\user\AppData\Roaming\Skype
O43 - CFD: 6/12/2010 - 00:14:20 - [0,001] ----D C:\Users\user\AppData\Roaming\svBuilder
O43 - CFD: 14/12/2012 - 18:21:05 - [0] ----D C:\Users\user\AppData\Roaming\TuneUp Software
O43 - CFD: 8/05/2011 - 09:34:11 - [78,431] ----D C:\Users\user\AppData\Roaming\Update
O43 - CFD: 29/01/2013 - 13:36:09 - [1,428] ----D C:\Users\user\AppData\Roaming\uTorrent
O43 - CFD: 3/02/2013 - 05:23:40 - [0,078] ----D C:\Users\user\AppData\Roaming\vlc
O43 - CFD: 14/04/2011 - 04:17:35 - [0] ----D C:\Users\user\AppData\Roaming\Windows Live Writer
O43 - CFD: 27/11/2012 - 21:12:56 - [159,558] ----D C:\Users\user\AppData\Local\Adobe
O43 - CFD: 11/11/2010 - 17:05:21 - [0] ----D C:\Users\user\AppData\Local\Apple
O43 - CFD: 5/11/2012 - 02:42:00 - [0] ----D C:\Users\user\AppData\Local\Apple Computer
O43 - CFD: 26/08/2010 - 14:18:13 - [0] ----D C:\Users\user\AppData\Local\Application Data
O43 - CFD: 11/11/2010 - 16:55:51 - [0,011] ----D C:\Users\user\AppData\Local\assembly
O43 - CFD: 14/12/2012 - 19:38:12 - [11,355] ----D C:\Users\user\AppData\Local\Avg2013
O43 - CFD: 18/06/2012 - 01:20:14 - [0,003] ----D C:\Users\user\AppData\Local\Benjamin_Hollis
O43 - CFD: 12/05/2012 - 19:42:53 - [0] ----D C:\Users\user\AppData\Local\Conduit
O43 - CFD: 29/01/2013 - 14:02:50 - [0,159] ----D C:\Users\user\AppData\Local\Diagnostics
O43 - CFD: 21/09/2011 - 18:23:57 - [10,908] ----D C:\Users\user\AppData\Local\Downloaded Installations
O43 - CFD: 19/09/2011 - 17:05:31 - [0] ----D C:\Users\user\AppData\Local\ElevatedDiagnostics
O43 - CFD: 20/10/2011 - 11:37:23 - [1,749] ----D C:\Users\user\AppData\Local\Flickr
O43 - CFD: 12/05/2012 - 14:29:17 - [419,017] ----D C:\Users\user\AppData\Local\FLVService
O43 - CFD: 28/01/2013 - 14:24:44 - [0] ----D C:\Users\user\AppData\Local\Freecorder 7 Converter
O43 - CFD: 27/01/2013 - 18:19:15 - [0] ----D C:\Users\user\AppData\Local\Freecorder 7 Video
O43 - CFD: 10/10/2011 - 22:32:28 - [439,386] ----D C:\Users\user\AppData\Local\Google
O43 - CFD: 14/01/2013 - 12:13:13 - [0] ----D C:\Users\user\AppData\Local\Help
O43 - CFD: 26/08/2010 - 14:18:13 - [0] ----D C:\Users\user\AppData\Local\Historique
O43 - CFD: 21/11/2011 - 12:28:12 - [0,014] ----D C:\Users\user\AppData\Local\Ilivid Player
O43 - CFD: 28/01/2013 - 14:23:47 - [0,008] ----D C:\Users\user\AppData\Local\Jaksta_Technologies_Pty_L
O43 - CFD: 21/07/2011 - 22:01:00 - [10,523] ----D C:\Users\user\AppData\Local\kompozer.net
O43 - CFD: 10/06/2012 - 05:26:09 - [0] ----D C:\Users\user\AppData\Local\Macromedia
O43 - CFD: 14/12/2012 - 18:12:41 - [8,719] ----D C:\Users\user\AppData\Local\MFAData
O43 - CFD: 10/06/2012 - 05:26:10 - [255,058] ----D C:\Users\user\AppData\Local\Microsoft
O43 - CFD: 30/08/2010 - 10:27:51 - [0] ----D C:\Users\user\AppData\Local\Microsoft Help
O43 - CFD: 30/01/2013 - 13:46:51 - [0,162] ----D C:\Users\user\AppData\Local\MigWiz
O43 - CFD: 29/08/2010 - 06:02:16 - [153,684] ----D C:\Users\user\AppData\Local\Mozilla
O43 - CFD: 11/11/2010 - 16:55:52 - [0,001] ----D C:\Users\user\AppData\Local\networker
O43 - CFD: 21/11/2011 - 12:26:47 - [0] ----D C:\Users\user\AppData\Local\PackageAware
O43 - CFD: 22/09/2010 - 14:25:02 - [22,243] ----D C:\Users\user\AppData\Local\Play65
O43 - CFD: 22/12/2012 - 02:06:02 - [0,186] ----D C:\Users\user\AppData\Local\Power2Go
O43 - CFD: 29/01/2013 - 14:52:30 - [0] ----D C:\Users\user\AppData\Local\Programs
O43 - CFD: 12/11/2010 - 14:31:57 - [0] ----D C:\Users\user\AppData\Local\Sothink
O43 - CFD: 3/02/2013 - 17:44:23 - [3,927] ----D C:\Users\user\AppData\Local\Temp
O43 - CFD: 26/08/2010 - 14:18:13 - [0] ----D C:\Users\user\AppData\Local\Temporary Internet Files
O43 - CFD: 20/10/2012 - 21:46:35 - [0,857] ----D C:\Users\user\AppData\Local\VirtualStore
O43 - CFD: 5/11/2012 - 02:42:17 - [0,082] ----D C:\Users\user\AppData\Local\Windows Live
O43 - CFD: 14/04/2011 - 04:17:44 - [0,355] ----D C:\Users\user\AppData\Local\Windows Live Writer
O43 - CFD: 11/09/2011 - 02:39:07 - [0] ----D C:\Users\user\AppData\Local\WMTools Downloaded Files
O43 - CFD: 12/05/2011 - 02:24:19 - [0] ----D C:\Users\user\AppData\Local\{0330B21A-8CF0-45FB-B02B-2711839EB83B}
O43 - CFD: 15/04/2011 - 09:41:50 - [0] ----D C:\Users\user\AppData\Local\{047527A6-B65B-40D6-B420-C6BAC1075C8B}
O43 - CFD: 19/04/2011 - 10:22:33 - [0] ----D C:\Users\user\AppData\Local\{04861B14-841C-401D-B0BE-051314D6C452}
O43 - CFD: 17/05/2011 - 11:16:09 - [0] ----D C:\Users\user\AppData\Local\{0AA755B3-33DC-4B60-B2E8-360E2E7BF1CF}
O43 - CFD: 8/05/2011 - 09:09:48 - [0] ----D C:\Users\user\AppData\Local\{0B8CDAC5-CF6A-4809-A22A-6C4DC7CD8FFA}
O43 - CFD: 13/05/2011 - 11:34:14 - [0] ----D C:\Users\user\AppData\Local\{0BABC552-97F8-411E-97D3-624FBF4D9B22}
O43 - CFD: 14/05/2011 - 08:10:59 - [0] ----D C:\Users\user\AppData\Local\{144D8284-D2DE-4609-B450-1F749BCDBA07}
O43 - CFD: 23/04/2011 - 09:31:48 - [0] ----D C:\Users\user\AppData\Local\{182C13FB-4AE8-4755-B6AF-937BEEF0F538}
O43 - CFD: 14/04/2011 - 04:18:11 - [0] ----D C:\Users\user\AppData\Local\{23DF1417-CD05-4481-9440-C400AC4C3601}
O43 - CFD: 10/04/2011 - 08:35:24 - [0] ----D C:\Users\user\AppData\Local\{2795BB52-6D4C-41CB-9604-1FD97791F85C}
O43 - CFD: 10/05/2011 - 01:43:52 - [0] ----D C:\Users\user\AppData\Local\{2B93057D-DD11-4625-A38E-AFFDEE282BDD}
O43 - CFD: 18/05/2011 - 18:54:00 - [0] ----D C:\Users\user\AppData\Local\{2FCA179B-EA10-432C-90E8-8EA3394366FE}
O43 - CFD: 11/05/2011 - 11:33:21 - [0] ----D C:\Users\user\AppData\Local\{3025D055-E480-45CB-A220-76126D9ED9E2}
O43 - CFD: 8/04/2011 - 13:44:16 - [0] ----D C:\Users\user\AppData\Local\{30FFF555-E5E7-477F-8567-08892E0F8B6D}
O43 - CFD: 28/04/2011 - 23:05:49 - [0] ----D C:\Users\user\AppData\Local\{31775FE1-1239-4729-810E-8F8147D0F075}
O43 - CFD: 10/05/2011 - 10:05:25 - [0] ----D C:\Users\user\AppData\Local\{32AE56CC-A1AB-4C17-BD8E-88765ACE5EF6}
O43 - CFD: 27/04/2012 - 01:20:29 - [0] ----D C:\Users\user\AppData\Local\{33C449BE-76AF-4FFF-821E-3202D76D5DE9}
O43 - CFD: 26/04/2011 - 08:11:21 - [0] ----D C:\Users\user\AppData\Local\{348DC728-DDD5-4497-9F88-F5627BFC862C}
O43 - CFD: 11/04/2011 - 10:19:32 - [0] ----D C:\Users\user\AppData\Local\{3609B78F-F5ED-4864-B8C3-1D5A84F62F37}
O43 - CFD: 7/05/2011 - 10:38:10 - [0] ----D C:\Users\user\AppData\Local\{3960EC28-F04E-436A-82A5-332AC71028E1}
O43 - CFD: 9/05/2011 - 10:16:23 - [0] ----D C:\Users\user\AppData\Local\{3B1996AE-60C1-4B9A-8BE9-CC298FB1D2CE}
O43 - CFD: 12/04/2011 - 08:59:00 - [0] ----D C:\Users\user\AppData\Local\{44F36087-9874-4355-8E42-5FEF2616D87A}
O43 - CFD: 9/04/2011 - 02:30:28 - [0] ----D C:\Users\user\AppData\Local\{5A2E04E1-111E-4833-BCA9-BB52046E907E}
O43 - CFD: 19/05/2011 - 08:59:44 - [0] ----D C:\Users\user\AppData\Local\{5B752913-A47D-449E-B819-48F190524611}
O43 - CFD: 4/05/2011 - 10:55:37 - [0] ----D C:\Users\user\AppData\Local\{6465C936-B4EB-4DCF-BDBF-83443F41B749}
O43 - CFD: 15/04/2011 - 09:36:12 - [0] ----D C:\Users\user\AppData\Local\{67F03FB5-01BC-4156-8E47-F7F4F491808B}
O43 - CFD: 24/04/2011 - 08:47:52 - [0] ----D C:\Users\user\AppData\Local\{70F9F315-8B60-43EA-8D12-845F3D481B25}
O43 - CFD: 5/05/2011 - 09:11:55 - [0] ----D C:\Users\user\AppData\Local\{75A2B153-6A82-4FC0-9495-818DA2F0840E}
O43 - CFD: 25/04/2011 - 08:54:55 - [0] ----D C:\Users\user\AppData\Local\{8ABECB52-987D-41AE-BB38-716B9E0CEA48}
O43 - CFD: 16/05/2011 - 22:52:08 - [0] ----D C:\Users\user\AppData\Local\{8FB19D40-C2F8-4416-B2CF-25E6D6D8F05F}
O43 - CFD: 15/05/2011 - 09:17:52 - [0] ----D C:\Users\user\AppData\Local\{A56DE7F4-4F87-4665-9094-BA9424A5E4C0}
O43 - CFD: 17/04/2011 - 09:46:32 - [0] ----D C:\Users\user\AppData\Local\{B06548DF-DEFC-49E4-9860-2C7818D23AE9}
O43 - CFD: 6/05/2011 - 22:23:29 - [0] ----D C:\Users\user\AppData\Local\{B1C3F30A-107D-4206-A2C2-546306AA188A}
O43 - CFD: 13/04/2011 - 08:30:02 - [0] ----D C:\Users\user\AppData\Local\{B1CBCACF-8B26-433B-879C-B61BBEAE5665}
O43 - CFD: 16/05/2011 - 00:19:14 - [0] ----D C:\Users\user\AppData\Local\{B204BD23-7ECE-4D61-846F-A9DEC38AFAEB}
O43 - CFD: 18/04/2011 - 09:59:11 - [0] ----D C:\Users\user\AppData\Local\{B3F9E6E7-90F1-418D-860A-FCBAE5B48508}
O43 - CFD: 22/04/2011 - 08:37:49 - [0] ----D C:\Users\user\AppData\Local\{B463E1D8-2E5A-46F0-AFD0-ADE486662C60}
O43 - CFD: 30/04/2011 - 09:04:04 - [0] ----D C:\Users\user\AppData\Local\{B91C6CE8-2A6D-46C5-91F0-3BC038021683}
O43 - CFD: 16/04/2011 - 07:14:52 - [0] ----D C:\Users\user\AppData\Local\{C18F4E2D-55C9-493B-92F9-B417941B0D87}
O43 - CFD: 3/05/2011 - 01:10:12 - [0] ----D C:\Users\user\AppData\Local\{C7561CD8-2465-4B9F-BC2B-9AF48BEC221A}
O43 - CFD: 20/04/2011 - 19:00:02 - [0] ----D C:\Users\user\AppData\Local\{E3B11E20-1AEF-426E-94A8-BA98135202FF}
O43 - CFD: 18/04/2011 - 22:09:43 - [0] ----D C:\Users\user\AppData\Local\{F5783A4A-080D-404E-B1F9-7AC0EF729CA0}
O43 - CFD: 26/04/2011 - 22:18:15 - [0] ----D C:\Users\user\AppData\Local\{F6F6FF0A-3479-429F-842F-B3A7D34BA675}
O43 - CFD: 27/04/2011 - 20:48:27 - [0] ----D C:\Users\user\AppData\Local\{FEC97B02-D63E-4222-BCE7-7230BD9341FA}
O43 - CFD: 27/04/2012 - 00:50:26 - [0,014] R---D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 11/07/2012 - 13:53:36 - [0,000] R---D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 14/01/2013 - 16:03:10 - [0] ----D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5
O43 - CFD: 14/01/2013 - 21:21:42 - [0] ----D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVStoDVD
O43 - CFD: 29/01/2013 - 19:59:09 - [0,005] ----D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Media Suite
O43 - CFD: 2/11/2012 - 15:46:39 - [0,002] ----D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
O43 - CFD: 12/01/2013 - 02:59:44 - [0,002] ----D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 14/01/2013 - 16:09:24 - [0] ----D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
O43 - CFD: 30/01/2013 - 21:30:57 - [0,003] ----D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
O43 - CFD: 22/09/2010 - 14:25:04 - [0,001] R---D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 25/07/2011 - 21:43:58 - [0] ----D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
O43 - CFD: 2/09/2010 - 02:13:48 - [0] ----D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play65
O43 - CFD: 8/07/2011 - 23:15:16 - [0,000] ----D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Scribus 1.3.3.14
O43 - CFD: 15/11/2012 - 14:07:07 - [0,001] R---D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 11/11/2010 - 16:24:48 - [0] ----D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WM Recorder 12.1
O43 - CFD: 26/10/2011 - 10:44:53 - [0,003] ----D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yooda
~ Scan Program Folder in 01mn 30s



---\\ Derniers fichiers modifi�s ou cr�es sous Windows et System32 (O44)
O44 - LFC:[MD5.757B8941F43FE05B55331FF98CAB9147] - 3/02/2013 - 17:41:21 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.C756130463679FD9DAA95AB5CB7CC481] - 3/02/2013 - 17:41:22 ---A- . (...) -- C:\Windows\setupact.log [560]
O44 - LFC:[MD5.DABABFA9C203120366CB9C36A1FE74FD] - 3/02/2013 - 17:45:17 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1355287]
O44 - LFC:[MD5.08C588B0A538F63D54C0A84295B7D4A7] - 3/02/2013 - 17:45:22 ---A- . (...) -- C:\Windows\lgfwup.ini [337]
O44 - LFC:[MD5.7752619457598CF057C4CC02A0867029] - 9/01/2013 - 19:05:41 ---A- . (.Microsoft - Syst�me de classement CERO.) -- C:\Windows\System32\cero.rs [55296]
O44 - LFC:[MD5.DDD1C4AB9A9DAE6D4092C4C95E714650] - 9/01/2013 - 19:05:41 ---A- . (.Microsoft - Syst�me de classement ESRB.) -- C:\Windows\System32\esrb.rs [51712]
O44 - LFC:[MD5.CBC69A055EF410CBD65593E4808B6DB4] - 9/01/2013 - 19:05:41 ---A- . (.Microsoft - Syst�me de classement OFLC.) -- C:\Windows\System32\oflc.rs [23552]
O44 - LFC:[MD5.72035C97983745E742D71E9A8EF70BBB] - 9/01/2013 - 19:05:41 ---A- . (.Microsoft - Syst�me de classement PEGI en Finlande.) -- C:\Windows\System32\pegi-fi.rs [20480]
O44 - LFC:[MD5.A067A19A91C2AA0198F9BD01A5CEF5C6] - 9/01/2013 - 19:05:43 ---A- . (.Microsoft - Syst�me de classement GRB.) -- C:\Windows\System32\grb.rs [21504]
O44 - LFC:[MD5.4F5C56DBF076D5BBB1D22B37BF281396] - 9/01/2013 - 19:05:43 ---A- . (.Microsoft - Syst�me de classement PEGI au Portugal.) -- C:\Windows\System32\pegi-pt.rs [20480]
O44 - LFC:[MD5.5109C45498BC709C8A7E016D5FFCCAC2] - 9/01/2013 - 19:05:43 ---A- . (.Microsoft - Syst�me de classement PEGI.) -- C:\Windows\System32\pegi.rs [20480]
O44 - LFC:[MD5.9B7D7F4D1F79E8B7D727BE94B1630D59] - 9/01/2013 - 19:05:43 ---A- . (.Microsoft - Syst�me de classement PEGI/BBFC.) -- C:\Windows\System32\pegibbfc.rs [44544]
O44 - LFC:[MD5.9EDCFA23CC081E38C86CA309D0F7E3DC] - 9/01/2013 - 19:05:43 ---A- . (.Microsoft - Syst�me de classement USK.) -- C:\Windows\System32\usk.rs [30720]
O44 - LFC:[MD5.41CE7975CAD7BCF92538D2C452239523] - 9/01/2013 - 19:05:43 ---A- . (.Microsoft - Syst�me de classification COB-AU.) -- C:\Windows\System32\cob-au.rs [40960]
O44 - LFC:[MD5.27828AAA24AA46F11036954ADE355C1C] - 9/01/2013 - 19:05:43 ---A- . (.Microsoft - Syst�me de classification DJCTQ.) -- C:\Windows\System32\djctq.rs [15360]
O44 - LFC:[MD5.A704E750245D5D4EE4A23E99A00F27D5] - 9/01/2013 - 19:05:43 ---A- . (.Microsoft - Syst�me de classification FPB.) -- C:\Windows\System32\fpb.rs [46592]
O44 - LFC:[MD5.ED59143843560B5EDB543C2A48CB9E4B] - 9/01/2013 - 19:05:43 ---A- . (.Microsoft - Syst�me de classification OFLC-NZ.) -- C:\Windows\System32\oflc-nz.rs [45568]
O44 - LFC:[MD5.6EC618588447B82EA8D88719EE46F725] - 9/01/2013 - 19:05:43 ---A- . (.Microsoft - Syst�me de notation CSRR.) -- C:\Windows\System32\csrr.rs [43520]
O44 - LFC:[MD5.2729A8C07B94B7A80824F7C6E269BBFD] - 30/01/2013 - 21:01:49 ---A- . (...) -- C:\Windows\IE9_main.log [2732]
O44 - LFC:[MD5.283CF171090BCF432BA9417BFD0B26B6] - 30/01/2013 - 20:00:37 ---A- . (...) -- C:\Windows\PFRO.log [3172]
O44 - LFC:[MD5.0C86ECD57691D796EFF5D8A7D03A98F9] - 30/01/2013 - 18:36:56 ---A- . (...) -- C:\Windows\DeleteOnReboot.bat [109]
O44 - LFC:[MD5.E28F929ED69EFFEA6842E8D950ABE864] - 30/01/2013 - 12:58:28 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1681110]
O44 - LFC:[MD5.D29A60AE13B1A415CF76473E5BF3BF7E] - 30/01/2013 - 12:58:28 ---A- . (...) -- C:\Windows\System32\perfc009.dat [124144]
O44 - LFC:[MD5.BDC62AB963F3F8BC5DE2F1138A206D65] - 30/01/2013 - 12:58:28 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [148510]
O44 - LFC:[MD5.E31E867A2A0A56461CECAD56A3718E95] - 30/01/2013 - 12:58:28 ---A- . (...) -- C:\Windows\System32\perfh009.dat [662950]
O44 - LFC:[MD5.B71FBACA6609ED387BA3FA74B93A1179] - 30/01/2013 - 12:58:28 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [751422]
O44 - LFC:[MD5.B625188B17933ECFE482C7BCA1193D24] - 29/01/2013 - 21:28:31 ---A- . (...) -- C:\Windows\Submeo Uninstall Log.txt [5124]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 29/01/2013 - 15:33:36 ---A- . (...) -- C:\Windows\setuperr.log [0]
O44 - LFC:[MD5.680CE43141FB1F432CD375063450E0C0] - 28/01/2013 - 17:32:14 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerApp.exe [697864]
O44 - LFC:[MD5.72AC0DB22D016619E0AD3F9C411B9738] - 28/01/2013 - 17:32:14 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [74248]
O44 - LFC:[MD5.D93993A2D716A5BF633C76BE4FD11217] - 19/01/2013 - 19:26:06 ---A- . (.Oracle Corporation - Pas de description.) -- C:\Windows\System32\WindowsAccessBridge.dll [94112]
O44 - LFC:[MD5.55263AAAFF7419530F4C2B897267D2A8] - 19/01/2013 - 19:26:05 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\deployJava1.dll [780192]
O44 - LFC:[MD5.87AC3175FA9C5FD5BAD55654C4E381F8] - 19/01/2013 - 19:26:05 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\java.exe [174496]
O44 - LFC:[MD5.94FFE355A61070D2B4B83D05F1BE4FEB] - 19/01/2013 - 19:26:05 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\javaw.exe [174496]
O44 - LFC:[MD5.87A4FFD3F0A67740EA638884460D1A3A] - 19/01/2013 - 19:26:05 ---A- . (.Oracle Corporation - Java(TM) Web Start Launcher.) -- C:\Windows\System32\javaws.exe [261024]
O44 - LFC:[MD5.053E986A84F5EE271D38896B8079157D] - 19/01/2013 - 19:26:05 ---A- . (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(T.) -- C:\Windows\System32\npdeployJava1.dll [859552]
O44 - LFC:[MD5.F2FEFDFE5DF0486979D040678A0A0084] - 16/01/2013 - 12:13:00 ---A- . (...) -- C:\Windows\System32\jupdate-1.7.0_11-b21.log [4538]
O44 - LFC:[MD5.A7F9A4181C73EB0D68EC0453D4B71A05] - 10/01/2013 - 06:39:31 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [480560]
O44 - LFC:[MD5.1153AC6E133AA849853DFD407B086B80] - 30/11/2012 - 00:17:39 ---A- . (...) -- C:\Windows\System32\locale.nls [420064]
~ Scan Files in 00mn 08s



---\\ Derniers fichiers cr��s dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.22680B59E022F20C6D69B031BAEBBB84] - 1/02/2013 - 00:01:49 ---A- - C:\Windows\Prefetch\DXPSERVER.EXE-02DD8117.pf
O45 - LFCP:[MD5.5398A9A4E4413230213270DF7D638F19] - 1/02/2013 - 00:02:41 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-28BF826E.pf
O45 - LFCP:[MD5.26E3F331B3AB926EEEECA3C4B9B3FD03] - 1/02/2013 - 00:03:25 ---A- - C:\Windows\Prefetch\MMC.EXE-F5DC4F82.pf
O45 - LFCP:[MD5.6B4CB7847D7E9A2D9EA4AC57E0874303] - 1/02/2013 - 08:21:49 ---A- - C:\Windows\Prefetch\PCDRSYSINFOBLUETOOTH.P5X-481F8996.pf
O45 - LFCP:[MD5.0208A7A7E79B9D39499A2CC68583E056] - 1/02/2013 - 10:31:10 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-A2D55CB6.pf
O45 - LFCP:[MD5.A629C53086418DD2035CBECF2C12DB65] - 2/02/2013 - 02:32:22 ---A- - C:\Windows\Prefetch\DISPLAYSWITCH.EXE-A8217868.pf
O45 - LFCP:[MD5.20F910A7F9BA8AF0AD599FAC645FB3C2] - 2/02/2013 - 13:16:24 ---A- - C:\Windows\Prefetch\ACWIN7HLPR.EXE-3D1C3E1D.pf
O45 - LFCP:[MD5.76B73486178E04004A97669AD043AF43] - 2/02/2013 - 13:16:27 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:[MD5.6892BC90605E82EE8014B7E55F914B33] - 2/02/2013 - 13:16:29 ---A- - C:\Windows\Prefetch\AVGDIAGEX.EXE-A8198F94.pf
O45 - LFCP:[MD5.3272C616C5255C070D18FA5EB9E91558] - 2/02/2013 - 13:16:36 ---A- - C:\Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf
O45 - LFCP:[MD5.A0F33F17139D3B9263C7B76162914D4C] - 2/02/2013 - 13:17:27 ---A- - C:\Windows\Prefetch\AgCx_SC1.db
O45 - LFCP:[MD5.59B99F1F3654ED4E2A2FAFEF091E2126] - 2/02/2013 - 13:20:37 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-591723367-1614411120-1145975636-1003.db
O45 - LFCP:[MD5.DD0F2905549D8D227DBB07254F499AE1] - 2/02/2013 - 13:20:37 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-591723367-1614411120-1145975636-1003.db
O45 - LFCP:[MD5.96723816FADD9634DA4C9EFECB4BB3C5] - 2/02/2013 - 17:45:23 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-D8414F97.pf
O45 - LFCP:[MD5.20FF15B4C904C925E3FFC8516C5B435C] - 2/02/2013 - 19:13:38 ---A- - C:\Windows\Prefetch\VLC.EXE-A11F73EE.pf
O45 - LFCP:[MD5.4570A5072F0FCF3B02DEE7A845CDF4D7] - 2/02/2013 - 19:15:31 ---A- - C:\Windows\Prefetch\PLAY65.EXE-35553588.pf
O45 - LFCP:[MD5.EB695C8198BD0601F78989291CC1D21F] - 2/02/2013 - 19:15:36 ---A- - C:\Windows\Prefetch\NTVDM.EXE-F6564EE5.pf
O45 - LFCP:[MD5.3CCEF7745EF9903290A045CC1D14A521] - 2/02/2013 - 19:15:42 ---A- - C:\Windows\Prefetch\PLAY65.EXE-4473ED11.pf
O45 - LFCP:[MD5.CFE27F97DDB5B90DD064BD8400EDB2A0] - 2/02/2013 - 20:01:20 ---A- - C:\Windows\Prefetch\REALSCHED.EXE-DDDCD145.pf
O45 - LFCP:[MD5.E5FF219AB3E81B0AB8CE531CF27CB4EE] - 2/02/2013 - 20:54:36 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf
O45 - LFCP:[MD5.1A98C95989A86F23AB458C9231068076] - 28/01/2013 - 05:58:11 ---A- - C:\Windows\Prefetch\Layout.ini
O45 - LFCP:[MD5.4330B4C91EE9DB34D8B3D1ED52AAB6DB] - 3/02/2013 - 05:04:58 ---A- - C:\Windows\Prefetch\MSFEEDSSYNC.EXE-6E6FBDF4.pf
O45 - LFCP:[MD5.1BE5105709C658FE3CC657398C8B3759] - 3/02/2013 - 05:25:15 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:[MD5.31675EAEDC437ECC90363BA9DF38DE2A] - 3/02/2013 - 11:00:39 ---A- - C:\Windows\Prefetch\GETADMIN.EXE-C9958C3D.pf
O45 - LFCP:[MD5.7A5AFC0DE2647761B3C48FC841ADAB4E] - 3/02/2013 - 11:00:39 ---A- - C:\Windows\Prefetch\GETODD.EXE-DBC31DAB.pf
O45 - LFCP:[MD5.E978762A5422CB77AAF9BFD8DD294147] - 3/02/2013 - 11:00:40 ---A- - C:\Windows\Prefetch\BUYER.EXE-AD37D4F3.pf
O45 - LFCP:[MD5.5FB6258F690835F88DF30EAAA8F1BD6F] - 3/02/2013 - 11:00:42 ---A- - C:\Windows\Prefetch\GETODDMODEL.EXE-B89D3F18.pf
O45 - LFCP:[MD5.3F72FA981B54AF032D9188A35152C438] - 3/02/2013 - 11:00:49 ---A- - C:\Windows\Prefetch\FWUPDATE.EXE-3B3D4768.pf
O45 - LFCP:[MD5.41BBD3AC6B7EC394A71C97F093640A5E] - 3/02/2013 - 11:00:50 ---A- - C:\Windows\Prefetch\FIREFOX.EXE-A606B53C.pf
O45 - LFCP:[MD5.91E03E596CACF3329D321A7F3A94485A] - 3/02/2013 - 11:00:58 ---A- - C:\Windows\Prefetch\RECORDINGMANAGER.EXE-A711D8FE.pf
O45 - LFCP:[MD5.A1DBE12F00F59CB4076F6735D8A6A641] - 3/02/2013 - 11:04:11 ---A- - C:\Windows\Prefetch\AVGSRMAX.EXE-AFDE43E9.pf
O45 - LFCP:[MD5.4EC065A58C4BB0D2CA24376BE9C0D178] - 3/02/2013 - 11:11:33 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf
O45 - LFCP:[MD5.D8DAFF28DC69B68B82ABEDA437D72DE8] - 3/02/2013 - 11:11:46 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-A3E35360.pf
O45 - LFCP:[MD5.11EF424BFCB56252A45F3DDBE556D29A] - 3/02/2013 - 11:13:01 ---A- - C:\Windows\Prefetch\UACLAUNCHER.EXE-B29ED6AC.pf
O45 - LFCP:[MD5.5BC55626478E50C0F071531A72066913] - 3/02/2013 - 11:13:11 ---A- - C:\Windows\Prefetch\PCDRCUI.EXE-C67D6807.pf
O45 - LFCP:[MD5.A328E558842124B530499887349A7BE9] - 3/02/2013 - 11:13:20 ---A- - C:\Windows\Prefetch\DETWANHW.EXE-CB236554.pf
O45 - LFCP:[MD5.691FA3F3475AEAD9F7E5F2B5C26719D1] - 3/02/2013 - 11:13:25 ---A- - C:\Windows\Prefetch\PCDRSYSINFOSMBIOS2.P5X-A47C2AEB.pf
O45 - LFCP:[MD5.73DD4D2F7CFF615F8FF47643DD696A01] - 3/02/2013 - 11:13:27 ---A- - C:\Windows\Prefetch\PCDRSYSINFOCSMI.P5X-587B5B5C.pf
O45 - LFCP:[MD5.3FEF637B492C8E3F9ACB83799EE4854D] - 3/02/2013 - 11:13:29 ---A- - C:\Windows\Prefetch\PCDRSYSINFOCPU_X86.P5X-A5B2A351.pf
O45 - LFCP:[MD5.BE337E4FCAEAC5FE01779771739A5D91] - 3/02/2013 - 11:13:31 ---A- - C:\Windows\Prefetch\PCDRSYSINFOCOMMUNICATION.P5X-80DE76A6.pf
O45 - LFCP:[MD5.EB9A9DEE001C0EA6CEF58AB05B28BDA5] - 3/02/2013 - 11:13:31 ---A- - C:\Windows\Prefetch\PCDRSYSINFOSTORAGE.P5X-5ED5ACC9.pf
O45 - LFCP:[MD5.31B81EEA0637BE60C3AB1B3226FB137E] - 3/02/2013 - 11:13:33 ---A- - C:\Windows\Prefetch\PCDRSYSINFOPERIPHERAL.P5X-AE26FACC.pf
O45 - LFCP:[MD5.26B2C61FA95C471EF1E0A378A9370BF2] - 3/02/2013 - 11:13:35 ---A- - C:\Windows\Prefetch\PCDRSYSINFODIRECT.P5X-03BB6E1F.pf
O45 - LFCP:[MD5.2C34B64320144D622A3D845A210E2F89] - 3/02/2013 - 11:13:35 ---A- - C:\Windows\Prefetch\PCDRSYSINFOSOFTWARE.P5X-2F41B9A7.pf
O45 - LFCP:[MD5.D90B1DACF5E8EFA15707DAA9E87BDE9B] - 3/02/2013 - 11:13:39 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-CF2B07FC.pf
O45 - LFCP:[MD5.368400C3F0D24927641EEFA6D11B2485] - 3/02/2013 - 11:14:04 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf
O45 - LFCP:[MD5.64E2398953FD8DB71901AEB81BA0805B] - 3/02/2013 - 11:14:04 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf
O45 - LFCP:[MD5.71E377BE02CA4D6494D7508F56E9531A] - 3/02/2013 - 11:14:06 ---A- - C:\Windows\Prefetch\TVT_FINGERPRINT_INFO.EXE-E5243664.pf
O45 - LFCP:[MD5.0B1BB082249B24B99AD75B730E29F1E9] - 3/02/2013 - 11:15:02 ---A- - C:\Windows\Prefetch\APPUPDATER.EXE-85C1F260.pf
O45 - LFCP:[MD5.2BA78D2C8EE79B3DE3F7791145EFF2E4] - 3/02/2013 - 11:15:06 ---A- - C:\Windows\Prefetch\GOOGLETALKPLUGIN.EXE-2864CCA3.pf
O45 - LFCP:[MD5.B594B871DF1A396EC70C34D719070D2C] - 3/02/2013 - 11:15:06 ---A- - C:\Windows\Prefetch\WMIAPSRV.EXE-29F35ED0.pf
O45 - LFCP:[MD5.6C187720B07AC92A9CA5E5B4CE961DDF] - 3/02/2013 - 11:15:14 ---A- - C:\Windows\Prefetch\PCDRREALTIME.P5X-55B02898.pf
O45 - LFCP:[MD5.FEC3A49E082A3D40E0A5ADE2A9B511EB] - 3/02/2013 - 11:15:14 ---A- - C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-7226D1F8.pf
O45 - LFCP:[MD5.D2F760AAD491A69ABEABFF9C740F9E26] - 3/02/2013 - 11:16:04 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-B2EB1806.pf
O45 - LFCP:[MD5.BE7980F0C5D5FFFC85656F2A2B4E5A53] - 3/02/2013 - 14:43:16 ---A- - C:\Windows\Prefetch\MESSAGECENTERPLUS.EXE-733E0F5D.pf
O45 - LFCP:[MD5.2D6B9701506FB01BB54A1EA7F8EDA98A] - 3/02/2013 - 15:42:11 ---A- - C:\Windows\Prefetch\BGROOM.EXE-DF6113F2.pf
O45 - LFCP:[MD5.8D86804F4CF859A6F8A2F33CDAD788BE] - 3/02/2013 - 15:42:12 ---A- - C:\Windows\Prefetch\BGROOMLOBBY.EXE-2F8AC5A2.pf
O45 - LFCP:[MD5.A8D40B3912D40E8981016CA5601B3B23] - 3/02/2013 - 17:03:25 ---A- - C:\Windows\Prefetch\AVGMFAPX.EXE-79669D86.pf
O45 - LFCP:[MD5.A61CAB8675D3CA65E765E8632F2D7082] - 3/02/2013 - 17:04:13 ---A- - C:\Windows\Prefetch\AVGCSRVX.EXE-E74F9E10.pf
O45 - LFCP:[MD5.0D4A446800367595290AB406457B727C] - 3/02/2013 - 17:04:16 ---A- - C:\Windows\Prefetch\FIXCFG.EXE-F7D1BD57.pf
O45 - LFCP:[MD5.414098EF7DCAFDE9B2D177D174003C16] - 3/02/2013 - 17:16:25 ---A- - C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf
O45 - LFCP:[MD5.519E3D67AAF99F8098AC9971956B6B18] - 3/02/2013 - 17:26:00 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-ECAD9571.pf
O45 - LFCP:[MD5.316331F5CE1CFFBEDFDC9F4FABC46284] - 3/02/2013 - 17:26:10 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf
O45 - LFCP:[MD5.0DDC6CC041153EB9BB4C1FEF74568C6A] - 3/02/2013 - 17:29:46 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.3FD56C55A56DAB29F62B3DB20594E722] - 3/02/2013 - 17:29:47 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.247A487D41FCFBF289F7FF30704A12B9] - 3/02/2013 - 17:29:47 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.8FCF261F53AFEDCBFF0993298A966683] - 3/02/2013 - 17:29:47 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.7BC112D6DA7EE2FCEECC686BD79B2701] - 3/02/2013 - 17:37:05 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf
O45 - LFCP:[MD5.E0F65E65555F2434C0E047649A23036E] - 3/02/2013 - 17:37:07 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-E69F695A.pf
O45 - LFCP:[MD5.91E83648963BA129B73758CA034A888F] - 3/02/2013 - 17:37:52 ---A- - C:\Windows\Prefetch\AUDIODG.EXE-BDFD3029.pf
O45 - LFCP:[MD5.2C3032C750E9890EDF9F1108E00FC0D6] - 3/02/2013 - 17:39:18 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf
O45 - LFCP:[MD5.DB19C836BE9B2CD51BD7B77612049052] - 3/02/2013 - 17:42:20 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-DAED8DEA.pf
O45 - LFCP:[MD5.3187E719DD54E2B9EE505E02441D092A] - 3/02/2013 - 17:42:20 ---A- - C:\Windows\Prefetch\SVCGUIHLPR.EXE-CDFBF53D.pf
O45 - LFCP:[MD5.3B8B1E91BC42765516E95D0055386331] - 3/02/2013 - 17:42:43 ---A- - C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf
O45 - LFCP:[MD5.5073F06F2E6508C8B81C3C7A5790CD75] - 3/02/2013 - 17:43:45 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf
O45 - LFCP:[MD5.A3E2FE5F7E04DD079DF848EFDA22BFB6] - 3/02/2013 - 17:43:47 ---A- - C:\Windows\Prefetch\DEVICEDISPLAYOBJECTPROVIDER.E-17410B90.pf
O45 - LFCP:[MD5.892453FEFF8DEC1E0ACF2592D9E048B6] - 3/02/2013 - 17:43:48 ---A- - C:\Windows\Prefetch\BTWDINS.EXE-084145FD.pf
O45 - LFCP:[MD5.4E2EFE80F30D0CFF32501FF2AB5D5BF8] - 3/02/2013 - 17:43:56 ---A- - C:\Windows\Prefetch\IVIREGMGR.EXE-8051C7DF.pf
O45 - LFCP:[MD5.06248F111E300259FDF2EC67AF524F57] - 3/02/2013 - 17:43:57 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-B0F8131B.pf
O45 - LFCP:[MD5.930B8EA6765F75C2F3C0DE272F1E549D] - 3/02/2013 - 17:43:58 ---A- - C:\Windows\Prefetch\SQLWRITER.EXE-7FC57290.pf
O45 - LFCP:[MD5.FC1BD0C90494AC3276616C3B08545A11] - 3/02/2013 - 17:43:59 ---A- - C:\Windows\Prefetch\SUSERVICE.EXE-404C13E6.pf
O45 - LFCP:[MD5.764DABADC37E945F2A17D75E4A7B3B3E] - 3/02/2013 - 17:44:00 ---A- - C:\Windows\Prefetch\TVT_REG_MONITOR_SVC.EXE-5094650E.pf
O45 - LFCP:[MD5.F4DF15866ECC510505B69E4E92B10148] - 3/02/2013 - 17:44:02 ---A- - C:\Windows\Prefetch\WMPNETWK.EXE-D9F2A96F.pf
O45 - LFCP:[MD5.1EA43227ECA681C9EA1AD8DDA036126D] - 3/02/2013 - 17:44:10 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf
O45 - LFCP:[MD5.4A9453211B4235568502ADAB835C0D9D] - 3/02/2013 - 17:44:15 ---A- - C:\Windows\Prefetch\ZHPDIAG2.EXE-802CB357.pf
O45 - LFCP:[MD5.3C85103BBA4F47F99E44F4A11CE6C250] - 3/02/2013 - 17:44:23 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf
O45 - LFCP:[MD5.FADB7EC4D07C260B14B6F1704ED1C8FA] - 3/02/2013 - 17:44:34 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf
O45 - LFCP:[MD5.FCA8AE580626BD94590B81B35368754B] - 3/02/2013 - 17:44:50 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf
O45 - LFCP:[MD5.61C4C0EBF6A84509967D30345F127116] - 3/02/2013 - 17:45:14 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf
O45 - LFCP:[MD5.EF772748B14EFFDB52718E7D59B6F34F] - 3/02/2013 - 17:45:34 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf
O45 - LFCP:[MD5.B7D2687F677312FEFDAD3FBFB489A086] - 3/02/2013 - 17:45:44 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
O45 - LFCP:[MD5.754185B487DBF654AF573DDB004DFDF9] - 3/02/2013 - 17:46:55 ---A- - C:\Windows\Prefetch\CMD.EXE-4A81B364.pf
O45 - LFCP:[MD5.709ABA902B824DA8DB81C77F7ED93B1B] - 3/02/2013 - 17:46:55 ---A- - C:\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf
O45 - LFCP:[MD5.0725BCED0DCE32A65131DD423DA6670A] - 3/02/2013 - 17:47:08 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-5CA45734.pf
O45 - LFCP:[MD5.0E902D867523655CED48269DC76FBE7C] - 3/02/2013 - 17:48:33 ---A- - C:\Windows\Prefetch\AVGCMGR.EXE-6E8FF5A7.pf
O45 - LFCP:[MD5.E218C8618356E5DA8762CF0B5DD73CD4] - 3/02/2013 - 17:48:46 ---A- - C:\Windows\Prefetch\REALPLAY.EXE-A09C7945.pf
O45 - LFCP:[MD5.633CE98FE922D6DF99F223FA851485F5] - 30/01/2013 - 19:36:21 ---A- - C:\Windows\Prefetch\ADOBEARM.EXE-719325FF.pf
O45 - LFCP:[MD5.0F30870C8B9A2F50AB6A939868DB795A] - 30/01/2013 - 19:36:21 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.24DF4F09C59E4F8ED79086C467BC9D41] - 30/01/2013 - 19:36:21 ---A- - C:\Windows\Prefetch\QTTASK.EXE-A6BC4AB2.pf
O45 - LFCP:[MD5.5F24B8F6AD61A028D862249A1BA38C03] - 30/01/2013 - 19:42:44 ---A- - C:\Windows\Prefetch\AD-REMOVER_AD_REMOVER_2010_2.-3EDF4A55.pf
O45 - LFCP:[MD5.BC5079542D88A95F2072F4DB545A2975] - 30/01/2013 - 19:43:12 ---A- - C:\Windows\Prefetch\MBAM.EXE-305FF92C.pf
O45 - LFCP:[MD5.8C9283CB3288833E86C56BAE6CE2B9B3] - 30/01/2013 - 19:43:35 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-86E0E9B9.pf
O45 - LFCP:[MD5.39578742E728856CCEFD45519C014E8A] - 30/01/2013 - 19:43:59 ---A- - C:\Windows\Prefetch\CCLEANER.EXE-D4D76A60.pf
O45 - LFCP:[MD5.3EB70B241F297256D27EEC9CB0D888B9] - 30/01/2013 - 19:58:11 ---A- - C:\Windows\Prefetch\AD-REMOVER_AD_REMOVER_2010_2.-C3DDEF6B.pf
O45 - LFCP:[MD5.118D5558C9EB0242B1D09CCCC214359E] - 30/01/2013 - 19:58:15 ---A- - C:\Windows\Prefetch\ADR.EXE-883A0D40.pf
O45 - LFCP:[MD5.A16242846010657566A01031ACA39242] - 30/01/2013 - 19:58:15 ---A- - C:\Windows\Prefetch\AU_.EXE-5F83D128.pf
O45 - LFCP:[MD5.F2ED18271DDD279F0465209568203BC5] - 30/01/2013 - 19:58:15 ---A- - C:\Windows\Prefetch\UN-ADR.EXE-CA750078.pf
O45 - LFCP:[MD5.9F9ABA8F6FD0F9A11DC1F271AF44C286] - 30/01/2013 - 20:01:27 ---A- - C:\Windows\Prefetch\ACTRAY.EXE-36EFBC16.pf
O45 - LFCP:[MD5.E11F7E434C936B98E0603B526DBFDB17] - 30/01/2013 - 20:01:27 ---A- - C:\Windows\Prefetch\APSDAEMON.EXE-6E0EB72B.pf
O45 - LFCP:[MD5.C3C90925A01A203BA91FFFF2DAB73EBF] - 30/01/2013 - 20:01:27 ---A- - C:\Windows\Prefetch\DVD43_TRAY.EXE-13740D2B.pf
O45 - LFCP:[MD5.273828F375659DA84B81B21CD835824C] - 30/01/2013 - 20:01:27 ---A- - C:\Windows\Prefetch\SYNTPLPR.EXE-FA172972.pf
O45 - LFCP:[MD5.4F7B70C5770B418E50792912D2CD9728] - 30/01/2013 - 20:07:01 ---A- - C:\Windows\Prefetch\DELFIX-10.0.EXE-D5223592.pf
O45 - LFCP:[MD5.80163C5E3F42C2F47AE178508968B40A] - 30/01/2013 - 20:07:02 ---A- - C:\Windows\Prefetch\PING.EXE-7E94E73E.pf
O45 - LFCP:[MD5.858E740007F0C12F88D601A784E66C66] - 30/01/2013 - 20:36:36 ---A- - C:\Windows\Prefetch\PROPERTYSYNC.EXE-E428B1FE.pf
O45 - LFCP:[MD5.38FC25BCAA722EE80686EFC87633551A] - 30/01/2013 - 20:38:11 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-EEE13F6D.pf
O45 - LFCP:[MD5.FF5019C68845EDBC69C72B906AA8C4D1] - 30/01/2013 - 20:45:09 ---A- - C:\Windows\Prefetch\IE9-WINDOWS7-X86-ENU.EXE-DEEB38C2.pf
O45 - LFCP:[MD5.A5999645259C258A94C57E8D64C0B7A7] - 30/01/2013 - 20:45:09 ---A- - C:\Windows\Prefetch\IENRCORE.EXE-56FA453F.pf
O45 - LFCP:[MD5.2895E4AA17F028878B0DB742E4E0155B] - 30/01/2013 - 21:03:05 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-908C99F8.pf
O45 - LFCP:[MD5.1D2C1AE08D6BCA9CB24F792B60E78DA4] - 30/01/2013 - 21:03:09 ---A- - C:\Windows\Prefetch\SCSERVER.EXE-01390C45.pf
O45 - LFCP:[MD5.B767EB98BDCBF9A513413B5B1FFF0230] - 30/01/2013 - 21:03:25 ---A- - C:\Windows\Prefetch\FLASHUTIL10C.EXE-1A30AEBE.pf
O45 - LFCP:[MD5.C6CE2749C39570A17F428E207ADDA1B3] - 30/01/2013 - 21:25:25 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-68334A07.pf
O45 - LFCP:[MD5.07B65E0D6CA5DC98FCA4E405DE735805] - 30/01/2013 - 21:28:19 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-6A473D35.pf
O45 - LFCP:[MD5.6E72AB6421846F091361FBDEE703EBE7] - 30/01/2013 - 21:31:33 ---A- - C:\Windows\Prefetch\HIJACKTHIS.EXE-9FD56571.pf
O45 - LFCP:[MD5.092D06289615AC684FE08D851206A66B] - 31/01/2013 - 00:28:31 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-FDF6FDE7.pf
O45 - LFCP:[MD5.02E547776C7D156BEFEE36CFD104E820] - 31/01/2013 - 00:33:24 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-E2C2633A.pf
O45 - LFCP:[MD5.AB690DF5DF74D102DAAA398040439408] - 31/01/2013 - 00:33:26 ---A- - C:\Windows\Prefetch\DROPBOX.EXE-0B495C8D.pf
O45 - LFCP:[MD5.AC3AC1634BB93EFECB41F3EEC971B12C] - 31/01/2013 - 00:34:33 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-771921FE.pf
O45 - LFCP:[MD5.4CBB3E7E2C4FA218B3F52D582FAF98C5] - 31/01/2013 - 00:48:07 ---A- - C:\Windows\Prefetch\HELPPANE.EXE-FEDC965B.pf
O45 - LFCP:[MD5.14BF09DB7C8D680821C755E7BD86C6CF] - 31/01/2013 - 09:10:32 ---A- - C:\Windows\Prefetch\AgCx_SC2.db
O45 - LFCP:[MD5.8823C386D6046B00CBC67C96B8E663E7] - 31/01/2013 - 16:08:11 ---A- - C:\Windows\Prefetch\MCUICNT.EXE-2E417C47.pf
O45 - LFCP:[MD5.7B78C54C947F1A6F325BF6BBFD6A5F90] - 31/01/2013 - 16:31:46 ---A- - C:\Windows\Prefetch\MCCHSVC.EXE-2510A423.pf
O45 - LFCP:[MD5.E37E0296CA229E7B9A248E6619922D25] - 31/01/2013 - 16:31:47 ---A- - C:\Windows\Prefetch\UNINSTALL.EXE-43549036.pf
O45 - LFCP:[MD5.F2C78A1D2004EB6901CAD6E475A25D53] - 31/01/2013 - 16:31:49 ---A- - C:\Windows\Prefetch\REGSVR32.EXE-8461DBEE.pf
O45 - LFCP:[MD5.F8D7F323B1A73FC14B44CE41EF6A99A1] - 31/01/2013 - 16:31:50 ---A- - C:\Windows\Prefetch\SECURITYSCAN_INNER.EXE-AFE9E053.pf
O45 - LFCP:[MD5.F5713960C22B9D31A4C9AF0C20C88153] - 31/01/2013 - 16:31:50 ---A- - C:\Windows\Prefetch\SECURITYSCAN_RELEASE.EXE-A2FE9EFD.pf
O45 - LFCP:[MD5.D8AC8433A93543B4C4023A52CE14935E] - 31/01/2013 - 16:32:01 ---A- - C:\Windows\Prefetch\MCUICNT.EXE-E6F5E725.pf
O45 - LFCP:[MD5.D55AEFD8F2E17A96E7A57972D9142E22] - 31/01/2013 - 16:32:01 ---A- - C:\Windows\Prefetch\SSSCHEDULER.EXE-A75B19C7.pf
O45 - LFCP:[MD5.1031207BC599DE77CFA05C8F32D3A73A] - 31/01/2013 - 16:32:30 ---A- - C:\Windows\Prefetch\MCCHSVC.EXE-DDC50F01.pf
O45 - LFCP:[MD5.FA22627042E9CB79891A3D558594CD44] - 31/01/2013 - 16:33:25 ---A- - C:\Windows\Prefetch\CONTENTDATS.EXE-82493AF7.pf
O45 - LFCP:[MD5.5AA769240182E2F29360420CCD0F1F36] - 31/01/2013 - 17:16:51 ---A- - C:\Windows\Prefetch\UNAVOSD.EXE-3C61E006.pf
~ Scan Prefetcher in 00mn 02s



---\\ D�ni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l��diteur de configuration de s�curit� Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Notification Packages . (...) -- C:\Windows\System32\ACGina.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de s�curit� Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll
~ Scan Keys in 00mn 00s



---\\ Contr�le du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s



---\\ MountPoints2 Shell Key (O51)
O51 - MPSK:{80310e12-747e-11df-a5d2-806e6f6e6963}\AutoRun\command. (.Lenovo Group Limited - Lenovo Factory Backup Partition Information.) -- Q:\LenovoQDrive.exe
~ Scan Keys in 00mn 00s



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="L3CODECA.ACM" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\L3CODECA.ACM
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak�.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"L3CODECA.ACM"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\L3CODECA.ACM
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53) (None)

---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Syst�me (O58)
O58 - SDL:[MD5.21E785EBD7DC90A06391141AAC7892FB] - 14/07/2009 - 02:26:15 ----- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [422976]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 13/07/2009 - 22:40:41 ----- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
~ Scan Drivers in 00mn 00s



---\\ Derniers fichiers modifi�s ou cr�es (Utilisateur) (O61)
O61 - LFC:Last File Created 1/02/2013 - 16:40:53 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89866900 floriion_fran330 01Feb2013-1537.bgf [1151]
O61 - LFC:Last File Created 1/02/2013 - 16:47:03 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89867004 floriion_fran330 01Feb2013-1540.bgf [1587]
O61 - LFC:Last File Created 1/02/2013 - 16:52:52 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89867223 floriion_fran330 01Feb2013-1547.bgf [1624]
O61 - LFC:Last File Created 1/02/2013 - 16:57:30 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89867409 floriion_fran330 01Feb2013-1553.bgf [1313]
O61 - LFC:Last File Created 1/02/2013 - 17:00:39 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89867550 floriion_fran330 01Feb2013-1557.bgf [659]
O61 - LFC:Last File Created 1/02/2013 - 19:02:37 ---A- C:\Users\user\AppData\Local\Temp\CR_81C71.tmp\SETUP_PATCH.PACKED.7Z [1193]
O61 - LFC:Last File Created 1/02/2013 - 19:02:39 ---A- C:\Users\user\AppData\Local\Google\Chrome\Application\24.0.1312.57\Installer\setup.exe [1607120]
O61 - LFC:Last File Created 1/02/2013 - 19:05:16 ---A- C:\Users\user\AppData\Local\Google\Chrome\Application\24.0.1312.57\Installer\chrome.7z [112326370]
O61 - LFC:Last File Created 1/02/2013 - 19:05:18 ---A- C:\Users\user\AppData\Local\Google\Chrome\Application\VisualElementsManifest.xml [396]
O61 - LFC:Last File Created 2/02/2013 - 21:51:40 ---A- C:\Users\user\AppData\Local\Avg2013\log\avgidpagentmonitor.log.1 [65573]
O61 - LFC:Last File Created 27/05/2012 - 15:17:46 ---A- C:\Users\user\program setups\WiziWYG_1.0.6_4374\_INST32I.EX_ [300178]
O61 - LFC:Last File Created 3/02/2013 - 00:37:50 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89919837 clauseba_fran330 02Feb2013-2329.bgf [1899]
O61 - LFC:Last File Created 3/02/2013 - 00:45:33 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89920171 chatless_fran330 02Feb2013-2339.bgf [1462]
O61 - LFC:Last File Created 3/02/2013 - 00:51:07 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89920368 devine7_fran330 02Feb2013-2346.bgf [1326]
O61 - LFC:Last File Created 3/02/2013 - 00:54:25 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89920505 devine7_fran330 02Feb2013-2351.bgf [1102]
O61 - LFC:Last File Created 3/02/2013 - 01:01:04 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89920662 fran330_ivanovDV68 02Feb2013-2355.bgf [1205]
O61 - LFC:Last File Created 3/02/2013 - 01:07:20 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89920794 fran330_ivanovDV68 03Feb2013-0001.bgf [1371]
O61 - LFC:Last File Created 3/02/2013 - 01:19:27 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89921018 blotgobber_fran330 03Feb2013-0009.bgf [1697]
O61 - LFC:Last File Created 3/02/2013 - 01:27:45 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89921315 samsunlum55_fran330 03Feb2013-0021.bgf [1592]
O61 - LFC:Last File Created 3/02/2013 - 01:31:48 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89921435 samsunlum55_fran330 03Feb2013-0027.bgf [1284]
O61 - LFC:Last File Created 3/02/2013 - 01:37:23 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89921527 samsunlum55_fran330 03Feb2013-0031.bgf [1537]
O61 - LFC:Last File Created 3/02/2013 - 10:58:34 ---A- C:\Users\user\AppData\Roaming\Dropbox\shellext\l\510e34c9 [124]
O61 - LFC:Last File Created 3/02/2013 - 11:00:31 ---A- C:\Users\user\AppData\Local\Temp\au-descriptor-1.7.0_13-b20.xml [8794]
O61 - LFC:Last File Created 3/02/2013 - 11:00:42 ---A- C:\Users\user\AppData\Local\Temp\~DF3025D5D9174CC57C.TMP [16384]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\audio_recorder-hover.png [4417]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\audio_recorder-normal.png [3951]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\audio_recorder-pressed.png [3866]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\converter-hover.png [4079]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\converter-normal.png [3609]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\converter-pressed.png [3538]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\go_ad_free-hover.png [4913]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\go_ad_free-normal.png [4398]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\go_ad_free-pressed.png [4346]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\help-hover.png [3642]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\help-normal.png [3217]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\help-pressed.png [3152]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\media_player-hover.png [4784]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\media_player-normal.png [4325]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\media_player-pressed.png [4244]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\menu_header.png [8163]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\mp3_editor-normal.png [3654]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\screen_recorder-hover.png [4944]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\screen_recorder-normal.png [4486]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\screen_recorder-pressed.png [4370]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\seperator.png [1066]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\video_recorder-hover.png [4625]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\video_recorder-normal.png [4158]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\video_recorder-pressed.png [4077]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\video_search-hover.png [4984]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\video_search-normal.png [4516]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\video_search-pressed.png [4432]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\youtube-hover.png [5833]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\youtube-normal.png [5356]
O61 - LFC:Last File Created 3/02/2013 - 11:00:51 ---A- C:\Users\user\AppData\Local\Temp\youtube-pressed.png [5220]
O61 - LFC:Last File Created 3/02/2013 - 11:00:53 ---A- C:\Users\user\AppData\Local\Temp\mp3_editor-pressed.png [14294]
O61 - LFC:Last File Created 3/02/2013 - 11:01:04 ---A- C:\Users\user\AppData\Local\Temp\mp3_editor-hover.png [14294]
O61 - LFC:Last File Created 3/02/2013 - 11:01:31 ---A- C:\Users\user\AppData\Roaming\Dropbox\shellext\l\510e357b [144]
O61 - LFC:Last File Created 3/02/2013 - 11:03:17 ---A- C:\Users\user\AppData\Roaming\Skype\fran330\keyval.db [40960]
O61 - LFC:Last File Created 3/02/2013 - 11:03:17 ---A- C:\Users\user\AppData\Roaming\Skype\fran330\keyval.db-journal [33344]
O61 - LFC:Last File Created 3/02/2013 - 11:14:15 ---A- C:\Users\user\AppData\Roaming\AVG2013\cfgall\userawacs.cfg [42964]
O61 - LFC:Last File Created 3/02/2013 - 11:22:07 ---A- C:\Users\user\AppData\Roaming\Skype\shared_dynco\dc.db [1744896]
O61 - LFC:Last File Created 3/02/2013 - 11:22:07 ---A- C:\Users\user\AppData\Roaming\Skype\shared_dynco\dc.db-journal [1149632]
O61 - LFC:Last File Created 3/02/2013 - 12:05:21 ---A- C:\Users\user\AppData\Roaming\Skype\fran330\chatsync\00\00f52d5bfe9b3c92.dat [1942]
O61 - LFC:Last File Created 3/02/2013 - 15:29:35 ---A- C:\Users\user\AppData\Roaming\Skype\fran330\msn.db [53248]
O61 - LFC:Last File Created 3/02/2013 - 15:29:35 ---A- C:\Users\user\AppData\Roaming\Skype\fran330\msn.db-journal [33344]
O61 - LFC:Last File Created 3/02/2013 - 15:30:32 ---A- C:\Users\user\AppData\Roaming\Skype\fran330\dc.db [659456]
O61 - LFC:Last File Created 3/02/2013 - 15:31:12 ---A- C:\Users\user\AppData\Roaming\Skype\fran330\bistats.db [69632]
O61 - LFC:Last File Created 3/02/2013 - 15:31:12 ---A- C:\Users\user\AppData\Roaming\Skype\fran330\bistats.db-journal [33344]
O61 - LFC:Last File Created 3/02/2013 - 15:31:12 ---A- C:\Users\user\AppData\Roaming\Skype\fran330\config.xml [18277]
O61 - LFC:Last File Created 3/02/2013 - 15:31:12 ---A- C:\Users\user\AppData\Roaming\Skype\fran330\httpfe\cookies.dat [125]
O61 - LFC:Last File Created 3/02/2013 - 15:31:12 ---A- C:\Users\user\AppData\Roaming\Skype\fran330\main.db [4513792]
O61 - LFC:Last File Created 3/02/2013 - 15:31:12 ---A- C:\Users\user\AppData\Roaming\Skype\fran330\main.db-journal [287792]
O61 - LFC:Last File Created 3/02/2013 - 15:31:13 ---A- C:\Users\user\AppData\Roaming\Skype\shared.xml [61393]
O61 - LFC:Last File Created 3/02/2013 - 15:53:14 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89942838 abulibabuli_fran330 03Feb2013-1449.bgf [1175]
O61 - LFC:Last File Created 3/02/2013 - 15:59:11 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89943008 abulibabuli_fran330 03Feb2013-1453.bgf [1586]
O61 - LFC:Last File Created 3/02/2013 - 16:04:41 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89943203 abulibabuli_fran330 03Feb2013-1459.bgf [1557]
O61 - LFC:Last File Created 3/02/2013 - 16:07:57 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89943320 abulibabuli_fran330 03Feb2013-1504.bgf [1102]
O61 - LFC:Last File Created 3/02/2013 - 16:14:09 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89943488 abulibabuli_fran330 03Feb2013-1508.bgf [1431]
O61 - LFC:Last File Created 3/02/2013 - 16:17:24 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89943724 abulibabuli_fran330 03Feb2013-1514.bgf [1086]
O61 - LFC:Last File Created 3/02/2013 - 16:25:49 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89943805 abulibabuli_fran330 03Feb2013-1517.bgf [2037]
O61 - LFC:Last File Created 3/02/2013 - 16:30:10 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89944120 abulibabuli_fran330 03Feb2013-1525.bgf [1459]
O61 - LFC:Last File Created 3/02/2013 - 16:37:24 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89944342 Rainbow21_fran330 03Feb2013-1530.bgf [1632]
O61 - LFC:Last File Created 3/02/2013 - 16:47:52 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89944698 belintanu_fran330 03Feb2013-1540.bgf [1451]
O61 - LFC:Last File Created 3/02/2013 - 16:53:29 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89944978 belintanu_fran330 03Feb2013-1547.bgf [1262]
O61 - LFC:Last File Created 3/02/2013 - 16:55:13 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89945204 Totos002_fran330 03Feb2013-1555.bgf [174]
O61 - LFC:Last File Created 3/02/2013 - 17:03:50 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89945252 GeorgeDRG_fran330 03Feb2013-1556.bgf [1410]
O61 - LFC:Last File Created 3/02/2013 - 17:09:13 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89945537 GeorgeDRG_fran330 03Feb2013-1603.bgf [1141]
O61 - LFC:Last File Created 3/02/2013 - 17:20:50 ---A- C:\Users\user\AppData\Roaming\Dropbox\shellext\l\510e8e62 [148]
O61 - LFC:Last File Created 3/02/2013 - 17:21:00 ---A- C:\Users\user\AppData\Local\Temp\3HBNM3B6.exe.part [3876312]
O61 - LFC:Last File Created 3/02/2013 - 17:41:26 ---A- C:\Users\user\AppData\Roaming\Dropbox\shellext\l\510e9336 [124]
O61 - LFC:Last File Created 3/02/2013 - 17:41:56 ---A- C:\Users\user\AppData\Roaming\OpenOffice.org\3\.lock [140]
O61 - LFC:Last File Created 3/02/2013 - 17:41:57 ---A- C:\Users\user\AppData\Roaming\OpenOffice.org\3\user\registrymodifications.xcu [253444]
O61 - LFC:Last File Created 3/02/2013 - 17:42:20 ---A- C:\Users\user\AppData\Local\Temp\~DF7DFC3530AD4727F5.TMP [16384]
O61 - LFC:Last File Created 30/12/1899 - 17:39:06 --HA- C:\Users\user\AppData\Local\IconCache.db [4206162]
O61 - LFC:Last File Created 31/01/2013 - 00:33:29 ---A- C:\Users\user\AppData\Roaming\Dropbox\host.db [69]
O61 - LFC:Last File Created 31/01/2013 - 00:33:29 ---A- C:\Users\user\AppData\Roaming\Dropbox\host.dbx [201]
O61 - LFC:Last File Created 31/01/2013 - 00:33:29 ---A- C:\Users\user\AppData\Roaming\Dropbox\unlink.db [232]
O61 - LFC:Last File Created 31/01/2013 - 00:33:32 ---A- C:\Users\user\AppData\Roaming\Dropbox\config.dbx [7168]
O61 - LFC:Last File Created 31/01/2013 - 00:33:32 ---A- C:\Users\user\AppData\Roaming\Dropbox\filecache.dbx [32768]
O61 - LFC:Last File Created 31/01/2013 - 00:33:56 ---A- C:\Users\user\AppData\Roaming\Dropbox\photo.dbx [13312]
O61 - LFC:Last File Created 31/01/2013 - 11:34:02 ---A- C:\Users\user\AppData\Local\Avg2013\log\avgdiagex.log.1 [65650]
O61 - LFC:Last File Created 31/01/2013 - 14:17:55 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89822053 nayatu_fran330 31Jan2013-1311.bgf [1272]
O61 - LFC:Last File Created 31/01/2013 - 14:22:30 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89822253 nayatu_fran330 31Jan2013-1318.bgf [831]
O61 - LFC:Last File Created 31/01/2013 - 14:27:44 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89822410 GeorgeDRG_fran330 31Jan2013-1323.bgf [1147]
O61 - LFC:Last File Created 31/01/2013 - 14:32:00 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89822536 GeorgeDRG_fran330 31Jan2013-1327.bgf [1183]
O61 - LFC:Last File Created 31/01/2013 - 14:37:04 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89822654 giusca_fran330 31Jan2013-1332.bgf [1120]
O61 - LFC:Last File Created 31/01/2013 - 14:41:27 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89822803 giusca_fran330 31Jan2013-1337.bgf [1417]
O61 - LFC:Last File Created 31/01/2013 - 14:47:17 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89822924 giusca_fran330 31Jan2013-1341.bgf [1324]
O61 - LFC:Last File Created 31/01/2013 - 14:53:07 ---A- C:\Users\user\Documents\BGroomSaved Files\fran330\89823129 diesel108_fran330 31Jan2013-1348.bgf [995]
O61 - LFC:Last File Created 31/01/2013 - 19:20:56 ---A- C:\Users\user\AppData\Local\Avg2013\log\krnlapi.log.1 [1024016]
~ Scan Files in 04mn 27s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.34 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
O63 - Logiciel: HiJackThis - (.Trend Micro.) [HKLM] -- {45A66726-69BC-466B-A7A4-12FCBA4883D7}
~ Scan ADS in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 22/10/2012 - C:\Windows\System32\DRIVERS\avgidsdriverx.sys (AVGIDSDriver) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) - LEGACY_AVGIDSDRIVER
O64 - Services: CurCS - 15/10/2012 - C:\Windows\System32\DRIVERS\avgidshx.sys (AVGIDSHX) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Helper Dri.) - LEGACY_AVGIDSHX
O64 - Services: CurCS - 21/09/2012 - C:\Windows\System32\DRIVERS\avgidsshimx.sys (AVGIDSShim) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Loader Dri.) - LEGACY_AVGIDSSHIM
O64 - Services: CurCS - 2/10/2012 - C:\Windows\System32\DRIVERS\avgldx86.sys (Avgldx86) .(.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - LEGACY_AVGLDX86
O64 - Services: CurCS - 21/09/2012 - C:\Windows\System32\DRIVERS\avglogx.sys (Avglogx) .(.AVG Technologies CZ, s.r.o. - AVG Logging Driver.) - LEGACY_AVGLOGX
O64 - Services: CurCS - 15/11/2012 - C:\Windows\System32\DRIVERS\avgmfx86.sys (Avgmfx86) .(.AVG Technologies CZ, s.r.o. - AVG Resident Shield Minifilter Driver.) - LEGACY_AVGMFX86
O64 - Services: CurCS - 14/09/2012 - C:\Windows\System32\DRIVERS\avgrkx86.sys (Avgrkx86) .(.AVG Technologies CZ, s.r.o. - AVG Anti-Rootkit Driver.) - LEGACY_AVGRKX86
O64 - Services: CurCS - 21/09/2012 - C:\Windows\System32\DRIVERS\avgtdix.sys (AvgTdiX) .(.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - LEGACY_AVGTDIX
O64 - Services: CurCS - 12/05/2008 - C:\Windows\System32\DRIVERS\smiif32.sys (lenovo.smi) .(.Lenovo Group Limited - SMI Driver for Lenovo system.) - LEGACY_LENOVO.SMI
O64 - Services: CurCS - 18/04/2007 - C:\Windows\System32\drivers\regi.sys (regi) .(.InterVideo - regi driver.) - LEGACY_REGI
O64 - Services: CurCS - ??\??\???? - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - 2/03/2010 - C:\Windows\System32\drivers\Tppwr32v.sys (TPPWRIF) .(.Lenovo Group Limited - Power Manager.) - LEGACY_TPPWRIF
~ Scan Services in 00mn 01s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mjizk69f.default\searchplugins\conduit.xml
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933..clientLogIsEnabled", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.AppTrackingLastCheckTime", "Thu Aug 16 2012 03:13:44 GMT+0200");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.BrowserCompStateIsOpen_129681785283868963", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.BrowserCompStateIsOpen_129686665230467549", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.CTID", "CT1060933");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.CommunitiesChangesLastCheckTime", "0");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.CurrentServerDate", "27-1-2013");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.DSChangedManually", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.DSInstall", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.DSProtectChoice", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.DSProtectCount", 1);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.DialogsAlignMode", "LTR");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.DialogsGetterLastCheckTime", "Sat Jan 26 2013 22:41:41 GMT+0100");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.DownloadReferralCookieData", "");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.EnableClickToSearchBox", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.EnableSearchHistory", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.EnableSearchSuggest", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.FirstServerDate", "27-4-2012");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.FirstTime", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.FirstTimeFF3", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.FirstTimeHiddenVer", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.FixPageNotFoundErrors", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.GroupingInvalidateCache", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.GroupingLastCheckTime", "0");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.GroupingLastServerUpdateTime", "0");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.GroupingServerCheckInterval", 1440);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.GroupingServiceUrl", "http://grouping.services.conduit.com/");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.HPInstall", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.HPProtectChoice", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.HPProtectCount", 1);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.HasUserGlobalKeys", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.HomePageProtectorEnabled", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.HomepageBeforeUnload", "https://www.google.be/");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.Initialize", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.InitializeCommonPrefs", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.InstallationAndCookieDataSentCount", 3);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.InstallationId", "ConduitNSISIntegration");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.InstallationType", "ConduitNSISIntegration");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.InstalledDate", "Fri Apr 27 2012 01:47:15 GMT+0200");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.InvalidateCache", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.IsAlertDBUpdated", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.IsGrouping", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.IsInitSetupIni", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.IsMulticommunity", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.IsOpenThankYouPage", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.IsOpenUninstallPage", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.IsProtectorsInit", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.LanguagePackLastCheckTime", "Sat Jan 26 2013 21:52:47 GMT+0100");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.LanguagePackReloadIntervalMM", 1440);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.LastLogin_3.12.2.3", "Thu May 31 2012 02:54:04 GMT+0200");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.LastLogin_3.13.0.6", "Sun Jul 15 2012 17:48:57 GMT+0200");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.LastLogin_3.14.1.0", "Wed Aug 22 2012 00:51:27 GMT+0200");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.LastLogin_3.15.1.0", "Wed Nov 07 2012 02:10:39 GMT+0100");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.LastLogin_3.16.0.100", "Sun Jan 27 2013 17:50:59 GMT+0100");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.LastLogin_3.16.0.3", "Mon Dec 31 2012 18:05:34 GMT+0100");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.LatestVersion", "3.16.0.100");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.Locale", "en-us");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.MCDetectTooltipHeight", "83");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.MCDetectTooltipShow", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.MCDetectTooltipWidth", "295");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.MyStuffEnabledAtInstallation", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.OriginalFirstVersion", "3.12.2.3");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.RadioIsPodcast", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.RadioLastCheckTime", "Sun Jan 27 2013 17:53:10 GMT+0100");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.RadioLastUpdateIPServer", "0");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.RadioLastUpdateServer", "129326918102570000");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.RadioMediaID", "21504191");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.RadioMediaType", "Media Player");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.RadioMenuSelectedID", "EBRadioMenu_CT106093321504191");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.RadioShrinked", "expanded");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.RadioShrinkedFromSetup", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.RadioStationName", "KFOG");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.RadioStationURL", "http://live.cumulusstreaming.com/KFOG-FM");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SHRINK_TOOLBAR", 1);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SavedHomepage", "http://www.google.be/");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SearchBackToDefaultEngine", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SearchFromAddressBarIsInit", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=2&q=");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SearchInNewTabEnabled", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SearchInNewTabIntervalMM", 1440);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SearchInNewTabLastCheckTime", "Sat Jan 26 2013 23:36:04 GMT+0100");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SearchInNewTabUserEnabled", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SearchProtectorEnabled", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SearchProtectorToolbarDisabled", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SendProtectorDataViaLogin", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.ServiceMapLastCheckTime", "Sat Jan 26 2013 18:11:34 GMT+0100");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SettingsLastCheckTime", "Sun Jan 27 2013 17:53:09 GMT+0100");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.SettingsLastUpdate", "1359295845");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.TBHomePageUrl", "http://search.conduit.com/?ctid=CT1060933&SearchSource=13");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.ThirdPartyComponentsInterval", 504);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.ThirdPartyComponentsLastCheck", "Mon Aug 13 2012 03:18:41 GMT+0200");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.ThirdPartyComponentsLastUpdate", "1331805997");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.ToolbarShrinkedFromSetup", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.TrusteLinkUrl", "http://trust.conduit.com/CT1060933");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolb[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.UserID", "UN06463050762407337");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.ValidationData_Toolbar", 2);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.alertChannelId", "15651");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.appApproved.129272674122038321", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.approveUntrustedApps", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.autoDisableScopes", -1);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.backendstorage.autocompletepro_enable", "31");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.backendstorage.autocompletepro_enable_auto", "30");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.backendstorage.cbcountry_000", "4245");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.backendstorage.cbfirsttime", "4672692041707220323720323031322030313A34373A333320474D542B30323030");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.backendstorage.printitgreenstatus", "74727565");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.backendstorage.shoppingapp.gk.exipres", "576564204D617920303220323031322030313A34373A323420474D542B30323030")[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.backendstorage.shoppingapp.gk.geolocation", "62656C6769756D");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.components.1000080", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.components.129677514212584059", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.components.129681785283868963", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.components.129686665230467549", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;se[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.globalFirstTimeInfoLastCheckTime", "Thu Aug 09 2012 10:41:21 GMT+0200");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.homepageProtectorEnableByLogin", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.initDone", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.isAppTrackingManagerOn", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.isFirstRadioInstallation", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.myStuffEnabled", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.myStuffPublihserMinWidth", 400);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&oct[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.myStuffServiceIntervalMM", 1440);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.navigateToUrlOnSearch", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.oldAppsList", "128346981843587669,128280995260143876,111,129272674122038321,129032145384800518,12903214824761[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.revertSettingsEnabled", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.searchProtectorDialogDelayInSec", 10);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.searchProtectorEnableByLogin", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.testingCtid", "");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.toolbarAppMetaDataLastCheckTime", "Sun Jan 27 2013 05:23:57 GMT+0100");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.toolbarContextMenuLastCheckTime", "Sat Aug 04 2012 10:04:59 GMT+0200");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.usageEnabled", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CT1060933.usagesFlag", 2);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ConduitHomepagesList", "http://search.conduit.com/?ctid=CT1060933&SearchSource=13");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://Settings.toolbar.search.conduit.com/root/CT1060933/CT1060933", "\"6933b5d33aeaceac3199ae57[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT1060933", "\"1324192924\"");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en-us", "C5ZJe6gL80JBW5Cu[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en-us", "mfQ70fvlD2zuBxSBj[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en-us", "k9un27OkAvkwB2Zm[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en-us", "FqddrIU7eyJgaaLyHDe[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"8076e3ce381dcd1:0\"");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"")[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\"")[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"")[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0343677cfb1cd1:0\"")[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.100", "\"0343677cfb1cd1:0\"[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.3", "\"0343677cfb1cd1:0\"")[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/Toolbar/?ownerId=CT1060933", "\"0697a2066791d3f9dfa6c97658[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=en-us", "\"9ce20764f6490af2030db94adc2fbe[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\user\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\mjizk69f.defa[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.16.0.100");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.MiniIPageGadgetPosition. http://storage.conduit.com/gadgets/LiveTV.html?source=http://groupemsix.vo.ll[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.MiniIPageGadgetPosition.http://freecorder.com/fc6/gadget/video.html", "246x257");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.MiniIPageGadgetSize.http://freecorder.com/fc6/gadget/video.html", "833x245");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "http://dts.search-results.com/sr?src=ffb&appid=113&systemid=406&sr=0&q[...]
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ToolbarsList", "CT1060933");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ToolbarsList2", "CT1060933");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.ToolbarsList4", "CT1060933");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.globalUserId", "0af42704-9579-4a12-a54c-13a2ec9d4067");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Jan 27 2013 16:05:55 GMT+0100");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.notifications.alertEnabled", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.notifications.clientsServerUrl", "http://alert.client.conduit.com");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.notifications.locale", "en");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sun Jan 27 2013 16:05:55 GMT+0100");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.notifications.servicesServerUrl", "http://alert.services.conduit.com");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.notifications.showTrayIcon", false);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.notifications.userId", "ae321dfd-569d-4e2a-9a31-fa31d362d39c");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.originalHomepage", "http://www.google.be/");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("CommunityToolbar.originalSearchEngine", "Google");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=3&q={searchTerms}");
O69 - SBI: prefs.js [user - mjizk69f.default] user_pref("browser.search.order.1", "Search Results");
O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - http://search.live.com
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {29C60D86-657E-406D-BBBE-3153601E6DCF} - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (@ieframe.dll,-12512) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {F7514A6D-4D7A-4103-B524-9C3C6DE67B8B} [DefaultScope] - (Search.com) - http://t2-3.search.com
~ Scan Keys in 00mn 00s



---\\ Recherche des services d�marr�s par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Exp�rience d�application.) -- C:\Windows\System32\aelupsvc.dll [62464]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [168960]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de strat�gie de groupe.) -- C:\Windows\System32\gpsvc.dll [593408]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [674304]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [473600]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de num�rotation automatique d�acc�s distant.) -- C:\Windows\System32\rasauto.dll [90624]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d�acc�s distant.) -- C:\Windows\System32\rasmans.dll [286208]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d�interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d��v�nements syst�me (SENS).) -- C:\Windows\System32\sens.dll [49664]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l�application d�assistance � Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [300544]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de t�l�phonie Microsoft� Windows(TM).) -- C:\Windows\System32\tapisrv.dll [242176]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur h�te de session Burea.) -- C:\Windows\System32\termsrv.dll [521216]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise � jour automatique Windows Update.) -- C:\Windows\system32\wuaueng.dll [1933848]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arri�re-plan.) -- C:\Windows\System32\qmgr.dll [585728]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivit� IPv6 sur un r�seau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [499712]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d�ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [21504]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d�application.) -- C:\Windows\System32\appinfo.dll [47104]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de d�couverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multim�dias.) -- C:\Windows\System32\mmcss.dll [49664]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux probl�mes.) -- C:\Windows\System32\wercplsupport.dll [61440]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164352]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de t�ches.) -- C:\Windows\System32\schedsvc.dll [750592]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des cl�s.) -- C:\Windows\System32\kmsvc.dll [71168]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau � distance.) -- C:\Windows\System32\sessenv.dll [113664]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d�ordinateurs.) -- C:\Windows\System32\browser.dll [102912]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des th�mes Windows Shell.) -- C:\Windows\System32\themeservice.dll [37376]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [149504]
~ Scan Services in 00mn 00s



---\\ Recherche particuliere � la racine de certains dossiers (O84)
[MD5.2EF0A846C5CC449FAA7949DE71E83F1C] [SPRF][29/11/2012] (...) -- C:\Users\user\AppData\LocalLow\dt.dat [27520]
[MD5.490E2C122CF9F7126FEBBC62ED547716] [SPRF][20/11/2010] (...) -- C:\Users\user\Desktop\ArchiFacile.exe [543232]
[MD5.4C99EE7518551F1B5881F230B8E1AB7E] [SPRF][3/02/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\user\Desktop\ZHPDiag2.exe [3876312]
[MD5.7C5B2630C7B36B944F2CB181D59005E5] [SPRF][4/03/2011] (.Audacity Team - Audacity 1.3 Beta (Unicode) Setup.) -- C:\Program Files\audacity-win-unicode-1.3.12.exe [11873890]
~ Scan Files in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "{7104A176-7B04-496F-84A4-6E4AFC794041}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - �Torrent.) -- C:\Program Files\uTorrent\uTorrent.exe
O87 - FAEL: "{DD00819A-311A-4520-8014-5B5A974FB4B2}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - �Torrent.) -- C:\Program Files\uTorrent\uTorrent.exe
O87 - FAEL: "TCP Query User{49740798-B466-4CEA-A3D6-ED6C19E23E4A}C:\program files\mozilla firefox\firefox.exe" | In - Public - P6 - TRUE | .(.Mozilla Corporation - Firefox.) -- C:\program files\mozilla firefox\firefox.exe
O87 - FAEL: "UDP Query User{6814B4E2-0FED-4A0D-BCBC-69870CFC3BCE}C:\program files\mozilla firefox\firefox.exe" | In - Public - P17 - TRUE | .(.Mozilla Corporation - Firefox.) -- C:\program files\mozilla firefox\firefox.exe
O87 - FAEL: "TCP Query User{C0FE6CBE-C5C6-4668-ACB1-ACE699885049}C:\program files\google\google earth\client\googleearth.exe" | In - Public - P6 - TRUE | .(.Google - Google Earth.) -- C:\program files\google\google earth\client\googleearth.exe
O87 - FAEL: "UDP Query User{AAEF06EC-4EE9-4352-A12B-CA8F75132086}C:\program files\google\google earth\client\googleearth.exe" | In - Public - P17 - TRUE | .(.Google - Google Earth.) -- C:\program files\google\google earth\client\googleearth.exe
O87 - FAEL: "TCP Query User{F3603EDC-1F36-4C1B-A68D-82D21FDCEB8F}C:\program files\google\google earth\client\googleearth.exe" | In - Private - P6 - TRUE | .(.Google - Google Earth.) -- C:\program files\google\google earth\client\googleearth.exe
O87 - FAEL: "UDP Query User{24ED3C20-A79D-4FDD-BAF4-D0FC8EB6D8E1}C:\program files\google\google earth\client\googleearth.exe" | In - Private - P17 - TRUE | .(.Google - Google Earth.) -- C:\program files\google\google earth\client\googleearth.exe
O87 - FAEL: "TCP Query User{F127265A-D4FC-47C5-99EB-E124E38CFE7A}C:\program files\jalbum\jalbum.exe" | In - Private - P6 - TRUE | .(.Jalbum AB - jAlbum.) -- C:\program files\jalbum\jalbum.exe
O87 - FAEL: "UDP Query User{F64111A8-FAA1-45A8-A89D-9B1240CCAF95}C:\program files\jalbum\jalbum.exe" | In - Private - P17 - TRUE | .(.Jalbum AB - jAlbum.) -- C:\program files\jalbum\jalbum.exe
O87 - FAEL: "TCP Query User{7A494D95-533C-4E3F-AB65-9A6161ED4117}C:\wamp\bin\apache\apache2.2.21\bin\httpd.exe" | In - Private - P6 - TRUE | .(.Apache Software Foundation - Apache HTTP Server.) -- C:\wamp\bin\apache\apache2.2.21\bin\httpd.exe
O87 - FAEL: "UDP Query User{4C4C4BC4-A686-4CB9-9DE1-BC2EAC644745}C:\wamp\bin\apache\apache2.2.21\bin\httpd.exe" | In - Private - P17 - TRUE | .(.Apache Software Foundation - Apache HTTP Server.) -- C:\wamp\bin\apache\apache2.2.21\bin\httpd.exe
O87 - FAEL: "{DAEA4BCD-8D2E-486F-B130-F36FF0D03F9E}" | In - Private - P6 - TRUE | .(.Google - Google Talk Plugin.) -- C:\Users\user\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
O87 - FAEL: "{50DB3634-C616-47B1-87EC-F7D45B784D14}" | In - Private - P17 - TRUE | .(.Google - Google Talk Plugin.) -- C:\Users\user\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
O87 - FAEL: "{3A450047-FAD4-44CB-BC4F-4A742449784E}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\Windows iLivid Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.)
O87 - FAEL: "{5E114B8D-82D2-4A96-A5F5-9164C7088766}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\Windows iLivid Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.)
O87 - FAEL: "{B8F03799-D1A6-4FD5-8844-A4D7006F10B2}" | In - Private - P6 - TRUE | .(.Visicom Media Inc. - DTX broker.) -- C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe
O87 - FAEL: "{5F09DF07-D07D-4551-89C5-3277C197AB67}" | In - Private - P17 - TRUE | .(.Visicom Media Inc. - DTX broker.) -- C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe
O87 - FAEL: "{B23660F9-A76E-4E45-A186-A971E577C9D6}" | In - Public - P6 - TRUE | .(.Google - Google Talk Plugin.) -- C:\Users\user\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
O87 - FAEL: "{A7387CD6-5DD3-4E8A-AD04-AEBC298B14BA}" | In - Public - P17 - TRUE | .(.Google - Google Talk Plugin.) -- C:\Users\user\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
O87 - FAEL: "{9A1A76E4-AFB9-48DE-93C5-5ABF3CE58B34}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O87 - FAEL: "TCP Query User{68D8CA61-E9DB-479A-9DDF-3A2A8E848A74}C:\program files\photobie\photobie.exe" | In - Private - P6 - TRUE | .(.Photobie Design - Photobie Design Studio.) -- C:\program files\photobie\photobie.exe
O87 - FAEL: "UDP Query User{C01487A2-A37B-46B2-94E6-B65DF06522D3}C:\program files\photobie\photobie.exe" | In - Private - P17 - TRUE | .(.Photobie Design - Photobie Design Studio.) -- C:\program files\photobie\photobie.exe
O87 - FAEL: "{DF9FF267-EAFA-4BA6-A8DC-52B3A4E212F8}" | In - Public - P17 - TRUE | .(.Photobie Design - Photobie Design Studio.) -- C:\program files\photobie\photobie.exe
O87 - FAEL: "{0416ACA9-BD51-4171-A02D-D41E742DC941}" | In - Public - P6 - TRUE | .(.Photobie Design - Photobie Design Studio.) -- C:\program files\photobie\photobie.exe
O87 - FAEL: "{BD6BA395-F011-42AC-8BA6-85A67EECD688}" | In - Public - P6 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe
O87 - FAEL: "{8A36B692-4EAA-42B3-92AB-EEFED6047B8D}" | In - Public - P17 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe
O87 - FAEL: "{8D43515D-C034-4897-BFFC-2C684835BED9}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
O87 - FAEL: "{B2A9B60D-C69D-4B00-84AD-0E1418843B6E}" | In - Public - P6 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Installer Application.) -- C:\Program Files\AVG\AVG2013\avgmfapx.exe
O87 - FAEL: "{E8F2AAA4-9195-4EC1-934C-1046E5A11E29}" | In - Public - P17 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Installer Application.) -- C:\Program Files\AVG\AVG2013\avgmfapx.exe
O87 - FAEL: "TCP Query User{335713FF-EBF4-4482-8328-70DE21A2B1B8}C:\program files\java\jre7\bin\java.exe" | In - Private - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\java.exe
O87 - FAEL: "UDP Query User{23E83107-F449-426E-8BF5-AF052498C834}C:\program files\java\jre7\bin\java.exe" | In - Private - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\java.exe
O87 - FAEL: "{17EC94E4-B807-4C1B-B7BF-8A7D120E7111}" | In - Public - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\java.exe
O87 - FAEL: "{4B275489-6341-4C59-9339-F3A5639F819C}" | In - Public - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\java.exe
O87 - FAEL: "{A37D60B7-3D66-45A6-834A-43B3875E4C7F}" | In - Public - P6 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Online Shield Service.) -- C:\Program Files\AVG\AVG2013\avgnsx.exe
O87 - FAEL: "{816AFFB8-0F02-4563-9A1A-8BB50B9302CA}" | In - Public - P17 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Online Shield Service.) -- C:\Program Files\AVG\AVG2013\avgnsx.exe
O87 - FAEL: "{EE5D145C-581D-4DF2-A2CB-3785718579B2}" | In - Public - P6 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Diagnostics.) -- C:\Program Files\AVG\AVG2013\avgdiagex.exe
O87 - FAEL: "{45870EE4-132F-48A0-8DED-E479EED47ED2}" | In - Public - P17 - TRUE | .(.AVG Technologies CZ, s.r.o. - AVG Diagnostics.) -- C:\Program Files\AVG\AVG2013\avgdiagex.exe
~ Scan Firewall in 00mn 01s



---\\ Scan Additionnel (O88)
Database Version : v2.10502 - (1/02/2013)
Cl�s trouv�es (Keys found) : 10
Valeurs trouv�es (Values found) : 0
Dossiers trouv�s (Folders found) : 8
Fichiers trouv�s (Files found) : 2

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1392B8D2-5C05-419F-A8F6-B9F15A596612}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1392b8d2-5c05-419f-a8f6-b9f15a596612}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Agent
[HKLM\Software\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Agent
[HKLM\Software\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Agent
[HKLM\Software\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Agent
[HKCU\Software\ambuhelper1] =>Adware.Moozy
C:\Program Files\Moozy =>Adware.Moozy
C:\Program Files\Windows Searchqu Toolbar =>Adware.Bandoo
C:\ProgramData\AVG January 2013 Campaign =>Toolbar.AVGSearch
C:\Users\user\AppData\Local\Conduit =>Toolbar.Conduit
C:\Users\user\AppData\LocalLow\Conduit =>Toolbar.Conduit
C:\Users\user\AppData\LocalLow\searchquband =>Adware.Bandoo
C:\Users\user\AppData\LocalLow\searchqutoolbar =>Adware.Bandoo
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mjizk69f.default\searchqutoolbar =>Adware.Bandoo
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mjizk69f.default\SearchPlugins\conduit.xml =>Toolbar.Conduit
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mjizk69f.default\SearchPlugins\SearchResults.xml =>Toolbar.Agent
~ Scan Additionnel in 00mn 09s



---\\ Recherche d�tournement de DNS routeur (O89) (None)

---\\ Product Upgrade Codes (O90)
O90 - PUC: "00002105501100000000000000F01FEC" . (.Microsoft Office 2007 Primary Interop Assemblies.) -- C:\Windows\Installer\{50120000-1105-0000-0000-0000000FF1CE}\misc.exe,6
O90 - PUC: "076CFAAAB965F2A4284B2449E5D03EFE" . (.Windows Live Writer.) -- C:\Windows\Installer\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}\ApplicationIcon.ico
O90 - PUC: "0C7EC0FA4E3A37D489B82B1978CEE6A9" . (.QuickTime.) -- C:\Windows\Installer\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}\Installer.ico
O90 - PUC: "143D939A40A5A0E4BB55E3563B6834D2" . (.Microsoft Office Small Business Connectivity Components.) -- C:\Windows\Installer\{A939D341-5A04-4E0A-BB55-3E65B386432D}\ARPPRODUCTICON.exe
O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon
O90 - PUC: "270FFACCBDD4648469D3510FA2E84927" . (.Intel(R) PROSet/Wireless WiFi Software.) -- C:\Windows\Installer\{CCAFF072-4DDB-4846-963D-15F02A8E9472}\ARPPRODUCTICON.exe
O90 - PUC: "342F383BCBA065E4AA0329B3D85870E6" . (.Rescue and Recovery.) -- C:\Program Files\Lenovo\Rescue and Recovery\rnr_gui.exe,1
O90 - PUC: "352AD8F172C310B46AA3AB5333218033" . (.Microsoft Research AutoCollage Touch 2009.) -- C:\Windows\Installer\{1F8DA253-3C27-4B01-A63A-BA3533120833}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "38E1FB04BE028D11795C00905C206085" . (.Power2Go.) -- C:\Windows\Installer\{40BF1E83-20EB-11D8-97C5-0009C5020658}\ARPPRODUCTICON.exe
O90 - PUC: "3B9E3B7B41BF729498B49E215490FAA5" . (.Adobe Flash Player 10 ActiveX.) -- c:\Windows\Installer\{B7B3E9B3-FB14-4927-894B-E9124509AF5A}\ARPPRODUCTICON.exe
O90 - PUC: "3f3fe3bafd20ef74da986200a42e4926" . (.Module linguistique de Microsoft Office 2007 � French/Fran�ais (pour Office Outlook 2007 avec le Gestionnaire de contacts professionnels SP1).) -- C:\Windows\Installer\{ab3ef3f3-02df-47fe-ad89-26004ae2946
O90 - PUC: "42C6FBF1DF1C10144AB2C065F4E9E897" . (.PowerStarter.) -- C:\Windows\Installer\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\ARPPRODUCTICON.exe
O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico
O90 - PUC: "487EA05EEBAFAD641A8FB7B665CD2BE2" . (.Microsoft Office Suite Activation Assistant.) -- C:\Windows\Installer\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}\ARPPRODUCTICON.exe
O90 - PUC: "49648A64CE950F8469C4E7679E8F2ADE" . (.ThinkVantage Active Protection System.) -- C:\Windows\Installer\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}\ARPPRODUCTICON.exe
O90 - PUC: "498735E8955A06D43BBC4F84E5D3423E" . (.ThinkVantage Access Connections.) -- C:\Windows\Installer\{8E537894-A559-4D60-B3CB-F4485E3D24E3}\ARPPRODUCTICON.exe
O90 - PUC: "4A94D9E94FD183147BBDD5788A3980E8" . (.ThinkPad Bluetooth with Enhanced Data Rate Software.) -- C:\Windows\Installer\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}\ARPPRODUCTICON.exe
O90 - PUC: "4ACBE7FAFAF98CD4D8907658B48BD443" . (.RealDownloader.) -- C:\Windows\Installer\{AF7EBCA4-9FAF-4DC8-8D09-67854BB84D34}\AddRemoveProgramsIcon
O90 - PUC: "56023d36d54082344a95d6c465452080" . (.Microsoft Office Language Pack 2007 � Deutsch (f�r Office Outlook 2007 mit Business Contact Manager SP1).) -- C:\Windows\Installer\{63d32065-045d-4328-a459-6d4c56540208}\ARPIcon.ico
O90 - PUC: "6315CD058E12CB84795EA10D556F0B6B" . (.Create Recovery Media.) -- C:\Program Files\Lenovo\Factory Recovery\recovburncd.exe,0
O90 - PUC: "68AB67CA7DA76301B744BA0000000010" . (.Adobe Reader XI (11.0.01) - Fran�ais.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico
O90 - PUC: "72B17402207D8EF4D8CE7020CCC8A058" . (.WinDVD.) -- C:\Windows\Installer\{20471B27-D702-4FE8-8DEC-0702CC8C0A85}\ARPPRODUCTICON.exe
O90 - PUC: "74846C52009BDA841A46B1F4B9776405" . (.System Update.) -- c:\Windows\Installer\{25C64847-B900-48AD-A164-1B4F9B774650}\ARPPRODUCTICON.exe
O90 - PUC: "7C43C21609E58D74B9C5F017D78D7262" . (.swMSM.) -- C:\Windows\Installer\{612C34C7-5E90-47D8-9B5C-0F717DD82726}\ARPPRODUCTICON.exe
O90 - PUC: "7DDFFFA258DE09A4C825D59ABECDB9F8" . (.Microsoft SQL Server 2005 Express Edition (MSSMLBIZ).) -- c:\Windows\Installer\{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}\ARPIcon.ico
O90 - PUC: "82D6625F2B0E0314FB5CEE51A55D41CD" . (.Apple Application Support.) -- C:\Windows\Installer\{F5266D28-E0B2-4130-BFC5-EE155AD514DC}\WinInstall.ico
O90 - PUC: "90404A0900063D11C8EF10054038389C" . (.Microsoft Office 2003 Web Components.) -- C:\Windows\Installer\{90A40409-6000-11D3-8CFE-0150048383C9}\misc.exe,6
O90 - PUC: "9504C23BA7E6FE14DA0265FD81279B32" . (.Business Contact Manager for Outlook 2007 SP2.) -- C:\Windows\Installer\{B32C4059-6E7A-41EF-AD20-56DF1872B923}\ARPIcon.ico
O90 - PUC: "98B4807E0E963B641A81F8990D9688DC" . (.Microsoft SQL Server VSS Writer.) -- c:\Windows\Installer\{E7084B89-69E0-46B3-A118-8F99D06988CD}\ARPIco
O90 - PUC: "A05BA689725AD6F4E8B878CFF3C0D2AB" . (.Mobile Broadband.) -- C:\Windows\Installer\{986AB50A-A527-4F6D-8E8B-87FC3F0C2DBA}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "B3A133DF5A7F13C48B4DFD14C358FAA7" . (.Message Center Plus.) -- C:\Program Files\Lenovo\Message Center Plus\MessageCenterPlus.exe,0
O90 - PUC: "C040820900063D11C8EF00054038389C" . (.Microsoft Office XP Professional avec FrontPage.) -- C:\Windows\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\misc.exe,6
O90 - PUC: "c7ba6794f3744124f8ad5d9605232701" . (.Microsoft� Office Language Pack 2007 � Nederlands (voor Office Outlook 2007 met Business Contact Manager SP1).) -- C:\Windows\Installer\{4976ab7c-473f-4214-8fda-d56950327210}\ARPIcon.ico
O90 - PUC: "C9335768C821DD4438FBA0D5A6DB2879" . (.ThinkVantage System Update.) -- c:\Program Files\Lenovo\System Update\Tvsu.exe
O90 - PUC: "C971C95CD8669A946BAE1012CCCF2134" . (.LabelPrint.) -- C:\Windows\Installer\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\ARPPRODUCTICON.exe
O90 - PUC: "CF4F71AEFBDF8FC45A92D28913230D35" . (.Skype� 6.0.) -- C:\Windows\Installer\{EA17F4FC-FDBF-4CF8-A529-2D983132D053}\SkypeIcon.exe
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "E4610622F4F25764597724BFEFDFB847" . (.Search.com Toolbar v6.6.) -- C:\Windows\Installer\{2260164E-2F4F-4675-9577-42FBFEFD8B74}\ARPPRODUCTICON.exe
O90 - PUC: "E778A46CD8FD7104AA2800A0776C8D90" . (.Verizon Wireless Mobile Broadband Self Activation.) -- C:\Windows\Installer\{C64A877E-DF8D-4017-AA82-000A77C6D809}\ARPPRODUCTICON.exe
O90 - PUC: "E876D35FF83217A4792480BB76479ECD" . (.Windows Live Family Safety.) -- C:\Windows\Installer\{F53D678E-238F-4A71-9742-08BB6774E9DC}\fssicon.ico
O90 - PUC: "EE3C5F35DE50038499B4052B0F5DF0EC" . (.Microsoft SQL Server Setup Support Files (English).) -- c:\Windows\Installer\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}\ARPIcon.ico
O90 - PUC: "F23D07676EAD94E4C8B83B0FB8B56168" . (.Microsoft SQL Server Native Client.) -- c:\Windows\Installer\{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}\ARPIco
O90 - PUC: "F60C1AD7319C7C64A8F0ADC2AB71AED1" . (.OpenOffice.org 3.4.1.) -- C:\Windows\Installer\{7DA1C06F-C913-46C7-8A0F-DA2CBA17EA1D}\soffice.ico
~ Scan Files in 00mn 00s



---\\ MyComputer Name Space (O92)
O92 - MNS: Dossiers Web - {BDEADF00-C265-11D0-BCED-00A0C90AB50F}
~ Scan MNS in 00mn 00s



---\\ Etat g�n�ral des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 1/03/2010 124264 | (AcPrfMgrSvc) . (.Lenovo.) - C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe
SR - | Auto 1/03/2010 259432 | (AcSvc) . (.Lenovo.) - C:\Program Files\Lenovo\Access Connections\AcSvc.exe
SR - | Auto 18/12/2012 65192 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 28/01/2013 251400 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 15/11/2012 5814904 | (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files\AVG\AVG2013\avgidsagent.exe
SR - | Auto 22/10/2012 196664 | (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files\AVG\AVG2013\avgwdsvc.exe
SR - | Auto 2/07/2009 582944 | (btwdins) . (.Broadcom Corporation..) - C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
SR - | Auto 21/09/2009 858384 | (EvtEng) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
SS - | Demand 22/12/2009 136120 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - | Auto 7/08/2009 354840 | (IAANTMON) . (.Intel Corporation.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
SR - | Auto 18/08/2009 38176 | (IBMPMSVC) . (.Lenovo.) - C:\Windows\System32\ibmpmsvc.exe
SR - | Auto 5/01/2007 112152 | (IviRegMgr) . (.InterVideo.) - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
SR - | Auto 3/07/2009 45424 | (LENOVO.MICMUTE) . (.Lenovo Group Limited.) - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
SS - | Demand 26/10/2012 234776 | (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files\McAfee Security Scan\3.0.313\McCHSvc.exe
SS - | Demand 19/01/2013 115608 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Demand 2/03/2010 75112 | (Power Manager DBC Service) . (.Lenovo.) - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.exe
SR - | Auto 38608 | (RealNetworks Downloader Resolver Service) . (...) - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
SR - | Auto 21/09/2009 473360 | (RegSrvc) . (.Intel(R) Corporation.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
SR - | Auto 22/09/2010 249136 | (SeaPort) . (.Microsoft Corporation.) - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
SS - | Auto 9/11/2012 160944 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
SR - | Auto 10/02/2010 28672 | (SUService) . (.Lenovo Group Limited.) - c:\Program Files\Lenovo\System Update\SUService.exe
SR - | Auto 28/08/2009 1019904 | (ThinkVantage Registry Monitor Service) . (.Lenovo Group Limited.) - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
SS - | Demand 30/12/1899 0 | C:\Windows\System32\TPHDEXLG.exe (TPHDEXLGSVC) . (.Lenovo..) - c:\System32\TPHDEXLG.exe
SR - | Auto 15/07/2009 62320 | (TPHKSVC) . (.Lenovo Group Limited.) - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
SS - | Demand 4/09/2009 1474560 | (TVT Backup Service) . (.Lenovo Group Limited.) - C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe
SS - | Demand 26/09/2011 18432 | (wampapache) . (.Apache Software Foundation.) - c:\wamp\bin\apache\apache2.2.21\bin\httpd.exe
SS - | Demand 8158720 | (wampmysqld) . (...) - c:\wamp\bin\mysql\mysql5.5.16\bin\mysqld.exe
SS - | Demand 14/07/2009 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 14/07/2009 20992 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Scan Services in 00mn 03s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by user at 3/02/2013 17:56:06

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll dvd43llh.sys iaStor.sys
C:\Windows\System32\DRIVERS\dvd43llh.sys RIF DVD For Free
C:\Windows\system32\DRIVERS\iaStor.sys Intel Corporation Intel Matrix Storage Manager driver
1 ntkrnlpa!IofCallDriver[0x83039BC5] -> \Device\Harddisk0\DR0[0x868EB9B0]
3 CLASSPNP[0x891C159E] -> ntkrnlpa!IofCallDriver[0x83039BC5] -> [0x85B318B0]
5 ACPI[0x88AAD3D4] -> ntkrnlpa!IofCallDriver[0x83039BC5] -> \Device\Ide\IAAStorageDevice-1[0x85ACF028]
kernel: MBR read successfully
user & kernel MBR OK
copy of MBR has been found in sector 8 !
~ Scan MBR in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by user at 3/02/2013 17:56:08

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ Scan MBR in 00mn 04s



End of the scan (2124 lines in 11mn 13s)(0)

Publicité


Signaler le contenu de ce document

Publicité