Rapport de ZHPDiag v2013.5.25.152 par Nicolas Coolman, Update du 25/05/2013
Run by Guilhem at 29/05/2013 12:45:52
WebSite: http://nicolascoolman.webs.com
State : 
WhiteList : Disable
High Elevated Privileges : OK
UAC : Deactivate by user


---\\ Web Browser
MSIE: Internet Explorer v10.0.9200.16576
MFIE: Mozilla Firefox 21.0 (Defaut)

---\\ Windows Product Information
~ Langage: Fran�ais
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 9YQTR
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Protection
COMODO Internet Security v3.13.121240.574
Microsoft Security Client FR-FR Language Pack v2.1.1116.0
Windows Defender W7

---\\ System Optimizer
CCleaner v4.01   =>Piriform Ltd

---\\ Peer To Peer (P2P)

---\\ Software Update
Adobe Flash Player 11 Plugin
Adobe Reader X
Java 7 Update 21

---\\ System Information
~ Processor: Intel64 Family 6 Model 30 Stepping 5, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8116 MB (69% free)
System Restore: Activ� (Enable)
System drive C: has 9 GB (7%) free of 116 GB

---\\ Logged in mode
~ Computer Name: GUILHEM-LAPTOP
~ User Name: Guilhem
~ All Users Names: HomeGroupUser$, Guilhem, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Guilhem\AppData\Roaming\
~ %Desktop% : C:\Users\Guilhem\Desktop\
~ %Favorites% : C:\Users\Guilhem\Favorites\
~ %LocalAppData% : C:\Users\Guilhem\AppData\Local\
~ %StartMenu% : C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 9 Go of 116 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 6 Go of 330 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 314 Go of 349 Go)
F:\ CD-ROM drive (Free 0 Go of 6 Go)
G:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Security Center: 34 Scanned in 00mn 00s



---\\ Recherche particuli�re de fichiers g�n�riques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 10:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de d�marrage de Windows.) (.14/07/2009 - 05:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.27A9000C534AA9BADC9EE74940F50C6D] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.05/04/2013 - 10:52:14.) -- C:\Windows\System32\wininet.dll [2242048]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d�ouverture de session Windows.) (.20/11/2010 - 17:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Biblioth�que de licences.) (.20/11/2010 - 17:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 07:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 05:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 03:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 13:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 13:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 14:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 03:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 04:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 06:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 13:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du syst�me de fichiers NT.) (.12/04/2013 - 18:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parall�le.) (.14/07/2009 - 04:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 14:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 04:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 13:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de clich� instantan� du volume.) (.20/11/2010 - 17:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes:  Scanned in 00mn 00s



---\\ Etat des fichiers cach�s (Cach�/Total)
~ Mes images (My Pictures) : 5/11839
~ Mes musiques (My Musics) : 156/7021
~ Mes Videos (My Videos) : 2/315
~ Mes Favoris (My Favorites) : 1/28
~ Mes Documents (My Documents) : 5/81400
~ Mon Bureau (My Desktop) : 2/82
~ Menu demarrer (Programs) : 1/61
~ Hidden Files:  Scanned in 00mn 34s



---\\ Processus lanc�s
[MD5.18E5C2F937F9DEB8C282DF66A3761925] - (.ASUS - ASLDR Service.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe   [84536] [PID.1716]
[MD5.63F1212FFE13E62CA1E8D8EE19ABD9A7] - (.ASUS - GFNEXSrv.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe   [96896] [PID.1884]
[MD5.E8FE4FCE23D2809BD88BCC1D0F8408CE] - (...) -- C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe   [124832] [PID.2060]
[MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [65640] [PID.2128]
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe   [57008] [PID.2216]
[MD5.C811032EBB2C2E9FACFC364599E91BE3] - (.ASUS - HControl.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe   [174720] [PID.2664]
[MD5.85D5E6AC46A2AE4672C1AC813AE45B95] - (.Microsoft Corp. - Bing Desktop updating service.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe   [168592] [PID.2700]
[MD5.3021028CD5F5402BD2B68CF4F4517D51] - (...) -- C:\ProgramData\media center Bouygues Telecom\MediaServer.exe   [1593128] [PID.2932]
[MD5.868E3486E7EC522330344152A5535783] - (.ASUS - SmartLogon Application.) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe   [305720] [PID.3036]
[MD5.A1993250DD28B823D0B2477CFE9B331F] - (.Apple Inc. - BookmarkDAV_client.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe   [59720] [PID.3048]
[MD5.7DFCCC67990B6DE7F30F553A4E4612A4] - (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe   [495616] [PID.2780]
[MD5.F4DCD4912B185C3AAEB92A7040832AD1] - (.Pas de propri�taire - ALU.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe   [51768] [PID.3164]
[MD5.6529C89512CE4498919BDC512572F82C] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe   [6998656] [PID.3292]
[MD5.5666955DC9FD455A003D86A21E0483A9] - (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe   [170624] [PID.3300]
[MD5.5AEBF6FA9805C9101220AA4FB4FA17E7] - (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe   [105016] [PID.3308]
[MD5.B818EE2ABA25F4228AE5B0E3FE8A77AD] - (.Creative Technology Ltd - VolPanlu.exe.) -- C:\Program Files (x86)\Creative\SB Audigy\Volume Panel\VolPanlu.exe   [237693] [PID.3316]
[MD5.90A3525C7399B7784D28F99EA1A51C4C] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe   [673616] [PID.3376]
[MD5.37DEB76A2CF005841C4E45DE2B94D84F] - (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe   [3058304] [PID.3560]
[MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [253816] [PID.3592]
[MD5.57B4D34232852BFE4453BE571DF90D21] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe   [103720] [PID.3680]
[MD5.4CD7987ECD754CE8D59FD898DB406532] - (.VMware, Inc. - VMware Tray Process.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe   [104016] [PID.4056]
[MD5.BDD790326FABC31FB635130810245062] - (.Pas de propri�taire - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe   [1597440] [PID.3612]
[MD5.E23A2BEA01988A0C2E5DA74F5F526793] - (.Pas de propri�taire - Tray MFC Application.) -- C:\Program Files (x86)\Gaming Mouse\Tray.exe   [221184] [PID.3116]
[MD5.1355EBE184F9DAB1718BC587F8A7E05E] - (.MAGIX AG - Verzeichnis�berwachung und Hilfsaufgaben f�.) -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe   [1253376] [PID.3732]
[MD5.0C670049434B39DA2E00028CC9ED1958] - (...) -- C:\Program Files (x86)\Media center Bbox\media center\external\MediaServerTray.exe   [728224] [PID.0]
[MD5.8A86F41B857DA166033B1795FE69BF37] - (.Almico Software (www.almico.com) - Pas de description.) -- C:\Program Files (x86)\SpeedFan\speedfan.exe   [4683768] [PID.4460]
[MD5.A1C148801B4AF64847AEB9F3AD9594EF] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe   [262144] [PID.4116]
[MD5.D8E559F4CDDBF7BB5A10C373843D8D25] - (...) -- C:\Program Files (x86)\Common Files\SHAPE Services\Mobiola Wave Service\MobiolaWaveService.exe   [125088] [PID.4260]
[MD5.3A2BDD76E7D2A5F40A7174793D1BA794] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe   [75136] [PID.3252]
[MD5.753D254205E0A62100A050BD8B458D06] - (.Skype Technologies S.A. - Skype C2C Service.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe   [3064000] [PID.1896]
[MD5.7148E74FADFDDF59D02EE5504791B9B9] - (.VMware, Inc. - VMware NAT Service.) -- C:\Windows\SysWOW64\vmnat.exe   [434256] [PID.4184]
[MD5.7D2F9C1D614644AC0439195973325596] - (.VMware, Inc. - VMware Authorization Service.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe   [79360] [PID.4740]
[MD5.DBE59E293685878EF48F7F29006F7AB9] - (.VMware, Inc. - VMware VMnet DHCP service.) -- C:\Windows\SysWOW64\vmnetdhcp.exe   [354896] [PID.2684]
[MD5.7BB63ACBC2094D4BEA51D06BE9575CFD] - (...) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe   [11840512] [PID.5136]
[MD5.149126216A694E6BA84E92ECA77AAE3B] - (.ASUS - ATKOSD.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe   [2488888] [PID.5468]
[MD5.4A7C441D99D86704D194E7678873B95D] - (.ASUS - WDC.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe   [174648] [PID.5484]
[MD5.46DA8E7484AC7A52CE1D6E428398724B] - (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe   [59720] [PID.6484]
[MD5.D4C772C8A3F79F64B78ABB7DA7F2A4D4] - (.Broadcom Corporation. - Bluetooth Headset Skype Proxy.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe   [13600] [PID.6560]
[MD5.D5543E09953C8A8B12801A3A7AFEE155] - (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe   [59720] [PID.5256]
[MD5.FF00844CCD1A614C94818C10E422411B] - (.asus - ControlDeck.) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe   [1079936] [PID.6288]
[MD5.41118D920B2B268C0ADC36421248CDCF] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe   [2314240] [PID.3600]
[MD5.95110A1C5A1D228AC1DDF6AB67D00BEB] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe   [920472] [PID.4632]
[MD5.6FC79A950476A5F539EEB65F9097C0A8] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe   [17304] [PID.4936]
[MD5.23AA0FDCBDD87D0B78092798C68312D8] - (.Adobe Systems, Inc. - Adobe Flash Player 11.7 r700.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe   [1855880] [PID.6596]
[MD5.F72DD84DD69DF001CF4D1B909685A136] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [7402496] [PID.3648]
~ Processes Running:  Scanned in 00mn 03s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\Guilhem\AppData\Roaming\Mozilla\Firefox\Profiles\tbrtjdal.default\prefs.js
C:\Users\Guilhem\AppData\Roaming\Mozilla\Firefox\Profiles\tbrtjdal.default\user.js
M3 - MFPP: Plugins - [Guilhem] -- C:\Users\Guilhem\AppData\Roaming\Mozilla\Firefox\Profiles\tbrtjdal.default\searchplugins\web-search.xml
M3 - MFPP: Plugins - [Guilhem] -- C:\Users\Guilhem\AppData\Roaming\Mozilla\Firefox\Profiles\tbrtjdal.default\searchplugins\wot-safe-search.xml
M0 - MFSP: prefs.js [Guilhem - tbrtjdal.default] http://www.google.fr
M2 - MFEP: prefs.js [Guilhem - tbrtjdal.default\battlefieldheroespatcher@ea.com] [] Battlefield Heroes Updater v5.0.199.0 (..)
M2 - MFEP: prefs.js [Guilhem - tbrtjdal.default\DeviceDetection@logitech.com] [] ????????? ????????? Logitech v1.24.0.9 (..)
M2 - MFEP: prefs.js [Guilhem - tbrtjdal.default\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}] [WOT] WOT v20130515 (..)
M2 - MFEP: prefs.js [Guilhem - tbrtjdal.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.9.15 (..)
M2 - MFEP: prefs.js [Guilhem - tbrtjdal.default\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d}] [] Cookies Manager+ v1.5.1.1 (..)
M2 - MFEP: prefs.js [Guilhem - tbrtjdal.default\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}] [] Flash and Video Download v1.33 (..)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
P2 - FPN: [HKCU] [@talk.google.com/GoogleTalkPlugin] - (.Google - Version 3.19.1.13088.) -- C:\Users\Guilhem\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
P2 - FPN: [HKCU] [@talk.google.com/O1DPlugin] - (.Google - Version 3.19.1.13088.) -- C:\Users\Guilhem\AppData\Roaming\Mozilla\plugins\npo1d.dll
P2 - FPN: [HKCU] [@talk.google.com/O3DPlugin] - (.Pas de propri�taire - Google Talk Plugin Video Accelerator version:0.1.44.28.) -- C:\Users\Guilhem\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\Guilhem\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\Guilhem\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 3.5.6f4.) -- C:\Users\Guilhem\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
~ Firefox Browser: 17 Scanned in 00mn 00s



---\\ Internet Explorer, D�marrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ IE Browser: 17 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft� Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Bing Bar Helper [64Bits] - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (...) -- "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (.not file.)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
~ BHO: 5 Scanned in 00mn 00s



---\\ Applications d�marr�es par registre & par dossier (O4)
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) 
O4 - HKLM\..\Run: [RunDLLEntry] . (.Creative Technology Ltd. - AmbRun Endpoints Dynamic Link Library.) -- C:\Windows\system32\AmbRunE.dll 
O4 - HKLM\..\Run: [AmIcoSinglun64] . (.AlcorMicro Co., Ltd. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe 
O4 - HKLM\..\Run: [Setwallpaper] c:\programdata\SetWallpaper.cmd (.not file.) 
O4 - HKLM\..\Run: [COMODO Internet Security] . (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cfp.exe 
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe 
O4 - HKLM\..\Run: [Start WingMan Profiler] . (.Logicool Co. Ltd. - Logicool WingMan Event Monitor.) -- C:\Program Files\Logitech\Gaming Software\LWEMon.exe 
O4 - HKLM\..\Run: [XboxStat] . (.Microsoft Corporation - XBoxStat.exe.) -- C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe 
O4 - HKCU\..\Run: [EPSON SX210 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.exe 
O4 - HKCU\..\Run: [JumiController] Cl� orpheline 
O4 - HKCU\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe (.not file.) 
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Guilhem\AppData\Local\Google\Update\GoogleUpdate.exe 
O4 - HKCU\..\Run: [com.apple.dav.bookmarks.daemon] . (.Apple Inc. - BookmarkDAV_client.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe 
O4 - HKCU\..\Run: [RGSC] D:\Jeux\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe (.not file.) 
O4 - HKCU\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe 
O4 - HKCU\..\Run: [EPSON Stylus SX400 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEGE.exe 
O4 - HKLM\..\Wow6432Node\Run: [UpdateLBPShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe 
O4 - HKLM\..\Wow6432Node\Run: [UpdateP2GoShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe 
O4 - HKLM\..\Wow6432Node\Run: [ATKOSD2] . (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe 
O4 - HKLM\..\Wow6432Node\Run: [ATKMEDIA] . (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe 
O4 - HKLM\..\Wow6432Node\Run: [HControlUser] . (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe 
O4 - HKLM\..\Wow6432Node\Run: [VolPanel] . (.Creative Technology Ltd - VolPanlu.exe.) -- C:\Program Files (x86)\Creative\SB Audigy\Volume Panel\VolPanlu.exe 
O4 - HKLM\..\Wow6432Node\Run: [UpdReg] . (.Creative Technology Ltd. - Creative UpdReg.) -- C:\Windows\UpdReg.exe 
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe 
O4 - HKLM\..\Wow6432Node\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe 
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Wow6432Node\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe 
O4 - HKLM\..\Wow6432Node\Run: [ASUSWebStorage] . (.ASUS Cloud Corporation - AsusWebStorage.) -- C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AsusWSPanel.exe 
O4 - HKLM\..\Wow6432Node\Run: [BingDesktop] . (.Microsoft Corp. - Bing Desktop Application.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe 
O4 - HKLM\..\Wow6432Node\Run: [Gaming Mouse Hid] . (.Pas de propri�taire - hid MFC Application.) -- C:\Program Files (x86)\Gaming Mouse\hid.exe 
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst� Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe 
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 
O4 - HKLM\..\Wow6432Node\Run: [EaseUS EPM tray] C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe (.not file.) 
O4 - HKLM\..\Wow6432Node\Run: [vmware-tray] . (.VMware, Inc. - VMware Tray Process.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [EPSON SX210 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.exe 
O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [JumiController] Cl� orpheline 
O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe (.not file.) 
O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Guilhem\AppData\Local\Google\Update\GoogleUpdate.exe 
O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [com.apple.dav.bookmarks.daemon] . (.Apple Inc. - BookmarkDAV_client.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe 
O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [RGSC] D:\Jeux\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe (.not file.) 
O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe 
O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [EPSON Stylus SX400 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEGE.exe 
~ Application:  Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\TaskBar: iTunes.lnk . (.Apple Inc. - iTunes.)  -- C:\Program Files (x86)\iTunes\iTunes.exe 
O4 - GS\TaskBar: Microsoft Office Word 2007.lnk . (...)  -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
O4 - GS\TaskBar: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.)  -- C:\Windows\explorer.exe 
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\QuickLaunch: Picasa 3.lnk . (.Google Inc. - Picasa.)  -- C:\Program Files (x86)\Google\Picasa3\Picasa3.exe 
O4 - GS\QuickLaunch: SolidWorks 2010 x64 Edition.lnk . (.Acresso Software Inc. - InstallShield.)  -- C:\Windows\Installer\{E9173A5F-22A6-4152-848E-45851DB99162}\i386_SldWorks.exe 
O4 - GS\QuickLaunch: SolidWorks eDrawings 2010.lnk . (.Dassault Syst�mes SolidWorks Corp. - EModelViewer Module.)  -- D:\Logiciels\SolidWorks Corp\SolidWorks eDrawings\EModelViewer.exe 
O4 - GS\QuickLaunch: SolidWorks Explorer 2010.lnk . (.Acresso Software Inc. - InstallShield.)  -- C:\Windows\Installer\{2D8D14CC-5B31-44B9-87FC-BEC3D8AFFD1D}\NewShortcut1.exe 
O4 - GS\QuickLaunch: VMware Workstation.lnk . (.VMware, Inc. - VMware Workstation.)  -- C:\Program Files (x86)\VMware\VMware Workstation\vmware.exe 
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - �diteur de caract�res priv�s.)  -- C:\Windows\system32\eudcedit.exe 
O4 - GS\SendTo: AVS Mobile Uploader.lnk . (.Online Media Technologies Ltd. - AVS Mobile Uploader.)  -- C:\Program Files (x86)\Common Files\AVSMedia\MobileUploader\AVSMobileUploader.exe 
O4 - GS\SendTo: AVS Video Burner.lnk . (.Online Media Technologies Ltd. - AVS Video Burner.)  -- C:\Program Files (x86)\Common Files\AVSMedia\BurnerService\AVSVideoBurner.exe 
O4 - GS\SendTo: AVS Video Uploader.lnk . (.Online Media Technologies Ltd. - AVS Video Uploader.)  -- C:\Program Files (x86)\Common Files\AVSMedia\VideoUploader\AVSVideoUploader.exe 
O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft  Windows Fax and Scan.)  -- C:\Windows\system32\WFS.exe 
O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.)  -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
O4 - GS\SendTo: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Pas de description.)  -- C:\Windows\System32\fsquirt.exe 
O4 - GS\SendTo: WinSCP (pour envoi).lnk . (.Martin Prikryl - WinSCP: SFTP, FTP and SCP client.)  -- C:\Program Files (x86)\WinSCP\WinSCP.exe 
~ Global Startup:  Scanned in 00mn 00s



---\\ Invisibilit� de l'ic�ne d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Boutons situ�s sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Skype Click to Call [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico
~ IE Extra Buttons:  Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d�affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft� Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft� Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000010\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
~ Winsock: 10 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{87A18263-EA67-4BC7-9470-2EC4E4835576}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{C726FE16-049D-4E61-8C90-1C96B19AACBB}: DhcpNameServer = 62.201.142.100
O17 - HKLM\System\CCS\Services\Tcpip\..\{87A18263-EA67-4BC7-9470-2EC4E4835576}: DhcpDomain = lan
O17 - HKLM\System\CS1\Services\Tcpip\..\{87A18263-EA67-4BC7-9470-2EC4E4835576}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{C726FE16-049D-4E61-8C90-1C96B19AACBB}: DhcpNameServer = 62.201.142.100
O17 - HKLM\System\CS1\Services\Tcpip\..\{87A18263-EA67-4BC7-9470-2EC4E4835576}: DhcpDomain = lan
O17 - HKLM\System\CS2\Services\Tcpip\..\{87A18263-EA67-4BC7-9470-2EC4E4835576}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{C726FE16-049D-4E61-8C90-1C96B19AACBB}: DhcpNameServer = 62.201.142.100
O17 - HKLM\System\CS2\Services\Tcpip\..\{87A18263-EA67-4BC7-9470-2EC4E4835576}: DhcpDomain = lan
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
~ Domain:  Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- 
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Cl� de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non d�sactiv�s (O23)
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) . (...) - C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AFBAgent (AFBAgent) . (.ASUSTeK Computer Inc. - ASUS FastBoot.) - C:\Windows\system32\FBAgent.exe
O23 - Service:  (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) . (.ASUS - ASLDR Service.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) . (.ASUS - GFNEXSrv.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: media center Bouygues Telecom (BytelMediaServer) . (...) - C:\ProgramData\media center Bouygues Telecom\MediaServer.exe
O23 - Service: CyberLink Product - 2012/06/15 22:29:47 (CLKMSVC10_9EC60124) . (.CyberLink - CyberLink KM Service.) - C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) . (.COMODO - COMODO Internet Security.) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.exe
O23 - Service: FABS - Helping agent for MAGIX media dat (Fabs) . (.MAGIX AG - Verzeichnis�berwachung und Hilfsaufgaben f�.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mobiola Wave Service (Mobiola Wave Service) . (...) - C:\Program Files (x86)\Common Files\SHAPE Services\Mobiola Wave Service\MobiolaWaveService.exe
O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\SysWOW64\PnkBstrA.exe
O23 - Service: Skype C2C Service (Skype C2C Service) . (.Skype Technologies S.A. - Skype C2C Service.) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Intel(R) Management & Security Applicati (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: VMware Authorization Service (VMAuthdService) . (.VMware, Inc. - VMware Authorization Service.) - C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) . (.VMware, Inc. - VMware VMnet DHCP service.) - C:\Windows\SysWOW64\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) . (.VMware, Inc. - VMware USB Arbitration Service.) - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: VMware NAT Service (VMware NAT Service) . (.VMware, Inc. - VMware NAT Service.) - C:\Windows\SysWOW64\vmnat.exe
O23 - Service: VMware Workstation Server (VMwareHostd) . (...) - C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
O23 - Service: Power Control [2010/04/22 19:17:50] ({B154377D-700F-42cc-9474-23858FBDF4BD}) . (.CyberLink Corp. - Pas de description.) - C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl
~ Services: 27 Scanned in 00mn 05s



---\\ Enum�ration Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ T�ches planifi�es en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\Adobe Flash Player Updater.job   [1002]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1495036114-1722307083-3936051245-1000Core.job   [1034]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1495036114-1722307083-3936051245-1000UA.job   [1086]
[MD5.A6C20CBD1B10FEF25DAA4F1CF9FBC4FF] [APT] [ACMON] (.ATK.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe   [684544]
[MD5.F040037B149FD0F5A5044AE563390FA7] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe   [256904]
[MD5.5447AF432CDA61159ADDE218C468FFD9] [APT] [AdobeAAMUpdater-1.0-Guilhem-Laptop-Guilhem] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe   [500208]
[MD5.F4DCD4912B185C3AAEB92A7040832AD1] [APT] [ASUS Live Update] (...) -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe   [51768]
[MD5.6ACAB6D198B1B804719D662FE03BCA8D] [APT] [ASUS P4G] (.ATK.) -- C:\Program Files\P4G\BatteryLife.exe   [310912]
[MD5.868E3486E7EC522330344152A5535783] [APT] [ASUS SmartLogon Console Sensor] (.ASUS.) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe   [305720]
[MD5.FF00844CCD1A614C94818C10E422411B] [APT] [ASUSControlDeck] (.asus.) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe   [1079936]
[MD5.42BC01952E1ED3152DDE0C0C9C2012D4] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files (x86)\CCleaner\CCleaner.exe   [3545880]   =>Piriform Ltd
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-1495036114-1722307083-3936051245-1000Core] (.Google Inc..) -- C:\Users\Guilhem\AppData\Local\Google\Update\GoogleUpdate.exe   [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-1495036114-1722307083-3936051245-1000UA] (.Google Inc..) -- C:\Users\Guilhem\AppData\Local\Google\Update\GoogleUpdate.exe   [116648]
[MD5.BDD790326FABC31FB635130810245062] [APT] [WC3] (...) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe   [1597440]
[MD5.25A96E3CE5740C32F24544C9C27685A6] [APT] [{00ED5C2F-B47C-4982-8537-1F7C060DEFEA}] (.VMware, Inc..) -- C:\ProgramData\VMware\VMware Workstation\Uninstaller\uninstall.exe   [937992]
[MD5.00000000000000000000000000000000] [APT] [{16865AF1-46AB-4900-9EEA-F503B1DE3DD9}] (...) -- D:\Documents\Guilhem\WBFSManager3.0.1-RTW-x86\setup.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{8A1E3290-67E7-4096-8B27-7AA37A10EC9B}] (...) -- D:\Documents\Guilhem\epson324601eu.exe (.not file.)   [0]
[MD5.CBEC06E32D0AC9C3D0A9199EDC1FB959] [APT] [{CB705FFD-E4DF-4DEF-9CA8-7FDA70C64F11}] (.Skype Technologies S.A..) -- C:\Program Files (x86)\Skype\Phone\Skype.exe   [17418928]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe   [561984]
~ Scheduled Task: 19 Scanned in 00mn 07s



---\\ Composants install�s (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpr�teur de commandes Windows.) -- C:\Windows\system32\cmd.exe
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 10 Scanned in 00mn 00s



---\\ Pilotes lanc�s au d�marrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver:  (cmdGuard) . (.COMODO - COMODO Internet Security Sandbox Driver.) - C:\Windows\System32\DRIVERS\cmdguard.sys
O41 - Driver:  (cmdHlp) . (.COMODO - COMODO Internet Security Helper Driver.) - C:\Windows\System32\DRIVERS\cmdhlp.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\Windows\System32\DRIVERS\dtsoftbus01.sys
O41 - Driver:  (inspect) . (.COMODO - COMODO Internet Security Firewall Driver.) - C:\Windows\System32\DRIVERS\inspect.sys
O41 - Driver: (MpKsl5be58252) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{0F9F920A-7733-44C1-941C-8CDC2F60006D}\MpKsl5be58252.sys (.not file.)
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-syst�me de mise en m�moire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
O41 - Driver: Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (ws2ifsl) . (.Microsoft Corporation - Couche IFS Winsock2.) - C:\Windows\system32\drivers\ws2ifsl.sys
~ Drivers: 78 Scanned in 00mn 00s



---\\ Logiciels install�s (O42)
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441}
O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F800CF18-6470-D909-B460-73F2F41030B4}
O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F37A899E-1745-52F5-658F-9A4DA4D46BB7}
O42 - Logiciel: ASUS AI Recovery - (.ASUS.) [HKLM][64Bits] -- {06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}
O42 - Logiciel: ASUS AP Bank - (.ASUSTEK.) [HKLM][64Bits] -- ASUS AP Bank_is1
O42 - Logiciel: ASUS FancyStart - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {2B81872B-A054-48DA-BE3B-FA5C164C303A}
O42 - Logiciel: ASUS LifeFrame3 - (.ASUS.) [HKLM][64Bits] -- {1DBD1F12-ED93-49C0-A7CC-56CBDE488158}
O42 - Logiciel: ASUS Live Update - (.ASUS.) [HKLM][64Bits] -- {E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}
O42 - Logiciel: ASUS Power4Gear Hybrid - (.ASUS.) [HKLM][64Bits] -- {91EFE3A1-585E-4F66-B5F6-F118F56C4C47}
O42 - Logiciel: ASUS SmartLogon - (.ASUS.) [HKLM][64Bits] -- {64452561-169F-4A36-A2FF-B5E118EC65F5}
O42 - Logiciel: ASUS Splendid Video Enhancement Technology - (.ASUS.) [HKLM][64Bits] -- {0969AF05-4FF6-4C00-9406-43599238DE0D}
O42 - Logiciel: ASUS Virtual Camera - (.asus.) [HKLM][64Bits] -- {EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}
O42 - Logiciel: ASUS WebStorage - (.ASUS Cloud Corporation.) [HKLM][64Bits] -- ASUS WebStorage
O42 - Logiciel: ASUS_Notebook_G73 Screen Saver - (...) [HKLM][64Bits] -- ASUS_Notebook_G73
O42 - Logiciel: ATK Package - (.ASUS.) [HKLM][64Bits] -- {AB5C933E-5C7D-4D30-B314-9C83A49B94BE}
O42 - Logiciel: AVS Update Manager 1.0 - (.Online Media Technologies Ltd..) [HKLM][64Bits] -- AVS Update Manager_is1
O42 - Logiciel: AVS Video Converter 8 - (.Online Media Technologies Ltd..) [HKLM][64Bits] -- AVS4YOU Video Converter 7_is1
O42 - Logiciel: AVS4YOU Software Navigator 1.4 - (.Online Media Technologies Ltd..) [HKLM][64Bits] -- AVS4YOU Software Navigator_is1
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {5AF4B3C4-C393-48D7-AC7E-8E7615579548}
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Photoshop CS5 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {15FEDA5F-141C-4127-8D7E-B962D1742728}
O42 - Logiciel: Adobe Photoshop Elements 6.0 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Photoshop Elements 6
O42 - Logiciel: Adobe Reader X (10.1.7) - Fran�ais - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player
O42 - Logiciel: Alcor Micro USB Card Reader - (.Alcor Micro Corp..) [HKLM][64Bits] -- InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {2F72F540-1F60-4266-9506-952B21D6640D}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Arcus Drivers and Tools 1.08 - (.Arcus Technology.) [HKLM][64Bits] -- {EF38BD3C-9BAE-4AC1-9913-1DF00AFE2BF4}
O42 - Logiciel: Arcus Technology, Inc. Performax USB 1.30.2 - (.Arcus Technology.) [HKLM][64Bits] -- {54523412-951D-447E-9189-EF10DFCA97F6}
O42 - Logiciel: Astroburn Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- Astroburn Lite
O42 - Logiciel: Audacity 1.3.9 (Unicode) - (.Audacity Team.) [HKLM][64Bits] -- Audacity 1.3 Beta (Unicode)_is1
O42 - Logiciel: Battlefield Heroes - (.EA Digital illusions.) [HKLM][64Bits] -- {8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}
O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM][64Bits] -- {B4089055-D468-45A4-A6BA-5A138DD715FC}
O42 - Logiciel: Bing Bureau - (.Microsoft Corporation.) [HKLM][64Bits] -- {7D095455-D971-4D4C-9EFD-9AF6A6584F3A}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner   =>Piriform Ltd
O42 - Logiciel: COMODO Internet Security - (.COMODO.) [HKLM][64Bits] -- COMODO Internet Security
O42 - Logiciel: COSMOSM 2010 x64 Edition (2009/330) - (.SolidWorks Corporation.) [HKLM][64Bits] -- {F54D7268-3768-4F77-B1AC-094CAC44E767}
O42 - Logiciel: CamStudio Lossless Codec v1.5 - (.CamStudio.) [HKLM][64Bits] -- camcodec
O42 - Logiciel: CamStudio version 2.7 - (.CamStudio Open Source.) [HKLM][64Bits] -- {04B83666-3A62-452B-85D3-70F8117F2329}_is1
O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {E72F1051-B87E-4EF4-AE9F-8FDD229CC438}
O42 - Logiciel: ControlDeck - (.ASUS.) [HKLM][64Bits] -- {5B65EF64-1DFA-414A-8C94-7BB726158E21}
O42 - Logiciel: Creative MediaSource 5 - (.Creative Technology Limited.) [HKLM][64Bits] -- {BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}
O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: CyberLink PowerDVD 9 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}
O42 - Logiciel: CyberLink PowerDVD 9 - (.CyberLink Corp..) [HKLM][64Bits] -- {A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
O42 - Logiciel: DWGeditor - (.SolidWorks.) [HKLM][64Bits] -- {56DCD20A-E558-4396-AF59-14D15AA737BB}
O42 - Logiciel: DiRT 3 - (.Codemasters.) [HKLM][64Bits] -- GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008200}
O42 - Logiciel: DiRT 3 - (.Codemasters.) [HKLM][64Bits] -- {434D0FA0-1558-4D8E-AC3D-BD1000008200}
O42 - Logiciel: EPSON SX210 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON SX210 Series
O42 - Logiciel: EPSON Scan - (...) [HKLM][64Bits] -- EPSON Scanner
O42 - Logiciel: EPSON Stylus SX400 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON Stylus SX400 Series
O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {87C2248A-C7DD-49ED-9BCD-B312A9D0819E}
O42 - Logiciel: Epson Event Manager - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- {48F22622-1CC2-4A83-9C1E-644DD96F832D}
O42 - Logiciel: Epson Stylus SX210_SX410_TX210_TX410 Manuel - (...) [HKLM][64Bits] -- Epson Stylus SX210_SX410_TX210_TX410 Guide d'utilisation
O42 - Logiciel: Express Gate - (.DeviceVM, Inc..) [HKLM][64Bits] -- {B5A5627C-0173-4DB2-ADA8-740479370F67}
O42 - Logiciel: Fast Boot - (.ASUS.) [HKLM][64Bits] -- {13F4A7F3-EABC-4261-AF6B-1317777F0755}
O42 - Logiciel: Firebird SQL Server - MAGIX Edition - (.MAGIX AG.) [HKLM][64Bits] -- {34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}
O42 - Logiciel: Fraps - (...) [HKLM][64Bits] -- Fraps
O42 - Logiciel: Gaming Mouse - (.ASUS.) [HKLM][64Bits] -- {C52DE33F-117A-4EC8-8A32-084E828D7B1E}
O42 - Logiciel: GanttProject - (...) [HKLM][64Bits] -- GanttProject
O42 - Logiciel: Google Talk Plugin - (.Google.) [HKLM][64Bits] -- {91B9368F-6C6F-3DB5-9CBA-6CAD56035B26}
O42 - Logiciel: Grand Theft Auto IV - (.Rockstar Games Inc..) [HKLM][64Bits] -- {5454083B-1308-4485-BF17-1110000D8301}
O42 - Logiciel: Grand Theft Auto IV - (.Rockstar Games.) [HKLM][64Bits] -- {579BA58C-F33D-4970-9953-B94B43768AC3}
O42 - Logiciel: Hitman Absolution - (...) [HKLM][64Bits] -- Hitman Absolution_is1
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Turbo Boost Technology Monitor - (.Intel.) [HKLM][64Bits] -- {39F4C6F9-618A-4E5B-8FB2-6BD661174E32}
O42 - Logiciel: JDownloader 0.9 - (.AppWork GmbH.) [HKLM][64Bits] -- 5513-1208-7298-9440
O42 - Logiciel: Java 7 Update 21 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217017FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: Logiciel d'archivage WinRAR - (...) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Logitech Gaming Software 5.10 - (.Logitech.) [HKLM][64Bits] -- {1444D2EE-C7AD-44A8-844F-2634B49353D1}
O42 - Logiciel: MAGIX Screenshare - (.MAGIX AG.) [HKLM][64Bits] -- {3677B336-9F6D-45DF-9543-C049E35EE590}
O42 - Logiciel: MAGIX Speed burnR (MSI) - (.MAGIX AG.) [HKLM][64Bits] -- {A72DAA6B-A81F-4EE5-B1B2-C7620888776B}
O42 - Logiciel: MAGIX Vid�o deluxe 17 Premium (Effets de transition) - (.MAGIX AG.) [HKLM][64Bits] -- {7AE635E5-932C-43A9-9EE7-0499BEDEB266}
O42 - Logiciel: MAGIX Vid�o deluxe 17 Premium (effets de titres) - (.MAGIX AG.) [HKLM][64Bits] -- {A53698E0-3A6E-408C-AA7C-7DFB4583C194}
O42 - Logiciel: MAGIX Vid�o deluxe 17 Premium Version � t�l�charger - (.MAGIX AG.) [HKLM][64Bits] -- MAGIX_MSI_Videodeluxe17_premium
O42 - Logiciel: MAGIX Vid�o deluxe 17 Premium Version � t�l�charger - (.MAGIX AG.) [HKLM][64Bits] -- {655513BD-A11F-4937-BCD4-A21E316E66AC}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2721691) - (.Microsoft Corporation.) [HKLM][64Bits] -- {355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB973685) - (.Microsoft Corporation.) [HKLM][64Bits] -- {859DFA95-E4A6-48CD-B88E-A3E483E89B44}
O42 - Logiciel: Media center Bbox - (.Bouygues T�l�com.) [HKLM][64Bits] -- {1A6D94E5-37D1-4F14-908B-61B7E08105B2}
O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}
O42 - Logiciel: Microsoft Games for Windows Marketplace - (.Microsoft Corporation.) [HKLM][64Bits] -- {4CB0307C-565E-4441-86BE-0DF2E4FB828C}
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {D954C6C2-544B-4091-A47F-11E77162883E}
O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {DC911ADF-7B60-40F2-A112-FB1EB6402D07}
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Xbox 360 Accessories 1.2 - (.Microsoft.) [HKLM][64Bits] -- {45CD67FD-3218-4207-A0A2-BC41245189E3}
O42 - Logiciel: Mobiola WebCamera for iPhone 2.2.0 - (.SHAPE Services.) [HKLM][64Bits] -- com.shapeservices.webcamera_iphone_is1
O42 - Logiciel: MozBackup 1.4.10 - (.Pavel Cvrcek.) [HKLM][64Bits] -- MozBackup
O42 - Logiciel: Mozilla Firefox 21.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 21.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: OpenAL - (...) [HKLM][64Bits] -- OpenAL
O42 - Logiciel: OpenOffice.org 3.1 - (.OpenOffice.org.) [HKLM][64Bits] -- {0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}
O42 - Logiciel: Outil de t�l�chargement USB/DVD Windows�7 - (.Microsoft Corporation.) [HKLM][64Bits] -- {5F8683B5-5056-411C-B808-B289E29E9BBB}
O42 - Logiciel: PDF Settings CS5 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A78FE97A-C0C8-49CE-89D0-EDD524A17392}
O42 - Logiciel: PhotoFiltre - (...) [HKLM][64Bits] -- PhotoFiltre
O42 - Logiciel: PhotoView 360 - (.SolidWorks Corporation.) [HKLM][64Bits] -- {736D2DAD-3D87-4CAA-8646-83D238AD68E0}
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM][64Bits] -- Picasa 3
O42 - Logiciel: PlayReady PC Runtime amd64 - (.Microsoft Corporation.) [HKLM][64Bits] -- {BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}
O42 - Logiciel: PunkBuster Services - (.Even Balance, Inc..) [HKLM][64Bits] -- PunkBusterSvc
O42 - Logiciel: Rapture3D 2.4.8 Game - (.Blue Ripple Sound.) [HKLM][64Bits] -- {D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Recuva - (.Piriform.) [HKLM][64Bits] -- Recuva
O42 - Logiciel: RocketDock 1.3.5 - (.Punk Software.) [HKLM][64Bits] -- RocketDock_is1
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM][64Bits] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}
O42 - Logiciel: Skype� 5.10 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}
O42 - Logiciel: SolidWorks 2010 x64 Edition SP02.1 - (.SolidWorks Corporation.) [HKLM][64Bits] -- SolidWorks Installation Manager 20100-40201-1100-100
O42 - Logiciel: SolidWorks 2010 x64 Edition SP02.1 - (.SolidWorks.) [HKLM][64Bits] -- {E9173A5F-22A6-4152-848E-45851DB99162}
O42 - Logiciel: SolidWorks Explorer 2010 SP02.1 x64 Edition - (.SolidWorks Corporation.) [HKLM][64Bits] -- {2D8D14CC-5B31-44B9-87FC-BEC3D8AFFD1D}
O42 - Logiciel: SolidWorks Flow Simulation 2010 SP02.1 x64 Edition - (.SolidWorks Corporation.) [HKLM][64Bits] -- {792F51F9-C200-445D-AC7A-15C2F082A715}
O42 - Logiciel: SolidWorks eDrawings 2010 - (.Dassault Syst�mes SolidWorks Corp..) [HKLM][64Bits] -- {A786161E-959C-4B4B-AA6D-7424C13CCCF2}
O42 - Logiciel: Sound Blaster Audigy HD - (.Creative Technology Limited.) [HKLM][64Bits] -- {38F8D823-008D-4E5A-BBCE-867A86C2BF2B}
O42 - Logiciel: SpeedFan (remove only) - (...) [HKLM][64Bits] -- SpeedFan
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: TI Connect 1.6 - (.Texas Instruments Incorporated.) [HKLM][64Bits] -- {A8B94669-8654-4126-BD28-D0D2412CDED6}
O42 - Logiciel: Test Drive Unlimited - (.Nom de votre soci�t�.) [HKLM][64Bits] -- {C37A0BC1-52EE-4F97-8223-5CA9FC0357B0}
O42 - Logiciel: Test Drive Unlimited 2 - (.Atari.) [HKLM][64Bits] -- Test Drive Unlimited 2_is1
O42 - Logiciel: TmNationsForever - (.Nadeo.) [HKLM][64Bits] -- TmNationsForever_is1
O42 - Logiciel: USB 2.0 2.0M UVC WebCam - (...) [HKLM][64Bits] -- USB 2.0 2.0M UVC WebCam
O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU][64Bits] -- UnityWebPlayer
O42 - Logiciel: VLC media player 2.0.3 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: VMware Workstation - (.VMware, Inc.) [HKLM][64Bits] -- VMware_Workstation
O42 - Logiciel: VMware Workstation - (.VMware, Inc..) [HKLM][64Bits] -- {0D94F75A-0EA6-4951-B3AF-B145FA9E05C6}
O42 - Logiciel: VmciSockets - (.VMware, Inc..) [HKLM][64Bits] -- {A1F2E701-F148-4359-84CF-4CDA51FDF55F}
O42 - Logiciel: WBFS Manager 3.0 - (.AlexDP.) [HKLM][64Bits] -- WBFS Manager 3.0
O42 - Logiciel: WIDCOMM Bluetooth Software - (.Broadcom Corporation.) [HKLM][64Bits] -- {9E9D49A4-1DF4-4138-B7DB-5D87A893088E}
O42 - Logiciel: WinFlash - (.ASUS.) [HKLM][64Bits] -- {8F21291E-0444-4B1D-B9F9-4370A73E346D}
O42 - Logiciel: WinSCP 4.3.7 - (.Martin Prikryl.) [HKLM][64Bits] -- winscp3_is1
O42 - Logiciel: Windows Driver Package - Broadcom Bluetooth  (07/17/2009 6.2.0.9403) - (.Broadcom.) [HKLM][64Bits] -- F9FD5BBF579A4BFD40D38BE291F731666B27DC28
O42 - Logiciel: Windows Driver Package - Broadcom Bluetooth  (07/29/2009 6.1.7100.0) - (.Broadcom.) [HKLM][64Bits] -- 2AA10AB519DC7432D599A0E860206A7DDCC27764
O42 - Logiciel: Windows Driver Package - Broadcom HIDClass  (06/11/2009 6.2.0.9500) - (.Broadcom.) [HKLM][64Bits] -- 0E74EB10C05C955C24243E6D3120CDC972FC5B1D
O42 - Logiciel: Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB  (06/11/2009 - (.Texas Instruments Inc..) [HKLM][64Bits] -- EC3E466026556D3EB760B01C4772277614354E11
O42 - Logiciel: Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB  (09/02/2009 - (.Texas Instruments Inc..) [HKLM][64Bits] -- 7511B29C86C398B4D11A0B0E4176CAD68D1B7057
O42 - Logiciel: Wireless Console 3 - (.ASUS.) [HKLM][64Bits] -- {20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}
O42 - Logiciel: Worms Revolution - (...) [HKLM][64Bits] -- Worms Revolution_is1
O42 - Logiciel: XnView 1.96 - (.Gougelet Pierre-e.) [HKLM][64Bits] -- XnView_is1
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {0225AD21-F3E2-4916-BFF3-65D3F9052582}
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
O42 - Logiciel: tools-freebsd - (.VMware, Inc..) [HKLM][64Bits] -- {003BFBBD-6C67-419E-A24D-0DCAFC3A5249}
O42 - Logiciel: tools-linux - (.VMware, Inc..) [HKLM][64Bits] -- {D102611A-6466-4101-A51D-51069303AC65}
O42 - Logiciel: tools-netware - (.VMware, Inc..) [HKLM][64Bits] -- {197597A7-AD33-4898-9D8E-73066818B464}
O42 - Logiciel: tools-solaris - (.VMware, Inc..) [HKLM][64Bits] -- {AB1C87CB-1807-4CF0-B4C2-CEE14C18CDB4}
O42 - Logiciel: tools-winPre2k - (.VMware, Inc..) [HKLM][64Bits] -- {AE0F62A7-A1A2-407F-9F4C-48939BD9AD8D}
O42 - Logiciel: tools-windows - (.VMware, Inc..) [HKLM][64Bits] -- {FFD9383C-01D5-4897-A954-43AF599AED30}
~ Logic: 265 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\ASUS]
[HKCU\Software\ATI]
[HKCU\Software\ATK0100]
[HKCU\Software\AVS4YOU]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow\Software\Macromedia]
[HKCU\Software\AppDataLow\Software\Unity]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Audacity]
[HKCU\Software\Blizzard Entertainment]
[HKCU\Software\BlueRippleSound]
[HKCU\Software\CamStudioOpenSource for Nick]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\ComodoGroup]
[HKCU\Software\Creative Tech]
[HKCU\Software\CyberLink]
[HKCU\Software\DSS]
[HKCU\Software\DT Soft]
[HKCU\Software\Digital River]
[HKCU\Software\Disc Soft]
[HKCU\Software\ECAREME]
[HKCU\Software\EPSON]
[HKCU\Software\EaseUS]
[HKCU\Software\EpmNewsInfo]
[HKCU\Software\FLT]
[HKCU\Software\Fraps3]
[HKCU\Software\GameSpy]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IGA]
[HKCU\Software\IM Providers]
[HKCU\Software\InstallCore]   =>PUP.InstallCore
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\JumiTech]
[HKCU\Software\Lake]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Logitech]
[HKCU\Software\MAGIX AG]
[HKCU\Software\MCAFEE]
[HKCU\Software\Macromedia]
[HKCU\Software\Magix]
[HKCU\Software\MainConcept (Consumer)]
[HKCU\Software\MainConcept]
[HKCU\Software\Martin Prikryl]
[HKCU\Software\MimarSinan]
[HKCU\Software\Mozilla Backup]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\ORL]
[HKCU\Software\Oberon Media]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\RocketDock]
[HKCU\Software\SEIKO EPSON]
[HKCU\Software\SHAPE Services]
[HKCU\Software\SSSI]
[HKCU\Software\SecuROM]
[HKCU\Software\Skype]
[HKCU\Software\Smart Projects]
[HKCU\Software\SolidWorks]
[HKCU\Software\SpeedFan]
[HKCU\Software\Stardock]
[HKCU\Software\Synaptics]
[HKCU\Software\TeleCharger]
[HKCU\Software\Texas Instruments]
[HKCU\Software\Trolltech]
[HKCU\Software\Unity]
[HKCU\Software\VMware, Inc.]
[HKCU\Software\Valve]
[HKCU\Software\Widcomm]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\Xara]
[HKCU\Software\e-academy Inc.]
[HKCU\Software\eDrawings]
[HKCU\Software\ej-technologies]
[HKCU\Software\i-FunBox.com]
[HKCU\Software\shockwave.com]
[HKCU\Software\srac]
[HKCU\Software\techPowerUp]
[HKCU\Software\testapp]
[HKLM\Software\AMD]
[HKLM\Software\ASUS]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\ATK0100]
[HKLM\Software\Adobe]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\ComodoGroup]
[HKLM\Software\CoreSecurity]
[HKLM\Software\Creative Tech]
[HKLM\Software\Cyberlink]
[HKLM\Software\DeviceVM]
[HKLM\Software\ECAREME]
[HKLM\Software\EPSON]
[HKLM\Software\FLEXlm License Manager]
[HKLM\Software\GEAR Software]
[HKLM\Software\Google]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\Khronos]
[HKLM\Software\Logitech]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Martin Prikryl]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SONIX]
[HKLM\Software\SRS Labs]
[HKLM\Software\SolidWorks]
[HKLM\Software\Sonic]
[HKLM\Software\Srac]
[HKLM\Software\Synaptics]
[HKLM\Software\Tarma Installer]   =>Toolbar.Tarma
[HKLM\Software\VMware, Inc.]
[HKLM\Software\Waves Audio]
[HKLM\Software\Widcomm]
[HKLM\Software\WinRAR]
[HKLM\Software\Wow6432Node\AGEIA Technologies]
[HKLM\Software\Wow6432Node\ASUS]
[HKLM\Software\Wow6432Node\ATI Technologies]
[HKLM\Software\Wow6432Node\ATI]
[HKLM\Software\Wow6432Node\AVS4YOU]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AppDataLow]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\AsLdr]
[HKLM\Software\Wow6432Node\Atari]
[HKLM\Software\Wow6432Node\Auran]
[HKLM\Software\Wow6432Node\Autodesk]
[HKLM\Software\Wow6432Node\BioWare]
[HKLM\Software\Wow6432Node\BlueRippleSound]
[HKLM\Software\Wow6432Node\Bouygues T�l�com]
[HKLM\Software\Wow6432Node\Bunndle]
[HKLM\Software\Wow6432Node\CDDB]
[HKLM\Software\Wow6432Node\CODEMASTERS]
[HKLM\Software\Wow6432Node\Caphyon]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Creative Labs]
[HKLM\Software\Wow6432Node\Creative Tech]
[HKLM\Software\Wow6432Node\CyberLink]
[HKLM\Software\Wow6432Node\DT Soft]
[HKLM\Software\Wow6432Node\Debug]
[HKLM\Software\Wow6432Node\DeviceVM]
[HKLM\Software\Wow6432Node\Disc Soft]
[HKLM\Software\Wow6432Node\DivXNetworks]
[HKLM\Software\Wow6432Node\EASEUS]
[HKLM\Software\Wow6432Node\ECAREME]
[HKLM\Software\Wow6432Node\EPSON]
[HKLM\Software\Wow6432Node\Electronic Arts]
[HKLM\Software\Wow6432Node\Even Balance]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\InstallShield]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\InterVideo]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\Lake]
[HKLM\Software\Wow6432Node\Logitech]
[HKLM\Software\Wow6432Node\MAGIX]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Macrovision]
[HKLM\Software\Wow6432Node\Martin Prikryl]
[HKLM\Software\Wow6432Node\McAfee.com]
[HKLM\Software\Wow6432Node\MimarSinan]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Oberon Media]
[HKLM\Software\Wow6432Node\OpenOffice.org]
[HKLM\Software\Wow6432Node\Persits Software]
[HKLM\Software\Wow6432Node\PoINT]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\PowerDVD9_Upgrade]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Rockstar Games]
[HKLM\Software\Wow6432Node\SHAPE Services]
[HKLM\Software\Wow6432Node\SRAC]
[HKLM\Software\Wow6432Node\Sierra]
[HKLM\Software\Wow6432Node\Silicon Laboratories, Inc.]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\SolidWorks Corporation]
[HKLM\Software\Wow6432Node\SolidWorks]
[HKLM\Software\Wow6432Node\Sonic]
[HKLM\Software\Wow6432Node\Stardock]
[HKLM\Software\Wow6432Node\Symantec]
[HKLM\Software\Wow6432Node\Systray]
[HKLM\Software\Wow6432Node\Team17]
[HKLM\Software\Wow6432Node\Texas Instruments]
[HKLM\Software\Wow6432Node\ThinPrint]
[HKLM\Software\Wow6432Node\VMware, Inc.]
[HKLM\Software\Wow6432Node\Valve]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\WinRAR]
[HKLM\Software\Wow6432Node\Wondershare]
[HKLM\Software\Wow6432Node\Xara]
[HKLM\Software\Wow6432Node\XnView]
[HKLM\Software\Wow6432Node\eDrawings]
[HKLM\Software\Wow6432Node\ej-technologies]
[HKLM\Software\Wow6432Node\mcafeeupdater]
[HKLM\Software\Wow6432Node\media center Bouygues Telecom]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
~ Key Software: 339 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 22/08/2012 - 23:58:55 - [509,058] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 15/04/2012 - 19:29:33 - [7,133] ----D C:\Program Files (x86)\AGEIA Technologies
O43 - CFD: 14/04/2013 - 17:59:28 - [2,145] ----D C:\Program Files (x86)\AMD APP
O43 - CFD: 14/04/2013 - 17:59:30 - [0,397] ----D C:\Program Files (x86)\AMD AVT
O43 - CFD: 23/04/2010 - 07:04:15 - [2,896] ----D C:\Program Files (x86)\AmIcoSingLun
O43 - CFD: 14/04/2012 - 23:35:10 - [2,316] ----D C:\Program Files (x86)\Apple Software Update
O43 - CFD: 02/07/2012 - 20:56:45 - [12,550] ----D C:\Program Files (x86)\Arcus Technology
O43 - CFD: 26/03/2013 - 23:24:43 - [13,076] ----D C:\Program Files (x86)\Astroburn Lite
O43 - CFD: 09/05/2012 - 16:32:43 - [151,333] ----D C:\Program Files (x86)\ASUS
O43 - CFD: 19/02/2013 - 14:43:22 - [313,988] ----D C:\Program Files (x86)\Atari
O43 - CFD: 14/04/2013 - 15:32:03 - [59,541] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 16/05/2010 - 15:51:10 - [29,376] ----D C:\Program Files (x86)\Audacity 1.3 Beta (Unicode)
O43 - CFD: 15/04/2012 - 04:26:15 - [64,691] ----D C:\Program Files (x86)\AVS4YOU
O43 - CFD: 25/02/2013 - 03:07:55 - [0,602] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 13/08/2012 - 14:48:55 - [7,576] ----D C:\Program Files (x86)\BRS
O43 - CFD: 04/04/2013 - 20:51:40 - [20,420] ----D C:\Program Files (x86)\CamStudio 2.7
O43 - CFD: 22/05/2013 - 16:30:59 - [11,329] ----D C:\Program Files (x86)\CCleaner   =>Piriform Ltd
O43 - CFD: 23/04/2013 - 14:15:13 - [1104,386] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 23/04/2010 - 07:03:32 - [55,371] ----D C:\Program Files (x86)\Creative
O43 - CFD: 23/04/2010 - 07:04:02 - [23,578] --H-D C:\Program Files (x86)\Creative Installation Information
O43 - CFD: 23/04/2010 - 06:22:03 - [455,104] ----D C:\Program Files (x86)\CyberLink
O43 - CFD: 17/03/2013 - 07:58:10 - [25,855] ----D C:\Program Files (x86)\DAEMON Tools Lite
O43 - CFD: 23/04/2010 - 07:04:35 - [308,985] ----D C:\Program Files (x86)\Downloaded Installations
O43 - CFD: 13/03/2013 - 23:37:47 - [7,337] --H-D C:\Program Files (x86)\Dr.Fone_Temp
O43 - CFD: 04/05/2013 - 12:16:24 - [0] ----D C:\Program Files (x86)\EaseUS
O43 - CFD: 18/04/2012 - 18:55:40 - [19,723] ----D C:\Program Files (x86)\epson
O43 - CFD: 18/04/2012 - 18:57:42 - [114,305] ----D C:\Program Files (x86)\Epson Software
O43 - CFD: 31/03/2013 - 16:56:17 - [14,204] ----D C:\Program Files (x86)\Gaming Mouse
O43 - CFD: 18/03/2013 - 16:11:52 - [12,606] ----D C:\Program Files (x86)\GanttProject-2.5
O43 - CFD: 14/04/2012 - 23:16:48 - [76,996] ----D C:\Program Files (x86)\Google
O43 - CFD: 19/02/2013 - 21:30:11 - [0] ----D C:\Program Files (x86)\i-Funbox DevTeam
O43 - CFD: 31/03/2013 - 16:56:14 - [129,323] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 23/04/2010 - 06:55:53 - [12,384] ----D C:\Program Files (x86)\Intel
O43 - CFD: 18/05/2013 - 17:03:33 - [4,885] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 25/02/2013 - 03:11:58 - [154,781] ----D C:\Program Files (x86)\iTunes
O43 - CFD: 23/04/2013 - 14:06:24 - [122,344] ----D C:\Program Files (x86)\Java
O43 - CFD: 15/03/2013 - 00:00:40 - [64,864] ----D C:\Program Files (x86)\JDownloader
O43 - CFD: 16/05/2010 - 14:48:51 - [15,892] ----D C:\Program Files (x86)\JRE
O43 - CFD: 24/05/2012 - 13:37:40 - [8,469] ----D C:\Program Files (x86)\Jumi
O43 - CFD: 01/07/2012 - 01:15:22 - [10,334] ----D C:\Program Files (x86)\Logitech
O43 - CFD: 01/08/2012 - 13:38:33 - [51,661] ----D C:\Program Files (x86)\MAGIX
O43 - CFD: 04/03/2013 - 00:16:42 - [57,933] ----D C:\Program Files (x86)\Media center Bbox
O43 - CFD: 30/03/2013 - 15:55:27 - [30,207] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 16/04/2012 - 01:17:41 - [0] ----D C:\Program Files (x86)\Microsoft Antimalware
O43 - CFD: 17/04/2012 - 05:18:45 - [0,764] ----D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 20/02/2013 - 21:05:14 - [8,929] ----D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
O43 - CFD: 17/04/2012 - 15:04:37 - [578,635] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 19/02/2013 - 21:20:15 - [1,252] ----D C:\Program Files (x86)\Microsoft Security Client
O43 - CFD: 14/03/2013 - 06:21:56 - [40,835] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 15/05/2010 - 04:43:23 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 15/04/2012 - 04:19:41 - [0,014] ----D C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 15/04/2012 - 19:27:44 - [54,040] ----D C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 16/04/2012 - 01:11:02 - [3,554] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 16/04/2012 - 09:14:58 - [7,789] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 23/04/2013 - 14:15:53 - [15,575] ----D C:\Program Files (x86)\Mobiola WebCamera for iPhone
O43 - CFD: 14/04/2012 - 22:48:01 - [1,294] ----D C:\Program Files (x86)\MozBackup
O43 - CFD: 24/05/2013 - 13:07:10 - [50,948] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 27/05/2013 - 20:38:51 - [0,214] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 15/04/2012 - 04:19:50 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 15/04/2012 - 19:27:03 - [19,263] ----D C:\Program Files (x86)\MSECache
O43 - CFD: 23/04/2010 - 06:53:58 - [0,147] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 19/02/2013 - 02:18:55 - [5,439] ----D C:\Program Files (x86)\Object Desktop
O43 - CFD: 13/08/2012 - 14:48:52 - [0,772] ----D C:\Program Files (x86)\OpenAL
O43 - CFD: 16/05/2010 - 14:48:51 - [346,667] ----D C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 16/05/2010 - 15:54:47 - [3,389] ----D C:\Program Files (x86)\PhotoFiltre
O43 - CFD: 14/06/2012 - 10:56:28 - [0] ----D C:\Program Files (x86)\Program Files (x86)
O43 - CFD: 23/04/2010 - 07:00:56 - [4,526] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 09:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 16/05/2010 - 15:42:14 - [11,655] ----D C:\Program Files (x86)\RocketDock
O43 - CFD: 29/05/2012 - 22:34:03 - [46,079] R---D C:\Program Files (x86)\Skype
O43 - CFD: 15/04/2012 - 19:32:36 - [0,187] ----D C:\Program Files (x86)\SolidWorksx86
O43 - CFD: 29/05/2013 - 08:18:15 - [5,590] ----D C:\Program Files (x86)\SpeedFan
O43 - CFD: 22/05/2013 - 16:32:15 - [466,850] ----D C:\Program Files (x86)\Steam
O43 - CFD: 23/04/2010 - 07:01:16 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 13/03/2013 - 13:00:24 - [0,000] ----D C:\Program Files (x86)\The KMPlayer FR
O43 - CFD: 13/05/2012 - 19:15:46 - [14,339] ----D C:\Program Files (x86)\TI Education
O43 - CFD: 14/07/2009 - 08:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 12/09/2012 - 14:45:03 - [92,145] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 04/05/2013 - 12:30:38 - [722,712] ----D C:\Program Files (x86)\VMware
O43 - CFD: 14/04/2012 - 21:45:00 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 30/06/2012 - 16:07:19 - [148,694] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 17/04/2012 - 15:19:18 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 17/04/2012 - 15:19:18 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 09:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 17/04/2012 - 15:19:17 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 17/04/2012 - 15:19:18 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 17/04/2012 - 15:19:18 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 07/05/2012 - 00:41:28 - [8,800] ----D C:\Program Files (x86)\WinSCP
O43 - CFD: 13/03/2013 - 23:37:45 - [0] ----D C:\Program Files (x86)\Wondershare
O43 - CFD: 16/05/2010 - 15:59:38 - [32,953] ----D C:\Program Files (x86)\XnView
O43 - CFD: 29/05/2013 - 12:46:42 - [16,792] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 27/05/2012 - 12:51:34 - [309,750] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 04/03/2013 - 00:16:03 - [44,205] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 25/02/2013 - 03:11:24 - [147,614] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 14/04/2013 - 17:59:30 - [2,238] ----D C:\Program Files (x86)\Common Files\ATI Technologies
O43 - CFD: 15/04/2012 - 04:25:56 - [92,122] ----D C:\Program Files (x86)\Common Files\AVSMedia
O43 - CFD: 14/04/2012 - 23:23:11 - [0,259] ----D C:\Program Files (x86)\Common Files\ControlDeck
O43 - CFD: 23/04/2010 - 07:03:27 - [3,054] ----D C:\Program Files (x86)\Common Files\Creative
O43 - CFD: 23/04/2010 - 07:03:17 - [0,151] ----D C:\Program Files (x86)\Common Files\Creative Labs Shared
O43 - CFD: 23/04/2010 - 06:17:39 - [0,132] ----D C:\Program Files (x86)\Common Files\CyberLink
O43 - CFD: 15/04/2012 - 19:29:33 - [0,195] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 15/04/2012 - 19:12:24 - [37,125] ----D C:\Program Files (x86)\Common Files\Gestionnaire d'installation SolidWorks
O43 - CFD: 18/04/2012 - 18:56:17 - [12,036] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 23/04/2013 - 14:06:32 - [1,189] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 16/05/2010 - 15:51:51 - [0,827] ----D C:\Program Files (x86)\Common Files\Macrovision Shared
O43 - CFD: 01/08/2012 - 13:38:14 - [11,146] ----D C:\Program Files (x86)\Common Files\MAGIX Services
O43 - CFD: 01/08/2012 - 13:40:31 - [1,700] ----D C:\Program Files (x86)\Common Files\MAGIX Shared
O43 - CFD: 30/06/2012 - 16:05:18 - [263,034] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 23/04/2010 - 06:45:46 - [0,338] ----D C:\Program Files (x86)\Common Files\Oberon Media
O43 - CFD: 23/04/2010 - 06:55:56 - [0,159] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 14/07/2009 - 07:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 23/04/2013 - 14:15:33 - [0,426] ----D C:\Program Files (x86)\Common Files\SHAPE Services
O43 - CFD: 29/05/2012 - 22:33:39 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 15/04/2012 - 19:39:25 - [51,727] ----D C:\Program Files (x86)\Common Files\SolidWorks Shared
O43 - CFD: 14/07/2009 - 07:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 19/02/2013 - 02:47:34 - [0] ----D C:\Program Files (x86)\Common Files\Stardock
O43 - CFD: 20/02/2013 - 23:45:44 - [0,302] ----D C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 17/04/2012 - 15:19:17 - [47,878] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 13/05/2012 - 19:15:48 - [10,246] ----D C:\Program Files (x86)\Common Files\TI Shared
O43 - CFD: 27/03/2013 - 22:34:18 - [8,022] ----D C:\Program Files (x86)\Common Files\VMware
O43 - CFD: 15/05/2010 - 04:41:04 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 13/05/2012 - 19:14:10 - [14,179] ----D C:\Program Files (x86)\Common Files\Wise Installation Wizard
O43 - CFD: 13/03/2013 - 12:51:31 - [3,074] ----D C:\Program Files (x86)\Common Files\Wondershare
O43 - CFD: 25/02/2013 - 03:12:02 - [2,775] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 21/04/2013 - 18:09:07 - [399,026] ----D C:\ProgramData\Adobe
O43 - CFD: 14/04/2013 - 17:59:31 - [0] ----D C:\ProgramData\AMD
O43 - CFD: 23/04/2010 - 07:04:14 - [0,000] ----D C:\ProgramData\AmUStor
O43 - CFD: 14/04/2012 - 23:35:12 - [210,736] ----D C:\ProgramData\Apple
O43 - CFD: 14/04/2012 - 23:35:42 - [58,846] ----D C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 26/03/2013 - 23:24:41 - [0,001] ----D C:\ProgramData\Astroburn Lite
O43 - CFD: 16/05/2010 - 13:31:22 - [0,134] ----D C:\ProgramData\ASUS
O43 - CFD: 19/02/2013 - 21:28:02 - [0,002] ----D C:\ProgramData\ASUS WebStorage
O43 - CFD: 14/04/2013 - 18:09:06 - [0,000] ----D C:\ProgramData\ATI
O43 - CFD: 15/04/2012 - 04:26:33 - [0] ----D C:\ProgramData\AVS4YOU
O43 - CFD: 13/06/2012 - 15:43:24 - [0] ----D C:\ProgramData\boost_interprocess
O43 - CFD: 14/08/2012 - 00:00:54 - [1899,844] ----D C:\ProgramData\Codemasters
O43 - CFD: 16/05/2010 - 15:34:54 - [0,132] ----D C:\ProgramData\Comodo
O43 - CFD: 23/04/2010 - 07:03:00 - [0,000] ----D C:\ProgramData\Creative
O43 - CFD: 23/04/2010 - 07:02:59 - [0,006] ----D C:\ProgramData\Creative Labs
O43 - CFD: 16/06/2012 - 00:30:45 - [0,080] ----D C:\ProgramData\CyberLink
O43 - CFD: 07/10/2012 - 21:11:38 - [0,002] ----D C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 02/04/2013 - 14:28:38 - [0] ----D C:\ProgramData\DassaultSystemes
O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 14/08/2012 - 00:00:55 - [0,010] -SH-D C:\ProgramData\DSS
O43 - CFD: 20/09/2012 - 20:20:30 - [15,579] ----D C:\ProgramData\EPSON
O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 26/09/2012 - 13:25:26 - [0] ----D C:\ProgramData\Flash Video Capture Data
O43 - CFD: 15/04/2012 - 19:48:58 - [0,004] ----D C:\ProgramData\FLEXnet
O43 - CFD: 16/05/2010 - 13:25:50 - [0] ----D C:\ProgramData\Google
O43 - CFD: 20/08/2012 - 19:17:38 - [0,035] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 01/08/2012 - 13:40:39 - [679,154] ----D C:\ProgramData\MAGIX
O43 - CFD: 12/06/2012 - 20:48:52 - [0] ----D C:\ProgramData\McAfee
O43 - CFD: 04/03/2013 - 00:17:13 - [174,284] ----D C:\ProgramData\media center Bouygues Telecom
O43 - CFD: 15/04/2013 - 21:40:24 - [1210,065] -S--D C:\ProgramData\Microsoft
O43 - CFD: 18/05/2013 - 00:56:44 - [0,236] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 04/05/2012 - 11:48:17 - [0,001] ----D C:\ProgramData\Mozilla
O43 - CFD: 23/04/2010 - 07:05:43 - [0,002] ----D C:\ProgramData\P4G
O43 - CFD: 16/05/2010 - 13:29:33 - [0,000] ----D C:\ProgramData\Partner
O43 - CFD: 23/04/2013 - 14:30:51 - [0,003] ----D C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 20/02/2013 - 21:09:05 - [0,069] -SH-D C:\ProgramData\SecuROM
O43 - CFD: 22/05/2013 - 16:18:33 - [68,176] ----D C:\ProgramData\Skype
O43 - CFD: 15/04/2012 - 19:33:47 - [834,147] ----D C:\ProgramData\SolidWorks
O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 29/09/2012 - 17:40:54 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 22/05/2013 - 16:32:00 - [1,195] ----D C:\ProgramData\Tarma Installer   =>Toolbar.Tarma
O43 - CFD: 16/06/2012 - 00:24:26 - [0,239] ---AD C:\ProgramData\Temp
O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 25/06/2012 - 15:03:38 - [6,055] ----D C:\ProgramData\Test Drive Unlimited
O43 - CFD: 02/07/2012 - 07:34:27 - [407,850] ----D C:\ProgramData\TmForever
O43 - CFD: 18/04/2012 - 18:58:19 - [0,003] ----D C:\ProgramData\UDL
O43 - CFD: 29/05/2013 - 08:18:31 - [7,927] ----D C:\ProgramData\VMware
O43 - CFD: 14/04/2012 - 23:36:33 - [0,002] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
O43 - CFD: 08/04/2013 - 22:39:52 - [24,904] ----D C:\Users\Guilhem\AppData\Roaming\Adobe
O43 - CFD: 19/02/2013 - 21:16:48 - [-205,815] ----D C:\Users\Guilhem\AppData\Roaming\Apple Computer
O43 - CFD: 19/02/2013 - 21:28:08 - [15,700] ----D C:\Users\Guilhem\AppData\Roaming\Asus WebStorage
O43 - CFD: 15/05/2010 - 04:47:44 - [0] ----D C:\Users\Guilhem\AppData\Roaming\ATI
O43 - CFD: 16/05/2010 - 15:52:00 - [0,001] ----D C:\Users\Guilhem\AppData\Roaming\Audacity
O43 - CFD: 15/04/2012 - 04:26:34 - [0] ----D C:\Users\Guilhem\AppData\Roaming\AVS4YOU
O43 - CFD: 22/05/2013 - 16:34:32 - [4,422] ----D C:\Users\Guilhem\AppData\Roaming\BitTorrent   =>P2P.BitTorrent
O43 - CFD: 04/03/2013 - 00:17:13 - [3,634] ----D C:\Users\Guilhem\AppData\Roaming\com.bouyguestelecom.mediacenter
O43 - CFD: 16/06/2012 - 00:05:50 - [0,284] ----D C:\Users\Guilhem\AppData\Roaming\CyberLink
O43 - CFD: 22/05/2013 - 16:32:16 - [1,505] ----D C:\Users\Guilhem\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 02/04/2013 - 14:28:39 - [0] ----D C:\Users\Guilhem\AppData\Roaming\DassaultSystemes
O43 - CFD: 07/10/2012 - 19:29:00 - [0,001] ----D C:\Users\Guilhem\AppData\Roaming\e-academy Inc
O43 - CFD: 19/02/2013 - 21:27:19 - [0] ----D C:\Users\Guilhem\AppData\Roaming\EeeStorageUploader
O43 - CFD: 19/04/2012 - 00:17:37 - [0,003] ----D C:\Users\Guilhem\AppData\Roaming\Epson
O43 - CFD: 26/09/2012 - 13:25:26 - [0,001] ----D C:\Users\Guilhem\AppData\Roaming\Flash Video Capture Data
O43 - CFD: 31/03/2013 - 16:56:20 - [0,000] ----D C:\Users\Guilhem\AppData\Roaming\Gaming Mouse
O43 - CFD: 13/03/2013 - 12:50:59 - [0] ----D C:\Users\Guilhem\AppData\Roaming\GetRightToGo
O43 - CFD: 16/05/2010 - 13:25:31 - [0] ----D C:\Users\Guilhem\AppData\Roaming\Google
O43 - CFD: 15/05/2010 - 04:47:18 - [0] ----D C:\Users\Guilhem\AppData\Roaming\Identities
O43 - CFD: 01/10/2012 - 22:45:42 - [0,002] ----D C:\Users\Guilhem\AppData\Roaming\iFunbox_UserCache
O43 - CFD: 18/04/2012 - 18:53:05 - [0] ----D C:\Users\Guilhem\AppData\Roaming\InstallShield
O43 - CFD: 16/05/2010 - 14:38:58 - [0,060] ----D C:\Users\Guilhem\AppData\Roaming\Macromedia
O43 - CFD: 01/08/2012 - 13:40:40 - [0,041] ----D C:\Users\Guilhem\AppData\Roaming\MAGIX
O43 - CFD: 14/07/2009 - 11:44:38 - [0] ----D C:\Users\Guilhem\AppData\Roaming\Media Center Programs
O43 - CFD: 03/10/2012 - 20:33:58 - [10,055] -S--D C:\Users\Guilhem\AppData\Roaming\Microsoft
O43 - CFD: 12/05/2013 - 16:13:29 - [132,343] ----D C:\Users\Guilhem\AppData\Roaming\Mozilla
O43 - CFD: 03/06/2012 - 12:36:38 - [2,138] ----D C:\Users\Guilhem\AppData\Roaming\OpenOffice.org
O43 - CFD: 15/04/2012 - 18:39:22 - [0,001] ----D C:\Users\Guilhem\AppData\Roaming\Rovio
O43 - CFD: 25/06/2012 - 13:21:11 - [0,010] R-H-D C:\Users\Guilhem\AppData\Roaming\SecuROM
O43 - CFD: 23/04/2013 - 14:15:53 - [0,033] ----D C:\Users\Guilhem\AppData\Roaming\SHAPE Services
O43 - CFD: 15/04/2012 - 18:44:50 - [8,984] ----D C:\Users\Guilhem\AppData\Roaming\Sierra
O43 - CFD: 22/05/2013 - 16:18:31 - [4,750] ----D C:\Users\Guilhem\AppData\Roaming\Skype
O43 - CFD: 08/04/2013 - 22:59:35 - [4,444] ----D C:\Users\Guilhem\AppData\Roaming\SolidWorks
O43 - CFD: 04/04/2013 - 22:19:22 - [0] ----D C:\Users\Guilhem\AppData\Roaming\SolidWorks 2010
O43 - CFD: 26/05/2012 - 02:51:05 - [0,002] ----D C:\Users\Guilhem\AppData\Roaming\Teeworlds
O43 - CFD: 19/02/2013 - 21:27:11 - [0] ----D C:\Users\Guilhem\AppData\Roaming\temp
O43 - CFD: 22/05/2013 - 16:01:42 - [0,078] ----D C:\Users\Guilhem\AppData\Roaming\vlc
O43 - CFD: 28/05/2013 - 11:44:43 - [0,003] ----D C:\Users\Guilhem\AppData\Roaming\VMware
O43 - CFD: 16/05/2010 - 15:49:06 - [0,000] ----D C:\Users\Guilhem\AppData\Roaming\WinRAR
O43 - CFD: 22/08/2012 - 23:58:49 - [16,260] ----D C:\Users\Guilhem\AppData\Local\Adobe
O43 - CFD: 14/04/2012 - 23:35:11 - [0] ----D C:\Users\Guilhem\AppData\Local\Apple
O43 - CFD: 19/02/2013 - 21:16:13 - [88,218] ----D C:\Users\Guilhem\AppData\Local\Apple Computer
O43 - CFD: 15/05/2010 - 04:40:39 - [0] ----D C:\Users\Guilhem\AppData\Local\Application Data
O43 - CFD: 26/03/2013 - 22:47:19 - [2,979] ----D C:\Users\Guilhem\AppData\Local\Apps
O43 - CFD: 16/05/2010 - 13:31:20 - [1,310] ----D C:\Users\Guilhem\AppData\Local\ASUS
O43 - CFD: 15/05/2010 - 04:47:44 - [0,090] ----D C:\Users\Guilhem\AppData\Local\ATI
O43 - CFD: 15/05/2010 - 04:47:52 - [0] ----D C:\Users\Guilhem\AppData\Local\Broadcom
O43 - CFD: 19/02/2013 - 15:54:39 - [25,800] ----D C:\Users\Guilhem\AppData\Local\CrashRpt
O43 - CFD: 16/06/2012 - 00:30:46 - [0,009] ----D C:\Users\Guilhem\AppData\Local\Cyberlink
O43 - CFD: 02/04/2013 - 14:28:38 - [0] ----D C:\Users\Guilhem\AppData\Local\DassaultSystemes
O43 - CFD: 14/06/2012 - 12:35:31 - [36,332] ----D C:\Users\Guilhem\AppData\Local\Downloaded Installations
O43 - CFD: 28/05/2013 - 10:08:23 - [2,789] ----D C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics
O43 - CFD: 20/02/2013 - 23:31:22 - [0,296] ----D C:\Users\Guilhem\AppData\Local\FLT
O43 - CFD: 02/10/2012 - 17:23:57 - [602,776] ----D C:\Users\Guilhem\AppData\Local\Google
O43 - CFD: 15/05/2010 - 04:40:39 - [0] ----D C:\Users\Guilhem\AppData\Local\Historique
O43 - CFD: 15/07/2012 - 19:09:22 - [0,005] ----D C:\Users\Guilhem\AppData\Local\libimobiledevice
O43 - CFD: 12/06/2012 - 20:49:07 - [0] ----D C:\Users\Guilhem\AppData\Local\Macromedia
O43 - CFD: 07/04/2013 - 00:09:44 - [0,002] ----D C:\Users\Guilhem\AppData\Local\MAGIX_AG
O43 - CFD: 25/04/2013 - 15:29:28 - [325,864] ----D C:\Users\Guilhem\AppData\Local\Microsoft
O43 - CFD: 29/05/2012 - 22:18:42 - [0,186] ----D C:\Users\Guilhem\AppData\Local\Microsoft Games
O43 - CFD: 15/04/2012 - 04:16:35 - [0] ----D C:\Users\Guilhem\AppData\Local\Microsoft Help
O43 - CFD: 16/05/2010 - 14:37:12 - [81,604] ----D C:\Users\Guilhem\AppData\Local\Mozilla
O43 - CFD: 15/05/2010 - 04:40:51 - [0,039] ----D C:\Users\Guilhem\AppData\Local\Power2Go
O43 - CFD: 04/04/2013 - 20:46:52 - [0] ----D C:\Users\Guilhem\AppData\Local\Programs
O43 - CFD: 26/05/2012 - 08:00:12 - [1,387] ----D C:\Users\Guilhem\AppData\Local\PunkBuster
O43 - CFD: 20/02/2013 - 21:01:36 - [0,003] ----D C:\Users\Guilhem\AppData\Local\Rockstar Games
O43 - CFD: 16/05/2010 - 13:27:12 - [0,272] ----D C:\Users\Guilhem\AppData\Local\Seven Zip
O43 - CFD: 29/05/2013 - 12:45:00 - [21,314] ----D C:\Users\Guilhem\AppData\Local\Temp
O43 - CFD: 15/05/2010 - 04:40:39 - [0] ----D C:\Users\Guilhem\AppData\Local\Temporary Internet Files
O43 - CFD: 28/09/2012 - 01:06:26 - [0,200] ----D C:\Users\Guilhem\AppData\Local\Unity
O43 - CFD: 15/05/2010 - 04:47:45 - [0,000] ----D C:\Users\Guilhem\AppData\Local\VirtualStore
O43 - CFD: 28/05/2013 - 11:41:01 - [0] ----D C:\Users\Guilhem\AppData\Local\VMware
O43 - CFD: 14/03/2013 - 00:04:15 - [0,003] ----D C:\Users\Guilhem\AppData\Local\WBFSManager
O43 - CFD: 02/10/2012 - 01:11:40 - [0,035] ----D C:\Users\Guilhem\AppData\Local\Windows Live
O43 - CFD: 13/03/2013 - 12:51:32 - [0,000] ----D C:\Users\Guilhem\AppData\Local\Wondershare
O43 - CFD: 01/08/2012 - 13:40:44 - [0,048] ----D C:\Users\Guilhem\AppData\Local\Xara
O43 - CFD: 14/07/2009 - 08:54:32 - [0,014] R---D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 18/05/2013 - 17:07:01 - [0,000] R---D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 25/06/2012 - 13:19:26 - [0,005] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atari
O43 - CFD: 15/04/2012 - 04:26:05 - [0,001] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
O43 - CFD: 16/05/2010 - 14:49:44 - [0,004] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner   =>Piriform Ltd
O43 - CFD: 23/04/2010 - 06:22:22 - [0,013] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
O43 - CFD: 16/06/2012 - 00:05:46 - [0,001] R---D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 9
O43 - CFD: 25/05/2012 - 00:15:46 - [0,002] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 03/05/2012 - 20:51:32 - [0,002] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jumi
O43 - CFD: 14/07/2009 - 08:49:38 - [0,001] R---D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 26/03/2013 - 22:47:20 - [0,004] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outil de t�l�chargement USB DVD Windows�7
O43 - CFD: 18/05/2013 - 17:07:01 - [0,001] R---D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 14/03/2013 - 00:01:12 - [0,001] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WBFS Manager
O43 - CFD: 16/05/2010 - 14:46:11 - [0,003] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ 5 Dossiers CLSID vides (CLSID Empty Folders)
~ Program Folder: 269 Scanned in 00mn 03s



---\\ Derniers fichiers modifi�s ou cr�es sous Windows et System32 (O44)
O44 - LFC:[MD5.6BCAF46E2B7FA9ACE92B4D39F3037C5C] - 29/05/2013 - 12:41:59 ---A- . (...) -- C:\Windows\SysNative\acovcnt.exe   [45056]
O44 - LFC:[MD5.587A3FB1590391FF0B7701BC531224AA] - 29/05/2013 - 12:41:59 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [2014289]
O44 - LFC:[MD5.E989BBF10DA0C4DB7BF0B8C7EDC9BABB] - 29/05/2013 - 12:41:59 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.6BCAF46E2B7FA9ACE92B4D39F3037C5C] - 29/05/2013 - 12:41:59 RSHAD . (...) -- C:\Windows\System32\acovcnt.exe   [45056]
O44 - LFC:[MD5.F6EA568CBA2CBD69E0A87F1646F5C290] - 29/05/2013 - 08:27:30 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI   [1565992]
O44 - LFC:[MD5.DF4225A7DCFAAF9A098F0AFEF3C41DCA] - 29/05/2013 - 08:27:30 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat   [108714]
O44 - LFC:[MD5.7C2DE9F40EB98DF03E17D19B240BFEAB] - 29/05/2013 - 08:27:30 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat   [133114]
O44 - LFC:[MD5.58165A3DB36C6199CF41950FDB5CA1F6] - 29/05/2013 - 08:27:30 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat   [621868]
O44 - LFC:[MD5.CD50D3F79669DE61182B556B54A4C010] - 29/05/2013 - 08:27:30 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat   [710192]
O44 - LFC:[MD5.F6EA568CBA2CBD69E0A87F1646F5C290] - 29/05/2013 - 08:27:30 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI   [1565992]
O44 - LFC:[MD5.DF4225A7DCFAAF9A098F0AFEF3C41DCA] - 29/05/2013 - 08:27:30 RSHAD . (...) -- C:\Windows\System32\perfc009.dat   [108714]
O44 - LFC:[MD5.7C2DE9F40EB98DF03E17D19B240BFEAB] - 29/05/2013 - 08:27:30 RSHAD . (...) -- C:\Windows\System32\perfc00C.dat   [133114]
O44 - LFC:[MD5.58165A3DB36C6199CF41950FDB5CA1F6] - 29/05/2013 - 08:27:30 RSHAD . (...) -- C:\Windows\System32\perfh009.dat   [621868]
O44 - LFC:[MD5.CD50D3F79669DE61182B556B54A4C010] - 29/05/2013 - 08:27:30 RSHAD . (...) -- C:\Windows\System32\perfh00C.dat   [710192]
O44 - LFC:[MD5.1AE2DAE4AC4FC493DC5276688DB3EF57] - 29/05/2013 - 08:16:47 ---A- . (...) -- C:\Windows\setupact.log   [504]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 22/05/2013 - 18:35:46 ---A- . (...) -- C:\Windows\setuperr.log   [0]
O44 - LFC:[MD5.76688CAD2D26762C9D61B1503A061B23] - 22/05/2013 - 18:35:25 ---A- . (...) -- C:\Windows\PFRO.log   [302]
O44 - LFC:[MD5.4411785A1BEB05122D69666FC6849235] - 18/05/2013 - 17:05:57 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT   [5142024]
O44 - LFC:[MD5.4411785A1BEB05122D69666FC6849235] - 18/05/2013 - 17:05:57 RSHAD . (...) -- C:\Windows\System32\FNTCACHE.DAT   [5142024]
O44 - LFC:[MD5.44FFF8BA70A459BDEEDDC881D36498E2] - 18/05/2013 - 00:52:13 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\SysNative\MRT.exe   [75016696]
O44 - LFC:[MD5.44FFF8BA70A459BDEEDDC881D36498E2] - 18/05/2013 - 00:52:13 RSHAD . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe   [75016696]
O44 - LFC:[MD5.9B2BB51ED6D28860A48CFF46FD6D3DC1] - 18/05/2013 - 00:47:39 ---A- . (.Microsoft Corporation - Microsoft� MSHTML Typelib.) -- C:\Windows\SysNative\mshtml.tlb   [2706432]
O44 - LFC:[MD5.9B2BB51ED6D28860A48CFF46FD6D3DC1] - 18/05/2013 - 00:47:39 ---A- . (.Microsoft Corporation - Microsoft� MSHTML Typelib.) -- C:\Windows\System32\mshtml.tlb   [2706432]
O44 - LFC:[MD5.FE6CB2001A8C2A85B617CD3FC85D8242] - 18/05/2013 - 00:47:37 ---A- . (.Microsoft Corporation - Moteur de l�interface utilisateur d�Interne.) -- C:\Windows\SysNative\ieui.dll   [526336]
O44 - LFC:[MD5.FE6CB2001A8C2A85B617CD3FC85D8242] - 18/05/2013 - 00:47:37 ---A- . (.Microsoft Corporation - Moteur de l�interface utilisateur d�Interne.) -- C:\Windows\System32\ieui.dll   [526336]
O44 - LFC:[MD5.42758AF68D3C4912C8D8A18088AD2555] - 18/05/2013 - 00:47:37 ---A- . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\SysNative\ie4uinit.exe   [51712]
O44 - LFC:[MD5.42758AF68D3C4912C8D8A18088AD2555] - 18/05/2013 - 00:47:37 RSHAD . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe   [51712]
O44 - LFC:[MD5.EC6E8273B6CB79CA5B7B00CA82D1FCEE] - 18/05/2013 - 00:47:36 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\SysNative\iesysprep.dll   [136704]
O44 - LFC:[MD5.EC6E8273B6CB79CA5B7B00CA82D1FCEE] - 18/05/2013 - 00:47:36 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\System32\iesysprep.dll   [136704]
O44 - LFC:[MD5.97588F2871E1FE8E3EB57B17B98DF03B] - 18/05/2013 - 00:47:36 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\Windows\SysNative\iesetup.dll   [67072]
O44 - LFC:[MD5.97588F2871E1FE8E3EB57B17B98DF03B] - 18/05/2013 - 00:47:36 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\Windows\System32\iesetup.dll   [67072]
O44 - LFC:[MD5.A197763AA7487807279AB61CD6835CEF] - 18/05/2013 - 00:47:36 ---A- . (.Microsoft Corporation - Registers custom PKEYs for IE.) -- C:\Windows\SysNative\RegisterIEPKEYs.exe   [89600]
O44 - LFC:[MD5.A197763AA7487807279AB61CD6835CEF] - 18/05/2013 - 00:47:36 ---A- . (.Microsoft Corporation - Registers custom PKEYs for IE.) -- C:\Windows\System32\RegisterIEPKEYs.exe   [89600]
O44 - LFC:[MD5.168602AB16D30D5D6E091CA609FC7E75] - 18/05/2013 - 00:47:36 ---A- . (.Microsoft Corporation - Traitement de RunOnce complet avec interfac.) -- C:\Windows\SysNative\iernonce.dll   [39936]
O44 - LFC:[MD5.168602AB16D30D5D6E091CA609FC7E75] - 18/05/2013 - 00:47:36 ---A- . (.Microsoft Corporation - Traitement de RunOnce complet avec interfac.) -- C:\Windows\System32\iernonce.dll   [39936]
O44 - LFC:[MD5.7DAA72F6C30D81EE31EC2BDC90054326] - 18/05/2013 - 00:47:35 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\SysNative\msfeeds.dll   [603136]
O44 - LFC:[MD5.7DAA72F6C30D81EE31EC2BDC90054326] - 18/05/2013 - 00:47:35 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll   [603136]
O44 - LFC:[MD5.9D6B9124B582F0FBF275B434CE5A672C] - 18/05/2013 - 00:47:35 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\SysNative\iertutil.dll   [2647552]
O44 - LFC:[MD5.9D6B9124B582F0FBF275B434CE5A672C] - 18/05/2013 - 00:47:35 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\System32\iertutil.dll   [2647552]
O44 - LFC:[MD5.E34F0440799F9A0F9DC4265F4ADA75C1] - 18/05/2013 - 00:47:33 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysNative\urlmon.dll   [1365504]
O44 - LFC:[MD5.E34F0440799F9A0F9DC4265F4ADA75C1] - 18/05/2013 - 00:47:33 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll   [1365504]
O44 - LFC:[MD5.772EC073332D1BA2DBEC32C6D063811A] - 18/05/2013 - 00:47:33 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\SysNative\jscript.dll   [855552]
O44 - LFC:[MD5.772EC073332D1BA2DBEC32C6D063811A] - 18/05/2013 - 00:47:33 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript.dll   [855552]
O44 - LFC:[MD5.2C96C695B6015042AC867EA419A45C20] - 18/05/2013 - 00:47:32 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\SysNative\jscript9.dll   [3958784]
O44 - LFC:[MD5.2C96C695B6015042AC867EA419A45C20] - 18/05/2013 - 00:47:32 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript9.dll   [3958784]
O44 - LFC:[MD5.254502230F2259D255D4149C235173B1] - 18/05/2013 - 00:47:31 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\SysNative\jsproxy.dll   [53248]
O44 - LFC:[MD5.254502230F2259D255D4149C235173B1] - 18/05/2013 - 00:47:31 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\System32\jsproxy.dll   [53248]
O44 - LFC:[MD5.27A9000C534AA9BADC9EE74940F50C6D] - 18/05/2013 - 00:47:30 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\SysNative\wininet.dll   [2242048]
O44 - LFC:[MD5.27A9000C534AA9BADC9EE74940F50C6D] - 18/05/2013 - 00:47:30 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll   [2242048]
O44 - LFC:[MD5.C56EF4C50A1FEED0CC9B7AE068CBBBBB] - 18/05/2013 - 00:47:27 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysNative\mshtml.dll   [19231232]
O44 - LFC:[MD5.C56EF4C50A1FEED0CC9B7AE068CBBBBB] - 18/05/2013 - 00:47:27 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll   [19231232]
O44 - LFC:[MD5.7F4F74880E0B586EB7A9E225C34B1296] - 18/05/2013 - 00:47:26 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\SysNative\ieframe.dll   [15404032]
O44 - LFC:[MD5.7F4F74880E0B586EB7A9E225C34B1296] - 18/05/2013 - 00:47:26 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\System32\ieframe.dll   [15404032]
O44 - LFC:[MD5.943F527DF79E6B400104341AA7023C75] - 17/05/2013 - 11:06:33 ---A- . (.Microsoft Corporation - Canonical Display Driver.) -- C:\Windows\SysNative\cdd.dll   [144384]
O44 - LFC:[MD5.943F527DF79E6B400104341AA7023C75] - 17/05/2013 - 11:06:33 RSHAD . (.Microsoft Corporation - Canonical Display Driver.) -- C:\Windows\System32\cdd.dll   [144384]
O44 - LFC:[MD5.AF2E16242AA723F68F461B6EAE2EAD3D] - 17/05/2013 - 11:06:33 RSHAD . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys   [983400]
O44 - LFC:[MD5.1F04CFB79DD5FB7694468CE3FB3DCC31] - 17/05/2013 - 11:06:33 RSHAD . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\Windows\System32\Drivers\dxgmms1.sys   [265064]
O44 - LFC:[MD5.1BFC94665BCA35F9001ADC7BFB167C63] - 17/05/2013 - 11:06:21 ---A- . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\SysNative\shell32.dll   [14172672]
O44 - LFC:[MD5.1BFC94665BCA35F9001ADC7BFB167C63] - 17/05/2013 - 11:06:21 ---A- . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll   [14172672]
O44 - LFC:[MD5.22A0AE97360C1B146FDD9AA55AC0E989] - 17/05/2013 - 11:06:20 ---A- . (.Microsoft Corporation - Biblioth�que d�objets et de contr�les de do.) -- C:\Windows\SysNative\shdocvw.dll   [197120]
O44 - LFC:[MD5.22A0AE97360C1B146FDD9AA55AC0E989] - 17/05/2013 - 11:06:20 ---A- . (.Microsoft Corporation - Biblioth�que d�objets et de contr�les de do.) -- C:\Windows\System32\shdocvw.dll   [197120]
O44 - LFC:[MD5.3EF480BFED1B5947A32585E30A58D4ED] - 17/05/2013 - 11:06:20 ---A- . (.Microsoft Corporation - Interface utilisateur d�authentification Wi.) -- C:\Windows\SysNative\authui.dll   [1930752]
O44 - LFC:[MD5.3EF480BFED1B5947A32585E30A58D4ED] - 17/05/2013 - 11:06:20 ---A- . (.Microsoft Corporation - Interface utilisateur d�authentification Wi.) -- C:\Windows\System32\authui.dll   [1930752]
O44 - LFC:[MD5.E948D1D42DC68923ABD75EEB5BCCD1D3] - 17/05/2013 - 11:06:19 ---A- . (.Microsoft Corporation - Interface utilisateur de consentement pour.) -- C:\Windows\SysNative\consent.exe   [111448]
O44 - LFC:[MD5.9D2A2369AB4B08A4905FE72DB104498F] - 17/05/2013 - 11:06:19 ---A- . (.Microsoft Corporation - Service Informations d�application.) -- C:\Windows\SysNative\appinfo.dll   [70144]
O44 - LFC:[MD5.E948D1D42DC68923ABD75EEB5BCCD1D3] - 17/05/2013 - 11:06:19 RSHAD . (.Microsoft Corporation - Interface utilisateur de consentement pour.) -- C:\Windows\System32\consent.exe   [111448]
O44 - LFC:[MD5.9D2A2369AB4B08A4905FE72DB104498F] - 17/05/2013 - 11:06:19 RSHAD . (.Microsoft Corporation - Service Informations d�application.) -- C:\Windows\System32\appinfo.dll   [70144]
O44 - LFC:[MD5.A11523523B31086DD760C0189C763359] - 17/05/2013 - 11:06:11 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\SysNative\win32k.sys   [3153920]
O44 - LFC:[MD5.FE90B750AB808FB9DD8FBB428B5FF83B] - 17/05/2013 - 11:06:11 ---A- . (.Microsoft Corporation - Service de configuration automatique WWAN.) -- C:\Windows\SysNative\wwansvc.dll   [230400]
O44 - LFC:[MD5.30B1489F2DCD8DC1AB6BB60CA6093615] - 17/05/2013 - 11:06:11 ---A- . (.Microsoft Corporation - WWAN Device Interface Module.) -- C:\Windows\SysNative\wwanprotdim.dll   [48640]
O44 - LFC:[MD5.A11523523B31086DD760C0189C763359] - 17/05/2013 - 11:06:11 RSHAD . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\System32\win32k.sys   [3153920]
O44 - LFC:[MD5.FE90B750AB808FB9DD8FBB428B5FF83B] - 17/05/2013 - 11:06:11 RSHAD . (.Microsoft Corporation - Service de configuration automatique WWAN.) -- C:\Windows\System32\wwansvc.dll   [230400]
O44 - LFC:[MD5.30B1489F2DCD8DC1AB6BB60CA6093615] - 17/05/2013 - 11:06:11 RSHAD . (.Microsoft Corporation - WWAN Device Interface Module.) -- C:\Windows\System32\wwanprotdim.dll   [48640]
~ Files: 73 Scanned in 00mn 12s



---\\ Derniers fichiers cr��s dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.562A7FD9C4ABA170C1CD45ECCF39E2F9] - 28/05/2013 - 09:57:28 ---A- - C:\Windows\Prefetch\ACRORD32.EXE-97743AA9.pf
O45 - LFCP:[MD5.3348E4F95BE7F163C56C07EABFE3B459] - 28/05/2013 - 11:23:53 ---A- - C:\Windows\Prefetch\DRVINST.EXE-4CB4314A.pf
O45 - LFCP:[MD5.5382B095D30878744DDDEA9C85332B10] - 28/05/2013 - 16:04:38 ---A- - C:\Windows\Prefetch\ADOBEARM.EXE-7105D3A2.pf
O45 - LFCP:[MD5.AE9B93F449C993EA932D317558FC2478] - 28/05/2013 - 16:04:38 ---A- - C:\Windows\Prefetch\ASUSWSPANEL.EXE-20229D6C.pf
O45 - LFCP:[MD5.089D4C884DAED8302AFD9BC5F2EC386F] - 28/05/2013 - 16:04:38 ---A- - C:\Windows\Prefetch\BINGDESKTOP.EXE-0F3DDC37.pf
O45 - LFCP:[MD5.D0127F04CD64E0147D4D183C7EBC0139] - 28/05/2013 - 16:04:38 ---A- - C:\Windows\Prefetch\KBFILTR.EXE-3F28552B.pf
O45 - LFCP:[MD5.22168BB6639B3C0FEB729E74FB5D4B60] - 28/05/2013 - 16:04:38 ---A- - C:\Windows\Prefetch\RAVCPL64.EXE-D6B4B613.pf
O45 - LFCP:[MD5.7E3D006930FE679C77B0FF48047447C8] - 28/05/2013 - 16:04:38 ---A- - C:\Windows\Prefetch\SWITCHBOARD.EXE-44EC7AA8.pf
O45 - LFCP:[MD5.3F42A9AE805976B0E7209187203A8351] - 28/05/2013 - 16:04:38 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf
O45 - LFCP:[MD5.AE6F8009BA4392313214B0D57F67D0DD] - 28/05/2013 - 16:05:01 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-C871F054.pf
O45 - LFCP:[MD5.51EA7CEAE735F4566F6D2E10A3C8DC85] - 28/05/2013 - 16:14:34 ---A- - C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf
O45 - LFCP:[MD5.3D1622ACF97326D2D8B99FB8A95D970C] - 28/05/2013 - 21:40:17 ---A- - C:\Windows\Prefetch\CLI.EXE-BB402402.pf
O45 - LFCP:[MD5.2899CDEDC3809B7DDF3865200332CFDC] - 28/05/2013 - 21:40:26 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:[MD5.F8A5B2EB0D2B8B133B1BFDBD5E0DA5AC] - 29/05/2013 - 07:29:09 ---A- - C:\Windows\Prefetch\C2C_SERVICE.EXE-76976284.pf
O45 - LFCP:[MD5.39748E6C68016C950151277B657AF316] - 29/05/2013 - 07:29:09 ---A- - C:\Windows\Prefetch\LMS.EXE-8C70F87D.pf
O45 - LFCP:[MD5.0AC116DDAD74AA398624F2A319C571A0] - 29/05/2013 - 07:29:09 ---A- - C:\Windows\Prefetch\MOBIOLAWAVESERVICE.EXE-42483F54.pf
O45 - LFCP:[MD5.2EA0B38685FEF653CA2557A8627FAF25] - 29/05/2013 - 07:29:09 ---A- - C:\Windows\Prefetch\PNKBSTRA.EXE-473DE145.pf
O45 - LFCP:[MD5.BB5608D563F1DB97F0822A188C23D358] - 29/05/2013 - 07:29:09 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-61AE5AB6.pf
O45 - LFCP:[MD5.A2AC64B972C10ACC7CA2C70014B62E81] - 29/05/2013 - 07:29:09 ---A- - C:\Windows\Prefetch\UPDATER.EXE-EA1310CB.pf
O45 - LFCP:[MD5.E7213E34D2E5DC80B40267C3C1EBA37D] - 29/05/2013 - 07:29:09 ---A- - C:\Windows\Prefetch\VMWARE-USBARBITRATOR64.EXE-167B3A0A.pf
O45 - LFCP:[MD5.435331D33933543EBA524FCFAD972065] - 29/05/2013 - 07:32:36 ---A- - C:\Windows\Prefetch\WINWORD.EXE-CEA9B574.pf
O45 - LFCP:[MD5.8C73AB26A00AE2222040D1D643E69D13] - 29/05/2013 - 07:32:39 ---A- - C:\Windows\Prefetch\SPLWOW64.EXE-297C4568.pf
O45 - LFCP:[MD5.F8561A00C63233E8D5E5A3C7758985BD] - 29/05/2013 - 07:43:11 ---A- - C:\Windows\Prefetch\AM_DELTA_PATCH_1.151.1013.0.E-995D0CCC.pf
O45 - LFCP:[MD5.53A756FB9500AB00E030505A2860A849] - 29/05/2013 - 07:43:11 ---A- - C:\Windows\Prefetch\MPSIGSTUB.EXE-6CB27A06.pf
O45 - LFCP:[MD5.E288BBC59885C3D1727EA6212EFA3722] - 29/05/2013 - 07:43:11 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf
O45 - LFCP:[MD5.B981F57B258F58F8886E1888F05A6F0C] - 29/05/2013 - 08:04:11 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.C8AAC38BBDCDE7795C25FFF43BD72ADE] - 29/05/2013 - 08:04:11 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.466A48E81E3AEF7E977AE54E0FB3513E] - 29/05/2013 - 08:04:12 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.4D5958D118E2BD0191ABF252CBA21F05] - 29/05/2013 - 08:04:12 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.F09254670B3E8069BEE4DFDB2F036BDD] - 29/05/2013 - 08:12:06 ---A- - C:\Windows\Prefetch\SNDVOL.EXE-5D4CC7D6.pf
O45 - LFCP:[MD5.41ECB74C4061E6D9E6F5520CCC8F62B0] - 29/05/2013 - 08:19:20 ---A- - C:\Windows\Prefetch\APSDAEMON.EXE-4484BAA6.pf
O45 - LFCP:[MD5.03CEA9F9F2366428E921B871862DE552] - 29/05/2013 - 08:19:20 ---A- - C:\Windows\Prefetch\ATKOSD2.EXE-8FADD2D9.pf
O45 - LFCP:[MD5.FCBB5DED311D4FA62B768EDD32B30A57] - 29/05/2013 - 08:19:20 ---A- - C:\Windows\Prefetch\DMEDIA.EXE-7CE60415.pf
O45 - LFCP:[MD5.5CE3070BE80C2B5B81886F3FB560A9CD] - 29/05/2013 - 08:19:20 ---A- - C:\Windows\Prefetch\HCONTROLUSER.EXE-79D3C58D.pf
O45 - LFCP:[MD5.FC879FA2DD9A6B5ACF721299D52B4185] - 29/05/2013 - 08:19:20 ---A- - C:\Windows\Prefetch\MUISTARTMENU.EXE-F128F39F.pf
O45 - LFCP:[MD5.6ED2FE7573C58AC37F2447E66CB828A2] - 29/05/2013 - 08:19:20 ---A- - C:\Windows\Prefetch\UPDREG.EXE-940B19FD.pf
O45 - LFCP:[MD5.DCA13D1CCD160BF9020D61A2C0C5530A] - 29/05/2013 - 08:19:20 ---A- - C:\Windows\Prefetch\VOLPANLU.EXE-6D0E90ED.pf
O45 - LFCP:[MD5.CB0C294FE18AEE6345A78A99DBD21CDC] - 29/05/2013 - 08:19:34 ---A- - C:\Windows\Prefetch\CONTROLDECK.EXE-1EFEC479.pf
O45 - LFCP:[MD5.24748D7C5C0CEA0BFE8045829A44FC63] - 29/05/2013 - 08:19:49 ---A- - C:\Windows\Prefetch\PRESENTATIONFONTCACHE.EXE-73BE9E78.pf
O45 - LFCP:[MD5.0DFE645F82D12523875F55BFF122D8AE] - 29/05/2013 - 08:20:44 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-57D17DAF.pf
O45 - LFCP:[MD5.119FEA2AB4E0B22079C95EC819CF4932] - 29/05/2013 - 08:20:44 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf
O45 - LFCP:[MD5.49038C6BF87D0DA9E6FC3CA4A2CBBE8A] - 29/05/2013 - 08:20:54 ---A- - C:\Windows\Prefetch\UNS.EXE-E6E49771.pf
O45 - LFCP:[MD5.17C31016322663B8DE398294C54D32D3] - 29/05/2013 - 08:21:40 ---A- - C:\Windows\Prefetch\WMIAPSRV.EXE-29F35ED0.pf
O45 - LFCP:[MD5.68696566950BA8DB44F28F608E3C2DFB] - 29/05/2013 - 08:22:23 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf
O45 - LFCP:[MD5.05C53D53EC9302CFC939B9F638EC8B98] - 29/05/2013 - 08:22:26 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-E2C2633A.pf
O45 - LFCP:[MD5.92FDDEF324B53A1CB53249C41D859581] - 29/05/2013 - 08:22:45 ---A- - C:\Windows\Prefetch\MOM.EXE-42E9F9DF.pf
O45 - LFCP:[MD5.5DAEA39447402D2BE26DABF929508684] - 29/05/2013 - 08:22:46 ---A- - C:\Windows\Prefetch\MMLOADDRV.EXE-4072A3B8.pf
O45 - LFCP:[MD5.B7FE6A66D794F3E2807D76B38EDA72FA] - 29/05/2013 - 08:22:49 ---A- - C:\Windows\Prefetch\CCC.EXE-B637C9BF.pf
O45 - LFCP:[MD5.4CE90B77CA679AE801114EAD16C02539] - 29/05/2013 - 08:24:12 ---A- - C:\Windows\Prefetch\WINRAR.EXE-94E7D80C.pf
O45 - LFCP:[MD5.46FE5C0ABD775510F0905AB09C8B1635] - 29/05/2013 - 08:24:40 ---A- - C:\Windows\Prefetch\CFPUPDAT.EXE-18E3EE2C.pf
O45 - LFCP:[MD5.56DA9460B69B5D512405B4C61E0DE1A1] - 29/05/2013 - 08:27:44 ---A- - C:\Windows\Prefetch\LIVEUPDT.EXE-DAF7AD9D.pf
O45 - LFCP:[MD5.EBE87D5EAAE38707E7E84C16D944C338] - 29/05/2013 - 08:30:16 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf
O45 - LFCP:[MD5.F5F2CE202A69B7D6AFD8ACE90F8DB8CC] - 29/05/2013 - 08:30:26 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-A3E35360.pf
O45 - LFCP:[MD5.F7C24131E104A32C96D63A682F6452D4] - 29/05/2013 - 08:32:25 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-E7777CC4.pf
O45 - LFCP:[MD5.84F2C6F7B46B6B50E836E0F8423290AF] - 29/05/2013 - 08:43:31 ---A- - C:\Windows\Prefetch\Layout.ini
O45 - LFCP:[MD5.4B9DBE64227AB25446748667B129240C] - 29/05/2013 - 08:46:41 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-411A328D.pf
O45 - LFCP:[MD5.A9D4755F74A2D3D03292855BBBA4D1EC] - 29/05/2013 - 08:46:43 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7AC6742A.pf
O45 - LFCP:[MD5.FB02B59101133EEA4C7D33C02A90504E] - 29/05/2013 - 08:53:41 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-230FC512.pf
O45 - LFCP:[MD5.30428AA564C52D151BF98289DE1A7D02] - 29/05/2013 - 08:53:42 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf
O45 - LFCP:[MD5.2523A2D00B7DEA510D608D82B96D727E] - 29/05/2013 - 08:53:42 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf
O45 - LFCP:[MD5.AFB9294DB3D9825C67A671BF48B75478] - 29/05/2013 - 08:56:00 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf
O45 - LFCP:[MD5.303A57052C8BE160F53F840874BCE248] - 29/05/2013 - 12:00:57 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf
O45 - LFCP:[MD5.1299D600D6427A526C7BB23F32CB813B] - 29/05/2013 - 12:01:21 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-DE9673F9.pf
O45 - LFCP:[MD5.6763ADDF4C9F1B80D21819535A1E80A5] - 29/05/2013 - 12:41:59 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-216D9C35.pf
O45 - LFCP:[MD5.DB27FBF37EA4E66BAC5E66AE85424D9B] - 29/05/2013 - 12:41:59 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf
O45 - LFCP:[MD5.79A83A2E86DF89A883DE7C478798C705] - 29/05/2013 - 12:42:02 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:[MD5.B64993E1CAF1C54A8CF8E5077BD00BB5] - 29/05/2013 - 12:42:04 ---A- - C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf
O45 - LFCP:[MD5.2BB59D15C3DC92822CADA649DF88B8BC] - 29/05/2013 - 12:42:09 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf
O45 - LFCP:[MD5.CC2493987E3D8ACECD25DD609768CDE3] - 29/05/2013 - 12:42:09 ---A- - C:\Windows\Prefetch\TRAY.EXE-8CB7B65D.pf
O45 - LFCP:[MD5.0E8EDECEC636D57DB0E73EE3B281E50E] - 29/05/2013 - 12:42:15 ---A- - C:\Windows\Prefetch\FIREFOX.EXE-18ACFCFF.pf
O45 - LFCP:[MD5.DD544A0C7A091AFD791CE18C9D392754] - 29/05/2013 - 12:43:03 ---A- - C:\Windows\Prefetch\AgCx_SC1.db
O45 - LFCP:[MD5.41191A7CF6A0B8720101A1155F060F6C] - 29/05/2013 - 12:44:00 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-422688FE.pf
O45 - LFCP:[MD5.CBD31F66161A401EADD45EB56AA80B10] - 29/05/2013 - 12:44:01 ---A- - C:\Windows\Prefetch\FLASHPLAYERPLUGIN_11_7_700_20-5B0FD894.pf
O45 - LFCP:[MD5.4D6175967199E364E8D8741423B50F29] - 29/05/2013 - 12:44:01 ---A- - C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-F1B02F03.pf
O45 - LFCP:[MD5.FF34E00A293062D2F766474F4BD34F93] - 29/05/2013 - 12:44:04 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-A8DE6D5B.pf
O45 - LFCP:[MD5.91E0E5C86FB6446AD22D2F25E1144535] - 29/05/2013 - 12:44:06 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf
O45 - LFCP:[MD5.44BA101676A876D3C0663D1A44D7F17A] - 29/05/2013 - 12:44:06 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
O45 - LFCP:[MD5.CBB2140D2014C487A18677144A13030F] - 29/05/2013 - 12:44:19 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf
O45 - LFCP:[MD5.6F9EC5590E1905CBE27EA67768B0F13B] - 29/05/2013 - 12:44:19 ---A- - C:\Windows\Prefetch\MPCMDRUN.EXE-6AA90EA5.pf
O45 - LFCP:[MD5.66A2C184606A220D217F1FD415CD4DDC] - 29/05/2013 - 12:44:48 ---A- - C:\Windows\Prefetch\ZHPDIAG2.EXE-65634CF2.pf
O45 - LFCP:[MD5.5FBB4F79E5FCFAA648A693FABBAAF0E3] - 29/05/2013 - 12:44:49 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-3BBECEBF.pf
O45 - LFCP:[MD5.5012055EF7626F9DA015CBA5C6B88F02] - 29/05/2013 - 12:45:22 ---A- - C:\Windows\Prefetch\ZHPHEP.EXE-EBD3B8D7.pf
O45 - LFCP:[MD5.03A85AF6544510F3D061C669F85B33B7] - 29/05/2013 - 12:45:32 ---A- - C:\Windows\Prefetch\ZHPDIAG.EXE-0D117CAF.pf
O45 - LFCP:[MD5.710691AD5B29E8226613E42C1A7EBB97] - 29/05/2013 - 12:46:02 ---A- - C:\Windows\Prefetch\CSCRIPT.EXE-0FB3F22C.pf
O45 - LFCP:[MD5.B88822880B1299E9B5F7CB5C60EE7F38] - 29/05/2013 - 12:46:02 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-B0F8131B.pf
O45 - LFCP:[MD5.CC41ED48CBE3D4564141E00A3879F8D0] - 29/05/2013 - 12:46:02 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-6768A320.pf
O45 - LFCP:[MD5.C58BE8B609FB4CA4F2A2EDD5BCB93C72] - 29/05/2013 - 12:46:06 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-1495036114-1722307083-3936051245-1000.db
O45 - LFCP:[MD5.992B1018E4E95486C759266A4D3B2E52] - 29/05/2013 - 12:46:07 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-1495036114-1722307083-3936051245-1000.db
O45 - LFCP:[MD5.3950F83E015A4A7A17A1F65FF948A741] - 29/05/2013 - 12:46:19 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf
O45 - LFCP:[MD5.1777529083AE5EEC7B0ACA1AA7A500B7] - 29/05/2013 - 12:46:37 ---A- - C:\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf
O45 - LFCP:[MD5.1D01762EAE62C5161274ECC4D0C9F63B] - 29/05/2013 - 12:46:37 ---A- - C:\Windows\Prefetch\PV.EXE-34B75B82.pf
O45 - LFCP:[MD5.CF404811BDEF8BF1FD0AC1D599FFBD58] - 29/05/2013 - 12:46:44 ---A- - C:\Windows\Prefetch\CMD.EXE-AC113AA8.pf
O45 - LFCP:[MD5.4A0F07DFB724E4C2C0901AFD8636C9BE] - 29/05/2013 - 12:46:44 ---A- - C:\Windows\Prefetch\SUBINACL.EXE-AB0CE9D9.pf
O45 - LFCP:[MD5.ECDACA88936A888558D798F350A70620] - 29/05/2013 - 12:46:55 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-AD598958.pf
~ Prefetcher: 94 Scanned in 00mn 00s



---\\ D�ni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l��diteur de configuration de s�curit� Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de s�curit� Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll
~ LSA: 9 Scanned in 00mn 00s



---\\ Contr�le du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ CSB: 13 Scanned in 00mn 00s



---\\ MountPoints2 Shell Key (O51)
O51 - MPSK:{605a835d-4e7c-11df-b7fc-806e6f6e6963}\AutoRun\command. (.Eden Games - Test Drive Unlimited 2 Autorun.) -- F:\AUTORUN.exe
O51 - MPSK:{7dca8809-a668-11e1-b6ac-1c4bd60d5a46}\AutoRun\command. (...) -- I:\WD SmartWare.exe (.not file.)
~ Keys:  Scanned in 00mn 02s



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"VIDC.FPS1"="frapsv64.dll" . (.Beepa P/L - Fraps.) -- C:\Windows\System32\frapsv64.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"frapsv64.dll"="Fraps Video Decompressor" . (.Beepa P/L - Fraps.) -- C:\Windows\System32\frapsv64.dll
~ TDSD: 4 Scanned in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher  [Key] . (...) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\AdobeAAMUpdater-1.0  [Key] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
O53 - SMSR:HKLM\...\startupreg\AdobeCS5ServiceManager  [Key] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
O53 - SMSR:HKLM\...\startupreg\ApplePhotoStreams  [Key] . (.Apple Inc. - ApplePhotoStreams.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O53 - SMSR:HKLM\...\startupreg\ASUS Screen Saver Protector  [Key] . (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe
O53 - SMSR:HKLM\...\startupreg\BDRegion  [Key] . (.cyberlink - brs.) -- C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
O53 - SMSR:HKLM\...\startupreg\CLMLServer  [Key] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite  [Key] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O53 - SMSR:HKLM\...\startupreg\iCloudServices  [Key] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O53 - SMSR:HKLM\...\startupreg\iTunesHelper  [Key] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O53 - SMSR:HKLM\...\startupreg\RemoteControl9  [Key] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
O53 - SMSR:HKLM\...\startupreg\RtHDVCpl  [Key] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O53 - SMSR:HKLM\...\startupreg\Steam  [Key] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\Steam.exe
O53 - SMSR:HKLM\...\startupreg\TrayServer  [Key] . (.Magix - Trayserver.) -- D:\Logiciels\Video_Deluxe_17\TrayServer_fr.exe
O53 - SMSR:HKLM\...\startupreg\vmware-tray  [Key] . (.VMware, Inc. - VMware Tray Process.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
~ SMSR Keys: 15 Scanned in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Scanned in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "AllowLegacyWebView"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "AllowUnhashedWebView"=1
~ MWPE Keys: 7 Scanned in 00mn 00s



---\\ Liste des Drivers Syst�me (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 05:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys   [491088]
O58 - SDL:[MD5.6107E33A30C0B923F31C872E1980D2D1] - 08/07/2011 - 18:32:58 ---A- . (.VMware, Inc. - VMware Virtual Storage Volume Driver.) -- C:\Windows\SysWOW64\drivers\vstor2-mntapi10-shared.sys   [33392]
O58 - SDL:[MD5.0FFE35F0B0CD5A324BBE22F02569AE3B] - 30/12/2012 - 00:59:38 ---A- . (.Almico Software - SpeedFan x64 Driver.) -- C:\Windows\SysWOW64\speedfan.sys   [28664]
~ Drivers:  Scanned in 00mn 00s



---\\ Derniers fichiers modifi�s ou cr�es (Utilisateur) (O61)
O61 - LFC: 27/05/2013 - 20:41:22 ---A- C:\Users\Guilhem\AppData\Local\Temp\wmplog03.sqm   [1740]
O61 - LFC: 27/05/2013 - 20:42:51 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\AssetCache\KXH86WDE\4BAE91DBAEF0CEEC0FCE5505D96DDEA865EDBFC1.swz   [482555]
O61 - LFC: 27/05/2013 - 20:42:51 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\AssetCache\KXH86WDE\ABD49354324081CEBB8F60184CF5FEE81F0F9298.swz   [327044]
O61 - LFC: 27/05/2013 - 20:42:52 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\AssetCache\KXH86WDE\98EECA3E014A0FA3C4C613006BDCEA12DA3BEACE.swz   [132753]
O61 - LFC: 27/05/2013 - 20:42:52 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\AssetCache\KXH86WDE\cacheSize.txt   [8]
O61 - LFC: 27/05/2013 - 20:45:10 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\APSPrivateData2\0\drm-plug-win-x86\CertStore.dat   [5009]
O61 - LFC: 27/05/2013 - 20:45:10 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\APSPrivateData2\0\drm-plug-win-x86\CertStore.dat.lkg   [5009]
O61 - LFC: 27/05/2013 - 20:45:10 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\APSPrivateData2\0\drm-plug-win-x86\GlobalStateStore.gs   [6337]
O61 - LFC: 27/05/2013 - 20:45:10 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\APSPrivateData2\0\drm-plug-win-x86\GlobalStateStore.gs.lkg   [6337]
O61 - LFC: 27/05/2013 - 20:45:28 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\APSPrivateData2\0\drm-plug-win-x86\MiscGlobalDataStore.mgd   [2017]
O61 - LFC: 27/05/2013 - 20:45:28 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\APSPrivateData2\0\drm-plug-win-x86\MiscGlobalDataStore.mgd.lkg   [2017]
O61 - LFC: 27/05/2013 - 20:47:52 ---A- C:\Users\Guilhem\AppData\Local\Apple Computer\iTunes\iTunesPrefs.xml   [1440371]
O61 - LFC: 27/05/2013 - 20:47:52 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\iTunes\Cookies\Cookies.binarycookies   [2460]
O61 - LFC: 27/05/2013 - 20:47:52 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\iTunes\iTunesPrefs.xml   [589904]
O61 - LFC: 27/05/2013 - 20:48:07 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\AssetCache\KXH86WDE\4BAE91DBAEF0CEEC0FCE5505D96DDEA865EDBFC1.heu   [148]
O61 - LFC: 27/05/2013 - 20:48:07 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\AssetCache\KXH86WDE\8F903698240FE799F61EEDA8595181137B996156.heu   [148]
O61 - LFC: 27/05/2013 - 20:48:07 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\AssetCache\KXH86WDE\ABD49354324081CEBB8F60184CF5FEE81F0F9298.heu   [148]
O61 - LFC: 27/05/2013 - 20:48:08 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\AssetCache\KXH86WDE\98EECA3E014A0FA3C4C613006BDCEA12DA3BEACE.heu   [148]
O61 - LFC: 27/05/2013 - 20:48:10 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\NativeCache\Updater.directory   [0]
O61 - LFC: 27/05/2013 - 20:49:08 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\NativeCache\NativeCache.directory   [0]
O61 - LFC: 27/05/2013 - 20:49:26 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\APSPrivateData2\0\drm-plug-win-x86\2-71_IH1HzsypZJynA1fLcgleqI=\SHR0hCNlDT_Utdg_qjHQa-rpTvbM=.sss   [2196]
O61 - LFC: 27/05/2013 - 20:49:26 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\APSPrivateData2\0\drm-plug-win-x86\2-71_IH1HzsypZJynA1fLcgleqI=\SHR0hCNlDT_Utdg_qjHQa-rpTvbM=.sss.lkg   [2196]
O61 - LFC: 28/05/2013 - 09:52:31 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Acrobat\10.0\JSCache\GlobSettings   [24]
O61 - LFC: 28/05/2013 - 09:52:31 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Acrobat\10.0\TMDocs.sav   [36]
O61 - LFC: 28/05/2013 - 09:52:31 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Acrobat\10.0\TMGrpPrm.sav   [54]
O61 - LFC: 28/05/2013 - 10:03:40 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.000\DeviceCenterDiagnostic.0.debugreport.xml   [4886]
O61 - LFC: 28/05/2013 - 10:03:40 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.000\DeviceDiagnostic.0.debugreport.xml   [12576]
O61 - LFC: 28/05/2013 - 10:03:40 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.000\NetworkDiagnostics.0.debugreport.xml   [1330]
O61 - LFC: 28/05/2013 - 10:03:40 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.000\PrinterDiagnostic.0.debugreport.xml   [22810]
O61 - LFC: 28/05/2013 - 10:03:40 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.000\UsbCoreDiagnostic.0.debugreport.xml   [1357]
O61 - LFC: 28/05/2013 - 10:03:41 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.000\results.xsl   [49097]
O61 - LFC: 28/05/2013 - 10:03:56 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.000\DeviceCenterDiagnostic.1.debugreport.xml   [4239]
O61 - LFC: 28/05/2013 - 10:03:56 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.000\DeviceDiagnostic.1.debugreport.xml   [10016]
O61 - LFC: 28/05/2013 - 10:03:56 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.000\PrinterDiagnostic.1.debugreport.xml   [19793]
O61 - LFC: 28/05/2013 - 10:03:56 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.000\UsbCoreDiagnostic.1.debugreport.xml   [1358]
O61 - LFC: 28/05/2013 - 10:03:57 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.000\NetworkDiagnostics.1.debugreport.xml   [1329]
O61 - LFC: 28/05/2013 - 10:03:57 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.000\ResultReport.xml   [58636]
O61 - LFC: 28/05/2013 - 10:03:57 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.000\results.xml   [220]
O61 - LFC: 28/05/2013 - 10:17:07 ---A- C:\Users\Guilhem\AppData\Local\Temp\MATS-Temp\Results\Mat�riel et p�riph�riques_result.cab   [18374]
O61 - LFC: 28/05/2013 - 10:34:29 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.001\results.xsl   [49097]
O61 - LFC: 28/05/2013 - 10:34:33 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.001\UsbTs.etl   [393216]
O61 - LFC: 28/05/2013 - 10:35:24 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.001\DeviceCenterDiagnostic.0.debugreport.xml   [4585]
O61 - LFC: 28/05/2013 - 10:35:24 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.001\DeviceDiagnostic.0.debugreport.xml   [1355]
O61 - LFC: 28/05/2013 - 10:35:24 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.001\NetworkDiagnostics.0.debugreport.xml   [1329]
O61 - LFC: 28/05/2013 - 10:35:24 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.001\PrinterDiagnostic.0.debugreport.xml   [19712]
O61 - LFC: 28/05/2013 - 10:35:24 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.001\ResultReport.xml   [57488]
O61 - LFC: 28/05/2013 - 10:35:24 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.001\UsbCoreDiagnostic.0.debugreport.xml   [4354]
O61 - LFC: 28/05/2013 - 10:35:24 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052806.001\results.xml   [220]
O61 - LFC: 28/05/2013 - 11:04:25 ---A- C:\Users\Guilhem\AppData\Local\Temp\Yy3zr4GK.torrent.part   [43988]
O61 - LFC: 28/05/2013 - 11:29:27 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052807.000\results.xsl   [49097]
O61 - LFC: 28/05/2013 - 11:29:32 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052807.000\UsbTs.etl   [1966080]
O61 - LFC: 28/05/2013 - 11:40:40 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052807.000\DeviceCenterDiagnostic.0.debugreport.xml   [4277]
O61 - LFC: 28/05/2013 - 11:40:40 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052807.000\DeviceDiagnostic.0.debugreport.xml   [1356]
O61 - LFC: 28/05/2013 - 11:40:40 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052807.000\NetworkDiagnostics.0.debugreport.xml   [1329]
O61 - LFC: 28/05/2013 - 11:40:40 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052807.000\PrinterDiagnostic.0.debugreport.xml   [1324]
O61 - LFC: 28/05/2013 - 11:40:40 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052807.000\UsbCoreDiagnostic.0.debugreport.xml   [4164]
O61 - LFC: 28/05/2013 - 11:40:41 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052807.000\ResultReport.xml   [57190]
O61 - LFC: 28/05/2013 - 11:40:41 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\2013052807.000\results.xml   [220]
O61 - LFC: 28/05/2013 - 11:40:41 ---A- C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics\3493975886\latest.cab   [120793]
O61 - LFC: 28/05/2013 - 11:48:28 ---A- C:\Users\Guilhem\AppData\Roaming\VMware\inventory.vmls   [1518]
O61 - LFC: 28/05/2013 - 16:07:42 ---A- C:\Users\Guilhem\AppData\Roaming\Microsoft\Ime\IMTC10\TCHFTLCJ.DAT   [287168]
O61 - LFC: 28/05/2013 - 16:07:42 ---A- C:\Users\Guilhem\AppData\Roaming\Microsoft\Ime\IMTC10\TCHFTSCJ.DAT   [164288]
O61 - LFC: 28/05/2013 - 21:40:17 --HA- C:\Users\Guilhem\AppData\Local\IconCache.db   [4497974]
O61 - LFC: 29/05/2013 - 07:32:32 ---A- C:\Users\Guilhem\AppData\Roaming\Microsoft\Office\Recent\Cours.LNK   [1064]
O61 - LFC: 29/05/2013 - 07:32:32 ---A- C:\Users\Guilhem\AppData\Roaming\Microsoft\Office\Recent\devoir d'anglais.docx.LNK   [1202]
O61 - LFC: 29/05/2013 - 07:32:32 --H-- C:\Users\Guilhem\AppData\Roaming\Microsoft\Office\Recent\index.dat   [177]
O61 - LFC: 29/05/2013 - 08:06:37 ---A- C:\Users\Guilhem\AppData\Local\Temp\msohtmlclip1\01\clip_colorschememapping.xml   [314]
O61 - LFC: 29/05/2013 - 08:06:37 ---A- C:\Users\Guilhem\AppData\Local\Temp\msohtmlclip1\01\clip_themedata.thmx   [3086]
O61 - LFC: 29/05/2013 - 08:06:39 ---A- C:\Users\Guilhem\AppData\Roaming\Microsoft\Office\Word12.pip   [1744]
O61 - LFC: 29/05/2013 - 08:08:57 ---A- C:\Users\Guilhem\AppData\Roaming\Adobe\Flash Player\AssetCache\KXH86WDE\7421C71F94DB4F028E7528B2D278F3FE4DC21273.heu   [148]
O61 - LFC: 29/05/2013 - 08:09:44 ---A- C:\Users\Guilhem\AppData\Local\Temp\plugtmp-1\plugin-1   [0]
O61 - LFC: 29/05/2013 - 08:17:25 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\Preferences\com.apple.bookmarkdav.plist   [133]
O61 - LFC: 29/05/2013 - 08:17:52 ---A- C:\Users\Guilhem\AppData\Local\Temp\Twain001.Mtx   [3]
O61 - LFC: 29/05/2013 - 08:17:52 ---A- C:\Users\Guilhem\AppData\Local\Temp\Twunk001.MTX   [156]
O61 - LFC: 29/05/2013 - 08:18:13 ---A- C:\Users\Guilhem\AppData\Roaming\com.bouyguestelecom.mediacenter\Local Store\port.xml   [6]
O61 - LFC: 29/05/2013 - 08:18:22 ---A- C:\Users\Guilhem\AppData\Local\Temp\TWAIN.LOG   [1508]
O61 - LFC: 29/05/2013 - 08:18:22 ---A- C:\Users\Guilhem\AppData\Local\Temp\sfamcc00001.dll   [192512]
O61 - LFC: 29/05/2013 - 08:18:22 ---A- C:\Users\Guilhem\AppData\Local\Temp\sfareca00001.dll   [158720]
O61 - LFC: 29/05/2013 - 08:22:39 ---A- C:\Users\Guilhem\AppData\Local\ATI\ACE\Manifest.Bin   [27266]
O61 - LFC: 29/05/2013 - 08:22:39 ---A- C:\Users\Guilhem\AppData\Local\ATI\ACE\Manifest.xml   [19630]
O61 - LFC: 29/05/2013 - 12:41:56 ---A- C:\Users\Guilhem\AppData\Roaming\com.bouyguestelecom.mediacenter\Local Store\Systray_Logs.txt   [880775]
O61 - LFC: 29/05/2013 - 12:42:14 ---A- C:\Users\Guilhem\AppData\Local\ATI\ACE\Profiles.xml   [47893]
~ 11 Fichiers temporaires (Temporary files)
~ 1 Fichiers cookies (Cookies files)
~ Files: 82 Scanned in 06mn 26s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS:  Scanned in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 28/12/2011 - C:\Windows\system32\drivers\afd.sys (AFD)  .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - 20/12/2012 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag)  .(.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
O64 - Services: CurCS - 03/07/2009 - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys (ASMMAP64)  .(.ASUS - Memory mapping Driver.) - LEGACY_ASMMAP64
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\atapi.sys (atapi)  .(.Microsoft Corporation - ATAPI IDE Miniport Driver.) - LEGACY_ATAPI
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\Beep.sys (Beep)  .(.Microsoft Corporation - BEEP Driver.) - LEGACY_BEEP
O64 - Services: CurCS - 05/07/2012 - C:\Windows\system32\browser.dll (bowser)  .(.Microsoft Corporation - DLL du service Explorateur d�ordinateurs.) - LEGACY_BOWSER
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\cdfs.sys (cdfs)  .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\clfs.sys (CLFS)  .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
O64 - Services: CurCS - 16/05/2010 - C:\Windows\System32\DRIVERS\cmdguard.sys (cmdGuard)  .(.COMODO - COMODO Internet Security Sandbox Driver.) - LEGACY_CMDGUARD
O64 - Services: CurCS - 16/05/2010 - C:\Windows\System32\DRIVERS\cmdhlp.sys (cmdHlp)  .(.COMODO - COMODO Internet Security Helper Driver.) - LEGACY_CMDHLP
O64 - Services: CurCS - 24/08/2012 - C:\Windows\System32\Drivers\cng.sys (CNG)  .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\dfsc.sys (DfsC)  .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\discache.sys (discache)  .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
O64 - Services: CurCS - 10/04/2013 - C:\Windows\system32\drivers\dxgkrnl.sys (DXGKrnl)  .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\exfat.sys (exfat)  .(.Microsoft Corporation - Microsoft Extended FAT File System.) - LEGACY_EXFAT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\fastfat.sys (fastfat)  .(.Microsoft Corporation - Fast FAT File System Driver.) - LEGACY_FASTFAT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\fileinfo.sys (FileInfo)  .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\fltmgr.sys (FltMgr)  .(.Microsoft Corporation - Gestionnaire de filtres de syst�me de fichi.) - LEGACY_FLTMGR
O64 - Services: CurCS - 24/01/2013 - C:\Windows\system32\drivers\fvevol.sys (fvevol)  .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
O64 - Services: CurCS - 30/08/2011 - C:\Windows\system32\drivers\hcmon.sys (hcmon)  .(.VMware, Inc. - VMware USB monitor.) - LEGACY_HCMON
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\http.sys (HTTP)  .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy)  .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
O64 - Services: CurCS - 16/05/2010 - C:\Windows\System32\DRIVERS\inspect.sys (inspect)  .(.COMODO - COMODO Internet Security Firewall Driver.) - LEGACY_INSPECT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\ipnat.sys (IPNAT)  .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\ksecdd.sys (KSecDD)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
O64 - Services: CurCS - 24/08/2012 - C:\Windows\System32\Drivers\ksecpkg.sys (KSecPkg)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\lltdio.sys (lltdio)  .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\luafv.sys (luafv)  .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\mountmgr.sys (mountmgr)  .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - 20/01/2013 - C:\Windows\System32\DRIVERS\MpFilter.sys (MpFilter)  .(.Microsoft Corporation - Microsoft antimalware file system filter dr.) - LEGACY_MPFILTER
O64 - Services: CurCS - ??\??\???? - Pas de propri�taire (MpKsl5be58252)  .(...) - LEGACY_MPKSL5BE58252
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\FirewallAPI.dll (mpsdrv)  .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb10)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb20)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\msahci.sys (msahci)  .(.Microsoft Corporation - MS AHCI 1.0 Standard Driver.) - LEGACY_MSAHCI
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\msisadrv.sys (msisadrv)  .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\mup.sys (Mup)  .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\nwifi.sys (NativeWifiP)  .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP
O64 - Services: CurCS - 22/08/2012 - C:\Windows\system32\drivers\ndis.sys (NDIS)  .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\DRIVERS\ndisuio.sys (Ndisuio)  .(.Microsoft Corporation - Pilote d�E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\netbios.sys (NetBIOS)  .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\netbt.sys (NetBT)  .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - 20/01/2013 - C:\Windows\System32\DRIVERS\NisDrvWFP.sys (NisDrv)  .(.Microsoft Corporation - Microsoft Network Realtime Inspection Drive.) - LEGACY_NISDRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy)  .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\pciide.sys (pciide)  .(.Microsoft Corporation - Generic PCI IDE Bus Driver.) - LEGACY_PCIIDE
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\pcw.sys (pcw)  .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\peauth.sys (PEAUTH)  .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\pacer.sys (Psched)  .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (rdbss)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD)  .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD)  .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP)  .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\rspndr.sys (rspndr)  .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
O64 - Services: CurCS - 11/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - 30/12/2012 - C:\Windows\Syswow64\speedfan.sys (speedfan)  .(.Almico Software - SpeedFan x64 Driver.) - LEGACY_SPEEDFAN
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\spldr.sys (spldr)  .(.Microsoft Corporation - loader for security processor.) - LEGACY_SPLDR
O64 - Services: CurCS - 17/09/2012 - C:\Windows\system32\Drivers\sptd.sys (sptd)  .(.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) - LEGACY_SPTD
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\srvsvc.dll (srv)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\srvsvc.dll (srv2)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
O64 - Services: CurCS - 29/04/2011 - C:\Windows\System32\DRIVERS\srvnet.sys (srvnet)  .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\tcpipcfg.dll (Tcpip)  .(.Microsoft Corporation - Objets de configuration du r�seau.) - LEGACY_TCPIP
O64 - Services: CurCS - 03/10/2012 - C:\Windows\System32\drivers\tcpipreg.sys (tcpipreg)  .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\tcpipcfg.dll (tdx)  .(.Microsoft Corporation - Objets de configuration du r�seau.) - LEGACY_TDX
O64 - Services: CurCS - 07/08/2009 - Pas de propri�taire (TurboB)  .(...) - LEGACY_TURBOB
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\DRIVERS\udfs.sys (udfs)  .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\vga.sys (VgaSave)  .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
O64 - Services: CurCS - 01/03/2013 - C:\Windows\System32\DRIVERS\vmnetbridge.sys (VMnetBridge)  .(.VMware, Inc. - VMware bridge driver (64-bit).) - LEGACY_VMNETBRIDGE
O64 - Services: CurCS - 01/03/2013 - C:\Windows\system32\drivers\vmnetuserif.sys (VMnetuserif)  .(.VMware, Inc. - VMware network application interface driver.) - LEGACY_VMNETUSERIF
O64 - Services: CurCS - 01/03/2013 - C:\Windows\system32\drivers\vmx86.sys (vmx86)  .(.VMware, Inc. - VMware kernel driver.) - LEGACY_VMX86
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\volmgrx.sys (volmgrx)  .(.Microsoft Corporation - Pilote d�extension du gestionnaire de volum.) - LEGACY_VOLMGRX
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\volsnap.sys (volsnap)  .(.Microsoft Corporation - Pilote de clich� instantan� du volume.) - LEGACY_VOLSNAP
O64 - Services: CurCS - 08/07/2011 - C:\Windows\Syswow64\drivers\vstor2-mntapi10-shared.sys (vstor2-mntapi10-shared)  .(.VMware, Inc. - VMware Virtual Storage Volume Driver.) - LEGACY_VSTOR2-MNTAPI10-SHARED
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\vwififlt.sys (vwififlt)  .(.Microsoft Corporation - Virtual WiFi Filter Driver.) - LEGACY_VWIFIFLT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\rascfg.dll (Wanarpv6)  .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6
O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\Wdf01000.sys (Wdf01000)  .(.Microsoft Corporation - Runtime de l�infrastructure de pilotes en m.) - LEGACY_WDF01000
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\wfplwf.sys (WfpLwf)  .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF
O64 - Services: CurCS - 24/05/2008 - C:\Windows\System32\DRIVERS\wimfltr.sys (WimFltr)  .(.Microsoft Corporation - Windows Image File Mini-Filter Driver.) - LEGACY_WIMFLTR
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\ws2ifsl.sys (ws2ifsl)  .(.Microsoft Corporation - Couche IFS Winsock2.) - LEGACY_WS2IFSL
O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\WudfPf.sys (WudfPf)  .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF
O64 - Services: CurCS - 02/09/2009 - C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl ({B154377D-700F-42cc-9474-23858FBDF4BD})  .(.CyberLink Corp. - Pas de description.) - LEGACY_{B154377D-700F-42CC-9474-23858FBDF4BD}
~ Legacy: 91 Scanned in 00mn 00s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
~ FASS Keys: 19 Scanned in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys:  Scanned in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: prefs.js [Guilhem - tbrtjdal.default] user_pref("weboftrust.search.ask.display", "Ask.com Web Search");
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Goo) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {75B18FEC-49C4-45B8-8E90-BECD10B9D379} [DefaultScope] - (Google) - http://www.google.com
~ Keys:  Scanned in 00mn 00s



---\\ Recherche des services d�marr�s par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Exp�rience d�application.) -- C:\Windows\System32\aelupsvc.dll   [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de strat�gie de groupe.) -- C:\Windows\System32\gpsvc.dll   [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll   [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de num�rotation automatique d�acc�s distant.) -- C:\Windows\System32\rasauto.dll   [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d�acc�s distant.) -- C:\Windows\System32\rasmans.dll   [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d�interface dynamique.) -- C:\Windows\System32\mprdim.dll   [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d��v�nements syst�me (SENS).) -- C:\Windows\System32\sens.dll   [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l�application d�assistance � Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de t�l�phonie Microsoft� Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur h�te de session Burea.) -- C:\Windows\System32\termsrv.dll   [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise � jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll   [2428952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arri�re-plan.) -- C:\Windows\System32\qmgr.dll   [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivit� IPv6 sur un r�seau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d�ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d�application.) -- C:\Windows\System32\appinfo.dll   [70144]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de d�couverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multim�dias.) -- C:\Windows\System32\mmcss.dll   [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau � distance.) -- C:\Windows\System32\sessenv.dll   [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d�ordinateurs.) -- C:\Windows\System32\browser.dll   [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de t�ches.) -- C:\Windows\System32\schedsvc.dll   [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des cl�s.) -- C:\Windows\System32\kmsvc.dll   [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux probl�mes.) -- C:\Windows\System32\wercplsupport.dll   [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des th�mes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [100864]
~ Services: 32 Scanned in 00mn 00s



---\\ Recherche particuliere � la racine de certains dossiers (O84)
[MD5.1FE339E72FE03A27DD9D5A9A357CFE7D] [SPRF][24/12/2009] (...) -- C:\ProgramData\FullRemove.exe   [131368]
[MD5.7E7EB7AFF595774E5E500B34058CC1A7] [SPRF][29/05/2013] (...) -- C:\Users\Guilhem\AppData\Local\Temp\sfamcc00001.dll   [192512]
[MD5.51151D3AD8DA0DFA0E7A681AA2FF8870] [SPRF][29/05/2013] (...) -- C:\Users\Guilhem\AppData\Local\Temp\sfareca00001.dll   [158720]
[MD5.F815231F1B538088B2CA20121AD82E9E] [SPRF][22/05/2013] (...) -- C:\Users\Guilhem\AppData\Local\Temp\utt730E.tmp.bat   [103]
[MD5.A6F37EA54559A524D570A4AABBADA1C4] [SPRF][29/05/2009] (.Arcus Technology - Arcus HID Host Dynamic Link Library.) -- C:\Program Files (x86)\HidApiDll.dll   [11776]
[MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\Windows\Downloaded Program Files\dwusplay.dll   [24576]
[MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\Windows\Downloaded Program Files\dwusplay.exe   [196608]
[MD5.0C78701C6F42345DFF2B2B6C3C3D01EF] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\Windows\Downloaded Program Files\isusweb.dll   [172032]
~ Files:  Scanned in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "SNMPTRAP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "SNMPTRAP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "WMP-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-QWave-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-QWave-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-P2PHost-In-TCP" | In - None - P6 - TRUE | .(.Microsoft Corporation - Voisinage imm�diat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Voisinage imm�diat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage imm�diat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage imm�diat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-syst�me spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-syst�me spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-IPHTTPS-Out" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DNS-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contr�leur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contr�leur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-RAServer-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d�assistance � distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-RAServer-Out-TCP-NoScope-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d�assistance � distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-DCOM-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-TCP-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "WPDMTP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus h�te de l�infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus h�te de l�infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-QWave-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-MCX2SVC-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-Prov-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - MCX2 Provisioning library.) -- C:\Windows\ehome\mcx2prov.exe
O87 - FAEL: "MCX-PlayTo-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-McrMgr-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Media Center Extender Manager.) -- C:\Windows\ehome\mcrmgr.exe
O87 - FAEL: "MCX-PlayTo-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-FDPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{C2F5DBD7-1732-49FC-B3E7-2BE46D38889D}" | In - None - P6 - TRUE | .(.Microsoft Corporation - Windows Live Sync.) -- C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
O87 - FAEL: "{10C229B5-8DF0-4FEE-8779-A8219363B88F}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{8344B3FF-0E60-414C-9511-0BC67F771826}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{F3ECD7FA-1906-40DD-B79B-1BD6327359DF}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application sous-syst�me spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "{FFA4A438-5AFE-42A6-B72D-BF63306D63C9}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{8F6B0833-AA63-4E99-B3C2-9D0BE4D7CD36}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{573A4D90-6DFB-4AE2-9BBD-0352806958D5}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{9E21EB4A-AC06-4F4F-A62C-9A38E35E28E5}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{5BF99E2E-1419-45FD-B59F-844C4D6A0511}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{BEEA918E-407D-4F88-9E7D-21CDFF8A6792}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{CB2176B7-19B9-4A89-ACDA-FE1D1FEB8617}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{4DCA2F70-4928-43EA-AC3A-9050BD08E67F}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{F74EA1DB-3E18-43D4-B07A-AB1BE7564007}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{787F853A-DA2D-42FC-BF44-9E2480FAE85B}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{63FDDE1F-3D44-45AD-8CC1-C59BF5F4ACDA}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{520FC1EF-0567-4AE8-9113-FA571BC8BF8D}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{21DF1DDD-A0D3-460D-8163-72D5A0170905}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{5CC20249-D905-4AB6-8341-6EBCABD7FCBB}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{7FEA604C-3C19-4B82-A517-9A2DAB065FEE}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{E60C4A0B-D3AC-43C5-82FF-562A883D1EFD}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{93BF5CA0-D3EC-4057-906E-C188B3B96591}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{BD3CD3E7-D651-439B-864E-10A9A0B1AF90}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{FE9DC034-AF8D-4A10-B5D7-CB8CBE694AE5}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{1205D9E3-8564-4C44-8F6B-58AD32E2BF1E}" | In - Private - P6 - FALSE | .(...) -- C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\AdobePhotoshopElementsMediaServer.exe
O87 - FAEL: "{BC467201-0EF0-4A87-8454-D227102F535E}" | In - Private - P17 - FALSE | .(...) -- C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\AdobePhotoshopElementsMediaServer.exe
O87 - FAEL: "{4BB9ADE0-02BB-45FD-901A-FB73016DE15C}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O87 - FAEL: "{87D75AB2-866B-4866-9C10-EE7DA746E12A}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
O87 - FAEL: "{84DF3144-B4B0-429C-991A-1E92F65900E3}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files (x86)\Microsoft Office\Office12\outlook.exe
O87 - FAEL: "{E5663BF2-DF53-4910-AD07-3513FC14D551}" | In - Private - P6 - TRUE | .(.Dassault Syst�mes SolidWorks Corp. - DTSCoordinator.) -- D:\Logiciels\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe
O87 - FAEL: "{902F3D70-E7D2-4A37-A953-F122164EA64B}" | In - Private - P17 - TRUE | .(.Dassault Syst�mes SolidWorks Corp. - DTSCoordinator.) -- D:\Logiciels\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe
O87 - FAEL: "{E7650142-4E0C-4B83-BEDD-C75543DDA596}" | In - Public - P6 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe
O87 - FAEL: "{1EC71A2E-6A5B-454A-9EC4-2A69F621FAD9}" | In - Public - P17 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe
O87 - FAEL: "{A0A5BEEC-C397-49C1-AF93-005B842C6B17}" | In - Public - P6 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe
O87 - FAEL: "{1B71DF06-CF1E-4ABB-8A06-0EAD09975211}" | In - Public - P17 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe
O87 - FAEL: "{175EC3FB-4268-43B3-83C8-08DD7E8DC54E}" | In - None - P17 - TRUE | .(.CyberLink Corp. - CyberLink PowerDVD Cinema Main Program.) -- C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe
O87 - FAEL: "{FD6723E4-5BA1-403B-828C-9225EC27B63A}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PowerDVD 9.0.) -- C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.exe
O87 - FAEL: "{88CE7A10-1AF9-44CE-BF78-B3DC5323454A}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O87 - FAEL: "{9D482126-2B49-42A7-A85E-ADD7029D6FDB}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\System32\svchost.exe
O87 - FAEL: "{B43183CD-8E74-4100-9551-BDFEB433F2DC}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Communications Platform.) -- C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
O87 - FAEL: "{9A8897B6-BAD3-493B-99D9-8F3FA717D4FC}" |In - Public - P6 - TRUE | .(...) -- D:\Jeux\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe (.not file.)
O87 - FAEL: "{4F9649DA-A3B1-4104-97FD-C92ADD5C01D0}" |In - Public - P17 - TRUE | .(...) -- D:\Jeux\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe (.not file.)
O87 - FAEL: "{EFB6AB4C-78C3-4A84-B97F-906F42C96B23}" | In - Public - P6 - TRUE | .(.Codemasters Software Company Limited - DiRT3 Executable.) -- D:\Jeux\Dirt 3\dirt3_game.exe
O87 - FAEL: "{C7859AE4-59E4-49B7-A42F-E45780EF905C}" | In - Public - P17 - TRUE | .(.Codemasters Software Company Limited - DiRT3 Executable.) -- D:\Jeux\Dirt 3\dirt3_game.exe
O87 - FAEL: "{B3D1575D-100D-41ED-BAF3-A5EFD83CCF02}" | In - Private - P6 - TRUE | .(.Google - Google Talk Plugin.) -- C:\Users\Guilhem\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
O87 - FAEL: "{D0E87022-5BF8-433C-9CCE-4F3DA500BB18}" | In - Private - P17 - TRUE | .(.Google - Google Talk Plugin.) -- C:\Users\Guilhem\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
O87 - FAEL: "{36FD7B61-FACC-4260-8A7B-2C1D71A02AB4}" | In - Private - P6 - TRUE | .(.Sony DADC Austria AG - SecuROM Launcher.) -- D:\Jeux\GTA IV\Grand Theft Auto IV\LaunchGTAIV.exe
O87 - FAEL: "{BCE15BDC-0C8A-4404-A338-62D34E9D0A84}" | In - Private - P17 - TRUE | .(.Sony DADC Austria AG - SecuROM Launcher.) -- D:\Jeux\GTA IV\Grand Theft Auto IV\LaunchGTAIV.exe
O87 - FAEL: "{329A1A6E-BD67-447B-BD8A-BB8DDF28F4EB}" | In - Private - P6 - TRUE | .(.Valve Corporation - Steam Client Bootstrapper (buildbot_winslave04_steam_steam_rel_client_win.) -- C:\Program Files (x86)\Steam\Steam.exe
O87 - FAEL: "{53705A0D-4120-4C46-9604-D3C875CBF50F}" | In - Private - P17 - TRUE | .(.Valve Corporation - Steam Client Bootstrapper (buildbot_winslave04_steam_steam_rel_client_win.) -- C:\Program Files (x86)\Steam\Steam.exe
O87 - FAEL: "{2F7486D0-A29C-4638-9581-423D45E6F6CA}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{8E3F7BB4-3B26-47F3-A196-B1C9BC0CFF35}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{30B714BD-82FA-4590-B633-899C05CF031D}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "{CE751D4D-47D9-4F8B-859E-8CAB65B2BB58}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O87 - FAEL: "{DD5AB888-BDF0-40CB-A835-39C48A30150B}" | In - None - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files (x86)\iTunes\iTunes.exe
O87 - FAEL: "{8FBB7283-73B6-475C-8A30-33521A0A6858}" | In - Private - P17 - TRUE | .(...) -- c:\Program Files (x86)\Media center Bbox\media center\external\MediaServerTray.exe
O87 - FAEL: "{A9EA4152-0023-4896-96B3-395CFC334490}" | In - None - P17 - TRUE | .(...) -- C:\ProgramData\media center Bouygues Telecom\MediaServer.exe
O87 - FAEL: "{661C8D93-B0C9-4C1B-96EB-2700810036CB}" | In - Domain - P17 - TRUE | .(.VMware, Inc. - VMware Authorization Service.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
O87 - FAEL: "{E87110CD-FF29-4E57-8368-9EF245656EA0}" | In - Private - P17 - TRUE | .(.VMware, Inc. - VMware Authorization Service.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
O87 - FAEL: "{BF3EE14F-46DA-472A-BDAA-FEAB52F220CC}" | In - Domain - P17 - TRUE | .(...) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
O87 - FAEL: "{140B827D-520B-4B35-95DC-E6C264D16C38}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
O87 - FAEL: "RemoteDesktop-UserMode-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "TCP Query User{DE08D2CE-A7C6-4804-9169-EEE991B46E8B}C:\program files (x86)\media center bbox\media center\external\mediaservertray.exe" | In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\media center bbox\media center\external\mediaservertray.exe
O87 - FAEL: "UDP Query User{CD672A99-2C1B-4B14-9693-3299D743191D}C:\program files (x86)\media center bbox\media center\external\mediaservertray.exe" | In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\media center bbox\media center\external\mediaservertray.exe
O87 - FAEL: "TCP Query User{29FD5D15-43E5-46C3-A39D-DEC03E4C3FB0}C:\program files (x86)\epson software\event manager\eeventmanager.exe" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files (x86)\epson software\event manager\eeventmanager.exe
O87 - FAEL: "UDP Query User{FFDCA781-6364-406D-8A57-21256560144C}C:\program files (x86)\epson software\event manager\eeventmanager.exe" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files (x86)\epson software\event manager\eeventmanager.exe
O87 - FAEL: "{03324E2E-94A7-4780-813A-DBC8C6691A24}" | In - Private - P17 - TRUE | .(.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\program files (x86)\epson software\event manager\eeventmanager.exe
O87 - FAEL: "{B3551EA9-271F-463F-9F5D-C60296E14502}" | In - Private - P6 - TRUE | .(.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\program files (x86)\epson software\event manager\eeventmanager.exe
O87 - FAEL: "TCP Query User{808A82C6-43CD-4243-BF2C-70810C47E47F}C:\program files (x86)\mobiola webcamera for iphone\webcamforiphone.exe" | In - Private - P6 - TRUE | .(.SHAPE Services.) -- C:\program files (x86)\mobiola webcamera for iphone\webcamforiphone.exe
O87 - FAEL: "UDP Query User{11F63DE3-C5BB-456A-A173-E593B085C9E2}C:\program files (x86)\mobiola webcamera for iphone\webcamforiphone.exe" | In - Private - P17 - TRUE | .(.SHAPE Services.) -- C:\program files (x86)\mobiola webcamera for iphone\webcamforiphone.exe
~ Firewall: 236 Scanned in 00mn 01s



---\\ Scan Additionnel (O88)
Database Version : v2.12362 - (25/05/2013)
Cl�s trouv�es (Keys found) : 16
Valeurs trouv�es (Values found) : 0
Dossiers trouv�s  (Folders found) : 1
Fichiers trouv�s  (Files found) : 1

[HKLM\Software\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}]   =>Adware.Yontoo
[HKLM\Software\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}]   =>Adware.Yontoo
[HKLM\Software\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]   =>Toolbar.Skype
[HKLM\Software\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]   =>Toolbar.Skype
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]   =>Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Skype
[HKLM\Software\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Skype
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Skype
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Skype
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B4089055-D468-45A4-A6BA-5A138DD715FC}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}]   =>Adware.Yontoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]   =>Adware.Yontoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]   =>Adware.Yontoo
[HKLM\Software\Tarma Installer]   =>Toolbar.Tarma
[HKCU\Software\InstallCore]   =>Adware.InstallCore
C:\ProgramData\Partner   =>Spyware.Partner
C:\Users\Guilhem\AppData\Roaming\Mozilla\Firefox\Profiles\tbrtjdal.default\SearchPlugins\web-search.xml   =>Adware.DoubleD
~ Additionnel Scan: 502123 Items scanned in 00mn 32s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "000021094A0090400000000000F01FEC" . (.Microsoft Office 2003 Web Components.) -- C:\Windows\Installer\{90120000-00A4-0409-0000-0000000FF1CE}\misc.exe,6
O90 - PUC: "00004159A700C0400000000000F01FEC" . (.Microsoft Office Outlook Connector.) -- C:\Windows\Installer\{95140000-007A-040C-0000-0000000FF1CE}\OLCIcon.exe
O90 - PUC: "045F27F206F16624596059B2126D46D0" . (.Apple Mobile Device Support.) -- C:\Windows\Installer\{2F72F540-1F60-4266-9506-952B21D6640D}\Installer.ico
O90 - PUC: "076CFAAAB965F2A4284B2449E5D03EFE" . (.Windows Live Writer.) -- C:\Windows\Installer\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}\ApplicationIcon.ico
O90 - PUC: "09FA5C348550E095033AA7F8EE4A4BB5" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{43C5AF90-0558-590E-30A3-7A8FEEA4B45B}\ARPPRODUCTICON.exe
O90 - PUC: "0D00D7E8E552480F823A04D0DCE58F7A" . (.ccc-utility64.) -- C:\Windows\Installer\{8E7D00D0-255E-F084-28A3-400DCD5EF8A7}\ARPPRODUCTICON.exe
O90 - PUC: "0E89635AE6A3C804AAC7D7BF54381C49" . (.MAGIX Vid�o deluxe 17 Premium (effets de titres).) -- C:\Windows\Installer\{A53698E0-3A6E-408C-AA7C-7DFB4583C194}\ProgramIcon.exe
O90 - PUC: "0ED9D238CFA898648991D4BBEDDBE3F4" . (.Microsoft Games for Windows - LIVE Redistributable.) -- C:\Windows\Installer\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}\GameForWindowsLiveRedist.exe
O90 - PUC: "11F12B5E3396B0E42AC597363E0CD711" . (.Windows Live Messenger.) -- C:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}\MsblIco.Exe
O90 - PUC: "121E2D80A6F7BE3479DF26B944094330" . (.Microsoft_VC90_CRT_x86.) -- C:\Windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe
O90 - PUC: "12DA52202E3F6194FB3F563D9F505228" . (.iTunes.) -- C:\Windows\Installer\{0225AD21-F3E2-4916-BFF3-65D3F9052582}\Installer.ico
O90 - PUC: "1501F27EE78B4FE4EAF9F8DD22C94C83" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{E72F1051-B87E-4EF4-AE9F-8FDD229CC438}\ARPPRODUCTICON.exe
O90 - PUC: "16525446F96163A42AFF5B1E81CE565F" . (.ASUS SmartLogon.) -- C:\Windows\Installer\{64452561-169F-4A36-A2FF-B5E118EC65F5}\_4ae13d6c.exe
O90 - PUC: "19DA96544F74E9D4F89C17E73CD2A71E" . (.Microsoft_VC80_CRT_x86_x64.) -- C:\Windows\Installer\{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}\ARPPRODUCTICON.exe
O90 - PUC: "1A3EFE19E58566F45B6F1F815FC6C474" . (.ASUS Power4Gear Hybrid.) -- C:\Windows\Installer\{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon
O90 - PUC: "20B58560D02F2BA4A94668FEA20E8F0F" . (.ASUS AI Recovery.) -- C:\Windows\Installer\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "20B91A1DE71869244AB57058F37DD475" . (.Microsoft_VC80_MFC_x86.) -- C:\Windows\Installer\{D1A19B02-817E-4296-A45B-07853FD74D57}\ARPPRODUCTICON.exe
O90 - PUC: "21432545D159E7441998FE01FDAC796F" . (.Arcus Technology, Inc. Performax USB 1.30.2.) -- C:\Windows\Installer\{54523412-951D-447E-9189-EF10DFCA97F6}\ARPPRODUCTICON.exe
O90 - PUC: "21F1DBD139DE0C947ACC65BCED841885" . (.ASUS LifeFrame3.) -- C:\Windows\Installer\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "25BBB29DFF28DE24A8C3E460F249A47B" . (.Microsoft_VC80_MFCLOC_x86.) -- C:\Windows\Installer\{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}\ARPPRODUCTICON.exe
O90 - PUC: "2A7527EE2A93F2D4D9CA9F2FB5A81E8D" . (.Skype� 5.10.) -- C:\Windows\Installer\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}\SkypeIcon.exe
O90 - PUC: "2B0163E6D0340BE4183EB2758E9BEDD8" . (.Bonjour.) -- C:\Windows\Installer\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}\Bonjour.ico
O90 - PUC: "3030C407C02DFA54DBB255E6FA13EB90" . (.iCloud.) -- C:\Windows\Installer\{704C0303-D20C-45AF-BD2B-556EAF31BE09}\ARP.ico
O90 - PUC: "38E1FB04BE028D11795C00905C206085" . (.Power2Go.) -- C:\Windows\Installer\{40BF1E83-20EB-11D8-97C5-0009C5020658}\ARPPRODUCTICON.exe
O90 - PUC: "3F7A4F31CBAE1624FAB6317177F77055" . (.Fast Boot.) -- C:\Windows\Installer\{13F4A7F3-EABC-4261-AF6B-1317777F0755}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico
O90 - PUC: "46FE56B5AFD1A414C849B77B6251E812" . (.ControlDeck.) -- C:\Windows\Installer\{5B65EF64-1DFA-414A-8C94-7BB726158E21}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "4A94D9E94FD183147BBDD5788A3980E8" . (.WIDCOMM Bluetooth Software.) -- C:\Windows\Installer\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}\ARPPRODUCTICON.exe
O90 - PUC: "4E9B274AFFA0B7F42BD56FF4E829A8BA" . (.Microsoft_VC90_MFC_x86_x64.) -- C:\Windows\Installer\{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}\ARPPRODUCTICON.exe
O90 - PUC: "5426BE430D8CA8D48B8DEEFB7F9A4158" . (.Firebird SQL Server - MAGIX Edition.) -- C:\Windows\Installer\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}\ProgramIcon.exe
O90 - PUC: "5509804B864D4A546AABA531D87D51CF" . (.Bing Bar.) -- C:\Windows\Installer\{B4089055-D468-45A4-A6BA-5A138DD715FC}\icon_installer_ico
O90 - PUC: "554590D7179DC4D4E9DFA96F6A85F4A3" . (.Bing Bureau.) -- C:\Windows\Installer\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}\icon.ico
O90 - PUC: "5DAB1C8C6E456414DA70A3A83D56963C" . (.Microsoft_VC80_MFC_x86_x64.) -- C:\Windows\Installer\{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}\ARPPRODUCTICON.exe
O90 - PUC: "5E49D6A11D7341F409B8167B0E18502B" . (.Media center Bbox.) -- c:\Windows\Installer\{1A6D94E5-37D1-4F14-908B-61B7E08105B2}\btel_w.exe
O90 - PUC: "5E536EA7C2399A34E97E4099EBED2B66" . (.MAGIX Vid�o deluxe 17 Premium (Effets de transition).) -- C:\Windows\Installer\{7AE635E5-932C-43A9-9EE7-0499BEDEB266}\ProgramIcon.exe
O90 - PUC: "633B7763D6F9FD5459340C943EE55E09" . (.MAGIX Screenshare.) -- C:\Windows\Installer\{3677B336-9F6D-45DF-9543-C049E35EE590}\ProgramIcon.exe
O90 - PUC: "654485612DA94AF38C5B2BEED258E6C6" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{16584456-9AD2-3FA4-C8B5-B2EE2D856E6C}\ARPPRODUCTICON.exe
O90 - PUC: "68AB67CA7DA76301B744AA0100000010" . (.Adobe Reader X (10.1.7) - Fran�ais.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O90 - PUC: "7692FC6BE18C0C0489510C7547EF1F02" . (.Skype Click to Call.) -- C:\Windows\Installer\{B6CF2967-C81E-40C0-9815-C05774FEF120}\IconUninstallIco
O90 - PUC: "76EA78D0BE4101C4885AADC61318BE81" . (.Windows Live Family Safety.) -- C:\Windows\Installer\{0D87AE67-14EB-4C10-88A5-DA6C3181EB18}\fssicon.ico
O90 - PUC: "7AA65C54B1DE00849AF7DEFDF353021B" . (.Apple Application Support.) -- C:\Windows\Installer\{45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}\WinInstall.ico
O90 - PUC: "7C43C21609E58D74B9C5F017D78D7262" . (.swMSM.) -- C:\Windows\Installer\{612C34C7-5E90-47D8-9B5C-0F717DD82726}\ARPPRODUCTICON.exe
O90 - PUC: "7CEBB04F4A2C00A4B942A750A5C22526" . (.Microsoft Office Live Add-in 1.5.) -- C:\Windows\Installer\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}\ProductIcon
O90 - PUC: "811CF9E1D156439479EB5EC3EAC5D754" . (.Microsoft_VC80_MFCLOC_x86_x64.) -- C:\Windows\Installer\{1E9FC118-651D-4934-97BE-E53CAE5C7D45}\ARPPRODUCTICON.exe
O90 - PUC: "81FC008F0746909D4B06372F4F01034B" . (.AMD Accelerated Video Transcoding.) -- C:\Windows\Installer\{F800CF18-6470-D909-B460-73F2F41030B4}\ARPPRODUCTICON.exe
O90 - PUC: "849FDF02DE8C34545A937F4FEA5FFA2A" . (.Wireless Console 3.) -- C:\Windows\Installer\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}\_294823.exe
O90 - PUC: "8627D45F867377F41BCA90C4CA447E76" . (.COSMOSM 2010 x64 Edition (2009/330).) -- C:\Windows\Installer\{F54D7268-3768-4F77-B1AC-094CAC44E767}\ARPPRODUCTICON.exe
O90 - PUC: "8F7463F0D15ECCF48826A9D8C0A5FC52" . (.Microsoft_VC80_ATL_x86.) -- C:\Windows\Installer\{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}\ARPPRODUCTICON.exe
O90 - PUC: "91785D291CBB3CC40AB8659C8E48CCC2" . (.Microsoft_VC80_CRT_x86.) -- C:\Windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe
O90 - PUC: "97E44AF0D7DCD8E42AEE62EF505F906B" . (.OpenOffice.org 3.1.) -- C:\Windows\Installer\{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}\soffice.exe
O90 - PUC: "9CA6158A1FAA9F747966302E4DDCCB8F" . (.PowerDVD.) -- C:\Windows\Installer\{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}\ARPPRODUCTICON.exe
O90 - PUC: "9F15F297002CD544CAA7512C0F287A51" . (.SolidWorks Flow Simulation 2010 SP02.1 x64 Edition.) -- C:\Windows\Installer\{792F51F9-C200-445D-AC7A-15C2F082A715}\ARPPRODUCTICON.exe
O90 - PUC: "9F2FDFE0D6387BE43AD230B83D1FBFA2" . (.Security Update for CAPICOM (KB931906).) -- C:\Windows\Installer\{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}\folder.ico
O90 - PUC: "9F6C4F93A816B5E4F82BB66D1671E423" . (.Intel(R) Turbo Boost Technology Monitor.) -- C:\Windows\Installer\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}\ARPPRODUCTICON.exe
O90 - PUC: "A02DCD65855E6934FA95411DA57A73BB" . (.DWGeditor.) -- C:\Windows\Installer\{56DCD20A-E558-4396-AF59-14D15AA737BB}\ARPPRODUCTICON.exe
O90 - PUC: "A57F49D06AE015943BFA1B54AFE9506C" . (.VMware Workstation.) -- C:\Windows\Installer\{0D94F75A-0EA6-4951-B3AF-B145FA9E05C6}\ARP.ico1
O90 - PUC: "B27818B2450AAD84EBB3AFC561C403A3" . (.ASUS FancyStart.) -- C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "B5DEF536D6C2EB94786EA7F6DC22CBA5" . (.Microsoft_VC90_MFC_x86.) -- C:\Windows\Installer\{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}\ARPPRODUCTICON.exe
O90 - PUC: "B6AAD27AF18A5EE41B2B7C26808877B6" . (.MAGIX Speed burnR (MSI).) -- C:\Windows\Installer\{A72DAA6B-A81F-4EE5-B1B2-C7620888776B}\ProgramIcon.exe
O90 - PUC: "B6F5FB4F596F2674EA2B0D594A3CD498" . (.Alcor Micro USB Card Reader.) -- C:\Windows\Installer\{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}\ARPPRODUCTICON.exe
O90 - PUC: "B850D529A465A3444B2BE7096C34E255" . (.Microsoft_VC80_ATL_x86_x64.) -- C:\Windows\Installer\{925D058B-564A-443A-B4B2-7E90C6432E55}\ARPPRODUCTICON.exe
O90 - PUC: "C3130D7651F4D734A9D21C6504882AA6" . (.Windows Live Sync.) -- C:\Windows\Installer\{67D0313C-4F15-437D-9A2D-C1564088A26A}\FolderShare48x48.ico
O90 - PUC: "C3DB83FEEAB91CA49931D10FA0EFB24F" . (.Arcus Drivers and Tools 1.08.) -- C:\Windows\Installer\{EF38BD3C-9BAE-4AC1-9913-1DF00AFE2BF4}\ARPPRODUCTICON.exe
O90 - PUC: "C7030BC4E565144468EBD02F4EBF28C8" . (.Microsoft Games for Windows Marketplace.) -- C:\Windows\Installer\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}\GameForWindowsLiveDash.exe
O90 - PUC: "C7265A5B37102BD4DA8A47409773F076" . (.Express Gate.) -- C:\Windows\Installer\{B5A5627C-0173-4DB2-ADA8-740479370F67}\ARPPRODUCTICON.exe
O90 - PUC: "C7937558D24AF684793B2ABC2C735239" . (.Microsoft_VC90_ATL_x86_x64.) -- C:\Windows\Installer\{8557397C-A42D-486F-97B3-A2CBC2372593}\ARPPRODUCTICON.exe
O90 - PUC: "C82712DB5C2296D2F2254C34E7F80FE2" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{BD21728C-22C5-2D69-2F52-C4437E8FF02E}\ARPPRODUCTICON.exe
O90 - PUC: "C971C95CD8669A946BAE1012CCCF2134" . (.LabelPrint.) -- C:\Windows\Installer\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\ARPPRODUCTICON.exe
O90 - PUC: "CC41D8D213B59B4478CFEB3C8DFADFD1" . (.SolidWorks Explorer 2010 SP02.1 x64 Edition.) -- C:\Windows\Installer\{2D8D14CC-5B31-44B9-87FC-BEC3D8AFFD1D}\ARPPRODUCTICON.exe
O90 - PUC: "D0AC3A29DC55D5C4AB59C562002CF062" . (.Microsoft_VC90_CRT_x86_x64.) -- C:\Windows\Installer\{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}\ARPPRODUCTICON.exe
O90 - PUC: "D276F30548C6A844F8F8B43CA58C4314" . (.AMD APP SDK Runtime.) -- C:\Windows\Installer\{503F672D-6C84-448A-8F8F-4BC35AC83441}\ARPPRODUCTICON.exe
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "DAD2D63778D3AAC46864382D83DA860E" . (.PhotoView 360.) -- C:\Windows\Installer\{736D2DAD-3D87-4CAA-8646-83D238AD68E0}\ARPPRODUCTICON.exe
O90 - PUC: "DF76DC54812370240A2ACB144215983E" . (.Microsoft Xbox 360 Accessories 1.2.) -- C:\Windows\Installer\{45CD67FD-3218-4207-A0A2-BC41245189E3}\ARPIcon
O90 - PUC: "E161687AC959B4B4AAD647421CC3CC2F" . (.SolidWorks eDrawings 2010.) -- C:\Windows\Installer\{A786161E-959C-4B4B-AA6D-7424C13CCCF2}\eModelViewer1.exe
O90 - PUC: "E19212F84440D1B49B9F34077AE343D6" . (.WinFlash.) -- C:\Windows\Installer\{8F21291E-0444-4B1D-B9F9-4370A73E346D}\MyIcon
O90 - PUC: "E339C5BAD7C503D43B41C9384AB949EB" . (.ATK Package.) -- C:\Windows\Installer\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}\_294823.exe
O90 - PUC: "E873E3303DA65DA4DBBEBC6DB91340C6" . (.Microsoft_VC90_ATL_x86.) -- C:\Windows\Installer\{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}\ARPPRODUCTICON.exe
O90 - PUC: "E998A73F54715F2556F8A9D44A4DB67B" . (.AMD Catalyst Install Manager.) -- C:\Windows\Installer\{F37A899E-1745-52F5-658F-9A4DA4D46BB7}\ARPPRODUCTICON.exe
O90 - PUC: "EE2D4441DA7C8A4448F462434B39351D" . (.Logitech Gaming Software 5.10.) -- C:\Windows\Installer\{1444D2EE-C7AD-44A8-844F-2634B49353D1}\ARPPRODUCTICON.exe
O90 - PUC: "F0D6147B2828A864C5D3AC75316B4F0C" . (.Catalyst Control Center.) -- C:\Windows\Installer\{B7416D0F-8282-468A-5C3D-CA5713B6F4C0}\ARPPRODUCTICON.exe
O90 - PUC: "F5A3719E6A22251448E85458D19B1926" . (.SolidWorks 2010 x64 Edition SP02.1.) -- C:\Windows\Installer\{E9173A5F-22A6-4152-848E-45851DB99162}\i386_SldWorks.exe
~ Update Products: 199 Scanned in 00mn 00s



---\\ MyComputer Name Space (O92)
O92 - MNS: ASUS WebStorage Drive - {d6044399-0b9e-4084-a9ac-c4b7c7800fcf}
O92 - MNS: Flux de photos - {F0D63F85-37EC-4097-B30D-61B4A8917118}
~ MNS: 2 Scanned in 00mn 00s



---\\ Etat g�n�ral des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto  124832 |  (AdobeActiveFileMonitor6.0) . (...) - C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
SR - | Auto 10/05/2013 65640 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 17/05/2013 256904 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 08/12/2009 379520 |  (AFBAgent) . (.ASUSTeK Computer Inc..) - C:\Windows\system32\FBAgent.exe
SR - | Auto 19/12/2012 240640 |  (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 21/12/2012 57008 |  (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 16/06/2009 84536 |  (ASLDRService) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
SR - | Auto 10/11/2009 96896 |  (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
SS - | Auto 21/10/2011 196176 |  (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.exe
SR - | Auto 13/10/2011 249648 |  (BBUpdate) . (.Microsoft Corporation.) - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.exe
SR - | Auto 31/08/2011 462184 |  (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 03/08/2009 864032 |  (btwdins) . (.Broadcom Corporation..) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
SR - | Auto  1593128 |  (BytelMediaServer) . (...) - C:\ProgramData\media center Bouygues Telecom\MediaServer.exe
SS - | Auto 18/11/2010 240112 |  (CLKMSVC10_9EC60124) . (.CyberLink.) - C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe
SR - | Auto 16/05/2010 1079048 |  (cmdAgent) . (.COMODO.) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
SS - | Demand 20/01/2010 87336 |  (CoordinatorServiceHost) . (.Dassault Syst�mes SolidWorks Corp..) - D:\Logiciels\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe
SS - | Demand 23/04/2010 79360 |  (Creative ALchemy AL6 Licensing Service) . (.Creative Labs.) - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
SS - | Demand 23/04/2010 79360 |  (Creative Audio Engine Licensing Service) . (.Creative Labs.) - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
SR - | Auto 18/12/2007 163840 |  (EPSON_EB_RPCV4_01) . (.SEIKO EPSON CORPORATION.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.exe
SR - | Auto 12/01/2007 126464 |  (EPSON_PM_RPCV4_01) . (.SEIKO EPSON CORPORATION.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.exe
SR - | Auto 27/08/2009 1253376 |  (Fabs) . (.MAGIX AG.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
SS - | Demand 07/08/2008 3276800 |  (FirebirdServerMAGIXInstance) . (.MAGIX�.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe
SS - | Demand 15/04/2012 867080 |  (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - | Demand 15/04/2012 1315592 |  (FLEXnet Licensing Service 64) . (.Acresso Software Inc..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
SS - | Demand 10/05/2011 136120 |  (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
SS - | Demand 04/04/2005 69632 |  (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
SS - | Demand 20/02/2013 641352 |  (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 01/10/2009 262144 |  (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto  125088 |  (Mobiola Wave Service) . (...) - C:\Program Files (x86)\Common Files\SHAPE Services\Mobiola Wave Service\MobiolaWaveService.exe
SS - | Demand 24/05/2013 117144 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto  0 |  (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
SS - | Demand 23/11/2009 93992 |  (Remote Solver for Flow Simulation 2010) . (.Mentor Graphics Corporation.) - D:\Logiciels\SolidWorks Corp\SolidWorks Flow Simulation\binCFW\StandAloneSlv.exe
SR - | Auto 13/08/2012 3064000 |  (Skype C2C Service) . (.Skype Technologies S.A..) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
SS - | Auto 13/07/2012 160944 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 15/04/2012 79360 |  (SolidWorks Licensing Service) . (.SolidWorks.) - C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
SS - | Demand 16/07/2009 316664 |  (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
SS - | Demand 19/02/2010 517096 |  (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SS - | Demand 07/08/2009 118672 |  (TurboBoost) . (.Intel(R) Corporation.) - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
SR - | Auto 01/10/2009 2314240 |  (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 01/03/2013 79360 |  (VMAuthdService) . (.VMware, Inc..) - C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
SR - | Auto ??\??\???? 0 |  (VMnetDHCP) . (.VMware, Inc..) - C:\Windows\system32\vmnetdhcp.exe
SR - | Auto 30/08/2011 846448 |  (VMUSBArbService) . (.VMware, Inc..) - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
SR - | Auto ??\??\???? 0 |  (VMware NAT Service) . (.VMware, Inc..) - C:\Windows\system32\vmnat.exe
SR - | Auto  11840512 |  (VMwareHostd) . (...) - C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto  0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 02/09/2009 146928 |  ({B154377D-700F-42cc-9474-23858FBDF4BD}) . (.CyberLink Corp..) - C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl
~ Services:  Scanned in 00mn 01s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by Guilhem at 29/05/2013 12:58:18

device: opened successfully
user: error reading MBR 

Disk trace:
error: Read  Descripteur non valide
kernel: error reading MBR 
~ MBR: 9 Scanned in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Guilhem at 29/05/2013 12:58:20

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR:  Scanned in 00mn 04s



---\\ Liste des �mulateurs de CD/DVD (Hook du MBR)
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
~ Emulateurs:  Scanned in 00mn 04s



End of the scan (2186 lines in 12mn 28s)(0)