Hey, not a member of Up2Share yet? Sign up, it unlocks many cool features!
~ Rapport de ZHPDiag v2013.9.11.193 - Nicolas Coolman (11/09/2013)
~ Lanc� par Olgicka (11/09/2013 22:51:14)
~ Adresse du Site Web http://nicolascoolman.webs.com
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : D�sactiv�e par l'utilisateur
~ El�vation des Privil�ges : OK
~ User Account Control (UAC): Not Found
---\\ Navigateurs Internet
MSIE: Internet Explorer v8.0.6001.18702
GCIE: Google Chrome v29.0.1547.66 (Defaut)
OBIE: Safari v5.34.52.7
---\\ Informations sur les produits Windows
~ Langage: Fran�ais
Windows XP Home Edition Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : OK
---\\ Logiciels de protection du syst�me
Avira Free Antivirus v13.0.0.4042
Malwarebytes Anti-Malware version 1.65.1.1000
---\\ Logiciels d'optimisation du syst�me
CCleaner v2.28 =>Piriform Ltd
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 11 ActiveX
Adobe Reader X
---\\ Informations sur le syst�me
~ Processor: x86 Family 6 Model 13 Stepping 8, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 447 MB (57% free)
System Restore: Activ� (Enable)
System drive C: has 24 GB (35%) free of 67 GB
---\\ Mode de connexion au syst�me
~ Computer Name: Olga
~ User Name: Olgicka
~ All Users Names: SUPPORT_388945a0, Rajko, Olgicka, HelpAssistant, ASPNET, Administrateur,
~ Unselected Option: None
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppData% : C:\Documents and Settings\Olgicka\Application Data\
~ %Desktop% : C:\Documents and Settings\Olgicka\Bureau\
~ %Favorites% : C:\Documents and Settings\Olgicka\Favoris\
~ %LocalAppData% : C:\Documents and Settings\Olgicka\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\Olgicka\Menu D�marrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\
---\\ Enum�ration des unit�s disques
C:\ Hard drive, Flash drive, Thumb drive (Free 24 Go of 67 Go)
D:\ CD-ROM drive (Not Inserted)
---\\ Etat du Centre de S�curit� Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 30 Scanned in 00mn 00s
---\\ Recherche particuli�re de fichiers g�n�riques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.E1948293F7CBC38987270432935D8D05] - (.Microsoft Corporation - Internet Extensions for Win32.) (.26/07/2013 - 03:47:15.) -- C:\WINDOWS\system32\wininet.dll [920064]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 19:40:30.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 20:14:21.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 19:40:46.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 02:57:38.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 17:36:05.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 03:00:52.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 19:40:58.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 19:57:15.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 20:19:42.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 20:21:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 20:15:53.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parall�le.) (.14/04/2008 - 03:09:40.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 20:19:43.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 19:32:51.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/04/2008 - 02:57:34.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de clich� instantan� du volume.) (.14/04/2008 - 02:56:04.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Generic Processes: Scanned in 00mn 01s
---\\ Etat des fichiers cach�s (Cach�/Total)
~ Mes images (My Pictures) : 2/972
~ Mes musiques (My Musics) : 2/45
~ Mes Videos (My Videos) : 2/19
~ Mes Favoris (My Favorites) : 1/32
~ Mes Documents (My Documents) : 3/1374
~ Mon Bureau (My Desktop) : 1/6
~ Menu demarrer (Programs) : 1/40
~ Hidden Files: Scanned in 00mn 07s
---\\ Processus lanc�s
[MD5.8769E2D1072B62AB071F166F03B3E3DC] - (.Avira Operations GmbH & Co. KG - Avira Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024] [PID.1564]
[MD5.AD1D13E6326E0B8DA2A7BE13B39A8FE0] - (.Avira Operations GmbH & Co. KG - Avira On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088] [PID.1672]
[MD5.E13406F701A9B2A7513CD6798A40CECB] - (.America Online, Inc. - AOL Connectivity Service.) -- C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe [1135728] [PID.1688]
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.1708]
[MD5.29D286066519E5D0BDFDEB4FB81105AB] - (...) -- C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe [106496] [PID.1844]
[MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.1864]
[MD5.4921CB1FAE6978D44A91D0D65D93FA57] - (.Pas de propri�taire - CLCapSvc Module.) -- c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe [221266] [PID.1880]
[MD5.BC2DDAF478AAF92F237FB52E35EB53D6] - (.Cyberlink - NT CLMLServer.) -- C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe [61440] [PID.1900]
[MD5.69202C049779AE09470370F163363F13] - (...) -- c:\APPS\HIDSERVICE\HIDSERVICE.exe [49152] [PID.1928]
[MD5.C0E569681F74A0C1E5FBEBF914509BF0] - (.Cyberlink - Cyberlink MediaLibrary NT Service.) -- C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe [737381] [PID.1936]
[MD5.4F2143570D2250CA4C4A4C98553C82CD] - (.Oracle Corporation - Java(TM) Quick Starter Service.) -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe [161704] [PID.1960]
[MD5.CB14F42AF2D4659A2AE738EBD3FC29B3] - (.Pas de propri�taire - User-Level Modem Service.) -- C:\WINDOWS\system32\slmdmsr.exe [61440] [PID.2032]
[MD5.BFB1A491B7CFAFBD35220537EEE92760] - (.Pas de propri�taire - CLSched Module.) -- c:\APPS\Powercinema\Kernel\TV\CLSched.exe [110672] [PID.1256]
[MD5.F9E19C843ADBFF040AC3EEEB75A305B2] - (.Synaptics, Inc. - TouchPad Driver Helper Application.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [98394] [PID.544]
[MD5.FC6A60ADDD13A3F4E42BFCBED2BFC770] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [688218] [PID.556]
[MD5.B8EE32CB45E26534A8CD7DCA7C4BAB23] - (.S3 Graphics, Inc. - Pas de description.) -- C:\WINDOWS\system32\VTTimer.exe [53248] [PID.564]
[MD5.F7CB7A9DFAAE43DE51D58C917F6B9891] - (.S3 Graphics Co., Ltd. - s3contrl (32-bit).) -- C:\WINDOWS\system32\VTtrayp.exe [143360] [PID.576]
[MD5.6B85D1E809A56CC2A8FD0243D5245A27] - (...) -- C:\WINDOWS\system32\drivers\STDSB.exe [28672] [PID.584]
[MD5.851FF453F9F892FF532770DDCCD2B422] - (.Pas de propri�taire - Icon Application For Wireless.) -- C:\WINDOWS\system32\drivers\Icon.exe [221184] [PID.592]
[MD5.8DCF5E6334EEA54336C93A6F0D8CEEB8] - (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\SOUNDMAN.exe [90112] [PID.644]
[MD5.995BEB69AE5C50D354894354F5A6CD5A] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [252296] [PID.648]
[MD5.C31A0AF9B3702C5C2A3FA4BDCC37A76F] - (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Apps\Powercinema\PCMService.exe [127118] [PID.664]
[MD5.48BE298F7FD1BEF4D8FBACB04D8D95C4] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [958576] [PID.640]
[MD5.DB3F7F19F942D3CE4E1A0E8D9FF541FB] - (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192] [PID.788]
[MD5.F30BF9FC4275156F2AE96FCDF1ED5EE4] - (.Avira Operations GmbH & Co. KG - Avira Shadow Copy Service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76856] [PID.2600]
[MD5.E1631396823E6E55F0B31FDCBE959901] - (.Sun Microsystems, Inc. - Java(TM) Update Checker.) -- C:\Program Files\Fichiers communs\Java\Java Update\jucheck.exe [505736] [PID.3880]
[MD5.28E623E4595B41896BAAE560CABDBF2A] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [7935488] [PID.896]
~ Processes Running: Scanned in 00mn 03s
---\\ Opera, Plugins,D�marrage,Recherche (P1,B0,B1)
B1 - OSP: search.ini [Olgicka] URL=http://redir.opera.com/ask
B1 - OSP: search.ini [Olgicka] URL=http://redir.opera.com/amazon
B1 - OSP: search.ini [Olgicka] URL=http://redir.opera.com/search/prixmoinscher
~ Opera Browser: 3 Scanned in 00mn 00s
---\\ Google Chrome, D�marrage,Recherche,Extensions (G0,G1,G2)
C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Store v.0.2 (Activ�)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activ�)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activ�)
G2 - GCE: Preference [User Data\Default] [jeaihkehdlhkocphopopahkfjcfcphef] Smart Display v.1.1 (D�sactiv�) =>Spyware.SmartDisplay
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activ�)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activ�)
G2 - GCE: Preference [User Data\Default] [nikpibnbobmbdbheedjfogjlikpgpnhp] DvdVideoSoft Free Youtube Download v.1.0.0.0, (D�sactiv�)
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Chrome In-App Payments service v.0.0.4.10 (Activ�)
~ Google Browser: 9 Scanned in 00mn 50s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.5.1] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\WINDOWS\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.5.1] - (.Oracle Corporation - Next Generation Java Plug-in 10.5.1 for Mozilla browsers.) -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20513.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@SonyCreativeSoftware.com/Media Go,version=1.0] - (...) -- c:\Program Files\Sony\Media Go\npmediago.dll (.not file.)
P2 - FPN: [HKLM] [@www.dlmanager.net/omaha/tools//Software Update;version=8] - (...) -- C:\Program Files\Software\Update\1.2.199.0\npSoftwareOneClick8.dll (.not file.) =>Adware.Boxore
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.7.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Update\1.3.21.153\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Update\1.3.21.153\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@yahoo.com/BrowserPlus,version=2.4.21] - (.Yahoo! Inc. - npybrowserplus_2.4.21.) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Yahoo!\BrowserPlus\2.4.21\Plugins\npybrowserplus_2.4.21.dll =>Toolbar.Yahoo
~ Firefox Browser: 12 Scanned in 00mn 00s
---\\ Internet Explorer, D�marrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} . (.Yahoo! Inc. - npybrowserplus_2.4.21.) (No version) -- (.not file.) =>Toolbar.Yahoo
~ IE Browser: 9 Scanned in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 20
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} . (.BitComet - BitCometBHO.) -- C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll =>P2P.BitComet
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Cl� orpheline
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
~ BHO: 10 Scanned in 00mn 00s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) - [HKCU]{710EB7A1-45ED-11D0-924A-0020AFC7AC4D} Cl� orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{0E5CBF21-D15F-11D0-8301-00AA005B4383} Cl� orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{01E04581-4EEE-11D0-BFE9-00AA005B4383} Cl� orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} Cl� orpheline
~ Toolbar: Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\Program [AllUsers]: Adobe Reader X.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O4 - GS\Program [AllUsers]: Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{C6579A65-9CAE-4B31-8B6B-3306E0630A66}\AppleSoftwareUpdateIco.exe
O4 - GS\Program [AllUsers]: Audacity.lnk . (...) -- C:\Program Files\Audacity\audacity.exe
O4 - GS\Program [AllUsers]: Budget Familial.lnk . (.Copyright (c) 2002 - EMME - Pas de description.) -- C:\Program Files\Budget Familial\Budget Familial.exe
O4 - GS\Program [AllUsers]: EasySgen V1.0.lnk . (.--- - Easy SmartGenealogy.) -- C:\Program Files\SmartGenealogy_2.8c\EasySgen.exe
O4 - GS\Program [AllUsers]: foobar2000.lnk . (.Piotr Pawlowski - foobar2000.) -- C:\Program Files\foobar2000\foobar2000.exe
O4 - GS\Program [AllUsers]: Installation du Contr�le Parental.lnk . (.InstallShield Software Corporation - InstallShield (R) Setup Launcher.) -- C:\Program Files\Securitoo\Controle Parental\Controle_parental.exe
O4 - GS\Program [AllUsers]: MergeDB.exe V1.1.lnk . (.--- - Pas de description.) -- C:\Program Files\SmartGenealogy_2.8c\MergeDB.exe
O4 - GS\Program [AllUsers]: MSN.lnk . (.Microsoft Corporation - Win32 Cabinet Self-Extractor.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe
O4 - GS\Program [AllUsers]: Safari.lnk . (...) -- C:\WINDOWS\Installer\{F2AF3E5D-9697-485C-A5AC-E2B9468C446A}\SafariIco.exe
O4 - GS\Program [AllUsers]: SmartGenealogy V2.8c.lnk . (...) -- C:\Program Files\SmartGenealogy_2.8c\SmartGenealogy.exe
O4 - GS\Program [AllUsers]: Windows Messenger.lnk . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - GS\Program [AllUsers]: Windows Movie Maker.lnk . (.Microsoft Corporation - Windows Movie Maker.) -- C:\Program Files\Movie Maker\moviemk.exe
O4 - GS\Program [AllUsers]: Windows Update.lnk . (.Microsoft Corporation - Gestionnaire de mise � jour de Windows�NT.) -- C:\WINDOWS\system32\wupdmgr.exe
O4 - GS\Program [Rajko]: Assistance � distance.lnk . (.Microsoft Corporation - Assistance � distance Microsoft.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - GS\Program [Rajko]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Program [Rajko]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Windows Media Player.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - GS\Program [Rajko]: Outlook Express.lnk . (.Microsoft Corporation - Outlook Express.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - GS\Program [Rajko]: PhotoFiltre.lnk . (.Antonio Da Cruz - PhotoFiltre.) -- C:\Program Files\PhotoFiltre\PhotoFiltre.exe
O4 - GS\Program [Rajko]: Spotify.lnk . (...) -- C:\Program Files\Spotify\spotify.exe (.not file.)
O4 - GS\Program [Olgicka]: Assistance � distance.lnk . (.Microsoft Corporation - Assistance � distance Microsoft.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - GS\Program [Olgicka]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Program [Olgicka]: Outlook Express.lnk . (.Microsoft Corporation - Outlook Express.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - GS\Program [Olgicka]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) -- C:\Program Files\Windows Media Player\wmplayer.exe
~ Global Startup: 25 Scanned in 00mn 03s
---\\ Applications lanc�es au d�marrage du syt�me (O4)
O4 - GS\Program [Rajko]: OpenOffice.org 3.1.lnk . (...) -- C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] . (.Microsoft Corporation - Microsoft IME.) -- C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe
O4 - HKLM\..\Run: [PHIME2002ASync] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe
O4 - HKLM\..\Run: [PHIME2002A] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe
O4 - HKLM\..\Run: [SynTPLpr] . (.Synaptics, Inc. - TouchPad Driver Helper Application.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [VTTimer] . (.S3 Graphics, Inc. - Pas de description.) -- C:\WINDOWS\system32\VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] . (.S3 Graphics Co., Ltd. - s3contrl (32-bit).) -- C:\WINDOWS\system32\VTtrayp.exe
O4 - HKLM\..\Run: [STDSB] . (...) -- C:\WINDOWS\system32\drivers\STDSB.exe
O4 - HKLM\..\Run: [Icon] . (.Pas de propri�taire - Icon Application For Wireless.) -- C:\WINDOWS\system32\drivers\Icon.exe
O4 - HKLM\..\Run: [SoundMan] . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\SOUNDMAN.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [PCMService] . (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- c:\Apps\Powercinema\PCMService.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Fichiers communs\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [KernelFaultCheck] Cl� orpheline
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] . (.Time Information Services Ltd. - PC Sync.) -- C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-1336461411-1099706933-734051183-1006\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1336461411-1099706933-734051183-1006\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
~ Application: Scanned in 00mn 00s
---\\ Boutons situ�s sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} -- Cl� orpheline
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} . (...) -- C:\Program Files\Real\RealPlayer\eb_act.ico
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} . (.BitComet - BitCometBHO.) -- C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll =>P2P.BitComet
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Cl� orpheline
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Winsock: 4 Scanned in 00mn 00s
---\\ Piratage de l'Option 'R�tablir les param�tres Web' (O14)
O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
~ IE Param�tres WEB: Scanned in 00mn 00s
---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
O15 - Trusted Zone: [HKCU\...\Domains] http.mappy.com
O15 - Trusted Zone: [HKCU\...\Domains] http.orange.fr
~ IE Zone Confiance: Scanned in 00mn 00s
---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} ((no name)) - http://download.bitdefender.com/resources/scanner/sources/fr/scan8/oscan8.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} ((no name)) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
~ Objets ActiveX: Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{251745A6-89C3-4C35-8B31-600CA8494581}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{251745A6-89C3-4C35-8B31-600CA8494581}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{251745A6-89C3-4C35-8B31-600CA8494581}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
~ Domain: Scanned in 00mn 00s
---\\ Titr_HJT34=Protocole additionnel (O18)
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-cl�s Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent r�seau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de r�ception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de r�ception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de r�ception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de r�ception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de r�ception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Cl� de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
~ SSODL: 5 Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non d�sactiv�s (O23)
O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Avira Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Protection temps r�el (AntiVirService) . (.Avira Operations GmbH & Co. KG - Avira On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: AOL Connectivity Service (AOL ACS) . (.America Online, Inc. - AOL Connectivity Service.) - C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: BlueSoleil Hid Service (BlueSoleil Hid Service) . (...) - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CB (CLCapSvc) . (.Pas de propri�taire - CLCapSvc Module.) - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) . (.Pas de propri�taire - CLSched Module.) - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service (CyberLink Media Library Service) . (.Cyberlink - NT CLMLServer.) - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input C (GenericHidService) . (...) - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation - Java(TM) Quick Starter Service.) - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
O23 - Service: Software Update Service (supdate) (supdate) . (.Boxore OU. - Programme d'installation de Software.) - C:\Program Files\Software\Update\SoftwareUpdate.exe =>Adware.Boxore
~ Services: 12 Scanned in 00mn 07s
---\\ Enum�ration Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\Olgicka\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\Olgicka\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
~ Desktop Component: 4 Scanned in 00mn 00s
---\\ Enum�re les donn�es de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s
---\\ T�ches planifi�es en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job [284]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1336461411-1099706933-734051183-1006Core.job [1104]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1336461411-1099706933-734051183-1006UA.job [1156]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\HDReg.job [190]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SoftwareUpdateTaskMachineCore.job [1072]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SoftwareUpdateTaskMachineUA.job [1076]
~ Scheduled Task: 7 Scanned in 00mn 00s
---\\ Composants install�s (ActiveSetup Installed Components) (O40)
O40 - ASIC: Mise � jour de la version d�Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d�initialisation d�Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe
O40 - ASIC: Viewpoint Media Player - {03F998B2-0E00-11D3-A498-00104B6EB52E} . (.Viewpoint Corporation - Viewpoint Media Player for Internet Explorer.) -- C:\Program Files\Viewpoint\Viewpoint Experience Technology\AxMetaStream.dll =>Adware.MetaStream
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
O40 - ASIC: Macromedia Shockwave Director 10.1 - {166B1BCA-3F9C-11CF-8075-444553540000} . (.Macromedia, Inc. - Shockwave ActiveX Control.) -- C:\WINDOWS\system32\macromed\Director\SwDir.dll
O40 - ASIC: Viewpoint Media Player - {1B00725B-C455-4DE6-BFB6-AD540AD427CD} . (.Viewpoint Corporation - Viewpoint Media Player for Internet Explorer.) -- C:\Program Files\Viewpoint\Viewpoint Experience Technology\AxMetaStream.dll =>Adware.MetaStream
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Biblioth�que d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp11.inf
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Biblioth�que d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: Mise � jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d�initialisation d�Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- c:\WINDOWS\system32\mscories.dll
O40 - ASIC: Adobe Flash Player 9 ActiveX - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.7 r700.) -- C:\WINDOWS\system32\Macromed\Flash\Flash32_11_7_700_202.ocx
O40 - ASIC: Installed Component - S-1-5-21-1336461411-1099706933-734051183-1006 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexad�cimal CLSID
O40 - ASIC: Installed Component - S-1-5-21-1336461411-1099706933-734051183-1006 - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS -- Not Hexad�cimal CLSID
~ Active Setup: 24 Scanned in 00mn 02s
---\\ Pilotes lanc�s au d�marrage du syst�me (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (avipbb) . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - C:\WINDOWS\system32\DRIVERS\avipbb.sys
O41 - Driver: (avkmgr) . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - C:\WINDOWS\system32\DRIVERS\avkmgr.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de p�riph�rique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver: (Processor) . (.Microsoft Corporation - Pilote de p�riph�rique processeur.) - C:\WINDOWS\system32\DRIVERS\processr.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: Carte vid�o VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
~ Drivers: 69 Scanned in 00mn 01s
---\\ Logiciels install�s (O42)
O42 - Logiciel: 7-Zip 4.65 - (...) [HKLM] -- 7-Zip
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- {F68D0307-2573-4BE7-9EFD-CB28D7E656E3}
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader X (10.1.7) - Fran�ais - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Akamai NetSession Interface - (...) [HKCU] -- Akamai
O42 - Logiciel: Akamai NetSession Interface Service - (...) [HKLM] -- Akamai
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {5D09C772-ECB3-442B-9CC6-B4341C78FDC2}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {E14ADE0E-75F3-4A46-87E5-26692DD626EC}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {C6579A65-9CAE-4B31-8B6B-3306E0630A66}
O42 - Logiciel: Audacity 1.2.6 - (...) [HKLM] -- Audacity_is1
O42 - Logiciel: Avira Free Antivirus v13.0.0.4042 - (.Avira.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: BitComet 1.29 - (.CometNetwork.) [HKLM] -- BitComet =>P2P.BitComet
O42 - Logiciel: BlueSoleil - (...) [HKLM] -- {B9F499B8-D1F0-42FC-84BE-CC552123CCCB}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
O42 - Logiciel: Budget Familial - (...) [HKLM] -- Budget Familial
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>Piriform Ltd
O42 - Logiciel: Creative Photos Zoom38 - (.Imaxel Lab S.L.) [HKLM] -- Creative Photos Zoom38
O42 - Logiciel: EPSON Logiciel imprimante - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON Printer and Utilities
O42 - Logiciel: EPSON Scan - (...) [HKLM] -- EPSON Scanner
O42 - Logiciel: FormatFactory 3.1.1 - (.Free Time.) [HKLM] -- FormatFactory
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: J2SE Runtime Environment 5.0 Update 4 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150040}
O42 - Logiciel: Java(TM) 6 Update 16 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216016FF}
O42 - Logiciel: Java(TM) 7 Update 5 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217005FF}
O42 - Logiciel: JavaFX 2.1.1 - (.Oracle Corporation.) [HKLM] -- {1111706F-666A-4037-7777-211328764D10}
O42 - Logiciel: K-Lite Codec Pack 9.9.5 (Full) - (...) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: La Marmite du Chef 6.6.33 - (...) [HKLM] -- La Marmite du Chef_is1
O42 - Logiciel: Last.fm Scrobbler 2.1.30 - (.Last.fm.) [HKLM] -- LastFM_is1
O42 - Logiciel: Lecteur Windows Media�11 - (...) [HKLM] -- Windows Media Player
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}
O42 - Logiciel: Macromedia Shockwave Player - (.Macromedia, Inc..) [HKLM] -- {7D1D6A24-65D4-454C-8815-4F08A5FFF12C}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.65.1.1000 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 - (.Microsoft Corporation.) [HKLM] -- Wdf01005
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Nokia Connectivity Cable Driver - (.Nokia.) [HKLM] -- {C3F19A5F-35A8-4FDB-A6ED-0F4CE398DA48}
O42 - Logiciel: Nokia PC Suite - (.Nokia.) [HKLM] -- {A982E6CC-9F0D-4948-9B18-BDFD55DE4A72}
O42 - Logiciel: OpenOffice.org 3.1 - (.OpenOffice.org.) [HKLM] -- {0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}
O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {83258E90-1F76-4E13-9F60-A0F8ED41E76F}
O42 - Logiciel: Package de pilotes Windows - Nokia Modem (02/15/2007 3.1) - (.Nokia.) [HKLM] -- 0C5EDC3653FED5B121F464339EAC12534D253B25
O42 - Logiciel: Package de pilotes Windows - Nokia Modem (02/15/2007 3.1) - (.Nokia.) [HKLM] -- B726756F5B5A5AA9D798B399386FC6205A45F19E
O42 - Logiciel: Package de pilotes Windows - Nokia Modem (05/24/2007 6.84.0.1) - (.Nokia.) [HKLM] -- CD8424B9400BFF7D34AA18F816C71322AC4BDAA7
O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM] -- 504244733D18C8F63FF584AEB290E3904E791693
O42 - Logiciel: PhotoFiltre - (...) [HKCU] -- PhotoFiltre
O42 - Logiciel: PlayStation(R)Network Downloader - (.Sony Computer Entertainment Inc..) [HKLM] -- {B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}
O42 - Logiciel: PlayStation(R)Store - (.Sony Computer Entertainment Inc..) [HKLM] -- {0E532C84-4275-41B3-9D81-D4A1A20D8EE7}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}
O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {F2AF3E5D-9697-485C-A5AC-E2B9468C446A}
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: Smart Link 56K Modem - (...) [HKLM] -- SLAMRMO
O42 - Logiciel: SmartGenealogy - (...) [HKLM] -- SmartGenealogy_is1
O42 - Logiciel: Sonic MyDVD - (.Sonic Solutions.) [HKLM] -- {21657574-BD54-48A2-9450-EB03B2C7FC29}
O42 - Logiciel: Sonic RecordNow! - (.Sonic Solutions.) [HKLM] -- {9541FED0-327F-4DF0-8B96-EF57EF622F19}
O42 - Logiciel: VIA/S3G Display Driver - (...) [HKLM] -- VIA/S3G UniChrome Family Win2K/XP Display
O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Vegas Pro 9.0 - (.Sony.) [HKLM] -- {DC785DB7-D389-48C3-B146-96FE99BF4E2B}
O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130
O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Media Format 11 runtime - (...) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Windows Presentation Foundation - (.Microsoft Corporation.) [HKLM] -- {BAF78226-3200-4DB4-BE33-4D922A799840}
O42 - Logiciel: Windows XP Service Pack�3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XpsEPSC
O42 - Logiciel: Yahoo! BrowserPlus - (.Yahoo! Inc..) [HKCU] -- Yahoo! BrowserPlus =>Toolbar.Yahoo
O42 - Logiciel: foobar2000 v1.2.9 - (.Peter Pawlowski.) [HKLM] -- foobar2000
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {9B486871-27EB-49A5-8832-77176E63333C}
O42 - Logiciel: monAlbumPhoto 6.3.2.2 - (.monAlbumPhoto.) [HKLM] -- monAlbumPhoto_is1
O42 - Logiciel: msvcrt_installer - (.SAH.) [HKLM] -- {6068A42A-C1CF-45F2-9859-5DB16287FE5D}
~ Logic: 173 Scanned in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\1ClickDownload] =>PUP.1ClickDownloader
[HKCU\Software\7-Zip]
[HKCU\Software\ALWIL Software]
[HKCU\Software\Ac]
[HKCU\Software\Adobe]
[HKCU\Software\America Online]
[HKCU\Software\AppDataLow\ISWVolatile]
[HKCU\Software\AppDataLow\yjqusrnjvolykfogfif]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Audacity]
[HKCU\Software\Avg]
[HKCU\Software\Avira]
[HKCU\Software\BitComet] =>P2P.BitComet
[HKCU\Software\CDDB]
[HKCU\Software\CheckPoint]
[HKCU\Software\Classes.crx]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Cyberlink]
[HKCU\Software\DXTransform]
[HKCU\Software\DirectShow]
[HKCU\Software\DivXNetworks]
[HKCU\Software\Dynamic Toolbar]
[HKCU\Software\EasyBits]
[HKCU\Software\FreeTime]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\IM Providers]
[HKCU\Software\Icaros]
[HKCU\Software\Imaxel]
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\Intel]
[HKCU\Software\JEDI-VCL]
[HKCU\Software\JavaSoft]
[HKCU\Software\Karlis Blumentals]
[HKCU\Software\Last.fm]
[HKCU\Software\Leadertech]
[HKCU\Software\MAP-DN]
[HKCU\Software\Macromedia]
[HKCU\Software\MainConcept (Sonic)]
[HKCU\Software\MainConcept]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MediaInfo]
[HKCU\Software\Mediachance]
[HKCU\Software\MimarSinan]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\My-Cook]
[HKCU\Software\Netscape]
[HKCU\Software\Nokia]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\Opendisc]
[HKCU\Software\Opera Software]
[HKCU\Software\PCSuite]
[HKCU\Software\Pinnacle Systems]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Positech]
[HKCU\Software\Skype]
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKCU\Software\Sonic]
[HKCU\Software\Sony Creative Software]
[HKCU\Software\SweetIM] =>PUP.SweetIM
[HKCU\Software\Symantec]
[HKCU\Software\Synaptics]
[HKCU\Software\Sysinternals]
[HKCU\Software\TeamViewer]
[HKCU\Software\TeleCharger]
[HKCU\Software\Trolltech]
[HKCU\Software\Ulead Systems]
[HKCU\Software\Ulead]
[HKCU\Software\Valve]
[HKCU\Software\VirtualDub.org]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\Winamp]
[HKCU\Software\kde.org]
[HKLM\Software\ALWIL Software]
[HKLM\Software\ASPI32]
[HKLM\Software\Adobe]
[HKLM\Software\America Online]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Avg]
[HKLM\Software\AviSynth]
[HKLM\Software\Avira]
[HKLM\Software\BSProductManage]
[HKLM\Software\Borland]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CDDB]
[HKLM\Software\CheckPoint]
[HKLM\Software\Claritas UK Ltd]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CyberLink]
[HKLM\Software\EMME]
[HKLM\Software\EPSON]
[HKLM\Software\FullCircle]
[HKLM\Software\GEAR Software]
[HKLM\Software\GNU]
[HKLM\Software\GTek]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\HaaliMkx]
[HKLM\Software\HighCriteria]
[HKLM\Software\IVT Corporation]
[HKLM\Software\Icaros]
[HKLM\Software\Iminent] =>Adware.IMBooster
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KLCodecPack]
[HKLM\Software\LAV]
[HKLM\Software\Last.fm]
[HKLM\Software\Licenses]
[HKLM\Software\Logitech]
[HKLM\Software\MAP-DN]
[HKLM\Software\MDMOptions]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\Matrox]
[HKLM\Software\MetaStream] =>Adware.MetaStream
[HKLM\Software\MicroVision]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NEC Computers International]
[HKLM\Software\Nero]
[HKLM\Software\Nokia]
[HKLM\Software\Nullsoft]
[HKLM\Software\OD2]
[HKLM\Software\ODBC]
[HKLM\Software\On Demand Distribution]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\Oracle]
[HKLM\Software\PC Connectivity Solution]
[HKLM\Software\PCSuite]
[HKLM\Software\PegasusImaging]
[HKLM\Software\Pinnacle Systems]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\S3]
[HKLM\Software\SECURITOO]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Skype]
[HKLM\Software\SmartLink]
[HKLM\Software\Software]
[HKLM\Software\Sonic]
[HKLM\Software\Sony Corporation]
[HKLM\Software\Sony Creative Software]
[HKLM\Software\Sony Media Software]
[HKLM\Software\Sony]
[HKLM\Software\Sports Interactive Ltd]
[HKLM\Software\Sun Microsystems]
[HKLM\Software\SweetIM] =>PUP.SweetIM
[HKLM\Software\SymNRT]
[HKLM\Software\Synaptics]
[HKLM\Software\TeamViewer]
[HKLM\Software\VN_VUIns]
[HKLM\Software\Valve]
[HKLM\Software\VideoLAN]
[HKLM\Software\Viewpoint] =>Adware.MetaStream
[HKLM\Software\WebSupergoo]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\X-AVCSD]
[HKLM\Software\ZSMC]
[HKLM\Software\Zone Labs]
[HKLM\Software\mozilla.org]
[HKLM\Software\webtogo]
~ Key Software: 276 Scanned in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 18/12/2009 - 23:30:40 - [2,951] ----D C:\Program Files\7-Zip
O43 - CFD: 05/08/2012 - 16:44:16 - [114,167] ----D C:\Program Files\Adobe
O43 - CFD: 12/12/2009 - 23:50:07 - [0] ----D C:\Program Files\Alwil Software
O43 - CFD: 18/10/2011 - 22:30:31 - [0,000] ----D C:\Program Files\Ant Movie Catalog
O43 - CFD: 13/12/2009 - 06:09:30 - [61,535] ----D C:\Program Files\AOL 9.0
O43 - CFD: 13/12/2009 - 06:09:30 - [2,086] ----D C:\Program Files\AOL Compagnon
O43 - CFD: 04/07/2011 - 23:16:04 - [2,201] ----D C:\Program Files\Apple Software Update
O43 - CFD: 13/12/2009 - 22:04:08 - [0,003] ----D C:\Program Files\ATnotes
O43 - CFD: 08/02/2010 - 21:53:15 - [8,443] ----D C:\Program Files\Audacity
O43 - CFD: 07/03/2013 - 10:10:54 - [230,219] ----D C:\Program Files\Avira
O43 - CFD: 30/10/2011 - 00:03:31 - [25,680] ----D C:\Program Files\BitComet =>P2P.BitComet
O43 - CFD: 20/01/2012 - 15:12:58 - [0,585] ----D C:\Program Files\Bonjour
O43 - CFD: 06/09/2013 - 07:31:50 - [80,755] ----D C:\Program Files\Budget Familial
O43 - CFD: 05/01/2010 - 23:03:03 - [1,203] ----D C:\Program Files\Bullfrog
O43 - CFD: 31/01/2010 - 02:45:30 - [2,716] ----D C:\Program Files\CCleaner =>Piriform Ltd
O43 - CFD: 15/02/2010 - 18:22:07 - [0] ----D C:\Program Files\CheckPoint
O43 - CFD: 13/12/2009 - 06:08:57 - [0] ----D C:\Program Files\ComPlus Applications
O43 - CFD: 18/03/2010 - 00:59:52 - [173,244] ----D C:\Program Files\Corel
O43 - CFD: 19/12/2011 - 11:13:04 - [0,583] ----D C:\Program Files\CTV PROD
O43 - CFD: 13/12/2009 - 06:08:57 - [4,684] ----D C:\Program Files\CyberLink
O43 - CFD: 31/12/2009 - 21:57:43 - [0,758] ----D C:\Program Files\DIFX
O43 - CFD: 19/12/2011 - 22:13:56 - [6,300] ----D C:\Program Files\El Juky
O43 - CFD: 07/09/2010 - 16:21:33 - [5,974] ----D C:\Program Files\epson
O43 - CFD: 22/01/2013 - 22:38:10 - [256,655] ----D C:\Program Files\Fichiers communs
O43 - CFD: 19/08/2013 - 17:03:23 - [13,017] ----D C:\Program Files\foobar2000
O43 - CFD: 10/06/2012 - 15:42:12 - [2,857] ----D C:\Program Files\Free mp3 Wma Converter
O43 - CFD: 27/06/2013 - 17:35:04 - [134,175] ----D C:\Program Files\FreeTime
O43 - CFD: 10/06/2012 - 15:43:22 - [0] ----D C:\Program Files\Gabest
O43 - CFD: 03/06/2012 - 21:35:27 - [616,014] ----D C:\Program Files\imaxel
O43 - CFD: 22/05/2011 - 20:15:20 - [9,155] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 17/08/2013 - 02:14:37 - [5,971] ----D C:\Program Files\Internet Explorer
O43 - CFD: 22/08/2013 - 10:01:02 - [1,765] ----D C:\Program Files\iPod
O43 - CFD: 22/08/2013 - 10:02:31 - [158,889] ----D C:\Program Files\iTunes
O43 - CFD: 22/05/2011 - 20:15:29 - [8,773] ----D C:\Program Files\IVT Corporation
O43 - CFD: 01/08/2012 - 17:50:59 - [236,763] ----D C:\Program Files\Java
O43 - CFD: 14/12/2009 - 21:43:08 - [15,892] ----D C:\Program Files\JRE
O43 - CFD: 07/07/2013 - 18:48:42 - [61,546] ----D C:\Program Files\K-Lite Codec Pack
O43 - CFD: 16/01/2013 - 12:56:33 - [79,999] ----D C:\Program Files\Last.fm
O43 - CFD: 13/12/2009 - 06:08:57 - [0,679] ----D C:\Program Files\Learn2.com
O43 - CFD: 30/11/2012 - 12:29:03 - [12,871] ----D C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 05/07/2012 - 19:47:01 - [2,053] ----D C:\Program Files\Messenger
O43 - CFD: 16/12/2009 - 00:11:52 - [0,216] ----D C:\Program Files\Microsoft
O43 - CFD: 17/12/2009 - 04:00:33 - [0,764] ----D C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 13/12/2009 - 06:08:57 - [0] ----D C:\Program Files\microsoft frontpage
O43 - CFD: 12/07/2013 - 10:36:11 - [40,851] ----D C:\Program Files\Microsoft Silverlight
O43 - CFD: 13/10/2012 - 21:36:27 - [97,048] ----D C:\Program Files\monAlbumPhoto
O43 - CFD: 06/07/2012 - 01:52:11 - [9,894] ----D C:\Program Files\Movie Maker
O43 - CFD: 31/01/2010 - 04:14:18 - [0,002] ----D C:\Program Files\Mozilla Sunbird
O43 - CFD: 09/02/2010 - 22:51:04 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 13/12/2009 - 06:08:57 - [18,385] ----D C:\Program Files\MSN
O43 - CFD: 13/12/2009 - 06:08:57 - [8,341] ----D C:\Program Files\MSN Gaming Zone
O43 - CFD: 13/12/2009 - 06:22:01 - [0] ----D C:\Program Files\MSXML 4.0
O43 - CFD: 11/02/2010 - 04:08:44 - [0,007] ----D C:\Program Files\MSXML 6.0
O43 - CFD: 05/07/2012 - 19:33:32 - [3,133] ----D C:\Program Files\NetMeeting
O43 - CFD: 01/01/2010 - 01:55:29 - [30,400] ----D C:\Program Files\Nokia
O43 - CFD: 13/12/2009 - 06:14:21 - [0,002] ----D C:\Program Files\Online Services
O43 - CFD: 14/12/2009 - 21:39:29 - [155,034] ----D C:\Program Files\Open Office
O43 - CFD: 14/12/2009 - 21:42:58 - [367,412] ----D C:\Program Files\OpenOffice.org 3
O43 - CFD: 01/08/2012 - 17:54:01 - [33,207] ----D C:\Program Files\Oracle
O43 - CFD: 31/05/2012 - 19:34:23 - [0,310] ----D C:\Program Files\Orange
O43 - CFD: 31/05/2012 - 19:34:38 - [0,008] ----D C:\Program Files\OrangeHSS
O43 - CFD: 06/07/2012 - 01:39:16 - [4,176] ----D C:\Program Files\Outlook Express
O43 - CFD: 01/01/2010 - 01:54:58 - [10,650] ----D C:\Program Files\PC Connectivity Solution
O43 - CFD: 18/12/2009 - 23:30:06 - [21,125] ----D C:\Program Files\PhotoFiltre
O43 - CFD: 09/03/2010 - 23:34:17 - [0,000] ----D C:\Program Files\Pinnacle
O43 - CFD: 04/07/2011 - 23:18:16 - [72,939] ----D C:\Program Files\QuickTime
O43 - CFD: 13/12/2009 - 06:08:57 - [8,048] ----D C:\Program Files\Real
O43 - CFD: 09/02/2010 - 22:37:10 - [34,730] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 20/01/2012 - 15:16:19 - [42,199] ----D C:\Program Files\Safari
O43 - CFD: 12/12/2009 - 21:43:22 - [42,608] ----D C:\Program Files\Securitoo
O43 - CFD: 13/12/2009 - 06:14:29 - [0,001] ----D C:\Program Files\Services en ligne
O43 - CFD: 18/05/2011 - 22:47:30 - [13,067] ----D C:\Program Files\SmartGenealogy_2.8c
O43 - CFD: 30/08/2012 - 20:01:36 - [0,134] ----D C:\Program Files\Software
O43 - CFD: 13/12/2009 - 06:08:57 - [97,200] ----D C:\Program Files\Sonic
O43 - CFD: 17/08/2013 - 18:11:29 - [299,804] ----D C:\Program Files\Sony
O43 - CFD: 17/08/2013 - 18:00:23 - [149,329] ----D C:\Program Files\Sony Media Go Install
O43 - CFD: 26/11/2010 - 01:31:36 - [93,423] ----D C:\Program Files\Sony Setup
O43 - CFD: 10/06/2012 - 15:43:41 - [34,846] ----D C:\Program Files\Spotify
O43 - CFD: 23/01/2013 - 22:13:39 - [-1070,642] ----D C:\Program Files\Steam
O43 - CFD: 13/12/2009 - 06:08:57 - [25,247] ----D C:\Program Files\Synaptics
O43 - CFD: 13/12/2009 - 06:08:57 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 13/12/2009 - 06:08:57 - [0,296] ----D C:\Program Files\VIA
O43 - CFD: 12/11/2011 - 22:20:18 - [80,790] ----D C:\Program Files\VideoLAN
O43 - CFD: 13/12/2009 - 06:08:57 - [7,040] ----D C:\Program Files\Viewpoint =>Adware.MetaStream
O43 - CFD: 26/05/2013 - 12:46:43 - [1,288] ----D C:\Program Files\Winamp
O43 - CFD: 16/12/2009 - 00:11:45 - [43,684] ----D C:\Program Files\Windows Live
O43 - CFD: 16/12/2009 - 00:11:27 - [0,234] ----D C:\Program Files\Windows Live SkyDrive
O43 - CFD: 18/03/2010 - 00:24:28 - [0,174] ----D C:\Program Files\Windows Media Components
O43 - CFD: 21/07/2013 - 16:16:53 - [3,415] ----D C:\Program Files\Windows Media Connect 2
O43 - CFD: 21/07/2013 - 16:16:51 - [8,743] ----D C:\Program Files\Windows Media Player
O43 - CFD: 05/07/2012 - 19:33:24 - [3,760] ----D C:\Program Files\Windows NT
O43 - CFD: 13/12/2009 - 06:08:57 - [0] --H-D C:\Program Files\WindowsUpdate
O43 - CFD: 13/12/2009 - 06:08:57 - [0] ----D C:\Program Files\xerox
O43 - CFD: 11/09/2013 - 22:52:53 - [16,840] ----D C:\Program Files\ZHPDiag
O43 - CFD: 05/08/2012 - 16:44:57 - [3,749] ----D C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 11/09/2013 - 21:06:50 - [30,633] ----D C:\Program Files\Fichiers communs\Akamai
O43 - CFD: 13/12/2009 - 06:10:57 - [13,987] ----D C:\Program Files\Fichiers communs\AOL
O43 - CFD: 13/12/2009 - 06:10:57 - [7,553] ----D C:\Program Files\Fichiers communs\aolshare
O43 - CFD: 22/08/2013 - 10:01:00 - [107,202] ----D C:\Program Files\Fichiers communs\Apple
O43 - CFD: 18/12/2009 - 23:32:19 - [7,320] ----D C:\Program Files\Fichiers communs\Borland Shared
O43 - CFD: 15/09/2012 - 14:01:43 - [0] ----D C:\Program Files\Fichiers communs\DVDVideoSoft
O43 - CFD: 03/01/2010 - 22:15:46 - [0,075] ----D C:\Program Files\Fichiers communs\France Telecom
O43 - CFD: 13/12/2009 - 06:08:57 - [4,160] ----D C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 01/08/2012 - 17:55:19 - [23,167] ----D C:\Program Files\Fichiers communs\Java
O43 - CFD: 16/12/2009 - 20:12:26 - [0,421] ----D C:\Program Files\Fichiers communs\logishrd
O43 - CFD: 30/01/2010 - 23:34:32 - [15,162] ----D C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 13/12/2009 - 06:08:57 - [0,271] ----D C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 31/12/2009 - 21:58:13 - [2,543] ----D C:\Program Files\Fichiers communs\Nokia
O43 - CFD: 13/12/2009 - 06:08:57 - [2,281] ----D C:\Program Files\Fichiers communs\Nullsoft
O43 - CFD: 13/12/2009 - 06:08:57 - [0] ----D C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 31/12/2009 - 21:58:10 - [4,744] ----D C:\Program Files\Fichiers communs\PCSuite
O43 - CFD: 13/12/2009 - 06:08:57 - [9,103] ----D C:\Program Files\Fichiers communs\Real
O43 - CFD: 13/12/2009 - 06:11:03 - [0,008] ----D C:\Program Files\Fichiers communs\Services
O43 - CFD: 13/12/2009 - 06:11:04 - [7,491] ----D C:\Program Files\Fichiers communs\Sonic Shared
O43 - CFD: 17/08/2013 - 18:09:56 - [0,326] ----D C:\Program Files\Fichiers communs\Sony Shared
O43 - CFD: 13/12/2009 - 06:08:57 - [3,612] ----D C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 22/01/2013 - 22:38:11 - [0,388] ----D C:\Program Files\Fichiers communs\Steam
O43 - CFD: 13/12/2009 - 06:11:05 - [5,963] ----D C:\Program Files\Fichiers communs\SureThing Shared
O43 - CFD: 05/07/2012 - 19:33:16 - [6,496] ----D C:\Program Files\Fichiers communs\System
O43 - CFD: 16/12/2009 - 00:02:24 - [0] ----D C:\Program Files\Fichiers communs\Windows Live
O43 - CFD: 22/08/2013 - 10:02:32 - [2,445] ----D C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
O43 - CFD: 18/02/2013 - 08:50:08 - [393,114] ----D C:\Documents and Settings\All Users\Application Data\Adobe
O43 - CFD: 13/10/2012 - 21:54:15 - [203,063] ----D C:\Documents and Settings\All Users\Application Data\albumphoto
O43 - CFD: 13/12/2009 - 06:08:56 - [28,116] ----D C:\Documents and Settings\All Users\Application Data\AOL
O43 - CFD: 16/12/2009 - 23:07:30 - [147,867] ----D C:\Documents and Settings\All Users\Application Data\Apple
O43 - CFD: 16/12/2009 - 23:11:08 - [135,535] ----D C:\Documents and Settings\All Users\Application Data\Apple Computer
O43 - CFD: 07/03/2013 - 10:10:54 - [197,342] ----D C:\Documents and Settings\All Users\Application Data\Avira
O43 - CFD: 22/05/2011 - 20:20:27 - [0,017] ----D C:\Documents and Settings\All Users\Application Data\Bluetooth
O43 - CFD: 03/02/2011 - 02:35:57 - [0] ----D C:\Documents and Settings\All Users\Application Data\BVRP Software
O43 - CFD: 13/12/2009 - 06:08:56 - [0,002] ----D C:\Documents and Settings\All Users\Application Data\CyberLink
O43 - CFD: 07/09/2010 - 16:20:25 - [0,462] ----D C:\Documents and Settings\All Users\Application Data\EPSON
O43 - CFD: 01/01/2010 - 01:55:39 - [25,681] ----D C:\Documents and Settings\All Users\Application Data\Installations
O43 - CFD: 16/12/2009 - 22:26:21 - [2,777] ----D C:\Documents and Settings\All Users\Application Data\Last.fm
O43 - CFD: 31/01/2010 - 02:58:49 - [16,352] ----D C:\Documents and Settings\All Users\Application Data\Malwarebytes
O43 - CFD: 26/11/2010 - 01:17:10 - [8,785] -S--D C:\Documents and Settings\All Users\Application Data\Microsoft
O43 - CFD: 13/12/2009 - 06:11:18 - [0,149] ----D C:\Documents and Settings\All Users\Application Data\OD2
O43 - CFD: 31/12/2009 - 21:59:38 - [0,009] ----D C:\Documents and Settings\All Users\Application Data\PC Suite
O43 - CFD: 09/03/2010 - 22:55:25 - [0,021] ----D C:\Documents and Settings\All Users\Application Data\Pinnacle
O43 - CFD: 13/12/2009 - 06:11:18 - [0,009] ----D C:\Documents and Settings\All Users\Application Data\QuickTime
O43 - CFD: 13/12/2009 - 06:08:56 - [0,067] ----D C:\Documents and Settings\All Users\Application Data\SBSI
O43 - CFD: 04/07/2012 - 15:41:39 - [104,293] ----D C:\Documents and Settings\All Users\Application Data\Skype
O43 - CFD: 09/02/2010 - 23:15:51 - [0,004] ----D C:\Documents and Settings\All Users\Application Data\Sony
O43 - CFD: 17/08/2013 - 18:01:31 - [0,001] ----D C:\Documents and Settings\All Users\Application Data\Sony Corporation
O43 - CFD: 31/01/2010 - 17:40:22 - [0] ----D C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
O43 - CFD: 01/08/2012 - 17:55:22 - [0,000] ----D C:\Documents and Settings\All Users\Application Data\Sun
O43 - CFD: 30/05/2012 - 13:44:21 - [0] ---AD C:\Documents and Settings\All Users\Application Data\TEMP
O43 - CFD: 18/03/2010 - 00:59:51 - [0,000] ----D C:\Documents and Settings\All Users\Application Data\Ulead Systems
O43 - CFD: 13/12/2009 - 06:08:56 - [0,023] ----D C:\Documents and Settings\All Users\Application Data\Viewpoint =>Adware.MetaStream
O43 - CFD: 10/03/2010 - 18:53:13 - [0,003] ----D C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
O43 - CFD: 04/07/2011 - 23:23:58 - [0,003] ----D C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
O43 - CFD: 16/12/2009 - 23:12:23 - [0,003] ----D C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
O43 - CFD: 16/01/2013 - 10:10:49 - [11,330] ----D C:\Documents and Settings\Olgicka\Application Data\Adobe
O43 - CFD: 18/10/2011 - 21:58:04 - [1,486] ----D C:\Documents and Settings\Olgicka\Application Data\Apple Computer
O43 - CFD: 07/03/2013 - 10:20:19 - [0] ----D C:\Documents and Settings\Olgicka\Application Data\Avira
O43 - CFD: 05/07/2012 - 20:08:42 - [3,546] ----D C:\Documents and Settings\Olgicka\Application Data\BitComet =>P2P.BitComet
O43 - CFD: 15/02/2010 - 18:21:12 - [0,017] ----D C:\Documents and Settings\Olgicka\Application Data\CheckPoint
O43 - CFD: 14/06/2011 - 21:04:31 - [0] ----D C:\Documents and Settings\Olgicka\Application Data\CyberLink
O43 - CFD: 15/09/2012 - 14:01:43 - [0,437] ----D C:\Documents and Settings\Olgicka\Application Data\DVDVideoSoft
O43 - CFD: 01/09/2013 - 10:35:59 - [0,370] ----D C:\Documents and Settings\Olgicka\Application Data\foobar2000
O43 - CFD: 30/11/2011 - 00:11:53 - [0,000] ----D C:\Documents and Settings\Olgicka\Application Data\FreeAudioPack
O43 - CFD: 20/04/2012 - 22:41:39 - [0,007] ----D C:\Documents and Settings\Olgicka\Application Data\Gamelab
O43 - CFD: 22/06/2012 - 20:20:38 - [0] ----D C:\Documents and Settings\Olgicka\Application Data\GetRightToGo
O43 - CFD: 13/12/2009 - 06:08:56 - [0] ----D C:\Documents and Settings\Olgicka\Application Data\Identities
O43 - CFD: 18/03/2010 - 00:18:24 - [0] ----D C:\Documents and Settings\Olgicka\Application Data\InstallShield
O43 - CFD: 14/06/2011 - 21:07:53 - [0,000] ----D C:\Documents and Settings\Olgicka\Application Data\Leadertech
O43 - CFD: 12/12/2009 - 23:02:01 - [0,012] ----D C:\Documents and Settings\Olgicka\Application Data\Macromedia
O43 - CFD: 29/11/2011 - 18:03:09 - [1,000] ----D C:\Documents and Settings\Olgicka\Application Data\MAKuisine
O43 - CFD: 31/01/2010 - 02:59:00 - [4,286] ----D C:\Documents and Settings\Olgicka\Application Data\Malwarebytes
O43 - CFD: 08/07/2013 - 14:21:29 - [0,000] ----D C:\Documents and Settings\Olgicka\Application Data\Media Player Classic
O43 - CFD: 16/01/2013 - 10:10:49 - [20,528] -S--D C:\Documents and Settings\Olgicka\Application Data\Microsoft
O43 - CFD: 01/02/2010 - 23:48:53 - [0,323] ----D C:\Documents and Settings\Olgicka\Application Data\Mozilla
O43 - CFD: 31/12/2009 - 22:50:04 - [0,000] ----D C:\Documents and Settings\Olgicka\Application Data\Nokia
O43 - CFD: 05/01/2010 - 04:13:37 - [0,000] ----D C:\Documents and Settings\Olgicka\Application Data\Nokia Multimedia Player
O43 - CFD: 16/12/2009 - 22:19:37 - [0,012] ----D C:\Documents and Settings\Olgicka\Application Data\OD2
O43 - CFD: 15/12/2009 - 00:18:24 - [2,283] ----D C:\Documents and Settings\Olgicka\Application Data\OpenOffice.org
O43 - CFD: 13/12/2009 - 04:21:02 - [0,318] ----D C:\Documents and Settings\Olgicka\Application Data\Opera
O43 - CFD: 01/08/2012 - 17:52:53 - [0] ----D C:\Documents and Settings\Olgicka\Application Data\Oracle
O43 - CFD: 31/12/2009 - 21:59:41 - [0,001] ----D C:\Documents and Settings\Olgicka\Application Data\PC Suite
O43 - CFD: 18/12/2009 - 23:30:29 - [0,004] ----D C:\Documents and Settings\Olgicka\Application Data\PhotoFiltre
O43 - CFD: 23/03/2010 - 02:38:36 - [0,144] ----D C:\Documents and Settings\Olgicka\Application Data\Publish Providers
O43 - CFD: 07/07/2012 - 17:37:52 - [0] RSH-D C:\Documents and Settings\Olgicka\Application Data\R-344233-5553-2-32
O43 - CFD: 07/09/2013 - 15:23:22 - [0,001] ----D C:\Documents and Settings\Olgicka\Application Data\Shop'NCook Menu
O43 - CFD: 04/07/2012 - 15:41:34 - [10,670] ----D C:\Documents and Settings\Olgicka\Application Data\Skype
O43 - CFD: 26/11/2011 - 01:01:54 - [0,016] ----D C:\Documents and Settings\Olgicka\Application Data\skypePM
O43 - CFD: 30/11/2011 - 15:15:41 - [0,021] ----D C:\Documents and Settings\Olgicka\Application Data\Sonic
O43 - CFD: 17/08/2013 - 17:54:31 - [90,542] ----D C:\Documents and Settings\Olgicka\Application Data\Sony
O43 - CFD: 09/02/2010 - 22:20:08 - [50,326] ----D C:\Documents and Settings\Olgicka\Application Data\Sony Setup
O43 - CFD: 23/01/2013 - 00:45:29 - [13,499] ----D C:\Documents and Settings\Olgicka\Application Data\Sports Interactive
O43 - CFD: 14/12/2009 - 21:40:08 - [15,009] ----D C:\Documents and Settings\Olgicka\Application Data\Sun
O43 - CFD: 13/12/2009 - 23:10:22 - [0,004] ----D C:\Documents and Settings\Olgicka\Application Data\Talkback
O43 - CFD: 05/07/2012 - 18:51:35 - [0,044] ----D C:\Documents and Settings\Olgicka\Application Data\TeamViewer
O43 - CFD: 16/08/2011 - 23:05:51 - [0,144] ----D C:\Documents and Settings\Olgicka\Application Data\Todae
O43 - CFD: 23/03/2010 - 00:24:57 - [0] ----D C:\Documents and Settings\Olgicka\Application Data\Transparent
O43 - CFD: 18/03/2010 - 00:28:08 - [0,001] ----D C:\Documents and Settings\Olgicka\Application Data\Ulead Systems
O43 - CFD: 16/07/2011 - 10:28:05 - [1,453] ----D C:\Documents and Settings\Olgicka\Application Data\uTorrent =>P2P.�Torrent
O43 - CFD: 12/11/2011 - 22:24:08 - [0,074] ----D C:\Documents and Settings\Olgicka\Application Data\vlc
O43 - CFD: 13/12/2009 - 06:08:56 - [0] ----D C:\Documents and Settings\Olgicka\Application Data\You've Got Pictures Screensaver
O43 - CFD: 12/06/2012 - 15:59:44 - [60,334] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Adobe
O43 - CFD: 04/06/2012 - 14:55:09 - [31,882] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Akamai
O43 - CFD: 16/12/2009 - 23:08:27 - [0] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Apple
O43 - CFD: 04/07/2011 - 22:55:16 - [225,996] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Apple Computer
O43 - CFD: 15/11/2012 - 09:06:39 - [0,042] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\ApplicationHistory
O43 - CFD: 17/08/2013 - 17:59:15 - [140,796] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Downloaded Installations
O43 - CFD: 26/12/2011 - 18:14:28 - [1170,947] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google
O43 - CFD: 21/04/2010 - 17:29:15 - [0,216] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Identities
O43 - CFD: 01/09/2013 - 10:33:00 - [19,587] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Last.fm
O43 - CFD: 16/01/2013 - 10:10:49 - [207,164] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Microsoft
O43 - CFD: 28/01/2010 - 22:24:37 - [1,570] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Mozilla
O43 - CFD: 13/12/2009 - 04:21:03 - [23,971] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Opera
O43 - CFD: 15/06/2011 - 07:55:47 - [0,010] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\PowerCinema
O43 - CFD: 19/03/2010 - 00:58:16 - [0] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\RcIncidents
O43 - CFD: 30/08/2012 - 20:01:33 - [0] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Software
O43 - CFD: 17/08/2013 - 18:01:54 - [3,871] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Sony
O43 - CFD: 23/01/2013 - 00:45:29 - [0] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Sports Interactive
O43 - CFD: 01/08/2012 - 17:56:28 - [4,717] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Sun
O43 - CFD: 16/01/2013 - 10:10:48 - [0] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Temp
O43 - CFD: 28/06/2013 - 14:25:17 - [0] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\WMTools Downloaded Files
O43 - CFD: 20/11/2011 - 23:26:00 - [0,003] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Xenocode
O43 - CFD: 26/01/2010 - 21:31:49 - [24,774] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\Yahoo! =>Toolbar.Yahoo
O43 - CFD: 13/12/2009 - 06:11:30 - [11,148] ----D C:\Documents and Settings\Olgicka\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150040}
O43 - CFD: 02/02/2010 - 23:02:32 - [0,015] R---D C:\Documents and Settings\Olgicka\Menu D�marrer\Programmes\Accessoires
O43 - CFD: 26/01/2010 - 21:32:16 - [0,002] ----D C:\Documents and Settings\Olgicka\Menu D�marrer\Programmes\BrowserPlus
O43 - CFD: 31/01/2010 - 02:45:30 - [0,003] ----D C:\Documents and Settings\Olgicka\Menu D�marrer\Programmes\CCleaner =>Piriform Ltd
O43 - CFD: 03/06/2012 - 21:45:18 - [0,003] ----D C:\Documents and Settings\Olgicka\Menu D�marrer\Programmes\Creative Photos Zoom38
O43 - CFD: 04/07/2012 - 17:04:45 - [0,000] R---D C:\Documents and Settings\Olgicka\Menu D�marrer\Programmes\D�marrage
O43 - CFD: 27/06/2013 - 17:37:19 - [0,003] ----D C:\Documents and Settings\Olgicka\Menu D�marrer\Programmes\FormatFactory
O43 - CFD: 12/01/2013 - 13:41:11 - [0,002] ----D C:\Documents and Settings\Olgicka\Menu D�marrer\Programmes\Google Chrome
O43 - CFD: 09/03/2010 - 23:20:11 - [0,000] R---D C:\Documents and Settings\Olgicka\Menu D�marrer\Programmes\Outils d'administration
O43 - CFD: 18/12/2009 - 23:30:06 - [0,003] ----D C:\Documents and Settings\Olgicka\Menu D�marrer\Programmes\PhotoFiltre
~ Program Folder: 229 Scanned in 01mn 48s
---\\ Derniers fichiers modifi�s ou cr�es sous Windows et System32 (O44)
O44 - LFC:[MD5.AACDFEC3AC9B55579921856BD1613390] - 11/09/2013 - 21:02:06 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32574]
O44 - LFC:[MD5.C14062C311BD3C2F6068BBD2384DF145] - 11/09/2013 - 20:35:34 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1388245]
O44 - LFC:[MD5.CE4CEB9561489F801DED2D4C7DE96796] - 11/09/2013 - 20:19:45 ---A- . (...) -- C:\WINDOWS\KB2864063.log [6360]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 11/09/2013 - 20:11:42 ---A- . (...) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.C0906C55A2ADCC3A33F7BE2AFCF66E2F] - 11/09/2013 - 20:06:50 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]
O44 - LFC:[MD5.EA3FBD7CF2BF82C42041EF404BA807BF] - 11/09/2013 - 20:06:49 ---A- . (...) -- C:\WINDOWS\wiaservc.log [0]
O44 - LFC:[MD5.6BDD31C8137820810E473A18540BF1EE] - 11/09/2013 - 20:06:28 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [1158]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 11/09/2013 - 20:06:23 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.53F73224CC5E372555A5C07B2CEB5F34] - 10/09/2013 - 22:37:01 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\WINDOWS\system32\MRT.exe [76725432]
O44 - LFC:[MD5.F260F2EE3D21D00BEC0B08068E27BADB] - 10/09/2013 - 19:53:26 ---A- . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\Drivers\avipbb.sys [136672]
O44 - LFC:[MD5.40A34E457431625086F7E161E59A0528] - 10/09/2013 - 19:53:26 ---A- . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\WINDOWS\system32\Drivers\avgntflt.sys [88840]
O44 - LFC:[MD5.6688C17F147AB6FE712207A1C1B4F270] - 10/09/2013 - 19:53:20 ---A- . (...) -- C:\WINDOWS\KB2876315.log [4126]
O44 - LFC:[MD5.87683988ECF9180466D210D7788BFF98] - 10/09/2013 - 19:53:16 ---A- . (...) -- C:\WINDOWS\KB2876217.log [3609]
O44 - LFC:[MD5.B05DD9433F452CF78F8C90E8F0D5E334] - 28/08/2013 - 01:01:22 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [6182]
O44 - LFC:[MD5.932FB25A29A944C0E9D8040943F9DE8B] - 28/08/2013 - 01:01:22 ---A- . (...) -- C:\WINDOWS\KB2834904-v2.log [4531]
O44 - LFC:[MD5.EF91CCAE7A057593B51FA8CF22273600] - 28/08/2013 - 01:01:22 ---A- . (...) -- C:\WINDOWS\comsetup.log [2022]
O44 - LFC:[MD5.1E24B32D1AB0C2A46E88D525C6E5E0C6] - 28/08/2013 - 01:01:22 ---A- . (...) -- C:\WINDOWS\iis6.log [969]
O44 - LFC:[MD5.6F80B87471DAD302F9BF32FF642FF33B] - 28/08/2013 - 01:01:22 ---A- . (...) -- C:\WINDOWS\imsins.log [1374]
O44 - LFC:[MD5.BFD8D485E5CA4C9C6755368F74E57AB3] - 28/08/2013 - 01:01:22 ---A- . (...) -- C:\WINDOWS\msgsocm.log [309]
O44 - LFC:[MD5.F055B15A3FA22D6B0EBFCA17BBCE30E0] - 28/08/2013 - 01:01:22 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [1229]
O44 - LFC:[MD5.C558A14F912EA528BAB12D36121713B4] - 28/08/2013 - 01:01:22 ---A- . (...) -- C:\WINDOWS\ocgen.log [2956]
O44 - LFC:[MD5.850B7FEC05EE6A12749AC3DE189B036B] - 28/08/2013 - 01:01:22 ---A- . (...) -- C:\WINDOWS\ocmsn.log [342]
O44 - LFC:[MD5.61364C47DC7DAB3C78E6A2161D7686D9] - 28/08/2013 - 01:01:22 ---A- . (...) -- C:\WINDOWS\setupapi.log [1697]
O44 - LFC:[MD5.9E62BC5F6A2E36B9417588A00D1D1633] - 28/08/2013 - 01:01:22 ---A- . (...) -- C:\WINDOWS\tsoc.log [2359]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 28/08/2013 - 01:01:17 ---A- . (...) -- C:\WINDOWS\setupact.log [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 28/08/2013 - 01:01:17 ---A- . (...) -- C:\WINDOWS\setuperr.log [0]
~ Files: 26 Scanned in 02mn 13s
---\\ Derniers fichiers cr��s dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.C7178581A1C842C463F2D7F55E813B35] - 04/09/2013 - 22:32:40 ---A- - C:\WINDOWS\Prefetch\SOFFICE.EXE-012D2D56.pf
O45 - LFCP:[MD5.06706E12EE4113D18D24D0EE75BDB758] - 04/09/2013 - 22:32:40 ---A- - C:\WINDOWS\Prefetch\SWRITER.EXE-04499097.pf
O45 - LFCP:[MD5.50FC56256DE63AEE7D9E467EF890E6C4] - 04/09/2013 - 22:32:46 ---A- - C:\WINDOWS\Prefetch\SOFFICE.BIN-091CC27D.pf
O45 - LFCP:[MD5.399456A22D1A92E1FAC9945D6095C54B] - 06/09/2013 - 06:31:55 ---A- - C:\WINDOWS\Prefetch\BUDGET FAMILIAL.EXE-02B5F483.pf
O45 - LFCP:[MD5.6A5F07C6AD77BDFE48E4784CB663428A] - 06/09/2013 - 11:04:56 ---A- - C:\WINDOWS\Prefetch\29.0.1547.66_CHROME_INSTALLER-238ECB53.pf
O45 - LFCP:[MD5.4621FFAE16FB45E49EC74D0D490BD8F3] - 06/09/2013 - 20:53:11 ---A- - C:\WINDOWS\Prefetch\SNDVOL32.EXE-0EC6FD20.pf
O45 - LFCP:[MD5.E5D02779B908B636EC5BE3910C390FDA] - 07/09/2013 - 13:59:09 ---A- - C:\WINDOWS\Prefetch\SNCMENU.EXE-223E44CD.pf
O45 - LFCP:[MD5.4E0055853FF4AC2CFC242C39B227196B] - 07/09/2013 - 13:59:10 ---A- - C:\WINDOWS\Prefetch\SNCMENU.TMP-285CFA18.pf
O45 - LFCP:[MD5.CD77D85C680F4210F48B7971B5058096] - 07/09/2013 - 14:23:23 ---A- - C:\WINDOWS\Prefetch\SHOP'NCOOK MENU.EXE-2F474E04.pf
O45 - LFCP:[MD5.8D8993A62CAFD4ACF401FA5128FFAA17] - 08/09/2013 - 05:35:40 ---A- - C:\WINDOWS\Prefetch\IMJPMIG.EXE-32ABEE9A.pf
O45 - LFCP:[MD5.0A3AC3730CD378597E89981667437ECC] - 08/09/2013 - 05:35:49 ---A- - C:\WINDOWS\Prefetch\ICON.EXE-01AA10CA.pf
O45 - LFCP:[MD5.26BAFC03855578EB6E659AE9A89A227D] - 08/09/2013 - 05:35:49 ---A- - C:\WINDOWS\Prefetch\SYNTPENH.EXE-2B70B91C.pf
O45 - LFCP:[MD5.C4EDC764F3293E058B54A78BC333436A] - 08/09/2013 - 05:35:49 ---A- - C:\WINDOWS\Prefetch\VTTRAYP.EXE-1879804F.pf
O45 - LFCP:[MD5.335A8613D432A09A6076EF278DCAB28C] - 08/09/2013 - 08:29:38 ---A- - C:\WINDOWS\Prefetch\HELPSVC.EXE-1C192440.pf
O45 - LFCP:[MD5.B900F5A64BC74238ECE3D05F49EBA68D] - 08/09/2013 - 09:01:16 ---A- - C:\WINDOWS\Prefetch\UNINS000.EXE-1D6DC278.pf
O45 - LFCP:[MD5.3C0D60B931166D7D58AEC904B65E0B66] - 08/09/2013 - 09:01:20 ---A- - C:\WINDOWS\Prefetch\_IU14D2N.TMP-0E621A33.pf
O45 - LFCP:[MD5.C1E0943963CE13B45E0ACBE30B2424A6] - 08/09/2013 - 09:15:12 ---A- - C:\WINDOWS\Prefetch\LA_MARMITE_DU_CHEF_6.6.33.EXE-02307F02.pf
O45 - LFCP:[MD5.34BB69350ABB67BFE786A656A62FEA58] - 08/09/2013 - 09:15:12 ---A- - C:\WINDOWS\Prefetch\LA_MARMITE_DU_CHEF_6.6.33.TMP-1FD0CD89.pf
O45 - LFCP:[MD5.EC1B577126FCED899398FC9A5C0A5478] - 08/09/2013 - 09:28:39 ---A- - C:\WINDOWS\Prefetch\TELECHARGEUR.EXE-11B2E3F7.pf
O45 - LFCP:[MD5.557AA6D71124034061AF26E1DB4DFE6A] - 08/09/2013 - 09:28:58 ---A- - C:\WINDOWS\Prefetch\ACRORD32.EXE-36E8F12E.pf
O45 - LFCP:[MD5.945B64F778CDFD298E286C0B3C1BDC55] - 08/09/2013 - 09:29:33 ---A- - C:\WINDOWS\Prefetch\ADOBEARM.EXE-2D5CF26D.pf
O45 - LFCP:[MD5.3506FC9BF532DB7B50EDC5CE4629C7EB] - 08/09/2013 - 10:11:57 ---A- - C:\WINDOWS\Prefetch\LA MARMITE DU CHEF.EXE-0662FC93.pf
O45 - LFCP:[MD5.8FB80020B513DF9259DA6422D362782E] - 08/09/2013 - 13:33:26 ---A- - C:\WINDOWS\Prefetch\Layout.ini
O45 - LFCP:[MD5.0C21F0DCF8D78E60D560533F8C7B404F] - 08/09/2013 - 13:33:37 ---A- - C:\WINDOWS\Prefetch\DEFRAG.EXE-2858C7E2.pf
O45 - LFCP:[MD5.83E0930CE29FEA4B60A2AAA9B3098BF2] - 08/09/2013 - 13:33:37 ---A- - C:\WINDOWS\Prefetch\DFRGNTFS.EXE-38C3807C.pf
O45 - LFCP:[MD5.393354E3063511406F2BC2A650C445CB] - 09/09/2013 - 09:55:55 ---A- - C:\WINDOWS\Prefetch\TINTSETP.EXE-2DD83AEF.pf
O45 - LFCP:[MD5.2ED505E4AC8D38D722403FF1FB88EBFA] - 09/09/2013 - 09:56:04 ---A- - C:\WINDOWS\Prefetch\APSDAEMON.EXE-0CA01151.pf
O45 - LFCP:[MD5.E8C038701076E362E50B38DFAA5BC279] - 09/09/2013 - 09:56:05 ---A- - C:\WINDOWS\Prefetch\JUSCHED.EXE-0E6FA1F7.pf
O45 - LFCP:[MD5.08335C3D1EDDAD0447953BCBCF6925D4] - 09/09/2013 - 09:56:05 ---A- - C:\WINDOWS\Prefetch\PCMSERVICE.EXE-2E404631.pf
O45 - LFCP:[MD5.B4C15FB7FF8E68EAC11A5AA5EA8A2F71] - 09/09/2013 - 09:56:05 ---A- - C:\WINDOWS\Prefetch\STDSB.EXE-1877C3F8.pf
O45 - LFCP:[MD5.B4FF468105BFE292BD44278DB97F5658] - 09/09/2013 - 09:56:05 ---A- - C:\WINDOWS\Prefetch\SYNTPLPR.EXE-0340D8DF.pf
O45 - LFCP:[MD5.9C2C026C812720360ECEE89E7AF2FF9D] - 09/09/2013 - 09:56:05 ---A- - C:\WINDOWS\Prefetch\VTTIMER.EXE-23FE10E9.pf
O45 - LFCP:[MD5.548F67FA46964EF66F5FFAE2003110DD] - 09/09/2013 - 09:56:06 ---A- - C:\WINDOWS\Prefetch\SOUNDMAN.EXE-2979F3F4.pf
O45 - LFCP:[MD5.AA592D7EEE75F8AB983242A2933C9DCA] - 09/09/2013 - 09:56:35 ---A- - C:\WINDOWS\Prefetch\AOLACSD.EXE-06AE3336.pf
O45 - LFCP:[MD5.FF7CB316C75708BCC73A793D02C3B303] - 09/09/2013 - 09:56:56 ---A- - C:\WINDOWS\Prefetch\DUMPREP.EXE-0AF2BF67.pf
O45 - LFCP:[MD5.14147710970B0CA1E4237596A08591E0] - 09/09/2013 - 09:57:03 ---A- - C:\WINDOWS\Prefetch\CTFMON.EXE-05E57A5E.pf
O45 - LFCP:[MD5.209816B8CA00B7BA3ABA2C1E58025FC7] - 09/09/2013 - 09:58:02 ---A- - C:\WINDOWS\Prefetch\APPLEMOBILEDEVICESERVICE.EXE-118B1065.pf
O45 - LFCP:[MD5.8189FB6658B250D46917846D255CA1E6] - 09/09/2013 - 09:58:10 ---A- - C:\WINDOWS\Prefetch\BTNTSERVICE.EXE-270D4034.pf
O45 - LFCP:[MD5.0A06769ED5B7C8F276120317BB3BA85A] - 09/09/2013 - 09:58:10 ---A- - C:\WINDOWS\Prefetch\MDNSRESPONDER.EXE-1E0EA707.pf
O45 - LFCP:[MD5.816C94B9E1FC4FF212C3B7F8818C73D5] - 09/09/2013 - 09:58:13 ---A- - C:\WINDOWS\Prefetch\CLCAPSVC.EXE-000F2429.pf
O45 - LFCP:[MD5.7AA9BF87A9368467D19E45D771BDB470] - 09/09/2013 - 09:58:13 ---A- - C:\WINDOWS\Prefetch\CLMLSERVER.EXE-0C33B0A0.pf
O45 - LFCP:[MD5.D372A00F39CBEEFAC2EC6039DF3FEBF9] - 09/09/2013 - 09:58:14 ---A- - C:\WINDOWS\Prefetch\CLMLSERVICE.EXE-345CB2C6.pf
O45 - LFCP:[MD5.8289EB9A7BA4D4CB1465444A3B80D6A4] - 09/09/2013 - 09:58:14 ---A- - C:\WINDOWS\Prefetch\HIDSERVICE.EXE-309D1840.pf
O45 - LFCP:[MD5.BE62E73E78E4E5AADFDC9388AAFE9986] - 09/09/2013 - 09:58:16 ---A- - C:\WINDOWS\Prefetch\JQS.EXE-179F98AB.pf
O45 - LFCP:[MD5.88C42C309E2F01B37C53272D1AFBB3FD] - 09/09/2013 - 09:58:16 ---A- - C:\WINDOWS\Prefetch\SLMDMSR.EXE-0FEE4399.pf
O45 - LFCP:[MD5.002B60A3ADD1E79F46CF06232A28250B] - 09/09/2013 - 09:58:21 ---A- - C:\WINDOWS\Prefetch\CLSCHED.EXE-27BD3927.pf
O45 - LFCP:[MD5.756B9A3346C5146A207821DA7C2CBE5F] - 09/09/2013 - 20:55:18 ---A- - C:\WINDOWS\Prefetch\PHOTOFILTRE.EXE-2E6C8CE5.pf
O45 - LFCP:[MD5.28543F84D5EE5226A2C72446F6FE6F75] - 09/09/2013 - 21:49:58 ---A- - C:\WINDOWS\Prefetch\WORDPAD.EXE-32191081.pf
O45 - LFCP:[MD5.3DBFA27DD74E1007F4EC43B500D32165] - 09/09/2013 - 22:47:22 ---A- - C:\WINDOWS\Prefetch\JAVAWS.EXE-24608AEB.pf
O45 - LFCP:[MD5.CCF9C4B6B8B3E11CF49770F1FA24A6A5] - 09/09/2013 - 22:47:25 ---A- - C:\WINDOWS\Prefetch\JAVAW.EXE-0D86ABB1.pf
O45 - LFCP:[MD5.70D17C2D42534F1B1C52F0CFD4715597] - 10/09/2013 - 19:50:48 ---A- - C:\WINDOWS\Prefetch\AVCENTER.EXE-0EE40991.pf
O45 - LFCP:[MD5.04DF8BBAD1724DDA75876BE43991DBE0] - 10/09/2013 - 19:51:11 ---A- - C:\WINDOWS\Prefetch\AVCONFIG.EXE-1317619E.pf
O45 - LFCP:[MD5.096F05CB0BD6000CE3073F3FDB7C2217] - 10/09/2013 - 19:51:33 ---A- - C:\WINDOWS\Prefetch\UPDRGUI.EXE-17050BF1.pf
O45 - LFCP:[MD5.DF18444CFDC4D19DD179D81EC80CBF31] - 10/09/2013 - 19:52:11 ---A- - C:\WINDOWS\Prefetch\AVNOTIFY.EXE-05C5A637.pf
O45 - LFCP:[MD5.AD011D80342FFEEC2D935B448416CE6E] - 10/09/2013 - 19:52:37 ---A- - C:\WINDOWS\Prefetch\UPDRGUI.EXE-330281D0.pf
O45 - LFCP:[MD5.008112EFD7B2CC379BB5A2470D7F635B] - 10/09/2013 - 19:53:16 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-045A6A2F.pf
O45 - LFCP:[MD5.2623D2EA0323F657E5D63493237FB211] - 10/09/2013 - 19:53:21 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-27468884.pf
O45 - LFCP:[MD5.BAB95D12F3250422BC2AF6246A8FB903] - 10/09/2013 - 19:53:50 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-2BB0CC5B.pf
O45 - LFCP:[MD5.45356441E5D69E83AEF1262CB3731E94] - 10/09/2013 - 19:55:25 ---A- - C:\WINDOWS\Prefetch\AVGUARD.EXE-2E16276B.pf
O45 - LFCP:[MD5.91F91EB3062B73DE08925146F7872DD5] - 10/09/2013 - 19:55:28 ---A- - C:\WINDOWS\Prefetch\SCHED.EXE-058E7628.pf
O45 - LFCP:[MD5.8291205F0636941413C932F280E1A5F1] - 10/09/2013 - 19:56:10 ---A- - C:\WINDOWS\Prefetch\AVGNT.EXE-24287AD0.pf
O45 - LFCP:[MD5.EFCFA0132F513B7C25E85166D8FC41C2] - 10/09/2013 - 19:56:18 ---A- - C:\WINDOWS\Prefetch\SETUP.EXE-163BD5FE.pf
O45 - LFCP:[MD5.9952B39DE616FDDD2AA0225CCF1D0CBE] - 10/09/2013 - 19:56:22 ---A- - C:\WINDOWS\Prefetch\REGSVR32.EXE-396DEA2C.pf
O45 - LFCP:[MD5.0C76F92698955DF1E2D4318F0E3A2DDC] - 10/09/2013 - 19:59:23 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-2F5EF2F5.pf
O45 - LFCP:[MD5.8B45F6C25B10461D0D9352E18ACED24F] - 10/09/2013 - 20:42:08 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-0BBDABA2.pf
O45 - LFCP:[MD5.5E3E8CAFF865D056E5EB3F36432C6617] - 10/09/2013 - 21:17:59 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-63349F46.pf
O45 - LFCP:[MD5.6A4604034D5A980DB3F37372E06D5BD6] - 10/09/2013 - 22:35:31 ---A- - C:\WINDOWS\Prefetch\LOGONUI.EXE-312BE1BF.pf
O45 - LFCP:[MD5.738B29585D6AE95419AF261B6058DC50] - 10/09/2013 - 22:36:55 ---A- - C:\WINDOWS\Prefetch\MRTSTUB.EXE-223CBFDC.pf
O45 - LFCP:[MD5.75BC42A0D1B1F2AE0BCB09F46975C1BC] - 10/09/2013 - 22:36:56 ---A- - C:\WINDOWS\Prefetch\WINDOWS-KB890830-V5.4-DELTA.E-283AF510.pf
O45 - LFCP:[MD5.7B984074895AC9D44701238E8AFD785D] - 10/09/2013 - 22:37:27 ---A- - C:\WINDOWS\Prefetch\MRT.EXE-161A5291.pf
O45 - LFCP:[MD5.87A632DBBA01B953A880EFF080D6C945] - 11/09/2013 - 20:08:55 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.22192B233F5C7D1BEC3848EA7E890AC4] - 11/09/2013 - 20:10:18 ---A- - C:\WINDOWS\Prefetch\IPMGUI.EXE-17BA912C.pf
O45 - LFCP:[MD5.480A3D62F10F889ABDC969FDD25F4168] - 11/09/2013 - 20:10:58 ---A- - C:\WINDOWS\Prefetch\AVSHADOW.EXE-03B4314F.pf
O45 - LFCP:[MD5.826578B26570EBAF7B73556E0F117C0E] - 11/09/2013 - 20:12:01 ---A- - C:\WINDOWS\Prefetch\WMIAPSRV.EXE-02740A4B.pf
O45 - LFCP:[MD5.F10E035F6DBF7D28080F1CFAE8D42865] - 11/09/2013 - 20:12:35 ---A- - C:\WINDOWS\Prefetch\ALG.EXE-275708CF.pf
O45 - LFCP:[MD5.A52249E41BC66A48220D7B1F3E5FC62F] - 11/09/2013 - 20:12:53 ---A- - C:\WINDOWS\Prefetch\JAVA.EXE-32E5B189.pf
O45 - LFCP:[MD5.78E0435490B2E286C324AC986673ABD0] - 11/09/2013 - 20:12:55 ---A- - C:\WINDOWS\Prefetch\JUCHECK.EXE-38C83F9E.pf
O45 - LFCP:[MD5.81C1E440BFE23BF918F09A74EF3303B1] - 11/09/2013 - 20:18:55 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-048CFB07.pf
O45 - LFCP:[MD5.15F9FC0B5ED4A2363BE849343B9A9CCB] - 11/09/2013 - 20:18:59 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-2D5FBD18.pf
O45 - LFCP:[MD5.73EBB8D02778F3DD38D34A3367876587] - 11/09/2013 - 20:19:27 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-3234F1FB.pf
O45 - LFCP:[MD5.55DE4F9D886C10FA5B934FAFD9219C9F] - 11/09/2013 - 20:20:29 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-1AF5183B.pf
O45 - LFCP:[MD5.E620D7D94E6BF46F536E18CD647C071A] - 11/09/2013 - 21:02:05 ---A- - C:\WINDOWS\Prefetch\GOOGLECRASHHANDLER.EXE-3699344D.pf
O45 - LFCP:[MD5.6EA4DEDE97F0D46D447F9BC1310FB471] - 11/09/2013 - 21:02:09 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-36DBB3B2.pf
O45 - LFCP:[MD5.5A88DBAF3B29E492D4863E6A8020F9D9] - 11/09/2013 - 21:11:42 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-1360D60A.pf
O45 - LFCP:[MD5.D76D0D43DD190E4BCA3C48C44F1DCF37] - 11/09/2013 - 21:12:17 ---A- - C:\WINDOWS\Prefetch\TASKMGR.EXE-06144C13.pf
O45 - LFCP:[MD5.69C536A9B6772439C3D0262472476FB6] - 11/09/2013 - 21:13:00 ---A- - C:\WINDOWS\Prefetch\SOFTWAREUPDATE.EXE-2B19A56C.pf
O45 - LFCP:[MD5.CD8B8ECA461EC46982C9B6D866D93D2A] - 11/09/2013 - 21:14:42 ---A- - C:\WINDOWS\Prefetch\CCLEANER.EXE-09CFC2BC.pf =>Piriform Ltd
O45 - LFCP:[MD5.039313D564F2500459188C180B845798] - 11/09/2013 - 21:15:00 ---A- - C:\WINDOWS\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-07D84788.pf
O45 - LFCP:[MD5.BBD90F4A7FFE7A4C938C266E9070A0FF] - 11/09/2013 - 21:17:23 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3DE4948B.pf
O45 - LFCP:[MD5.C7E8EDE00A4DDACC96BAD9FF44AD8AB1] - 11/09/2013 - 21:17:24 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-0D449B4F.pf
O45 - LFCP:[MD5.A36341929FDE70C953041F2D5562B7C0] - 11/09/2013 - 21:39:28 ---A- - C:\WINDOWS\Prefetch\DWWIN.EXE-2C373FB7.pf
O45 - LFCP:[MD5.F746F076883FD44311862B8B0AC16B40] - 11/09/2013 - 21:39:30 ---A- - C:\WINDOWS\Prefetch\DRWTSN32.EXE-01DDCF15.pf
O45 - LFCP:[MD5.F54D2AB552D458F252C51C006D667548] - 11/09/2013 - 21:39:44 ---A- - C:\WINDOWS\Prefetch\EXPLORER.EXE-02121B1A.pf
O45 - LFCP:[MD5.E5C0C799722FD9F2CBF388C1DE647D3A] - 11/09/2013 - 21:40:04 ---A- - C:\WINDOWS\Prefetch\IMAPI.EXE-201490BB.pf
O45 - LFCP:[MD5.BC812B17F3377AC8CA09AC7E5F88CB18] - 11/09/2013 - 21:45:22 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-5A541C8A.pf
O45 - LFCP:[MD5.E5C836D32C4531A77689613DA24B67B5] - 11/09/2013 - 21:49:00 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-28F52AD2.pf
O45 - LFCP:[MD5.7D923D80A9B609CA1791C0341C5C2FCD] - 11/09/2013 - 21:49:29 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.EXE-0951AFAB.pf
O45 - LFCP:[MD5.D6486A8658CF854EAFEB8D331F9843BF] - 11/09/2013 - 21:49:31 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.TMP-1C6E2A18.pf
O45 - LFCP:[MD5.4F7562326EF0E02ADDC6DD6CBF8E1262] - 11/09/2013 - 21:50:43 ---A- - C:\WINDOWS\Prefetch\ZHPHEP.EXE-32DE1B7A.pf
O45 - LFCP:[MD5.391A2A7ACB059AB4738FFBD256536402] - 11/09/2013 - 21:50:53 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-25C13877.pf
O45 - LFCP:[MD5.5EDEEC44EE3BC3CC22AC687C0201F09E] - 11/09/2013 - 21:51:59 ---A- - C:\WINDOWS\Prefetch\PV.EXE-0596A56A.pf
O45 - LFCP:[MD5.0340EB5DDF2D72E97321522502DDF90B] - 11/09/2013 - 21:52:24 ---A- - C:\WINDOWS\Prefetch\AVWSC.EXE-06733DFE.pf
O45 - LFCP:[MD5.3A682CA60EE05F8578C3F1C27451D0FF] - 11/09/2013 - 21:53:03 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-034B0549.pf
O45 - LFCP:[MD5.9EC92149DD43388F82FAF5AEFC954F51] - 11/09/2013 - 21:53:04 ---A- - C:\WINDOWS\Prefetch\SUBINACL.EXE-041720E4.pf
O45 - LFCP:[MD5.9CD0D85723D10B775B7BB0F809276086] - 27/08/2013 - 16:09:35 ---A- - C:\WINDOWS\Prefetch\SERVICELAYER.EXE-22AC9C38.pf
O45 - LFCP:[MD5.A63478E445D71021EC29F6E4B13F3692] - 27/08/2013 - 16:09:37 ---A- - C:\WINDOWS\Prefetch\NCLUSBSRV.EXE-024DE181.pf
O45 - LFCP:[MD5.6E3BE61A76E1E23215673D2AF4EDB202] - 27/08/2013 - 16:09:39 ---A- - C:\WINDOWS\Prefetch\NCLRSSRV.EXE-37205233.pf
O45 - LFCP:[MD5.E5B0CF8EDC517886A009EE75ABA6613B] - 27/08/2013 - 16:09:42 ---A- - C:\WINDOWS\Prefetch\NCLINSTALLER.EXE-173ECC9D.pf
~ Prefetcher: 108 Scanned in 00mn 03s
---\\ Op�rations et fonctions au d�marrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
~ ShellExecuteHooks: Scanned in 00mn 00s
---\\ Export de cl� d'application autoris�e (O47)
O47 - AAKE:Key Export SP - "%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe" [Enabled] .(...) -- C:\Program Files\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe (.not file.)
O47 - AAKE:Key Export SP - "%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe" [Enabled] .(...) -- C:\Program Files\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe (.not file.)
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\APPS\Inventime\my.exe" [Enabled] .(.Inventime.) -- C:\APPS\Inventime\my.exe
O47 - AAKE:Key Export SP - "C:\APPS\skype\Plugin Manager\skypePM.exe" [Enabled] .(...) -- C:\APPS\skype\Plugin Manager\skypePM.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe" [Enabled] .(.IVT Corporation.) -- C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
O47 - AAKE:Key Export SP - "C:\Documents and Settings\Olgicka\Mes documents\Downloads\BlueSoleil_6.2.227.11___Crack\BlueSoleil 6.2.227.11 + Crack\Crack\BlueSoleilCS.exe" [Enabled] .(...) -- C:\Documents and Settings\Olgicka\Mes documents\Downloads\BlueSoleil_6.2.227.11___Crack\BlueSoleil 6.2.227.11 + Crack\Crack\BlueSoleilCS.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\Spotify\spotify.exe" [Enabled] .(...) -- C:\Program Files\Spotify\spotify.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\Internet Explorer\iexplore.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Safari\Safari.exe" [Enabled] .(.Apple Inc..) -- C:\Program Files\Safari\Safari.exe
O47 - AAKE:Key Export SP - "C:\Program Files\AOL 9.0\aol.exe" [Disabled] .(.America Online, Inc..) -- C:\Program Files\AOL 9.0\aol.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe" [Enabled] .(...) -- C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe" [Enabled] .(...) -- C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe" [Enabled] .(...) -- C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\BitComet\BitComet.exe" [Enabled] .(.www.BitComet.com.) -- C:\Program Files\BitComet\BitComet.exe =>P2P.BitComet
O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Apple Inc..) -- C:\Program Files\Bonjour\mDNSResponder.exe
O47 - AAKE:Key Export SP - "D:\fscommand\CKSocketServer.exe" [Enabled] .(...) -- D:\fscommand\CKSocketServer.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Documents and Settings\Olgicka\Application Data\Spotify\spotify.exe" [Enabled] .(...) -- C:\Documents and Settings\Olgicka\Application Data\Spotify\spotify.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Documents and Settings\Olgicka\P-7-78-8964-9648-3874\windll.exe" [Enabled] Cl� orpheline
O47 - AAKE:Key Export SP - "c:\windows\iqs.exe" [Enabled] .(...) -- c:\windows\iqs.exe (.not file.)
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Steam\Steam.exe" [Enabled] .(...) -- C:\Program Files\Steam\Steam.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\Steam\SteamApps\common\Football Manager 2013 Demo\fm.exe" [Enabled] .(.Sports Interactive.) -- C:\Program Files\Steam\SteamApps\common\Football Manager 2013 Demo\fm.exe
O47 - AAKE:Key Export SP - "C:\Program Files\steam new\Steam.exe" [Enabled] .(...) -- C:\Program Files\steam new\Steam.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\Fichiers communs\Apple\Apple Application Support\WebKit2WebProcess.exe" [Enabled] .(.Apple Inc..) -- C:\Program Files\Fichiers communs\Apple\Apple Application Support\WebKit2WebProcess.exe
O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Inc..) -- C:\Program Files\iTunes\iTunes.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
~ Keys Export: 31 Scanned in 00mn 02s
---\\ D�ni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'�diteur de configuration de s�curit� Windows.) -- C:\WINDOWS\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll
~ LSA: 6 Scanned in 00mn 00s
---\\ Contr�le du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de d�marrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de syst�me de fichiers pour la restauration du syst�me.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de d�marrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de syst�me de fichiers pour la restauration du syst�me.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
~ CSB: 21 Scanned in 00mn 00s
---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ IFEO: Scanned in 00mn 00s
---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak� Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo� Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo� audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo� video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo� audio software" . (.Intel Corporation - Indeo� audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
~ TDSD: 12 Scanned in 00mn 00s
---\\ Enum�ration des cl�s de registre StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\Akamai NetSession Interface [Key] . (.Akamai Technologies, Inc - Akamai NetSession Client.) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Akamai\netsession_win.exe
O53 - SMSR:HKLM\...\startupreg\Google Update [Key] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
O53 - SMSR:HKLM\...\startupreg\iTunesHelper [Key] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O53 - SMSR:HKLM\...\startupreg\PCSuiteTrayApplication [Key] . (.Nokia - PC Suite.) -- C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
~ SMSR Keys: 5 Scanned in 00mn 00s
---\\ Enum�ration des cl�s de registre SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
~ MSCP: 6 Scanned in 00mn 00s
---\\ Enum�ration des cl�s de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
~ MWPS: 5 Scanned in 00mn 00s
---\\ Enum�ration des cl�s de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1
~ MWPE Keys: 2 Scanned in 00mn 00s
---\\ Liste des pilotes du syst�me (SDL) (O58)
O58 - SDL:[MD5.92AE420BE14B0D97D14DAC4ABA22A702] - 19/08/2005 - 16:31:52 R--A- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\system32\Drivers\ALCXWDM.SYS [3644800]
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]
~ Drivers: 5 Scanned in 00mn 00s
---\\ Derniers fichiers modifi�s ou cr�es (Utilisateur) (O61)
O61 - LFC: 08/09/2013 - 05:39:34 -S-A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6 [108780]
O61 - LFC: 08/09/2013 - 05:39:34 -S-A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6 [124]
O61 - LFC: 08/09/2013 - 09:10:21 ---A- . (...) -- C:\Documents and Settings\Olgicka\Mes documents\Downloads\La_Marmite_du_Chef_6.6.33.exe [5816666]
O61 - LFC: 08/09/2013 - 09:19:21 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Bookmarks.bak [12074]
O61 - LFC: 08/09/2013 - 09:25:20 -SHA- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Temp\Cookies\index.dat [16384]
O61 - LFC: 08/09/2013 - 09:25:20 -SHA- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat [32768]
O61 - LFC: 08/09/2013 - 09:25:20 -SHA- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Temp\History\History.IE5\index.dat [16384]
O61 - LFC: 08/09/2013 - 09:25:34 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl [898]
O61 - LFC: 08/09/2013 - 09:25:34 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl [37213]
O61 - LFC: 08/09/2013 - 09:27:27 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Adobe\Acrobat\10.0\Cache\RdLang_weblink.FRA [45056]
O61 - LFC: 08/09/2013 - 09:28:18 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Adobe\Acrobat\10.0\JSCache\GlobSettings [24]
O61 - LFC: 08/09/2013 - 09:29:01 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Adobe\Acrobat\10.0\ReaderMessages [26624]
O61 - LFC: 08/09/2013 - 09:34:48 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Adobe\Acrobat\10.0\Cache\RdLang_Accessibility.FRA [76800]
O61 - LFC: 08/09/2013 - 09:34:54 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Adobe\Acrobat\10.0\Cache\Search\7173786daa3e307a87d65c72d5a86aa0.idx [77879]
O61 - LFC: 08/09/2013 - 09:34:58 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Adobe\Acrobat\10.0\SharedDataEvents [3072]
O61 - LFC: 08/09/2013 - 10:08:55 ---A- . (...) -- C:\Documents and Settings\Olgicka\Recent\Abricot � la cannelle.lnk [1015]
O61 - LFC: 08/09/2013 - 10:08:55 ---A- . (...) -- C:\Documents and Settings\Olgicka\Recent\Photos.lnk [733]
O61 - LFC: 08/09/2013 - 10:29:15 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_fr.wikipedia.org_0.localstorage [3072]
O61 - LFC: 08/09/2013 - 10:29:15 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_fr.wikipedia.org_0.localstorage-journal [3608]
O61 - LFC: 08/09/2013 - 10:35:28 ---A- . (...) -- C:\Documents and Settings\Olgicka\Recent\Abricots en macaron, coulis de framboises.lnk [839]
O61 - LFC: 08/09/2013 - 10:43:26 ---A- . (...) -- C:\Documents and Settings\Olgicka\Recent\Abricots grill�s.lnk [714]
O61 - LFC: 08/09/2013 - 22:32:07 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Macromedia\Flash Player\#SharedObjects\E8FPXJX7\p1.soundcloud.com\player.swf\SCPlayer.sol [74]
O61 - LFC: 08/09/2013 - 22:32:07 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#p1.soundcloud.com\settings.sol [87]
O61 - LFC: 08/09/2013 - 22:32:09 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Macromedia\Flash Player\#SharedObjects\E8FPXJX7\p1.soundcloud.com\analytics.sol [471]
O61 - LFC: 08/09/2013 - 22:32:09 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol [4727]
O61 - LFC: 08/09/2013 - 22:32:09 -S-A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Microsoft\CryptnetUrlCache\Content\B9A3F1A60EBE132522EEAA983C8CFC25 [1118]
O61 - LFC: 08/09/2013 - 22:32:09 -S-A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Microsoft\CryptnetUrlCache\MetaData\B9A3F1A60EBE132522EEAA983C8CFC25 [136]
O61 - LFC: 09/09/2013 - 20:19:11 -SHA- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Historique\History.IE5\MSHist012013090220130909\index.dat [32768]
O61 - LFC: 09/09/2013 - 20:19:11 -SHA- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Historique\History.IE5\MSHist012013090920130910\index.dat [32768]
O61 - LFC: 09/09/2013 - 21:35:23 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.premiere.fr_0.localstorage [55296]
O61 - LFC: 09/09/2013 - 21:35:23 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.premiere.fr_0.localstorage-journal [16384]
O61 - LFC: 09/09/2013 - 21:35:24 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Macromedia\Flash Player\#SharedObjects\E8FPXJX7\broadcast.piximedia.fr\footerJS\v3\lib\so.swf\PmUI.sol [56]
O61 - LFC: 09/09/2013 - 21:56:31 -SHA- . (...) -- C:\Documents and Settings\Olgicka\Mes documents\Downloads\Thumbs.db [2332160]
O61 - LFC: 09/09/2013 - 22:22:58 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.saveursdenfants.com_0.localstorage [8192]
O61 - LFC: 09/09/2013 - 22:22:58 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.saveursdenfants.com_0.localstorage-journal [6704]
O61 - LFC: 09/09/2013 - 22:47:39 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-2a2f75ac.idx [463]
O61 - LFC: 09/09/2013 - 22:51:59 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Media Cache\index [524656]
O61 - LFC: 09/09/2013 - 22:59:51 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.pagesjaunes.fr_0.localstorage [3072]
O61 - LFC: 09/09/2013 - 22:59:51 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.pagesjaunes.fr_0.localstorage-journal [3608]
O61 - LFC: 09/09/2013 - 23:19:44 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Media Cache\data_2 [1056768]
O61 - LFC: 09/09/2013 - 23:19:45 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Media Cache\data_3 [4202496]
O61 - LFC: 10/09/2013 - 19:52:05 -SHA- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Historique\History.IE5\MSHist012013091020130911\index.dat [32768]
O61 - LFC: 10/09/2013 - 20:18:40 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Certificate Revocation Lists [260705]
O61 - LFC: 10/09/2013 - 20:18:40 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Temp\CRX_75DAF8CB7768\crl-set [1320]
O61 - LFC: 10/09/2013 - 20:18:40 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Temp\CRX_75DAF8CB7768\manifest.fingerprint [12]
O61 - LFC: 10/09/2013 - 20:18:40 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Temp\CRX_75DAF8CB7768\manifest.json [34]
O61 - LFC: 10/09/2013 - 20:45:13 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Temp\192222bc-24ca-4249-ab77-2f8645950583.dmp [0]
O61 - LFC: 10/09/2013 - 20:45:27 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Temp\1dbd_appcompat.txt [107880]
O61 - LFC: 10/09/2013 - 20:45:40 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Temp\a0b2d3fe-7039-4c4e-b062-6be94ccfeb7d.dmp [0]
O61 - LFC: 10/09/2013 - 20:46:13 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\LOG.old [151]
O61 - LFC: 10/09/2013 - 20:59:36 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.promod.fr_0.localstorage [9216]
O61 - LFC: 10/09/2013 - 20:59:37 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.promod.fr_0.localstorage-journal [9800]
O61 - LFC: 10/09/2013 - 21:12:43 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cfiles.5min.com\settings.sol [85]
O61 - LFC: 10/09/2013 - 21:12:44 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Macromedia\Flash Player\#SharedObjects\E8FPXJX7\cfiles.5min.com\5minSessionTracker_tracara.com.sol [110]
O61 - LFC: 10/09/2013 - 21:12:44 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Macromedia\Flash Player\#SharedObjects\E8FPXJX7\cfiles.5min.com\Storage5minCookie.sol [62]
O61 - LFC: 10/09/2013 - 21:17:52 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Macromedia\Flash Player\#SharedObjects\E8FPXJX7\cfiles.5min.com\analytics.sol [435]
O61 - LFC: 10/09/2013 - 21:37:33 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.lastfm.fr_0.localstorage [31744]
O61 - LFC: 10/09/2013 - 21:37:34 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.lastfm.fr_0.localstorage-journal [16384]
O61 - LFC: 10/09/2013 - 22:32:46 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\GPUCache\data_1 [270336]
O61 - LFC: 10/09/2013 - 22:32:46 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Last Tabs [838329]
O61 - LFC: 10/09/2013 - 22:34:21 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Media Cache\data_0 [45056]
O61 - LFC: 10/09/2013 - 22:34:22 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Media Cache\data_1 [270336]
O61 - LFC: 11/09/2013 - 20:06:49 -SHA- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1336461411-1099706933-734051183-1006\Credentials [2754]
O61 - LFC: 11/09/2013 - 20:12:54 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Temp\au-descriptor-1.7.0_40-b43.xml [8891]
O61 - LFC: 11/09/2013 - 20:13:24 -S-A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Microsoft\CryptnetUrlCache\Content\398EE64D66758B5715368AA94044B13A [1579]
O61 - LFC: 11/09/2013 - 20:13:24 -S-A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Microsoft\CryptnetUrlCache\MetaData\398EE64D66758B5715368AA94044B13A [110]
O61 - LFC: 11/09/2013 - 20:16:02 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\LOG.old [277]
O61 - LFC: 11/09/2013 - 20:19:17 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\LOG.old [145]
O61 - LFC: 11/09/2013 - 20:19:17 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Last Session [459]
O61 - LFC: 11/09/2013 - 20:19:21 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\CURRENT [16]
O61 - LFC: 11/09/2013 - 20:19:21 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000117 [237]
O61 - LFC: 11/09/2013 - 20:19:24 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Rules\LOG [145]
O61 - LFC: 11/09/2013 - 20:19:30 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Managed Mode Settings [8]
O61 - LFC: 11/09/2013 - 20:19:31 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\CURRENT [16]
O61 - LFC: 11/09/2013 - 20:19:31 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\MANIFEST-002160 [614]
O61 - LFC: 11/09/2013 - 20:19:32 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\LOG [148]
O61 - LFC: 11/09/2013 - 20:19:51 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\CURRENT [16]
O61 - LFC: 11/09/2013 - 20:19:51 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\MANIFEST-004090 [375]
O61 - LFC: 11/09/2013 - 20:19:54 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\LOG [274]
O61 - LFC: 11/09/2013 - 20:21:58 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\History Index 2013-08 [5427200]
O61 - LFC: 11/09/2013 - 20:21:58 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\History Index 2013-08-journal [16384]
O61 - LFC: 11/09/2013 - 20:26:22 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\PepperFlash\11.8.800.170\manifest.fingerprint [14]
O61 - LFC: 11/09/2013 - 20:26:22 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\PepperFlash\11.8.800.170\manifest.json [2054]
O61 - LFC: 11/09/2013 - 20:26:22 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\PepperFlash\11.8.800.170\pepflashplayer.dll [13612424]
O61 - LFC: 11/09/2013 - 20:39:19 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Macromedia\Flash Player\#SharedObjects\E8FPXJX7\aka.weightwatchers.fr\flash\1036\PlanManager.swf\ww_flex_config.sol [303]
O61 - LFC: 11/09/2013 - 21:09:57 ---A- . (...) -- C:\Documents and Settings\Olgicka\Recent\Oeuf et blancs de poireau-pomme de terre.lnk [834]
O61 - LFC: 11/09/2013 - 21:10:10 -SHA- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Historique\History.IE5\MSHist012013091120130912\index.dat [32768]
O61 - LFC: 11/09/2013 - 21:16:42 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Top Sites [851968]
O61 - LFC: 11/09/2013 - 21:16:42 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Top Sites-journal [16384]
O61 - LFC: 11/09/2013 - 21:19:23 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Bookmarks [12087]
O61 - LFC: 11/09/2013 - 21:21:28 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Shortcuts [110592]
O61 - LFC: 11/09/2013 - 21:21:28 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Shortcuts-journal [16384]
O61 - LFC: 11/09/2013 - 21:21:29 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Network Action Predictor [79872]
O61 - LFC: 11/09/2013 - 21:21:29 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Network Action Predictor-journal [16384]
O61 - LFC: 11/09/2013 - 21:24:18 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Download [738664]
O61 - LFC: 11/09/2013 - 21:24:29 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Bloom [9432232]
O61 - LFC: 11/09/2013 - 21:24:31 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set [1809882]
O61 - LFC: 11/09/2013 - 21:24:32 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Csd Whitelist [135184]
O61 - LFC: 11/09/2013 - 21:24:32 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Download Whitelist [18956]
O61 - LFC: 11/09/2013 - 21:24:32 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Extension Blacklist [6292]
O61 - LFC: 11/09/2013 - 21:36:27 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data [473088]
O61 - LFC: 11/09/2013 - 21:36:27 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data-journal [16384]
O61 - LFC: 11/09/2013 - 21:39:10 ---A- . (...) -- C:\Documents and Settings\Olgicka\Recent\Douceur de l�gumes et jambon � la ciboulette.lnk [854]
O61 - LFC: 11/09/2013 - 21:39:12 ---A- . (...) -- C:\Documents and Settings\Olgicka\Recent\Downloads.lnk [443]
O61 - LFC: 11/09/2013 - 21:42:30 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Adobe\Flash Player\AssetCache\ANSRMSMB\077BA3FD3A24318B67B13F8297375C8DF03582D8.heu [85]
O61 - LFC: 11/09/2013 - 21:42:31 ---A- . (...) -- C:\Documents and Settings\Olgicka\Application Data\Adobe\Flash Player\AssetCache\ANSRMSMB\EF21D328F13A0A156DE2E31C0CACFD8A7ABAA26C.heu [85]
O61 - LFC: 11/09/2013 - 21:47:40 ---A- . (.Nicolas Coolman.) -- C:\Documents and Settings\Olgicka\Mes documents\Downloads\ZHPDiag2.exe [5139948]
O61 - LFC: 11/09/2013 - 21:47:50 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\TransportSecurity [2857]
O61 - LFC: 11/09/2013 - 21:48:00 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Cookies [6144]
O61 - LFC: 11/09/2013 - 21:48:00 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Cookies-journal [4640]
O61 - LFC: 11/09/2013 - 21:48:16 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Favicons [12384256]
O61 - LFC: 11/09/2013 - 21:48:16 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Favicons-journal [16384]
O61 - LFC: 11/09/2013 - 21:50:42 -SHA- . (...) -- C:\Documents and Settings\Olgicka\IETldCache\index.dat [262144]
O61 - LFC: 11/09/2013 - 21:50:43 -SHA- . (...) -- C:\Documents and Settings\Olgicka\Cookies\index.dat [32768]
O61 - LFC: 11/09/2013 - 21:50:43 -SHA- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Historique\History.IE5\index.dat [49152]
O61 - LFC: 11/09/2013 - 21:51:10 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Current Tabs [854294]
O61 - LFC: 11/09/2013 - 21:51:11 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Local State [43977]
O61 - LFC: 11/09/2013 - 21:51:13 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\History Provider Cache [711438]
O61 - LFC: 11/09/2013 - 21:51:14 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\History [1949696]
O61 - LFC: 11/09/2013 - 21:51:14 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\History-journal [16384]
O61 - LFC: 11/09/2013 - 21:51:17 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\History Index 2013-09 [12288000]
O61 - LFC: 11/09/2013 - 21:51:17 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\History Index 2013-09-journal [16384]
O61 - LFC: 11/09/2013 - 21:51:23 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Visited Links [131072]
O61 - LFC: 11/09/2013 - 21:51:24 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Current Session [363748]
O61 - LFC: 11/09/2013 - 21:51:25 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences [171771]
O61 - LFC: 11/09/2013 - 21:51:36 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies [963584]
O61 - LFC: 11/09/2013 - 21:51:37 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies-journal [16384]
O61 - LFC: 11/09/2013 - 21:51:39 ---A- . (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\chrome_shutdown_ms.txt [6]
~ 10 Fichiers temporaires (Temporary files)
~ 2 Fichiers cookies (Cookies files)
~ Files: 128 Scanned in 04mn 31s
---\\ Liste des outils de d�sinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS: Scanned in 00mn 00s
---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\ABP480N5.sys (abp480n5) .(.Microsoft Corporation - AdvanSys SCSI Controller Driver.) - LEGACY_ABP480N5
O64 - Services: CurCS - 17/08/2013 - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (AdobeFlashPlayerUpdateSvc) .(.Adobe Systems Incorporated - Adobe� Flash� Player Update Service 11.7 r7.) - LEGACY_ADOBEFLASHPLAYERUPDATESVC
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\adpu160m.sys (adpu160m) .(.Microsoft Corporation - Adaptec Ultra160 SCSI miniport.) - LEGACY_ADPU160M
O64 - Services: CurCS - 17/08/2011 - C:\WINDOWS\system32\drivers\afd.sys (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\agpCPQ.sys (agpCPQ) .(.Microsoft Corporation - CompatNT AGP Filter.) - LEGACY_AGPCPQ
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\aha154x.sys (Aha154x) .(.Microsoft Corporation - Adaptec AHA-154x series SCSI miniport.) - LEGACY_AHA154X
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\aic78u2.sys (aic78u2) .(.Microsoft Corporation - Adaptec Ultra2 SCSI miniport.) - LEGACY_AIC78U2
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\aic78xx.sys (aic78xx) .(.Microsoft Corporation - Adaptec Ultra SCSI miniport.) - LEGACY_AIC78XX
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Akamai) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AKAMAI
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\alg.exe (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\aliide.sys (AliIde) .(.Acer Laboratories Inc. - ALi mini IDE Driver.) - LEGACY_ALIIDE
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\alim1541.sys (alim1541) .(.Microsoft Corporation - ALi M1541 NT AGP Filter.) - LEGACY_ALIM1541
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\amdagp.sys (amdagp) .(.Advanced Micro Devices, Inc. - AMD Win2000 AGP Filter.) - LEGACY_AMDAGP
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\amsint.sys (amsint) .(.Microsoft Corporation - AMD SCSI/NET Controller.) - LEGACY_AMSINT
O64 - Services: CurCS - 10/09/2013 - C:\Program Files\Avira\AntiVir Desktop\sched.exe (AntiVirSchedulerService) .(.Avira Operations GmbH & Co. KG - Avira Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE
O64 - Services: CurCS - 10/09/2013 - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (AntiVirService) .(.Avira Operations GmbH & Co. KG - Avira On-Access Service.) - LEGACY_ANTIVIRSERVICE
O64 - Services: CurCS - 08/04/2004 - C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe (AOL ACS) .(.America Online, Inc. - AOL Connectivity Service.) - LEGACY_AOL_ACS
O64 - Services: CurCS - 21/12/2012 - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Mobile Device) .(.Apple Inc. - MobileDeviceService.) - LEGACY_APPLE_MOBILE_DEVICE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\asc.sys (asc) .(.Advanced System Products, Inc. - AdvanSys SCSI Controller Driver.) - LEGACY_ASC
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\asc3350p.sys (asc3350p) .(.Microsoft Corporation - AdvanSys SCSI Card Driver.) - LEGACY_ASC3350P
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\asc3550.sys (asc3550) .(.Advanced System Products, Inc. - AdvanSys Ultra-Wide PCI SCSI Driver.) - LEGACY_ASC3550
O64 - Services: CurCS - 30/03/2006 - C:\WINDOWS\system32\Drivers\ASCTRM.sys (ASCTRM) .(.Windows (R) 2000 DDK provider - TR Manager.) - LEGACY_ASCTRM
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV
O64 - Services: CurCS - 10/09/2013 - C:\WINDOWS\system32\DRIVERS\avgntflt.sys (avgntflt) .(.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) - LEGACY_AVGNTFLT
O64 - Services: CurCS - 10/09/2013 - C:\WINDOWS\system32\DRIVERS\avipbb.sys (avipbb) .(.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB
O64 - Services: CurCS - 03/04/2013 - C:\WINDOWS\system32\DRIVERS\avkmgr.sys (avkmgr) .(.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - LEGACY_AVKMGR
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS
O64 - Services: CurCS - 24/12/2004 - Pas de propri�taire (BlueSoleil Hid Service) .(...) - LEGACY_BLUESOLEIL_HID_SERVICE
O64 - Services: CurCS - 30/08/2011 - C:\Program Files\Bonjour\mDNSResponder.exe (Bonjour Service) .(.Apple Inc. - Bonjour Service.) - LEGACY_BONJOUR_SERVICE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Browser) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BROWSER
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\cbidf2k.sys (cbidf) .(.Microsoft Corporation - CardBus/PCMCIA IDE Miniport Driver.) - LEGACY_CBIDF
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys (cd20xrnt) .(.Microsoft Corporation - IBM Portable CD-ROM Drive Miniport.) - LEGACY_CD20XRNT
O64 - Services: CurCS - 11/05/2005 - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe (CLCapSvc) .(.Pas de propri�taire - CLCapSvc Module.) - LEGACY_CLCAPSVC
O64 - Services: CurCS - 25/07/2008 - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32
O64 - Services: CurCS - 11/05/2005 - c:\APPS\Powercinema\Kernel\TV\CLSched.exe (CLSched) .(.Pas de propri�taire - CLSched Module.) - LEGACY_CLSCHED
O64 - Services: CurCS - 23/08/2001 - C:\WINDOWS\system32\DRIVERS\cmdide.sys (CmdIde) .(.CMD Technology, Inc. - Pilote de bus PCI IDE CMD.) - LEGACY_CMDIDE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\dllhost.exe (COMSysApp) .(.Microsoft Corporation - COM Surrogate.) - LEGACY_COMSYSAPP
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\cpqarray.sys (Cpqarray) .(.Microsoft Corporation - Compaq Drive Array Controllers SCSI Minipor.) - LEGACY_CPQARRAY
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC
O64 - Services: CurCS - 11/05/2005 - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe (CyberLink Media Library Service) .(.Cyberlink - NT CLMLServer.) - LEGACY_CYBERLINK_MEDIA_LIBRARY_SERVICE
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (dac2w2k) .(.Mylex Corporation - Mylex Disk Array Controller Driver.) - LEGACY_DAC2W2K
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\dac960nt.sys (dac960nt) .(.Microsoft Corporation - Mylex Disk Array Controller Driver.) - LEGACY_DAC960NT
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de d�marrage du gestionnaire de disq.) - LEGACY_DMBOOT
O64 - Services: CurCS - 05/08/2004 - C:\WINDOWS\system32\drivers\dmload.sys (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\dpti2o.sys (dpti2o) .(.Microsoft Corporation - DPT SmartRAID miniport.) - LEGACY_DPTI2O
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\drivers\fltmgr.sys (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR
O64 - Services: CurCS - 29/07/2008 - c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0
O64 - Services: CurCS - 07/01/2005 - Pas de propri�taire (GenericHidService) .(...) - LEGACY_GENERICHIDSERVICE
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\msgpc.sys (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (HidServ) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HIDSERV
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\hpn.sys (hpn) .(.Microsoft Corporation - NetRAID-4M Miniport Driver.) - LEGACY_HPN
O64 - Services: CurCS - 20/10/2009 - C:\WINDOWS\system32\Drivers\HTTP.sys (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\i2omp.sys (i2omp) .(.Microsoft Corporation - I2O Miniport Driver.) - LEGACY_I2OMP
O64 - Services: CurCS - 29/07/2008 - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (idsvc) .(.Microsoft Corporation - Windows CardSpace.) - LEGACY_IDSVC
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\imapi.exe (ImapiService) .(.Microsoft Corporation - API Image Mastering.) - LEGACY_IMAPISERVICE
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\ini910u.sys (ini910u) .(.Microsoft Corporation - INITIO ini910u SCSI miniport.) - LEGACY_INI910U
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\intelide.sys (IntelIde) .(.Microsoft Corporation - Pilote IDE Intel PCI.) - LEGACY_INTELIDE
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\ipnat.sys (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT
O64 - Services: CurCS - 16/08/2013 - C:\Program Files\iPod\bin\iPodService.exe (iPod Service) .(.Apple Inc. - iPodService Module (32-bit).) - LEGACY_IPOD_SERVICE
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\ipsec.sys (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC
O64 - Services: CurCS - 05/07/2012 - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe (JavaQuickStarterService) .(.Oracle Corporation - Java(TM) Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (lanmanserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANSERVER
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (LanmanWorkstation) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANWORKSTATION
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\Drivers\mountmgr.sys (mountmgr) .(.Microsoft Corporation - Mount Manager.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\mraid35x.sys (mraid35x) .(.American Megatrends Inc. - MegaRAID RAID Controller Driver for Windows.) - LEGACY_MRAID35X
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\mrxdav.sys (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV
O64 - Services: CurCS - 15/07/2011 - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys (MRxSmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\msdtc.exe (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC
O64 - Services: CurCS - 19/05/2008 - C:\WINDOWS\system32\msiexec.exe (MSIServer) .(.Microsoft Corporation - Windows� installer.) - LEGACY_MSISERVER
O64 - Services: CurCS - 21/06/2005 - C:\WINDOWS\system32\DRIVERS\SLDRV\Mtlstrm.sys (Mtlstrm) .(.Pas de propri�taire - Data pump driver.) - LEGACY_MTLSTRM
O64 - Services: CurCS - 21/04/2011 - C:\WINDOWS\system32\Drivers\Mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\Drivers\NDIS.sys (NDIS) .(.Microsoft Corporation - NDIS 5.1 wrapper driver.) - LEGACY_NDIS
O64 - Services: CurCS - 08/07/2011 - C:\WINDOWS\system32\DRIVERS\ndistapi.sys (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\ndisuio.sys (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\netbios.sys (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\netbt.sys (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (NtmsSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NTMSSVC
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\Drivers\PartMgr.sys (PartMgr) .(.Microsoft Corporation - Partition Manager.) - LEGACY_PARTMGR
O64 - Services: CurCS - 01/03/2006 - C:\WINDOWS\system32\PCANDIS5.sys (PCANDIS5) .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) - LEGACY_PCANDIS5
O64 - Services: CurCS - 23/08/2001 - C:\WINDOWS\system32\DRIVERS\pciide.sys (PCIIde) .(.Microsoft Corporation - Pilote de bus g�n�rique PCI IDE.) - LEGACY_PCIIDE
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\perc2.sys (perc2) .(.Microsoft Corporation - PERC 2 Miniport Driver.) - LEGACY_PERC2
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\perc2hib.sys (perc2hib) .(.Microsoft Corporation - PERC 2 Hibernate Driver.) - LEGACY_PERC2HIB
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\lsass.exe (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\lsass.exe (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\ql1080.sys (ql1080) .(.QLogic Corporation - Miniport Driver for QLogic ISP PCI Adapters.) - LEGACY_QL1080
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\ql10wnt.sys (Ql10wnt) .(.Microsoft Corporation - Miniport Driver for QLogic ISP PCI Adapters.) - LEGACY_QL10WNT
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\ql12160.sys (ql12160) .(.QLogic Corporation - Miniport Driver for QLogic ISP PCI Adapters.) - LEGACY_QL12160
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\ql1240.sys (ql1240) .(.Microsoft Corporation - QLogic ISP PCI Adapters.) - LEGACY_QL1240
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\ql1280.sys (ql1280) .(.QLogic Corporation - Miniport Driver for QLogic ISP PCI Adapters.) - LEGACY_QL1280
O64 - Services: CurCS - 05/08/2004 - C:\WINDOWS\system32\DRIVERS\rasacd.sys (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (RasAuto) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASAUTO
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\rdbss.sys (Rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS
O64 - Services: CurCS - 05/08/2004 - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - 10/05/2005 - C:\WINDOWS\system32\DRIVERS\SLDRV\RecAgent.sys (RecAgent) .(.Pas de propri�taire - Recorder agent driver.) - LEGACY_RECAGENT
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\lsass.exe (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS
O64 - Services: CurCS - 08/09/2008 - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (ServiceLayer) .(.Nokia. - ServiceLayer Module.) - LEGACY_SERVICELAYER
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION
O64 - Services: CurCS - 10/05/2005 - C:\WINDOWS\system32\DRIVERS\SLDRV\Slnthal.sys (SlNtHal) .(.Pas de propri�taire - HAL driver.) - LEGACY_SLNTHAL
O64 - Services: CurCS - 10/05/2005 - C:\WINDOWS\system32\slmdmsr.exe (SLService) .(.Pas de propri�taire - User-Level Modem Service.) - LEGACY_SLSERVICE
O64 - Services: CurCS - 10/05/2005 - C:\WINDOWS\system32\DRIVERS\SLDRV\SlWdmSup.sys (SlWdmSup) .(.Pas de propri�taire - SlWdmSup driver.) - LEGACY_SLWDMSUP
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\sparrow.sys (Sparrow) .(.Adaptec, Inc. - Adaptec AIC-6x60 series SCSI miniport.) - LEGACY_SPARROW
O64 - Services: CurCS - 17/08/2010 - C:\WINDOWS\system32\spoolsv.exe (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\sr.sys (sr) .(.Microsoft Corporation - Pilote de filtre de syst�me de fichiers pou.) - LEGACY_SR
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE
O64 - Services: CurCS - 17/02/2011 - C:\WINDOWS\system32\DRIVERS\srv.sys (Srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV
O64 - Services: CurCS - 07/03/2013 - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys (ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV
O64 - Services: CurCS - 21/07/2012 - C:\WINDOWS\system32\STEC3.sys (STEC3) .(.AntiCracking - SVKP driver for NT.) - LEGACY_STEC3
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC
O64 - Services: CurCS - 31/08/2012 - C:\Program Files\Software\Update\SoftwareUpdate.exe (supdate) .(.Boxore OU. - Programme d'installation de Software.) - LEGACY_SUPDATE =>Adware.Boxore
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\dllhost.exe (SwPrv) .(.Microsoft Corporation - COM Surrogate.) - LEGACY_SWPRV
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\symc810.sys (symc810) .(.Symbios Logic Inc. - Symbios Logic Inc. SCSI Miniport Driver.) - LEGACY_SYMC810
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\symc8xx.sys (symc8xx) .(.LSI Logic - Symbios 8XX SCSI Miniport Driver.) - LEGACY_SYMC8XX
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\sym_hi.sys (sym_hi) .(.LSI Logic - Symbios Hi-Perf SCSI Miniport Driver.) - LEGACY_SYM_HI
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\sym_u3.sys (sym_u3) .(.LSI Logic - Symbios Ultra3 SCSI Miniport Driver.) - LEGACY_SYM_U3
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV
O64 - Services: CurCS - 20/06/2008 - C:\WINDOWS\system32\DRIVERS\tcpip.sys (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES
O64 - Services: CurCS - 23/08/2001 - C:\WINDOWS\system32\DRIVERS\toside.sys (TosIde) .(.Microsoft Corporation - Contr�leur IDE PCI Toshiba.) - LEGACY_TOSIDE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS
O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\ultra.sys (ultra) .(.Promise Technology, Inc. - Gestionnaire de miniport ULTRA66 de Promise.) - LEGACY_ULTRA
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\drivers\vga.sys (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\viaagp.sys (viaagp) .(.Microsoft Corporation - VIA NT AGP Filter.) - LEGACY_VIAAGP
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\vssvc.exe (VSS) .(.Microsoft Corporation - Service de clich� instantan� de volumes Mic.) - LEGACY_VSS
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\wanarp.sys (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP
O64 - Services: CurCS - 02/11/2006 - C:\WINDOWS\system32\DRIVERS\Wdf01000.sys (Wdf01000) .(.Microsoft Corporation - WDF Dynamic.) - LEGACY_WDF01000
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\wbem\wmiapsrv.exe (WmiApSrv) .(.Microsoft Corporation - Service de la carte de performance WMI.) - LEGACY_WMIAPSRV
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV
O64 - Services: CurCS - 28/09/2006 - C:\WINDOWS\system32\DRIVERS\WudfPf.sys (WudfPf) .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (WudfSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUDFSVC
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC
~ Legacy: 199 Scanned in 00mn 03s
---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <SafariHTML>[HKLM\..\open\Command] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\WINDOWS\regedit.exe
~ FASS Keys: 17 Scanned in 00mn 00s
---\\ Menu de d�marrage Internet (SMI) (O68)
O68 - StartMenuInternet: <aol.exe> <>[HKLM\..\Shell\open\Command] (.America Online, Inc. - AOL.) -- C:\Program Files\AOL 9.0\aol.exe
O68 - StartMenuInternet: <chrome.exe> <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <Safari.exe> <Safari>[HKLM\..\Shell\open\Command] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe
~ Keys: Scanned in 00mn 00s
---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - () - http://search.live.com
~ Keys: Scanned in 00mn 00s
---\\ Enum�re les service demarr�s par Svchost (SSS) (O83)
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (...) -- C:\WINDOWS\system32\appmgmts.dll [0]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496]
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [78336]
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464]
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576]
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [127488]
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040]
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [253952]
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840]
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096]
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792]
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions r�seau.) -- C:\WINDOWS\system32\netman.dll [198144]
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll [247808]
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248]
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de t�ches.) -- C:\WINDOWS\system32\schedsvc.dll [194560]
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll [18944]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance � Microsoft NAT.) -- C:\WINDOWS\system32\ipnathlp.dll [332800]
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du syst�me.) -- C:\WINDOWS\system32\srsvc.dll [171520]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de t�l�phonie Microsoft� Windows(TM).) -- C:\WINDOWS\system32\tapisrv.dll [249856]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112]
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176]
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [483840]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408]
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896]
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arri�re-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400]
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll [27136]
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Ex�cution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll [293376]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des cl�s.) -- C:\WINDOWS\system32\kmsvc.dll [61440]
~ Services: 39 Scanned in 00mn 01s
---\\ Recherche particuli�re � la racine du syst�me (SPRF) (O84)
[MD5.BEB5AA2018D0C653C2ED10FC500FA0F6] [SPRF][05/10/2011] (...) -- C:\Documents and Settings\Olgicka\Local Settings\Application Data\fusioncache.dat [130]
[MD5.18075B2C9F0F300BEE209744A8BEC353] [SPRF][05/01/2009] (...) -- C:\WINDOWS\Downloaded Program Files\bdcore.dll [32]
[MD5.2B1C4C87EB20ADDBA59DCA975E28DFFB] [SPRF][05/01/2009] (...) -- C:\WINDOWS\Downloaded Program Files\ipsupd.dll [741376]
[MD5.18075B2C9F0F300BEE209744A8BEC353] [SPRF][05/01/2009] (...) -- C:\WINDOWS\Downloaded Program Files\libfn.dll [32]
~ Files: 4 Scanned in 00mn 00s
---\\ Enum�re les codes produits des logiciels (PUC) (O90)
O90 - PUC: "09E8523867F131E4F9060A8FDE147EF6" . (.PC Connectivity Solution.) -- C:\WINDOWS\Installer\{83258E90-1F76-4E13-9F60-A0F8ED41E76F}\ARPPRODUCTICON.exe
O90 - PUC: "0CB8AE65157339B4CBD96615CC635EAA" . (.MSXML 6 Service Pack 2 (KB973686).) -- c:\WINDOWS\Installer\{56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}\ARPIco
O90 - PUC: "0DEF1459F7230FD4B869FE75FE26F291" . (..) -- C:\WINDOWS\Installer\{9541FED0-327F-4DF0-8B96-EF57EF622F19}\RecordNow.exe
O90 - PUC: "178684B9BE725A9488237771E63633C3" . (.iTunes.) -- C:\WINDOWS\Installer\{9B486871-27EB-49A5-8832-77176E63333C}\Installer.ico
O90 - PUC: "243493A986A4ABE4586A555B954F7E00" . (.Microsoft .NET Framework 1.1 French Language Pack.) -- C:\WINDOWS\Installer\{9A394342-4A68-4EBA-85A6-55B559F4E700}\ndpsetup.ico
O90 - PUC: "277C90D53BCEB244C96C4B43C187DF2C" . (.Apple Application Support.) -- C:\WINDOWS\Installer\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}\WinInstall.ico
O90 - PUC: "41DC8ECD5FBF46449B4A1EE87453647C" . (.Assistant de connexion Windows Live.) -- C:\WINDOWS\Installer\{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}\prodicon.ico
O90 - PUC: "4757561245DB2A844905BE302B7CCF92" . (..) -- C:\WINDOWS\Installer\{21657574-BD54-48A2-9450-EB03B2C7FC29}\MyDVD.exe
O90 - PUC: "56A9756CEAC913B4B8B633600E36A066" . (.Apple Software Update.) -- C:\WINDOWS\Installer\{C6579A65-9CAE-4B31-8B6B-3306E0630A66}\Installer.ico
O90 - PUC: "62287FAB00234BD4EB33D429A2978904" . (.Windows Presentation Foundation.) -- c:\WINDOWS\Installer\{BAF78226-3200-4DB4-BE33-4D922A799840}\ArpIcon
O90 - PUC: "68AB67CA7DA76301B744AA0100000010" . (.Adobe Reader X (10.1.7) - Fran�ais.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O90 - PUC: "7030D86F37527EB4E9DFBC827D6E653E" . (.Adobe Flash Player 11 ActiveX.) -- C:\WINDOWS\Installer\{F68D0307-2573-4BE7-9EFD-CB28D7E656E3}\ARPPRODUCTICON.exe
O90 - PUC: "7BD587CD983D3C841B6469EF99FBE4B2" . (.Vegas Pro 9.0.) -- C:\WINDOWS\Installer\{DC785DB7-D389-48C3-B146-96FE99BF4E2B}\vegas.ico
O90 - PUC: "8DD9566B7A0042A4BBBF1C6F89E2D566" . (.PlayStation(R)Network Downloader.) -- C:\WINDOWS\Installer\{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}\ARPPRODUCTICON.exe
O90 - PUC: "979257759C1A20C458B6BF2BA74C0EC2" . (.QuickTime.) -- C:\WINDOWS\Installer\{57752979-A1C9-4C02-856B-FBB27AC4E02C}\Installer.ico
O90 - PUC: "97E44AF0D7DCD8E42AEE62EF505F906B" . (.OpenOffice.org 3.1.) -- C:\WINDOWS\Installer\{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}\soffice.exe
O90 - PUC: "9F2FDFE0D6387BE43AD230B83D1FBFA2" . (.Security Update for CAPICOM (KB931906).) -- C:\WINDOWS\Installer\{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}\folder.ico
O90 - PUC: "B2F5519759897D9468219D52080EEDB5" . (.Bonjour.) -- C:\WINDOWS\Installer\{79155F2B-9895-49D7-8612-D92580E0DE5B}\Bonjour.ico
O90 - PUC: "CC6E289AD0F98494B981DBDF55EDA427" . (.Nokia PC Suite.) -- C:\WINDOWS\Installer\{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72}\ARPPRODUCTICON.exe
O90 - PUC: "D381B5441F4F8C549BBD1F3155AC56B7" . (.Windows Live Messenger.) -- C:\WINDOWS\Installer\{445B183D-F4F1-45C8-B9DB-F11355CA657B}\MsblIco.Exe
O90 - PUC: "D5E3FA2F7969C5845ACA2E9B64C844A6" . (.Safari.) -- C:\WINDOWS\Installer\{F2AF3E5D-9697-485C-A5AC-E2B9468C446A}\Installer.ico
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\WINDOWS\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "DDB6C50237B7ED245850A990F3532A83" . (.Outil de t�l�chargement Windows Live.) -- C:\WINDOWS\Installer\{205C6BDD-7B73-42DE-8505-9A093F35A238}\RichUpload.ico
O90 - PUC: "E0EDA41E3F5764A4785E6296D26D62CE" . (.Apple Mobile Device Support.) -- C:\WINDOWS\Installer\{E14ADE0E-75F3-4A46-87E5-26692DD626EC}\Installer.ico
O90 - PUC: "F5A91F3C8A53BDF46ADEF0C43E89AD84" . (.Nokia Connectivity Cable Driver.) -- C:\WINDOWS\Installer\{C3F19A5F-35A8-4FDB-A6ED-0F4CE398DA48}\ARPPRODUCTICON.exe
O90 - PUC: "F6071111A6667304777712318267D401" . (.JavaFX 2.1.1.) -- C:\WINDOWS\Installer\{1111706F-666A-4037-7777-211328764D10}\javaIcon.ico
~ Update Products: 57 Scanned in 00mn 00s
---\\ Enum�re les donn�es de la cl� NameSpace (MNS) (O92)
O92 - MNS: Nokia Phone Browser - {416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A}
~ MNS: 1 Scanned in 00mn 00s
---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.56966299CB75771D4478492D3200142B] [WIS][30/03/2006] (.S3 Graphics - S3GSetup.) -- C:\Windows\Installer\1697b.msi [7152640]
[MD5.713180813956EBDF00F1D5A298277633] [WIS][30/08/2012] (.Boxore OU. - Software Update Helper.) -- C:\Windows\Installer\23f13f.msi [24576] =>Adware.Boxore
[MD5.55E14386435F300C3E692664E3FE5DAC] [WIS][01/01/2010] (.Nokia - PC Connectivity Solution.) -- C:\Windows\Installer\706a24.msi [464896]
[MD5.D783906E98D93B8343E574E9AB4BE60F] [WIS][01/01/2010] (.Nokia - Nokia Connectivity Cable Driver.) -- C:\Windows\Installer\706a39.msi [335360]
[MD5.DD8244F79BFBB7A947486B31683C3D25] [WIS][31/12/2009] (.Nokia - Nokia PC Suite.) -- C:\Windows\Installer\92e77b.msi [2501120]
~ WIS: 60 Scanned in 00mn 14s
---\\ Etat g�n�ral des services not Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 17/08/2013 256904 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 14/04/2008 14336 | c:\program files\fichiers communs\akamai\netsession_win_8fa3539.dll (Akamai) . (.Akamai Technologies, Inc..) - C:\WINDOWS\system32\svchost.exe
SR - | Auto 10/09/2013 84024 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
SR - | Auto 10/09/2013 108088 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 08/04/2004 1135728 | (AOL ACS) . (.America Online, Inc..) - C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe
SR - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 24/12/2004 106496 | (BlueSoleil Hid Service) . (...) - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
SR - | Auto 30/08/2011 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 11/05/2005 221266 | (CLCapSvc) . (...) - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
SR - | Auto 11/05/2005 110672 | (CLSched) . (...) - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
SR - | Auto 11/05/2005 61440 | (CyberLink Media Library Service) . (.Cyberlink.) - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
SS - | Demand 14/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SR - | Auto 07/01/2005 49152 | (GenericHidService) . (...) - c:\APPS\HIDSERVICE\HIDSERVICE.exe
SS - | Demand 16/08/2013 553288 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 05/07/2012 161704 | (JavaQuickStarterService) . (.Oracle Corporation.) - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
SS - | Demand 08/09/2008 575488 | (ServiceLayer) . (.Nokia..) - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
SR - | Auto 10/05/2005 61440 | (SLService) . (...) - C:\WINDOWS\system32\slmdmsr.exe
SS - | Auto 31/08/2012 140080 | (supdate) . (.Boxore OU..) - C:\Program Files\Software\Update\SoftwareUpdate.exe =>Adware.Boxore
~ Services: Scanned in 00mn 15s
---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by Olgicka at 11/09/2013 23:04:23
device: opened successfully
user: MBR read successfully
Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys viaide.sys PCIIDEX.SYS
1 nt!IofCallDriver[0x804E3735] >> \Device\Harddisk0\DR0[0x84F902C8]
3 CLASSPNP[0xF76E8FD7] >> nt!IofCallDriver[0x804E3735] >> \Device\000000a6[0x84F573B8]
5 ACPI[0xF75DE620] >> nt!IofCallDriver[0x804E3735] >> \Device\Ide\IdeDeviceP0T0L0-3[0x84F57D98]
kernel: MBR read successfully
user & kernel MBR OK
~ MBR: 13 Scanned in 00mn 02s
---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Olgicka at 11/09/2013 23:04:25
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s
---\\ Scan Additionnel (O88)
Database Version : 12902 - (11/09/2013)
Cl�s trouv�es (Keys found) : 48
Valeurs trouv�es (Values found) : 1
Dossiers trouv�s (Folders found) : 5
Fichiers trouv�s (Files found) : 4
[HKLM\Software\Google\Chrome\Extensions\jeaihkehdlhkocphopopahkfjcfcphef] =>Spyware.SmartDisplay^
[HKLM\SYSTEM\CurrentControlSet\Services\supdate) (supdate] =>Adware.Boxore^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! BrowserPlus] =>Toolbar.Yahoo^
[HKLM\Software\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}] =>PUP.Funmoods
[HKLM\Software\Classes\CLSID\{35b8892d-c3fb-4d88-990d-31db2ebd72bd}] =>Adware.RecordNRip
[HKLM\Software\Classes\Interface\{3f607e46-0d3c-4442-b1de-de7fa4768f5c}] =>Adware.RecordNRip
[HKLM\Software\Classes\TypeLib\{93e3d79c-0786-48ff-9329-93bc9f6dc2b3}] =>Adware.RecordNRip
[HKLM\Software\Classes\Interface\{fe0273d1-99df-4ac0-87d5-1371c6271785}] =>Adware.RecordNRip
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{006E6A46-8D55-4F10-BBA8-2C9653B4278B}] =>Adware.Boxore
[HKLM\Software\Classes\CLSID\{092A2C6B-43EE-4F9F-8F8E-14ED5E11C14B}] =>Adware.Agent
[HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}] =>Adware.MetaStream
[HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}] =>Adware.MetaStream
[HKLM\Software\Classes\CLSID\{257A6158-1416-4B31-9BF8-29FF49F3814F}] =>Adware.Agent
[HKLM\Software\Classes\AppID\{32451DFC-C23B-4E12-866C-FC7982238504}] =>Toolbar.Babylon
[HKLM\Software\Classes\CLSID\{32451DFC-C23B-4E12-866C-FC7982238504}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{5B1881D1-D9C7-46df-B041-1E593282C7D0}] =>Adware.BullseyeToolbar
[HKLM\Software\Classes\Interface\{736EF78E-5A04-46F9-893E-EDEC6EA5DF45}] =>Adware.Agent
[HKLM\Software\Classes\Interface\{7A1BCE27-099C-4628-B63A-AEC00C6376B3}] =>Adware.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype
[HKLM\Software\Classes\Interface\{AF3AFF7C-B9E9-48DD-9002-212B6DEAAC02}] =>Adware.Agent
[HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper
[HKLM\Software\Classes\Interface\{DBE82879-914A-422F-BAE9-2ECC80BE536F}] =>Adware.Agent
[HKLM\Software\Classes\Interface\{E12D7149-73EF-45E4-A1E9-99FD7DAE62D3}] =>Adware.Agent
[HKLM\Software\Classes\Interface\{F2B184F1-547C-4EE9-BFC4-AC489C7077D9}] =>Adware.Agent
[HKLM\Software\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] =>Toolbar.Agent
[HKLM\Software\Classes\axmetastream.metastreamctl] =>Adware.MetaStream
[HKLM\Software\Classes\axmetastream.metastreamctl.1] =>Adware.MetaStream
[HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary] =>Adware.MetaStream
[HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary.1] =>Adware.MetaStream
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24] =>Adware.PredictAd
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{08C06D61-F1F3-4799-86F8-BE1A89362C85}] =>Toolbar.Orange
[HKCU\Software\1ClickDownload] =>PUP.1ClickDownloader
[HKLM\Software\Iminent] =>Adware.IMBooster
[HKLM\Software\MetaStream] =>Adware.MetaStream
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKCU\Software\SweetIM] =>PUP.SweetIM
[HKLM\Software\SweetIM] =>PUP.SweetIM
[HKLM\Software\Viewpoint] =>Adware.MetaStream
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer] =>Adware.MetaStream
[HKLM\Software\Classes\Installer\Features\64A6E60055D801F4BB8AC269354B72B8] =>Adware.Boxore
[HKLM\Software\Classes\Installer\Products\64A6E60055D801F4BB8AC269354B72B8] =>Adware.Boxore
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\64A6E60055D801F4BB8AC269354B72B8] =>Adware.Boxore
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKLM\SYSTEM\CurrentControlSet\Services\supdate] =>Adware.Boxore
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
[HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks]:{08C06D61-F1F3-4799-86F8-BE1A89362C85} =>Toolbar.Yahoo^
C:\Program Files\Viewpoint =>Adware.MetaStream^
C:\Documents and Settings\All Users\Application Data\Viewpoint =>Adware.MetaStream^
C:\Documents and Settings\Olgicka\Local Settings\Application Data\Yahoo! =>Toolbar.Yahoo^
C:\Program Files\Software =>Adware.Boxore
C:\Documents and Settings\Olgicka\Local Settings\Application Data\Software =>Adware.Boxore
C:\Documents and Settings\Olgicka\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jeaihkehdlhkocphopopahkfjcfcphef =>Spyware.SmartDisplay^
C:\Program Files\Software\Update\SoftwareUpdate.exe =>Adware.Boxore^
C:\Program Files\Viewpoint\Viewpoint Experience Technology\AxMetaStream.dll =>Adware.MetaStream^
C:\Windows\Installer\23f13f.msi =>Adware.Boxore^
~ Additionnel Scan: 248586 Items scanned in 00mn 37s
---\\ R�capitulatif des d�tections trouv�es sur votre station
~ http://nicolascoolman.webs.com/apps/blog/show/32662245-spyware-smartdisplay =>Spyware.SmartDisplay
~ http://nicolascoolman.webs.com/apps/blog/show/26626977-adware-boxore =>Adware.Boxore
~ http://nicolascoolman.webs.com/apps/blog/show/30268689-toolbar-yahoo =>Toolbar.Yahoo
~ http://nicolascoolman.webs.com/apps/blog/show/27046242-adware-metastream =>Adware.MetaStream
~ http://nicolascoolman.webs.com/apps/blog/show/26607014-pup-1clickdownloader =>PUP.1ClickDownloader
~ http://nicolascoolman.webs.com/apps/blog/show/29790567-adware-installcore =>Adware.InstallCore
~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit =>Toolbar.Conduit
~ http://nicolascoolman.webs.com/apps/blog/show/29216159-pup-sweetim =>PUP.SweetIM
~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster =>Adware.IMBooster
~ http://nicolascoolman.webs.com/apps/blog/show/27630986-pup-funmoods =>PUP.Funmoods
~ http://nicolascoolman.webs.com/apps/blog/show/27350807-adware-recordnrip =>Adware.RecordNRip
~ http://nicolascoolman.webs.com/apps/blog/show/26627369-toolbar-babylon =>Toolbar.Babylon
~ http://nicolascoolman.webs.com/apps/blog/show/27674245-adware-bullseyetoolbar =>Adware.BullseyeToolbar
~ http://nicolascoolman.webs.com/apps/blog/show/30898245-toolbar-skype =>Toolbar.Skype
~ http://nicolascoolman.webs.com/apps/blog/show/27229962-adware-predictad =>Adware.PredictAd
~ MSI: 15 link(s) detected in 00mn 38s
End of the scan (1850 lines in 13mn 51s)(0)
