Rapport de ZHPDiag v2013.8.10.15 par Nicolas Coolman, Update du 10/08/2013
Run by jojo at 10/08/2013 12:31:52
WebSite: http://nicolascoolman.webs.com
State : Version à jour.
WhiteList : Disable
High Elevated Privileges : OK
UAC : Deactivate by program


---\\ Web Browser
MSIE: Internet Explorer v8.0.7601.17514
MFIE: Mozilla Firefox 18.0 (Defaut)
GCIE: Google Chrome v28.0.1500.95

---\\ Windows Product Information
~ Langage: Français
Windows 7 Business Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 7TP9F
Windows License : OK
~ Windows Remaining Initializations Number : 4
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Protection
avast! Free Antivirus v8.0.1489.0
Malwarebytes Anti-Malware version 1.75.0.1300
Windows Defender W7

---\\ System Optimizer

---\\ Peer To Peer (P2P)
Pando Media Booster v2.6.0.9

---\\ Software Update
Adobe Flash Player 11 Plugin
Java 7 Update 25
Java 7 Update 21

---\\ System Information
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8168 MB (63% free)
System Restore: Activé (Enable)
System drive C: has 1 GB (4%) free of 31 GB

---\\ Logged in mode
~ Computer Name: JOJO-PC
~ User Name: jojo
~ All Users Names: jojo, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\jojo\AppData\Roaming\
~ %Desktop% : C:\Users\jojo\Desktop\
~ %Favorites% : C:\Users\jojo\Favorites\
~ %LocalAppData% : C:\Users\jojo\AppData\Local\
~ %StartMenu% : C:\Users\jojo\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 1 Go of 31 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 733 Go of 932 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 13 Go of 24 Go)
F:\ CD-ROM drive (Free 0 Go of 0 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
~ Security Center: 28 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.AC4C51EB24AA95B77F705AB159189E24] - (.Microsoft Corporation - Explorateur Windows.) (.20/01/2011 - 15:37:31.) -- C:\Windows\Explorer.exe [2872320]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.F6C5302E1F4813D552F41A0AC82455E5] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.20/01/2011 - 15:37:06.) -- C:\Windows\System32\wininet.dll [1188864]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/01/2011 - 15:37:54.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/01/2011 - 15:37:40.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.D31DC7A16DEA4A9BAF179F3D6FBDB38C] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.20/01/2011 - 15:37:26.) -- C:\Windows\system32\Drivers\AFD.sys [499712]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/01/2011 - 15:36:53.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/01/2011 - 15:38:02.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/01/2011 - 15:36:52.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.FAF015B07E3A2874A790A39B7D2C579F] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.20/01/2011 - 15:37:20.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/01/2011 - 15:36:58.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.05D78AA5CB5F3F5C31160BDB955D0B7C] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.20/01/2011 - 15:37:06.) -- C:\Windows\system32\Drivers\ntfs.sys [1659776]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/01/2011 - 15:38:02.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.1B6163C503398B23FF8B939C67747683] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.20/01/2011 - 15:38:44.) -- C:\Windows\system32\Drivers\rdpdr.sys [165888]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/01/2011 - 15:38:00.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/01/2011 - 15:36:53.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes:  Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes Videos (My Videos) : 1/4
~ Mes Favoris (My Favorites) : 1/26
~ Mes Documents (My Documents) : 1/32
~ Mon Bureau (My Desktop) : 1/625
~ Menu demarrer (Programs) : 1/46
~ Hidden Files:  Scanned in 00mn 00s



---\\ Processus lancés
[MD5.7E10CCE27CB13580FF46D724AAD52EB8] - (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- D:\Steam\Steam.exe   [1807272] [PID.2308]
[MD5.6582A15F11F722FEBE603004A73CBD77] - (.LogMeIn Inc. - Hamachi Client Application.) -- D:\hamachi-2-ui.exe   [2255184] [PID.2344]
[MD5.070753E47E04181DD440EA2FEFE3115C] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe   [18678376] [PID.2484]
[MD5.78A37BCB40D6751826CE6026E9478C54] - (.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe   [4284976] [PID.2552]
[MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- D:\Malwarebytes' Anti-Malware\mbamgui.exe   [532040] [PID.2640]
[MD5.72463EAC8B0D026992355E00748C88DB] - (.LED - Logiciel de gestion d'image d'arrière plan.) -- D:\LedWallpaper\LedWallpaper.exe   [466944] [PID.2664]
[MD5.3F11B20D12D89365D7721BDC860CE5F0] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe   [4858968] [PID.2788]
[MD5.C8D28F8B498CADBB9445AC4545BD41B7] - (.Mozilla Corporation - Firefox.) -- D:\Mozilla Firefox\firefox.exe   [920472] [PID.5100]
[MD5.E9349A03FD81B4806714A16796B5E20A] - (.Mozilla Corporation - Plugin Container for Firefox.) -- D:\Mozilla Firefox\plugin-container.exe   [17304] [PID.4460]
[MD5.60B241EFB669D286C9BF636A0334B3BA] - (.Adobe Systems, Inc. - Adobe Flash Player 11.7 r700.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe   [1855880] [PID.4840]
[MD5.CDA9F57D9D0173E769D4D5A95E1324DC] - (.Thorvald Natvig - Mumble - Low-latency VoIP client.) -- D:\Mumble\mumble.exe   [4431328] [PID.4704]
[MD5.A63DC5C2EA944E6657203E0C8EDEAF61] - (.Microsoft Corporation - COM Surrogate.) -- C:\Windows\SysWOW64\DllHost.exe   [7168] [PID.4604]
[MD5.ECCA7F72A24C7CF43131946C076689D1] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe   [846288] [PID.3176]
[MD5.A0E89D070F76E587837C3DDABF476E26] - (.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe   [11596128] [PID.2424]
[MD5.D8DBE084F97536D7FDE2EE9B4574FB23] - (.Nicolas Coolman - ZHPDiag.) -- D:\ZHPDiag\ZHPDiag.exe   [7691264] [PID.6984]
[MD5.28D6701C710AD7BA3CB95E75F8F1A9AA] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe   [46808] [PID.1332]
[MD5.B33CF4DE909A5B30F526D82053A63C8E] - (.ABBYY - ABBYY network license server.) -- C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe   [759048] [PID.1828]
[MD5.65085456FD9A74D7F1A999520C299ECB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- D:\Malwarebytes' Anti-Malware\mbamscheduler.exe   [418376] [PID.2180]
[MD5.E0D7732F2D2E24B2DB3F67B6750295B8] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- D:\Malwarebytes' Anti-Malware\mbamservice.exe   [701512] [PID.2292]
[MD5.402794A75A899E296AB3EDEC4ECCB9A8] - (.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe   [4153184] [PID.2684]
[MD5.9E1380328C39D661E085B24D6A6E044E] - (.Valve Corporation - Steam Client Service (buildbot_winslave04_s.) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe   [563624] [PID.4392]
[MD5.A34FC9FDEA5D54BC8AB70A1B50223F82] - (.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe   [195936] [PID.5636]
[MD5.617CC6CCBB12234AF5C357DCF656E4ED] - (.TeamViewer GmbH - TeamViewer 8.) -- c:\program files (x86)\teamviewer\version8\TeamViewer_Desktop.exe   [4317536] [PID.5628]
~ Processes Running:  Scanned in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Store v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Documents Google v.0.5 (Activé)
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Drive v.6.3 (Activé)
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.6 (Activé)
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.20 (Activé)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé)
~ Google Browser: 11 Scanned in 00mn 06s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\jojo\AppData\Roaming\Mozilla\Firefox\Profiles\64yq9zn3.default\prefs.js
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.25.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.25.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.25.2 for Mozilla browsers.) -- D:\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com # win64 # 6.5.0.3.) -- C:\Program Files\ma-config.com\x64\nphardwaredetection.dll
P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
P2 - FPN: [HKCU] [thehappycloud.com/HappyCloudPlugin] - (.The Happy Cloud - Happy Cloud Web Plugin.) -- C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll
~ Firefox Browser: 6 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
~ IE Browser: 15 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: (no name) [64Bits] - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
O2 - BHO: (no name) [64Bits] - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} Clé orpheline
~ BHO: 9 Scanned in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
O3 - Toolbar: (no name) [64Bits] - [HKLM]{9421DD08-935F-4701-A9CA-22DF90AC4EA6} Clé orpheline
~ Toolbar:  Scanned in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [XboxStat] . (.Microsoft Corporation - XBoxStat.exe.) -- C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe 
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- D:\Steam\steam.exe 
O4 - HKCU\..\Run: [Dxtory Update Checker 2.0] . (.Dxtory Software - Update Checker.) -- D:\Dxtory2.0\UpdateChecker.exe 
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIILE.exe 
O4 - HKCU\..\Run: [Pando Media Booster] . (.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe 
O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe 
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe 
O4 - HKLM\..\Wow6432Node\Run: [LogMeIn Hamachi Ui] . (.LogMeIn Inc. - Hamachi Client Application.) -- D:\hamachi-2-ui.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-21-3441387536-2470956340-2041920464-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKUS\S-1-5-21-3441387536-2470956340-2041920464-1000\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- D:\Steam\steam.exe 
O4 - HKUS\S-1-5-21-3441387536-2470956340-2041920464-1000\..\Run: [Dxtory Update Checker 2.0] . (.Dxtory Software - Update Checker.) -- D:\Dxtory2.0\UpdateChecker.exe 
O4 - HKUS\S-1-5-21-3441387536-2470956340-2041920464-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
O4 - HKUS\S-1-5-21-3441387536-2470956340-2041920464-1000\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIILE.exe 
O4 - HKUS\S-1-5-21-3441387536-2470956340-2041920464-1000\..\Run: [Pando Media Booster] . (.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe 
~ Application:  Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - GS\TaskBar: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\TaskBar: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- D:\Mozilla Firefox\firefox.exe 
O4 - GS\TaskBar: Steam - Raccourci.lnk . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.)  -- D:\Steam\Steam.exe 
O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.)  -- C:\Windows\explorer.exe 
O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.)  -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe 
O4 - GS\Programs: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch: Light Image Resizer 4.lnk . (.ObviousIdea SARL - ImageResizer.)  -- D:\Image Resizer 4\Resize.exe 
O4 - GS\QuickLaunch: Wakfu.lnk . (...)  -- D:\wakfu\UpLauncher.exe
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.)  -- C:\Windows\system32\eudcedit.exe 
O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft  Windows Fax and Scan.)  -- C:\Windows\system32\WFS.exe 
O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.)  -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
O4 - GS\SendTo: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Pas de description.)  -- C:\Windows\System32\fsquirt.exe 
O4 - GS\Desktop: Dofus2.lnk . (...)  -- D:\Dofus2\app\UpLauncher.exe
O4 - GS\Desktop: Dragonica DDr.lnk . (.Gravity Games - Dragonica Patcher.)  -- D:\Dragonica\Patcher.exe 
O4 - GS\Desktop: image - Raccourci.lnk . (...)  -- D:\Dossier Bureau\image 
O4 - GS\Desktop: Image Wallpaper - Raccourci.lnk . (...)  -- D:\Image Wallpaper 
O4 - GS\Desktop: Image Wallpaper 2 - Raccourci.lnk . (...)  -- D:\Image Wallpaper 2 
O4 - GS\Desktop: Jeux - Raccourci.lnk . (...)  -- D:\Dossier Bureau\Jeux 
O4 - GS\Desktop: LedWallpaper.lnk . (.LED - Logiciel de gestion d'image d'arrière plan.)  -- D:\LedWallpaper\LedWallpaper.exe 
O4 - GS\Desktop: Light Image Resizer 4.lnk . (.ObviousIdea SARL - ImageResizer.)  -- D:\Image Resizer 4\Resize.exe 
O4 - GS\Desktop: music - Raccourci.lnk . (...)  -- D:\Dossier Bureau\music 
O4 - GS\Desktop: Open Broadcaster Software.lnk . (...)  -- D:\OBS\OBS.exe
O4 - GS\Desktop: Skype.lnk . (...)  -- C:\Windows\Installer\{EA17F4FC-FDBF-4CF8-A529-2D983132D053}\SkypeIcon.exe
O4 - GS\Desktop: SonicStage.lnk . (.Sony Corporation - SonicStage Application.)  -- C:\Program Files (x86)\Sony\SonicStage\Omgjbox.exe 
O4 - GS\Desktop: Steam - Raccourci.lnk . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.)  -- D:\Steam\Steam.exe 
O4 - Global Startup: C:\Users\jojo\Desktop\Team Fortress 2.url . (...)  -- C:\Users\jojo\Desktop\Team Fortress 2.url
O4 - GS\Desktop: TeamViewer 8.lnk . (.TeamViewer GmbH - TeamViewer 8.)  -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe 
O4 - GS\Desktop: TERA.lnk . (.Solid State Networks - TERA.)  -- D:\TERA\tera-launcher.exe 
O4 - GS\Desktop: XSplit Broadcaster.lnk . (.SplitMediaLabs - XSplit Broadcaster.)  -- D:\XSplit.Core.exe 
~ Global Startup:  Scanned in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corporation - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corporation - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
~ Winsock: 9 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{E21C4083-2E0E-4050-9BDD-E1B634684DD4}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{E21C4083-2E0E-4050-9BDD-E1B634684DD4}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{E21C4083-2E0E-4050-9BDD-E1B634684DD4}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain:  Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: gzip [64Bits] - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Se (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY - ABBYY network license server.) - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
O23 - Service:  (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Epson Scanner Service (EpsonScanSvc) . (.Seiko Epson Corporation - Epson Scanner Service (64bit).) - C:\Windows\system32\EscSvc64.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc. - Hamachi Client Tunneling Engine.) - D:\hamachi-2.exe
O23 - Service:  (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - D:\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service:  (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - D:\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 8 (TeamViewer8) . (.TeamViewer GmbH - TeamViewer 8.) - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
~ Services: 10 Scanned in 00mn 03s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job   [1060]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job   [1064]
[MD5.5CE2C1433B9B634591F0A1C4C1203A0B] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe   [251784]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [116648]
[MD5.00000000000000000000000000000000] [APT] [{A58FAF50-CF37-4B3F-959C-14BE27B47F13}] (...) -- D:\T‚l‚chargement\HSB4b-full.exe (.not file.)   [0]
[MD5.C8D28F8B498CADBB9445AC4545BD41B7] [APT] [{E0713512-FE1D-45EC-B553-5BCF8C33365A}] (.Mozilla Corporation.) -- d:\mozilla firefox\firefox.exe   [920472]
~ Scheduled Task: 10 Scanned in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 11 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver:  (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 66 Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: 10,000,000 - (...) [HKLM][64Bits] -- Steam App 227580
O42 - Logiciel: 7-Zip 9.20 (x64 edition) - (.Igor Pavlov.) [HKLM][64Bits] -- {23170F69-40C1-2702-0920-000001000000}
O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM][64Bits] -- ABBYY FineReader 9.0 Sprint
O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM][64Bits] -- {F9000000-0018-0000-0000-074957833700}
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441}
O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {89EE4A30-080F-2C95-6F78-C98D18FBD74D}
O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {5E03A267-415E-5383-FA8F-3CE4145663B9}
O42 - Logiciel: AMD Drag and Drop Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {0407893F-352C-B182-E04A-A8C3333DA29B}
O42 - Logiciel: AMD Media Foundation Decoders - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {4975DE61-6BF6-B9BC-1FDE-C04C5EC78E4C}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A0087DDE-69D0-11E2-AD57-43CA6188709B}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Age of Wulin - (.gPotato.) [HKLM][64Bits] -- {A1CD76EB-30CA-45EE-9946-5FC20BA62012}
O42 - Logiciel: Asmedia ASM104x USB 3.0 Host Controller Driver - (.Asmedia Technology.) [HKLM][64Bits] -- {E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}
O42 - Logiciel: Borderlands 2 - (.Gearbox Software.) [HKLM][64Bits] -- Steam App 49520
O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}
O42 - Logiciel: Chantelise - (...) [HKLM][64Bits] -- Steam App 70420
O42 - Logiciel: Cube World version 0.0.1 - (.Picroma.) [HKLM][64Bits] -- {D692A0E0-1BBB-4E9C-826E-4254EE330830}_is1
O42 - Logiciel: Dark Souls: Prepare to Die Edition - (...) [HKLM][64Bits] -- Steam App 211420
O42 - Logiciel: Dota 2 - (...) [HKLM][64Bits] -- Steam App 570
O42 - Logiciel: DraXiusDr - (.DraXiusDr.) [HKLM][64Bits] -- DraXiusDr1.2.1
O42 - Logiciel: Dxtory version 2.0.112 - (.Dxtory Software.) [HKLM][64Bits] -- Dxtory2.0_is1
O42 - Logiciel: Désinstallation de l'imprimante EPSON XP-205 207 Series - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON XP-205 207 Series
O42 - Logiciel: Evoland - (...) [HKLM][64Bits] -- Steam App 233470
O42 - Logiciel: Foxit Reader - (.Foxit Corporation.) [HKLM][64Bits] -- Foxit Reader_is1
O42 - Logiciel: Garry's Mod - (.Garry.) [HKLM][64Bits] -- Steam App 4000
O42 - Logiciel: Gish - (.Cryptic Sea.) [HKLM][64Bits] -- Steam App 9500
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: GtkAtlantic 0.4.1 - (.gtkatlantic.) [HKLM][64Bits] -- GtkAtlantic
O42 - Logiciel: Guide d'utilisation EPSON XP-205 207 Series - (...) [HKLM][64Bits] -- EPSON XP-205 207 Series Useg
O42 - Logiciel: Guide réseau EPSON XP-205 207 Series - (...) [HKLM][64Bits] -- EPSON XP-205 207 Series Netg
O42 - Logiciel: Guild Wars 2 - (.NCsoft Corporation, Ltd..) [HKLM][64Bits] -- Guild Wars 2
O42 - Logiciel: Hack, Slash, Loot - (...) [HKLM][64Bits] -- Steam App 207430
O42 - Logiciel: Happy Cloud Client - (.Happy Cloud, Inc..) [HKCU][64Bits] -- HappyCloud
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Java 7 Update 21 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217021FF}
O42 - Logiciel: Java 7 Update 25 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86417025FF}
O42 - Logiciel: League of Legends - (.Riot Games.) [HKLM][64Bits] -- {92606477-9366-4D3B-8AE3-6BE4B29727AB}
O42 - Logiciel: LedWallpaper 1.7.11 - (.LED.) [HKLM][64Bits] -- LedWallpaper_is1
O42 - Logiciel: Left 4 Dead 2 - (.Valve.) [HKLM][64Bits] -- Steam App 550
O42 - Logiciel: Light Image Resizer 4.3.1.0 - (.ObviousIdea.) [HKLM][64Bits] -- {EBE030DD-D404-4D92-85E9-8C3624820808}_is1
O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM][64Bits] -- LogMeIn Hamachi
O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM][64Bits] -- {0ACC2993-2058-4BE7-9A92-9DCDAA9B3412}
O42 - Logiciel: Ma-Config.com (64 bits) - (.Cybelsoft.) [HKLM][64Bits] -- {602C9E30-F838-4AD2-8DC2-265C192D4AAC}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}
O42 - Logiciel: Microsoft Games for Windows Marketplace - (.Microsoft Corporation.) [HKLM][64Bits] -- {4CB0307C-565E-4441-86BE-0DF2E4FB828C}
O42 - Logiciel: Microsoft XNA Framework Redistributable 4.0 Refresh - (.Microsoft Corporation.) [HKLM][64Bits] -- {D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}
O42 - Logiciel: Microsoft Xbox 360 Accessories 1.2 - (.Microsoft.) [HKLM][64Bits] -- {45CD67FD-3218-4207-A0A2-BC41245189E3}
O42 - Logiciel: Mozilla Firefox 18.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 18.0 (x86 fr)
O42 - Logiciel: Mozilla Firefox 22.0 (x86 fr) - (.Mozilla.) [HKCU][64Bits] -- Mozilla Firefox 22.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: Mumble 1.2.3 - (.Thorvald Natvig.) [HKLM][64Bits] -- {E1019541-10A2-464F-A23E-A4F23DA65160}
O42 - Logiciel: Open Broadcaster Software - (...) [HKLM][64Bits] -- Open Broadcaster Software
O42 - Logiciel: OpenMG Secure Module 5.0.00 - (.Sony Corporation.) [HKLM][64Bits] -- InstallShield_{8ED3A392-28F1-4375-97AC-BF275B5855F9}
O42 - Logiciel: Pando Media Booster - (.Pando Networks Inc..) [HKLM][64Bits] -- {980A182F-E0A2-4A40-94C1-AE0C1235902E}
O42 - Logiciel: PlayClaw - (.Sytexis Software.) [HKLM][64Bits] -- PlayClaw
O42 - Logiciel: Poker Night 2 - (...) [HKLM][64Bits] -- Steam App 234710
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Rogue Legacy - (.Cellar Door Games.) [HKLM][64Bits] -- Steam App 241600
O42 - Logiciel: Skype™ 6.3 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
O42 - Logiciel: SonicStage 4.3 - (.Sony Corporation.) [HKLM][64Bits] -- {A0EB195B-5876-48E6-879D-33D4B2102610}
O42 - Logiciel: Source SDK Base 2007 - (.Valve.) [HKLM][64Bits] -- Steam App 218
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3}
O42 - Logiciel: Super Meat Boy - (...) [HKLM][64Bits] -- Steam App 40800
O42 - Logiciel: TERA - (.Gameforge Productions GmbH.) [HKLM][64Bits] -- {A2F166A0-F031-4E27-A057-C69733219434}_is1
O42 - Logiciel: Team Fortress 2 - (.Valve.) [HKLM][64Bits] -- Steam App 440
O42 - Logiciel: TeamViewer 8 - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer 8
O42 - Logiciel: Terraria - (.Re-Logic.) [HKLM][64Bits] -- Steam App 105600
O42 - Logiciel: The Binding of Isaac - (...) [HKLM][64Bits] -- Steam App 113200
O42 - Logiciel: Wakfu - (.Ankama Games.) [HKLM][64Bits] -- Wakfu
O42 - Logiciel: WinRAR 4.20 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: WinRAR 4.20 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: XSplit - (.SplitMediaLabs.) [HKLM][64Bits] -- {6DB59DDE-1E62-4FDC-963C-6503A2B31739}
O42 - Logiciel: Ys: The Oath in Felghana - (.Falcom.) [HKLM][64Bits] -- Steam App 207320
O42 - Logiciel: avast! Free Antivirus v8.0.1489.0 - (.AVAST Software.) [HKLM][64Bits] -- avast
~ Logic: 150 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\7-Zip]
[HKCU\Software\AMD]
[HKCU\Software\ATI]
[HKCU\Software\AppDataLow\Software\Smart Address Bar]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Avast Software]
[HKCU\Software\Blizzard Entertainment]
[HKCU\Software\Bugsplat]
[HKCU\Software\CDDB]
[HKCU\Software\ClassesB]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Digital River]
[HKCU\Software\EightyEightGames]
[HKCU\Software\Emulators]
[HKCU\Software\Epson]
[HKCU\Software\Foxit Software]
[HKCU\Software\Google]
[HKCU\Software\HmelyoffLabs]
[HKCU\Software\IM Providers]
[HKCU\Software\Logitech]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Mumble]
[HKCU\Software\ObviousIdea]
[HKCU\Software\Pando Networks]
[HKCU\Software\Policies]
[HKCU\Software\PowerPack]
[HKCU\Software\Skype]
[HKCU\Software\SnailGame]
[HKCU\Software\Sony Corporation]
[HKCU\Software\SplitMediaLabs]
[HKCU\Software\SweetIM]  =>PUP.SweetIM
[HKCU\Software\Sysinternals]
[HKCU\Software\TeamViewer]
[HKCU\Software\TeleCharger]
[HKCU\Software\Telltale Games]
[HKCU\Software\Terraria]
[HKCU\Software\Trolltech]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\Valve]
[HKCU\Software\WEDLMNGR]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\cybelsoft]
[HKCU\Software\ej-technologies]
[HKCU\Software\gPotato]
[HKLM\Software\7-Zip]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\EPSON]
[HKLM\Software\HitmanPro]
[HKLM\Software\IM Providers]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\Khronos]
[HKLM\Software\LogMeIn, Inc.]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\RT 7 Lite]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sonic]
[HKLM\Software\WinRAR]
[HKLM\Software\Wow6432Node\ABBYY]
[HKLM\Software\Wow6432Node\AMD]
[HKLM\Software\Wow6432Node\ATI Technologies]
[HKLM\Software\Wow6432Node\ATI]
[HKLM\Software\Wow6432Node\AVAST Software]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Ankama]
[HKLM\Software\Wow6432Node\ArenaNet]
[HKLM\Software\Wow6432Node\CDDB]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Dofus2]
[HKLM\Software\Wow6432Node\Dxtory Software]
[HKLM\Software\Wow6432Node\EPSON]
[HKLM\Software\Wow6432Node\Foxit Software]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\IM Providers]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\NAMCO BANDAI GAMES]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\ObviousIdea]
[HKLM\Software\Wow6432Node\Pando Networks]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Re-Logic]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Riot Games]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\Sony Corporation]
[HKLM\Software\Wow6432Node\Sony]
[HKLM\Software\Wow6432Node\SplitMediaLabs]
[HKLM\Software\Wow6432Node\SweetIM]  =>PUP.SweetIM
[HKLM\Software\Wow6432Node\TERA]
[HKLM\Software\Wow6432Node\TeamMeat]
[HKLM\Software\Wow6432Node\TeamViewer]
[HKLM\Software\Wow6432Node\Valve]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\WinRAR]
[HKLM\Software\Wow6432Node\cybelsoft]
[HKLM\Software\Wow6432Node\gPotato]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
[HKLM\Software\cybelsoft]
~ Key Software: 203 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 27/02/2013 - 11:51:39 - [172,786] ----D C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint
O43 - CFD: 26/04/2013 - 19:42:12 - [0,079] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 28/01/2013 - 17:57:57 - [2,145] ----D C:\Program Files (x86)\AMD APP
O43 - CFD: 28/01/2013 - 17:57:59 - [0,397] ----D C:\Program Files (x86)\AMD AVT
O43 - CFD: 29/12/2012 - 16:13:44 - [2,369] ----D C:\Program Files (x86)\ASM104xUSB3
O43 - CFD: 29/12/2012 - 15:52:16 - [60,025] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 19/05/2013 - 19:33:22 - [161,567] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 27/02/2013 - 12:28:08 - [7,688] ----D C:\Program Files (x86)\epson
O43 - CFD: 23/02/2013 - 17:00:01 - [41,185] ----D C:\Program Files (x86)\Foxit Software
O43 - CFD: 20/01/2013 - 20:26:55 - [371,819] ----D C:\Program Files (x86)\Google
O43 - CFD: 30/06/2013 - 17:45:29 - [28,830] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 29/12/2012 - 16:25:26 - [4,341] ----D C:\Program Files (x86)\Intel
O43 - CFD: 20/01/2011 - 16:46:07 - [4,382] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 19/05/2013 - 16:12:09 - [122,328] ----D C:\Program Files (x86)\Java
O43 - CFD: 29/12/2012 - 21:44:21 - [8,929] ----D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
O43 - CFD: 27/06/2013 - 16:43:51 - [5,795] ----D C:\Program Files (x86)\Microsoft XNA
O43 - CFD: 29/12/2012 - 15:51:16 - [0,023] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 19/01/2013 - 22:33:05 - [0,212] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 08/04/2013 - 19:57:04 - [6,109] ----D C:\Program Files (x86)\MSECache
O43 - CFD: 05/05/2013 - 17:43:49 - [8,371] ----D C:\Program Files (x86)\Pando Networks
O43 - CFD: 29/12/2012 - 16:04:20 - [2,962] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 07:32:38 - [37,345] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 19/05/2013 - 19:36:18 - [18,066] R---D C:\Program Files (x86)\Skype
O43 - CFD: 19/05/2013 - 19:34:55 - [21,205] ----D C:\Program Files (x86)\Sony
O43 - CFD: 03/01/2013 - 16:10:56 - [34,718] ----D C:\Program Files (x86)\TeamViewer
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 14/07/2009 - 17:24:08 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 20/01/2011 - 16:46:07 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 20/01/2011 - 16:46:06 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 20/01/2011 - 16:46:06 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 20/01/2011 - 16:46:06 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 20/01/2011 - 16:46:07 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 26/02/2013 - 10:14:10 - [7,724] ----D C:\Program Files (x86)\Common Files\ABBYY
O43 - CFD: 15/06/2013 - 09:13:12 - [45,609] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 29/12/2012 - 15:52:30 - [2,780] ----D C:\Program Files (x86)\Common Files\ATI Technologies
O43 - CFD: 27/02/2013 - 12:27:51 - [0] ----D C:\Program Files (x86)\Common Files\EPSON
O43 - CFD: 19/05/2013 - 19:34:19 - [2,915] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 27/06/2013 - 16:43:51 - [21,640] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 19/04/2013 - 09:02:07 - [1,904] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 19/05/2013 - 19:33:54 - [29,486] ----D C:\Program Files (x86)\Common Files\Sony Shared
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 31/07/2013 - 17:25:38 - [0,538] ----D C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 14/07/2009 - 17:24:08 - [9,771] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 26/02/2013 - 10:14:10 - [1,275] ----D C:\ProgramData\ABBYY
O43 - CFD: 26/04/2013 - 19:42:12 - [0] ----D C:\ProgramData\Adobe
O43 - CFD: 28/01/2013 - 17:57:59 - [0,810] ----D C:\ProgramData\AMD
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 28/01/2013 - 17:58:00 - [2,265] ----D C:\ProgramData\ATI
O43 - CFD: 30/12/2012 - 11:54:36 - [34,364] ----D C:\ProgramData\AVAST Software
O43 - CFD: 29/12/2012 - 16:52:53 - [86,820] ----D C:\ProgramData\Battle.net
O43 - CFD: 29/12/2012 - 15:27:52 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 03/05/2013 - 16:45:56 - [7,188] ----D C:\ProgramData\EPSON
O43 - CFD: 29/12/2012 - 15:27:52 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 30/05/2013 - 17:57:31 - [17,594] ----D C:\ProgramData\HappyCloud
O43 - CFD: 09/08/2013 - 18:49:47 - [4,048] ----D C:\ProgramData\HitmanPro
O43 - CFD: 29/12/2012 - 15:47:56 - [1,245] ----D C:\ProgramData\ma-config.com
O43 - CFD: 09/08/2013 - 19:21:21 - [6,656] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 29/12/2012 - 15:27:52 - [0] --H-D C:\ProgramData\Menu Démarrer
O43 - CFD: 21/07/2013 - 20:38:28 - [135,359] -S--D C:\ProgramData\Microsoft
O43 - CFD: 29/12/2012 - 15:27:52 - [0] --H-D C:\ProgramData\Modèles
O43 - CFD: 29/12/2012 - 16:17:57 - [0,000] ----D C:\ProgramData\Mozilla
O43 - CFD: 06/01/2013 - 12:27:02 - [5,043] ----D C:\ProgramData\Nexon
O43 - CFD: 21/07/2013 - 20:10:46 - [0] ----D C:\ProgramData\Picroma
O43 - CFD: 08/08/2013 - 17:54:56 - [0,002] ----D C:\ProgramData\PMB Files  =>P2P.Pando
O43 - CFD: 19/05/2013 - 19:36:20 - [39,821] ----D C:\ProgramData\Skype
O43 - CFD: 23/05/2013 - 18:36:37 - [0] ----D C:\ProgramData\SonicStage
O43 - CFD: 19/05/2013 - 19:37:15 - [20,714] ----D C:\ProgramData\Sony Corporation
O43 - CFD: 29/12/2012 - 21:32:28 - [8,574] ----D C:\ProgramData\SplitMediaLabs
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 27/02/2013 - 11:51:20 - [0,004] ----D C:\ProgramData\UDL
O43 - CFD: 04/03/2013 - 17:41:21 - [56,608] ----D C:\Users\jojo\AppData\Roaming\.minecraft
O43 - CFD: 26/04/2013 - 19:42:12 - [18,963] ----D C:\Users\jojo\AppData\Roaming\Adobe
O43 - CFD: 26/04/2013 - 20:54:27 - [0,001] ----D C:\Users\jojo\AppData\Roaming\AnkamaCertificates
O43 - CFD: 26/04/2013 - 20:53:57 - [0,005] ----D C:\Users\jojo\AppData\Roaming\app
O43 - CFD: 29/12/2012 - 15:56:46 - [0] ----D C:\Users\jojo\AppData\Roaming\ATI
O43 - CFD: 06/04/2013 - 15:32:59 - [0,003] ----D C:\Users\jojo\AppData\Roaming\com.shirogames.evoland
O43 - CFD: 28/06/2013 - 15:38:59 - [0] ----D C:\Users\jojo\AppData\Roaming\Dofus
O43 - CFD: 31/07/2013 - 23:25:34 - [0] ----D C:\Users\jojo\AppData\Roaming\Dofus-2
O43 - CFD: 07/08/2013 - 18:47:05 - [1,984] ----D C:\Users\jojo\AppData\Roaming\Dofus2
O43 - CFD: 26/04/2013 - 21:32:39 - [0] ----D C:\Users\jojo\AppData\Roaming\DofusTesting
O43 - CFD: 26/04/2013 - 20:53:55 - [0] ----D C:\Users\jojo\AppData\Roaming\DofusTesting-2
O43 - CFD: 27/04/2013 - 09:56:49 - [0] ----D C:\Users\jojo\AppData\Roaming\DofusTesting-3
O43 - CFD: 06/01/2013 - 11:32:36 - [0,000] ----D C:\Users\jojo\AppData\Roaming\DragonicaSCB
O43 - CFD: 26/02/2013 - 10:53:04 - [0,006] ----D C:\Users\jojo\AppData\Roaming\Epson
O43 - CFD: 24/01/2013 - 17:48:58 - [0,938] ----D C:\Users\jojo\AppData\Roaming\HackSlashLoot
O43 - CFD: 29/12/2012 - 15:28:02 - [0] ----D C:\Users\jojo\AppData\Roaming\Identities
O43 - CFD: 19/05/2013 - 19:34:50 - [0] ----D C:\Users\jojo\AppData\Roaming\InstallShield
O43 - CFD: 05/05/2013 - 20:45:00 - [0,000] ----D C:\Users\jojo\AppData\Roaming\LolClient
O43 - CFD: 29/12/2012 - 16:37:26 - [0,068] ----D C:\Users\jojo\AppData\Roaming\Macromedia
O43 - CFD: 09/08/2013 - 19:21:21 - [9,372] ----D C:\Users\jojo\AppData\Roaming\Malwarebytes
O43 - CFD: 14/07/2009 - 17:35:18 - [0] ----D C:\Users\jojo\AppData\Roaming\Media Center Programs
O43 - CFD: 27/02/2013 - 12:27:43 - [2,035] -S--D C:\Users\jojo\AppData\Roaming\Microsoft
O43 - CFD: 08/06/2013 - 19:56:27 - [56,276] ----D C:\Users\jojo\AppData\Roaming\Mozilla
O43 - CFD: 10/08/2013 - 12:23:02 - [0,707] ----D C:\Users\jojo\AppData\Roaming\Mumble
O43 - CFD: 29/01/2013 - 17:46:54 - [0,055] ----D C:\Users\jojo\AppData\Roaming\OBS
O43 - CFD: 07/01/2013 - 19:16:33 - [0,005] ----D C:\Users\jojo\AppData\Roaming\ObviousIdea
O43 - CFD: 26/04/2013 - 20:53:57 - [0] ----D C:\Users\jojo\AppData\Roaming\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 28/06/2013 - 19:59:14 - [0,001] ----D C:\Users\jojo\AppData\Roaming\Rogue Legacy
O43 - CFD: 10/08/2013 - 12:21:49 - [5,984] ----D C:\Users\jojo\AppData\Roaming\Skype
O43 - CFD: 23/05/2013 - 18:36:38 - [0,031] ----D C:\Users\jojo\AppData\Roaming\Sony Corporation
O43 - CFD: 29/12/2012 - 21:31:44 - [46,622] ----D C:\Users\jojo\AppData\Roaming\SplitMediaLabs
O43 - CFD: 16/06/2013 - 13:18:52 - [0,004] ----D C:\Users\jojo\AppData\Roaming\Sytexis Software
O43 - CFD: 14/02/2013 - 21:36:38 - [0,001] ----D C:\Users\jojo\AppData\Roaming\TeamViewer
O43 - CFD: 30/05/2013 - 17:56:51 - [1,990] ----D C:\Users\jojo\AppData\Roaming\TERA
O43 - CFD: 20/01/2013 - 21:43:51 - [0,000] ----D C:\Users\jojo\AppData\Roaming\WinRAR
O43 - CFD: 26/02/2013 - 10:14:19 - [0] ----D C:\Users\jojo\AppData\Local\ABBYY
O43 - CFD: 26/04/2013 - 19:42:08 - [0,017] ----D C:\Users\jojo\AppData\Local\Adobe
O43 - CFD: 29/12/2012 - 15:27:59 - [0] ----D C:\Users\jojo\AppData\Local\Application Data
O43 - CFD: 29/12/2012 - 15:56:46 - [0,060] ----D C:\Users\jojo\AppData\Local\ATI
O43 - CFD: 04/08/2013 - 00:43:05 - [1,474] ----D C:\Users\jojo\AppData\Local\Diagnostics
O43 - CFD: 04/02/2013 - 16:57:39 - [0,011] ----D C:\Users\jojo\AppData\Local\Dxtory Software
O43 - CFD: 20/04/2013 - 09:12:45 - [0,002] ----D C:\Users\jojo\AppData\Local\EdgeOfReality
O43 - CFD: 20/01/2013 - 20:27:01 - [312,705] ----D C:\Users\jojo\AppData\Local\Google
O43 - CFD: 29/12/2012 - 15:27:59 - [0] ----D C:\Users\jojo\AppData\Local\Historique
O43 - CFD: 10/08/2013 - 12:21:04 - [0,523] ----D C:\Users\jojo\AppData\Local\LogMeIn Hamachi
O43 - CFD: 29/12/2012 - 16:37:26 - [0] ----D C:\Users\jojo\AppData\Local\Macromedia
O43 - CFD: 28/03/2013 - 09:48:54 - [277,941] ----D C:\Users\jojo\AppData\Local\Microsoft
O43 - CFD: 29/12/2012 - 16:18:02 - [264,317] ----D C:\Users\jojo\AppData\Local\Mozilla
O43 - CFD: 04/01/2013 - 12:40:16 - [0,001] ----D C:\Users\jojo\AppData\Local\NBGI
O43 - CFD: 10/08/2013 - 12:32:04 - [0,211] ----D C:\Users\jojo\AppData\Local\PMB Files  =>P2P.Pando
O43 - CFD: 02/01/2013 - 12:10:00 - [0] ----D C:\Users\jojo\AppData\Local\Programs
O43 - CFD: 29/12/2012 - 21:35:47 - [15,608] ----D C:\Users\jojo\AppData\Local\SplitMediaLabs
O43 - CFD: 10/08/2013 - 12:31:32 - [187,384] ----D C:\Users\jojo\AppData\Local\Temp
O43 - CFD: 29/12/2012 - 15:27:59 - [0] ----D C:\Users\jojo\AppData\Local\Temporary Internet Files
O43 - CFD: 29/05/2013 - 18:10:42 - [0,000] ----D C:\Users\jojo\AppData\Local\TERA
O43 - CFD: 11/07/2013 - 19:46:55 - [0,000] ----D C:\Users\jojo\AppData\Local\VirtualStore
O43 - CFD: 14/07/2009 - 06:54:32 - [0,014] R---D C:\Users\jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 29/12/2012 - 15:28:38 - [0,000] R---D C:\Users\jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 26/04/2013 - 19:42:13 - [0] ----D C:\Users\jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dofus2
O43 - CFD: 06/01/2013 - 11:19:43 - [0,002] ----D C:\Users\jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DraXiusDr
O43 - CFD: 07/02/2013 - 21:23:43 - [0] ----D C:\Users\jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GtkAtlantic
O43 - CFD: 29/05/2013 - 16:20:18 - [0,002] ----D C:\Users\jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Happy Cloud
O43 - CFD: 29/12/2012 - 17:26:55 - [0,002] ----D C:\Users\jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LED
O43 - CFD: 14/07/2009 - 06:49:38 - [0,001] R---D C:\Users\jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 29/01/2013 - 17:46:37 - [0,002] ----D C:\Users\jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
O43 - CFD: 09/01/2013 - 16:45:19 - [0,001] R---D C:\Users\jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 29/12/2012 - 17:23:53 - [0,001] ----D C:\Users\jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
O43 - CFD: 16/06/2013 - 13:18:49 - [0,003] ----D C:\Users\jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sytexis Software
O43 - CFD: 20/01/2013 - 21:43:43 - [0,001] ----D C:\Users\jojo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ Program Folder: 146 Scanned in 00mn 01s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.F4CD02A59EE3743987D2AB3DFC8C0FEC] - 10/08/2013 - 11:26:54 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI   [1660386]
O44 - LFC:[MD5.332D9C899E765BFB8224EF8A784E0013] - 10/08/2013 - 11:26:54 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat   [120382]
O44 - LFC:[MD5.AF9CF2E1C35F4EBC9695360496607443] - 10/08/2013 - 11:26:54 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat   [148086]
O44 - LFC:[MD5.F9248F97153CADD7101B07FCA16978E6] - 10/08/2013 - 11:26:54 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat   [651450]
O44 - LFC:[MD5.93463287853B01AA1DCEDA3CB6A0F0E9] - 10/08/2013 - 11:26:54 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat   [744568]
O44 - LFC:[MD5.F4CD02A59EE3743987D2AB3DFC8C0FEC] - 10/08/2013 - 11:26:54 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI   [1660386]
O44 - LFC:[MD5.332D9C899E765BFB8224EF8A784E0013] - 10/08/2013 - 11:26:54 RSHAD . (...) -- C:\Windows\System32\perfc009.dat   [120382]
O44 - LFC:[MD5.AF9CF2E1C35F4EBC9695360496607443] - 10/08/2013 - 11:26:54 RSHAD . (...) -- C:\Windows\System32\perfc00C.dat   [148086]
O44 - LFC:[MD5.F9248F97153CADD7101B07FCA16978E6] - 10/08/2013 - 11:26:54 RSHAD . (...) -- C:\Windows\System32\perfh009.dat   [651450]
O44 - LFC:[MD5.93463287853B01AA1DCEDA3CB6A0F0E9] - 10/08/2013 - 11:26:54 RSHAD . (...) -- C:\Windows\System32\perfh00C.dat   [744568]
O44 - LFC:[MD5.26ED5A43E9F968CA5F148D75FC4D23A4] - 10/08/2013 - 11:23:54 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [479553]
O44 - LFC:[MD5.DCEC223BB81FCF9C1EDDD2110735717B] - 10/08/2013 - 11:20:58 ---A- . (...) -- C:\Windows\setupact.log   [42907]
O44 - LFC:[MD5.5A45906ABA6038EF79E5E8BCB9899347] - 10/08/2013 - 11:20:56 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.F420D31D2623F8C6FBF1632CD251981F] - 09/08/2013 - 18:43:49 ---A- . (...) -- C:\AdwCleaner[S1].txt   [7520]
O44 - LFC:[MD5.8080B7C391AA5B345C968C69D64F2AE6] - 09/08/2013 - 18:43:12 ---A- . (...) -- C:\AdwCleaner[R1].txt   [7286]
O44 - LFC:[MD5.F22B77E76981387634B1072C10B7F375] - 09/08/2013 - 18:33:11 ---A- . (...) -- C:\Windows\PFRO.log   [7974]
O44 - LFC:[MD5.0BB97D43299910CBFBA59C461B99B910] - 09/08/2013 - 18:22:09 RSHAD . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys   [25928]
O44 - LFC:[MD5.CEC4FB1D5DCA128699D9B5F23A963AE9] - 09/08/2013 - 17:48:46 ---A- . (...) -- C:\Windows\SysNative\.crusader   [7622]
O44 - LFC:[MD5.CEC4FB1D5DCA128699D9B5F23A963AE9] - 09/08/2013 - 17:48:46 RSHAD . (...) -- C:\Windows\System32\.crusader   [7622]
O44 - LFC:[MD5.CCEEF313799948CE1D32E641B839FFAC] - 07/08/2013 - 22:25:31 ---A- . (.Oracle Corporation - Pas de description.) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll   [108968]
O44 - LFC:[MD5.CCEEF313799948CE1D32E641B839FFAC] - 07/08/2013 - 22:25:31 RSHAD . (.Oracle Corporation - Pas de description.) -- C:\Windows\System32\WindowsAccessBridge-64.dll   [108968]
O44 - LFC:[MD5.86E7D5CB10B98C012AFC40BAC6D917BF] - 07/08/2013 - 22:25:30 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\SysNative\deployJava1.dll   [972712]
O44 - LFC:[MD5.B590EE4D85A21334B22327A2B3A50CEF] - 07/08/2013 - 22:25:30 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\SysNative\java.exe   [188840]
O44 - LFC:[MD5.359947BCA4705D4F2C1171B58B0D221A] - 07/08/2013 - 22:25:30 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\SysNative\javaw.exe   [189352]
O44 - LFC:[MD5.86E7D5CB10B98C012AFC40BAC6D917BF] - 07/08/2013 - 22:25:30 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\deployJava1.dll   [972712]
O44 - LFC:[MD5.B590EE4D85A21334B22327A2B3A50CEF] - 07/08/2013 - 22:25:30 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\java.exe   [188840]
O44 - LFC:[MD5.359947BCA4705D4F2C1171B58B0D221A] - 07/08/2013 - 22:25:30 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\System32\javaw.exe   [189352]
O44 - LFC:[MD5.2B468C76FDD1E06F5EF5B379C419FA1A] - 07/08/2013 - 22:25:30 ---A- . (.Oracle Corporation - Java(TM) Web Start Launcher.) -- C:\Windows\SysNative\javaws.exe   [312232]
O44 - LFC:[MD5.2B468C76FDD1E06F5EF5B379C419FA1A] - 07/08/2013 - 22:25:30 ---A- . (.Oracle Corporation - Java(TM) Web Start Launcher.) -- C:\Windows\System32\javaws.exe   [312232]
O44 - LFC:[MD5.8156DEC66C32902394BD258E742FD50E] - 07/08/2013 - 22:25:30 ---A- . (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(T.) -- C:\Windows\SysNative\npDeployJava1.dll   [1093032]
O44 - LFC:[MD5.8156DEC66C32902394BD258E742FD50E] - 07/08/2013 - 22:25:30 ---A- . (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(T.) -- C:\Windows\System32\npDeployJava1.dll   [1093032]
~ Files: 31 Scanned in 00mn 02s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - LiveSSP.) -- C:\Windows\System32\livessp.dll
~ LSA: 9 Scanned in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\hitmanpro37.sys . (...) -- C:\Windows\System32\Drivers\hitmanpro37.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\hitmanpro37.sys . (...) -- C:\Windows\System32\Drivers\hitmanpro37.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ CSB: 15 Scanned in 00mn 00s



---\\ MountPoints2 Shell Key (O51)
O51 - MPSK:{b318094c-51ba-11e2-8ea3-806e6f6e6963}\AutoRun\command. (.Seiko Epson Corporation - Epson Install Navi for x86.) -- F:\InstallNavi.exe
~ Keys:  Scanned in 00mn 02s



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.xtor"="DxtoryCodec64.dll" . (.Dxtory Software - Dxtory DirectShow and VFW Decoder.) -- C:\Windows\System32\DxtoryCodec64.dll
O52 - TDSD: \Drivers32\"VIDC.TMB0"="tmbvcm64.dll" . (...) -- C:\Windows\System32\tmbvcm64.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"tmbvcm64.dll"="PlayClaw video decoder 64" . (...) -- C:\Windows\System32\tmbvcm64.dll
~ TDSD: 5 Scanned in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Scanned in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
~ MWPE Keys: 3 Scanned in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys   [491088]
O58 - SDL:[MD5.98F3ABC312BC0C660BA3F3B47782455E] - 25/09/2007 - 11:55:38 ---A- . (.Sony Corporation - Net MD USB Driver.) -- C:\Windows\SysWOW64\drivers\NETMD031.sys   [35319]
~ Drivers:  Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 07/08/2013 - 11:33:20 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-06   [2482176]
O61 - LFC: 07/08/2013 - 17:30:45 ---A- C:\Users\jojo\AppData\Roaming\D2Info0   [113]
O61 - LFC: 07/08/2013 - 17:30:46 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\AlmanaxCache.dat   [2248]
O61 - LFC: 07/08/2013 - 17:30:46 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\Berilia_ui_definition.dat   [55]
O61 - LFC: 07/08/2013 - 17:30:46 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\Berilia_ui_version.dat   [49]
O61 - LFC: 07/08/2013 - 17:30:46 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\Jerakine_lang.dat   [6054]
O61 - LFC: 07/08/2013 - 17:30:46 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\Jerakine_lang_vesrion.dat   [51]
O61 - LFC: 07/08/2013 - 17:30:46 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\LoadingScreen.dat   [1149580]
O61 - LFC: 07/08/2013 - 17:30:46 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\appVersion.dat   [57]
O61 - LFC: 07/08/2013 - 17:30:46 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\atouin.dat   [392]
O61 - LFC: 07/08/2013 - 17:30:46 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\path.d2p   [15]
O61 - LFC: 07/08/2013 - 17:30:47 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\lastLangVersion.dat   [49]
O61 - LFC: 07/08/2013 - 17:30:48 ---A- C:\Users\jojo\AppData\Roaming\app\Jerakine_lang.dat   [4861]
O61 - LFC: 07/08/2013 - 17:30:49 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\Dofus_ComputerOptions.dat   [144]
O61 - LFC: 07/08/2013 - 17:30:49 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\Jerakine_file_version.dat   [5789]
O61 - LFC: 07/08/2013 - 17:31:02 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\Module_Ankama_Connection.dat   [69]
O61 - LFC: 07/08/2013 - 17:31:18 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\Berilia_binds.dat   [4163]
O61 - LFC: 07/08/2013 - 17:31:19 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\dofus.dat   [461]
O61 - LFC: 07/08/2013 - 17:31:20 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\chat.dat   [570]
O61 - LFC: 07/08/2013 - 17:31:22 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\Jerakine_classAlias.dat   [2026]
O61 - LFC: 07/08/2013 - 17:31:22 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\averagePrices.dat   [142872]
O61 - LFC: 07/08/2013 - 17:31:22 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\maps\101450251.bg   [145355]
O61 - LFC: 07/08/2013 - 17:31:23 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\Module_Ankama_GameUiCore.dat   [3273]
O61 - LFC: 07/08/2013 - 17:31:25 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\Berilia_ui_css.dat   [17036]
O61 - LFC: 07/08/2013 - 17:31:34 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\Module_Ankama_Grimoire.dat   [196]
O61 - LFC: 07/08/2013 - 17:31:43 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\maps\84805890.bg   [313327]
O61 - LFC: 07/08/2013 - 17:32:22 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\Module_Ankama_Storage.dat   [123]
O61 - LFC: 07/08/2013 - 17:32:40 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\maps\101451273.bg   [122591]
O61 - LFC: 07/08/2013 - 17:32:43 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\maps\101453315.bg   [160678]
O61 - LFC: 07/08/2013 - 17:46:46 ---A- C:\Users\jojo\AppData\Roaming\DofusAppId0_1   [8]
O61 - LFC: 07/08/2013 - 17:47:05 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\Dofus_ModuleDebug.dat   [96]
O61 - LFC: 07/08/2013 - 17:47:05 ---A- C:\Users\jojo\AppData\Roaming\Dofus2\clientData.dat   [79]
O61 - LFC: 07/08/2013 - 21:19:17 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.tf2pricecheck.net_0.localstorage   [15360]
O61 - LFC: 07/08/2013 - 21:19:17 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.tf2pricecheck.net_0.localstorage-journal   [3608]
O61 - LFC: 07/08/2013 - 22:44:00 ---A- C:\Users\jojo\Downloads\disgaea_2_dark_hero_days_a.zip   [554103]
O61 - LFC: 07/08/2013 - 22:44:09 ---A- C:\Users\jojo\Downloads\disgaea_2_dark_hero_days_a (1).zip   [554103]
O61 - LFC: 07/08/2013 - 22:44:11 ---A- C:\Users\jojo\Downloads\disgaea_2_dark_hero_days_a (2).zip   [554103]
O61 - LFC: 07/08/2013 - 22:45:30 ---A- C:\Users\jojo\Downloads\disgaea_2_dark_hero_days_c.zip   [554094]
O61 - LFC: 07/08/2013 - 22:58:06 ---A- C:\Users\jojo\AppData\Local\Temp\~DF0786BDAF2DF1F991.TMP   [16384]
O61 - LFC: 07/08/2013 - 22:58:10 ---A- C:\Users\jojo\AppData\Local\Temp\~DF18DA9E864EB9B341.TMP   [32768]
O61 - LFC: 08/08/2013 - 00:54:50 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.tf2wh.com_0.localstorage   [3072]
O61 - LFC: 08/08/2013 - 00:54:50 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.tf2wh.com_0.localstorage-journal   [3608]
O61 - LFC: 08/08/2013 - 11:28:31 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\tag.coffeetable.hiro.tv\##7132C5890FD85915\00000001.sol   [171]
O61 - LFC: 08/08/2013 - 11:29:19 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\tag.coffeetable.hiro.tv\mb.sol   [157]
O61 - LFC: 08/08/2013 - 11:29:21 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\con#\tent.yieldmanager.edgesuite.net\avazu.sol   [46]
O61 - LFC: 08/08/2013 - 11:29:28 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.start.gamigo.com_0.localstorage   [3072]
O61 - LFC: 08/08/2013 - 11:29:28 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.start.gamigo.com_0.localstorage-journal   [3608]
O61 - LFC: 08/08/2013 - 11:58:49 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_dub121.mail.live.com_0.localstorage   [3072]
O61 - LFC: 08/08/2013 - 11:58:49 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_dub121.mail.live.com_0.localstorage-journal   [3608]
O61 - LFC: 08/08/2013 - 11:59:06 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_secure.shared.live.com_0.localstorage   [5120]
O61 - LFC: 08/08/2013 - 11:59:06 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_secure.shared.live.com_0.localstorage-journal   [5672]
O61 - LFC: 08/08/2013 - 12:38:54 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.laredoute.fr_0.localstorage   [3072]
O61 - LFC: 08/08/2013 - 12:38:54 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.laredoute.fr_0.localstorage-journal   [3608]
O61 - LFC: 08/08/2013 - 12:38:54 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_lr.iadvize.com_0.localstorage   [3072]
O61 - LFC: 08/08/2013 - 12:38:54 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_lr.iadvize.com_0.localstorage-journal   [3608]
O61 - LFC: 08/08/2013 - 12:48:18 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.spartoo.com_0.localstorage   [3072]
O61 - LFC: 08/08/2013 - 12:48:18 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.spartoo.com_0.localstorage-journal   [3608]
O61 - LFC: 08/08/2013 - 21:10:17 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\chatsync\88\88c075fc2516aeb7.dat   [5392]
O61 - LFC: 08/08/2013 - 22:43:50 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\art.aim4media.com\mb.sol   [159]
O61 - LFC: 08/08/2013 - 23:43:36 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.tf2outpost.com_0.localstorage   [3072]
O61 - LFC: 08/08/2013 - 23:43:36 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.tf2outpost.com_0.localstorage-journal   [3608]
O61 - LFC: 08/08/2013 - 23:48:29 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000007   [1048576]
O61 - LFC: 08/08/2013 - 23:48:31 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000008   [1048576]
O61 - LFC: 08/08/2013 - 23:48:33 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000009   [622224]
O61 - LFC: 09/08/2013 - 00:02:55 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_tf2b.com_0.localstorage   [44032]
O61 - LFC: 09/08/2013 - 00:02:55 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_tf2b.com_0.localstorage-journal   [16384]
O61 - LFC: 09/08/2013 - 02:08:04 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage   [13312]
O61 - LFC: 09/08/2013 - 02:08:04 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage-journal   [13928]
O61 - LFC: 09/08/2013 - 05:35:58 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\tag.coffeetable.hiro.tv\##4562FB3747255F2C\00000001.sol   [272]
O61 - LFC: 09/08/2013 - 05:35:58 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\tag.coffeetable.hiro.tv\hiro_companion_cookie.sol   [106]
O61 - LFC: 09/08/2013 - 05:35:59 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\tag.coffeetable.hiro.tv\US_FARM#\__STREMING_CLIENT_ID_COOKIE.sol   [163]
O61 - LFC: 09/08/2013 - 05:36:15 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\tag.coffeetable.hiro.tv\HIRO_NETWORK_CAPPING_COOKIE.sol   [1492]
O61 - LFC: 09/08/2013 - 05:38:52 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ams1.ib.adnxs.com_0.localstorage   [3072]
O61 - LFC: 09/08/2013 - 05:38:52 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ams1.ib.adnxs.com_0.localstorage-journal   [3608]
O61 - LFC: 09/08/2013 - 05:44:26 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\macromedia.com\support\flashplayer\sys\#cdn2.baronsmedia.com\settings.sol   [90]
O61 - LFC: 09/08/2013 - 05:44:45 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\cdn2.baronsmedia.com\analytics.sol   [444]
O61 - LFC: 09/08/2013 - 05:46:40 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\macromedia.com\support\flashplayer\sys\#cdn.adnxs.com\settings.sol   [83]
O61 - LFC: 09/08/2013 - 05:46:44 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\cdn.adnxs.com\dbg.sol   [51]
O61 - LFC: 09/08/2013 - 05:49:43 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\tag.matomy.hiro.tv\dbg.sol   [50]
O61 - LFC: 09/08/2013 - 05:49:55 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\cdn.adnxs.com\mb.sol   [159]
O61 - LFC: 09/08/2013 - 05:49:56 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\cdn.adnxs.com\analytics.sol   [257]
O61 - LFC: 09/08/2013 - 07:11:08 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\tag.matomy.hiro.tv\US_FARM_Matomy.hiro.t#\v_STREMING_CLIENT_ID_COOKIE.sol   [177]
O61 - LFC: 09/08/2013 - 07:11:41 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\tag.matomy.hiro.tv\hiro_companion_cookie.sol   [106]
O61 - LFC: 09/08/2013 - 07:11:41 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\tag.matomy.hiro.tv\mb.sol   [55]
O61 - LFC: 09/08/2013 - 07:11:44 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\tag.matomy.hiro.tv\US_FARM#\__STREMING_CLIENT_ID_COOKIE.sol   [163]
O61 - LFC: 09/08/2013 - 07:11:46 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\tag.matomy.hiro.tv\##2A988C92FB07823E\00000001.sol   [166]
O61 - LFC: 09/08/2013 - 07:11:52 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\software.hiro.tv\HIRO_REPO.sol   [71]
O61 - LFC: 09/08/2013 - 07:12:05 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\tag.matomy.hiro.tv\HIRO_NETWORK_CAPPING_COOKIE.sol   [2419]
O61 - LFC: 09/08/2013 - 11:20:49 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\t.publicidees.com\TOPI\storage.swf\topi.sol   [552]
O61 - LFC: 09/08/2013 - 11:20:50 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_t.publicidees.com_0.localstorage   [4096]
O61 - LFC: 09/08/2013 - 11:20:50 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_t.publicidees.com_0.localstorage-journal   [3608]
O61 - LFC: 09/08/2013 - 14:49:52 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\keyval.db   [49152]
O61 - LFC: 09/08/2013 - 14:49:52 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\keyval.db-journal   [41552]
O61 - LFC: 09/08/2013 - 16:37:28 ---A- C:\Users\jojo\AppData\Roaming\TeamViewer\MRU\RemoteSupport\431485479.tvc   [70]
O61 - LFC: 09/08/2013 - 17:07:58 ---A- C:\Users\jojo\Downloads\screenshots.rar   [544213]
O61 - LFC: 09/08/2013 - 17:10:56 ---A- C:\Users\jojo\AppData\Roaming\TeamViewer\Connections.txt   [600]
O61 - LFC: 09/08/2013 - 17:17:09 ---A- C:\Users\jojo\Downloads\screenshots (1).rar   [544213]
O61 - LFC: 09/08/2013 - 17:20:34 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\chatsync\05\058b077b07135f32.dat   [2990]
O61 - LFC: 09/08/2013 - 17:33:28 ---A- C:\Users\jojo\AppData\Roaming\TeamViewer\MRU\RemoteSupport\935052529.tvc   [70]
O61 - LFC: 09/08/2013 - 17:36:06 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_en.wikipedia.org_0.localstorage   [3072]
O61 - LFC: 09/08/2013 - 17:36:06 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_en.wikipedia.org_0.localstorage-journal   [3608]
O61 - LFC: 09/08/2013 - 17:49:48 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Media Cache\data_0   [45056]
O61 - LFC: 09/08/2013 - 17:49:48 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Media Cache\data_1   [270336]
O61 - LFC: 09/08/2013 - 17:50:52 ---A- C:\Users\jojo\AppData\Local\Temp\~DFE1DA8225C281182E.TMP   [16384]
O61 - LFC: 09/08/2013 - 17:50:56 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\msn.db   [53248]
O61 - LFC: 09/08/2013 - 17:50:56 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\msn.db-journal   [33344]
O61 - LFC: 09/08/2013 - 17:50:57 ---A- C:\Users\jojo\AppData\Local\Temp\~DF0F14DCFCA6719AD0.TMP   [32768]
O61 - LFC: 09/08/2013 - 18:23:00 ---A- C:\Users\jojo\AppData\Local\Temp\~DF3270881A7B8D6E9C.TMP   [393216]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\1138590732.data   [729]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\1138590732.quar   [2240]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\1329788397.data   [730]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\1329788397.quar   [65880]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\2064127008.data   [753]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\2064127008.quar   [1310040]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\2274243826.data   [737]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\2274243826.quar   [36696]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\2376141624.data   [729]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\2376141624.quar   [115032]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\2972759047.data   [737]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\2972759047.quar   [299352]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\3158969284.data   [733]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\3158969284.quar   [808]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\3681592210.data   [730]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\3681592210.quar   [516440]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\4191982115.data   [731]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\4191982115.quar   [1386]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\4693933580.data   [831]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\5572332295.data   [731]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\5572332295.quar   [168280]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\7333654698.data   [733]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\7333654698.quar   [98648]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\9133978086.data   [735]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\9133978086.quar   [74072]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\9144234422.data   [737]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\9144234422.quar   [26968]
O61 - LFC: 09/08/2013 - 18:32:16 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\9977291394.data   [704]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2013-08-09 (19-23-04).txt   [12210]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\0584880043.data   [778]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\0584880043.quar   [622]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\1071539782.data   [775]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\1071539782.quar   [872]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\1281300656.data   [797]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\1281300656.quar   [440]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\1308168931.data   [778]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\1308168931.quar   [622]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\1906275720.data   [704]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\3445792174.data   [701]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\3445792174.quar   [522]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\3490517724.data   [709]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\3490517724.quar   [3760128]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\3569601432.data   [720]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\3569601432.quar   [2756]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\4520113830.data   [814]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\5546542144.data   [702]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\5546542144.quar   [546]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\6096972295.data   [703]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\6096972295.quar   [388]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\7396856660.data   [775]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\7396856660.quar   [872]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\8100642092.data   [729]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\8100642092.quar   [1504]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\8292820767.data   [847]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\8409252190.data   [869]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\8821663431.data   [709]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\8821663431.quar   [3304960]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\9046889055.data   [693]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\9046889055.quar   [166]
O61 - LFC: 09/08/2013 - 18:32:17 ---A- C:\Users\jojo\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\9977291394.quar   [408]
O61 - LFC: 09/08/2013 - 18:33:30 ---A- C:\Users\jojo\AppData\Local\Temp\~DF6824254E61222AF3.TMP   [16384]
O61 - LFC: 09/08/2013 - 18:33:33 ---A- C:\Users\jojo\AppData\Local\Temp\~DF470930D176406EFE.TMP   [32768]
O61 - LFC: 09/08/2013 - 18:42:58 ---A- C:\Users\jojo\Downloads\adwcleaner.exe   [666633]
O61 - LFC: 09/08/2013 - 18:44:41 ---A- C:\Users\jojo\AppData\Local\Temp\~DFEE1CB1D68C6993D5.TMP   [16384]
O61 - LFC: 09/08/2013 - 18:44:45 ---A- C:\Users\jojo\AppData\Local\Temp\~DFDD9F63B233FD34E0.TMP   [32768]
O61 - LFC: 09/08/2013 - 18:45:49 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies   [6144]
O61 - LFC: 09/08/2013 - 18:45:49 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies-journal   [3608]
O61 - LFC: 09/08/2013 - 18:46:19 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\QuotaManager   [13312]
O61 - LFC: 09/08/2013 - 18:46:19 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\QuotaManager-journal   [8768]
O61 - LFC: 09/08/2013 - 18:51:20 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000099.sst   [231]
O61 - LFC: 09/08/2013 - 18:51:21 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old   [352]
O61 - LFC: 09/08/2013 - 18:51:23 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old   [267]
O61 - LFC: 09/08/2013 - 18:51:25 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old   [269]
O61 - LFC: 09/08/2013 - 19:45:15 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Top Sites   [204800]
O61 - LFC: 09/08/2013 - 19:45:15 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal   [16384]
O61 - LFC: 09/08/2013 - 19:59:41 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\art.aim4media.com\analytics.sol   [257]
O61 - LFC: 09/08/2013 - 22:46:39 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-07   [1249280]
O61 - LFC: 09/08/2013 - 23:18:03 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Shortcuts   [45056]
O61 - LFC: 09/08/2013 - 23:18:03 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal   [12824]
O61 - LFC: 09/08/2013 - 23:47:22 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ib.adnxs.com_0.localstorage   [3072]
O61 - LFC: 09/08/2013 - 23:47:22 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ib.adnxs.com_0.localstorage-journal   [3608]
O61 - LFC: 09/08/2013 - 23:56:26 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\adventori.com\cookie.sol   [94]
O61 - LFC: 10/08/2013 - 00:01:12 ---A- C:\Users\jojo\AppData\Local\PMB Files\CE\07\CE07A2740DD7C79CCEC86EB9F477F18B3F059390.ct1   [379]  =>P2P.Pando
O61 - LFC: 10/08/2013 - 00:01:12 ---A- C:\Users\jojo\AppData\Local\PMB Files\E8\BE\E8BE32910EFFC2D7AF5269DE1105D8C8A4FFA259.ct1   [438]  =>P2P.Pando
O61 - LFC: 10/08/2013 - 00:06:05 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Last Session   [492164]
O61 - LFC: 10/08/2013 - 00:08:47 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache   [306580]
O61 - LFC: 10/08/2013 - 00:08:47 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Last Tabs   [833575]
O61 - LFC: 10/08/2013 - 00:08:47 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Visited Links   [131072]
O61 - LFC: 10/08/2013 - 00:09:29 ---A- C:\Users\jojo\AppData\Local\LogMeIn Hamachi\h2-ui.log.old   [524880]
O61 - LFC: 10/08/2013 - 00:09:29 ---A- C:\Users\jojo\AppData\Local\Temp\~DF68FF2593DEBBBAFF.TMP   [16384]
O61 - LFC: 10/08/2013 - 00:09:34 ---A- C:\Users\jojo\AppData\Local\Temp\~DFEDDCE4E6BF0B723A.TMP   [32768]
O61 - LFC: 10/08/2013 - 00:10:41 ---A- C:\Users\jojo\AppData\Local\Temp\wmplog07.sqm   [1330]
O61 - LFC: 10/08/2013 - 11:19:40 ---A- C:\Users\jojo\AppData\Local\Diagnostics\460911090\2013081010.000\results.xsl   [49097]
O61 - LFC: 10/08/2013 - 11:19:56 ---A- C:\Users\jojo\AppData\Local\Diagnostics\460911090\2013081010.000\FB57A7E2-4518-4609-932A-2305F7E829C6.Diagnose.0.etl   [327680]
O61 - LFC: 10/08/2013 - 11:19:56 ---A- C:\Users\jojo\AppData\Local\Diagnostics\460911090\2013081010.000\NetworkConfiguration.cab   [1929]
O61 - LFC: 10/08/2013 - 11:20:03 ---A- C:\Users\jojo\AppData\Local\Diagnostics\460911090\2013081010.000\NetworkDiagnostics.0.debugreport.xml   [69454]
O61 - LFC: 10/08/2013 - 11:20:03 ---A- C:\Users\jojo\AppData\Local\Diagnostics\460911090\2013081010.000\ResultReport.xml   [38592]
O61 - LFC: 10/08/2013 - 11:20:03 ---A- C:\Users\jojo\AppData\Local\Diagnostics\460911090\2013081010.000\results.xml   [256]
O61 - LFC: 10/08/2013 - 11:20:03 ---A- C:\Users\jojo\AppData\Local\Diagnostics\460911090\latest.cab   [27250]
O61 - LFC: 10/08/2013 - 11:20:07 --HA- C:\Users\jojo\AppData\Local\IconCache.db   [3257478]
O61 - LFC: 10/08/2013 - 11:20:14 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\httpfe\cookies.dat   [2]
O61 - LFC: 10/08/2013 - 11:20:59 ---A- C:\Users\jojo\AppData\Local\LogMeIn Hamachi\h2-ui-peers.cfg   [115]
O61 - LFC: 10/08/2013 - 11:20:59 ---A- C:\Users\jojo\AppData\Local\LogMeIn Hamachi\h2-ui.cfg   [1375]
O61 - LFC: 10/08/2013 - 11:20:59 ---A- C:\Users\jojo\AppData\Local\LogMeIn Hamachi\h2-ui.cfg.bak   [1375]
O61 - LFC: 10/08/2013 - 11:20:59 ---A- C:\Users\jojo\AppData\Local\PMB Files\cert\secmod.db   [16384]  =>P2P.Pando
O61 - LFC: 10/08/2013 - 11:20:59 ---A- C:\Users\jojo\AppData\Local\Temp\~DF99608AE4DFA38D60.TMP   [16384]
O61 - LFC: 10/08/2013 - 11:21:00 ---A- C:\Users\jojo\AppData\Local\PMB Files\cert\cert8.db   [65536]  =>P2P.Pando
O61 - LFC: 10/08/2013 - 11:21:00 ---A- C:\Users\jojo\AppData\Local\PMB Files\cert\key3.db   [16384]  =>P2P.Pando
O61 - LFC: 10/08/2013 - 11:21:01 ---A- C:\Users\jojo\AppData\Roaming\Skype\shared_dynco\dc.db   [2035712]
O61 - LFC: 10/08/2013 - 11:21:01 ---A- C:\Users\jojo\AppData\Roaming\Skype\shared_dynco\dc.db-journal   [1137320]
O61 - LFC: 10/08/2013 - 11:21:02 ---A- C:\Users\jojo\AppData\Roaming\Skype\DbTemp\temp-RJHHf5cnUR4eoZpzTmFVq6qC   [0]
O61 - LFC: 10/08/2013 - 11:21:03 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\eas.db   [49152]
O61 - LFC: 10/08/2013 - 11:21:03 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\eas.db-journal   [37448]
O61 - LFC: 10/08/2013 - 11:21:04 ---A- C:\Users\jojo\AppData\Local\LogMeIn Hamachi\h2-ui.ini.bak   [265]
O61 - LFC: 10/08/2013 - 11:21:04 ---A- C:\Users\jojo\AppData\Local\Temp\~DFD8622217EEC95B2E.TMP   [32768]
O61 - LFC: 10/08/2013 - 11:21:05 ---A- C:\Users\jojo\AppData\Local\ATI\ACE\Manifest.Bin   [27266]
O61 - LFC: 10/08/2013 - 11:21:05 ---A- C:\Users\jojo\AppData\Local\ATI\ACE\Manifest.xml   [19630]
O61 - LFC: 10/08/2013 - 11:21:49 ---A- C:\Users\jojo\AppData\Roaming\Skype\shared.xml   [67794]
O61 - LFC: 10/08/2013 - 11:21:52 ---A- C:\Users\jojo\AppData\Roaming\Skype\DbTemp\temp-nb6pS6rhBurG10bmN89m5Ddc   [0]
O61 - LFC: 10/08/2013 - 11:22:58 ---A- C:\Users\jojo\AppData\Roaming\Mumble\mumble.sqlite   [27648]
O61 - LFC: 10/08/2013 - 11:23:02 ---A- C:\Users\jojo\AppData\Roaming\Mumble\mumble.sqlite-journal   [0]
O61 - LFC: 10/08/2013 - 11:23:06 ---A- C:\Users\jojo\AppData\Roaming\Mumble\Console.txt   [713198]
O61 - LFC: 10/08/2013 - 11:23:12 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\CURRENT   [16]
O61 - LFC: 10/08/2013 - 11:23:12 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG   [0]
O61 - LFC: 10/08/2013 - 11:23:12 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000101   [895]
O61 - LFC: 10/08/2013 - 11:23:12 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Login Data   [12288]
O61 - LFC: 10/08/2013 - 11:23:12 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal   [8736]
O61 - LFC: 10/08/2013 - 11:23:13 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor   [194560]
O61 - LFC: 10/08/2013 - 11:23:13 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal   [16384]
O61 - LFC: 10/08/2013 - 11:23:14 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT   [16]
O61 - LFC: 10/08/2013 - 11:23:14 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG   [0]
O61 - LFC: 10/08/2013 - 11:23:14 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000125   [471]
O61 - LFC: 10/08/2013 - 11:24:12 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000252.sst   [183172]
O61 - LFC: 10/08/2013 - 11:24:12 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT   [16]
O61 - LFC: 10/08/2013 - 11:24:12 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000249   [476]
O61 - LFC: 10/08/2013 - 11:24:19 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Archived History   [1179648]
O61 - LFC: 10/08/2013 - 11:24:19 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal   [16384]
O61 - LFC: 10/08/2013 - 11:24:19 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-05   [4169728]
O61 - LFC: 10/08/2013 - 11:24:19 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-05-journal   [16384]
O61 - LFC: 10/08/2013 - 11:24:26 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG   [0]
O61 - LFC: 10/08/2013 - 11:24:36 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.yieldmanager.com_0.localstorage   [3072]
O61 - LFC: 10/08/2013 - 11:24:36 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.yieldmanager.com_0.localstorage-journal   [3608]
O61 - LFC: 10/08/2013 - 11:25:15 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity   [1381]
O61 - LFC: 10/08/2013 - 11:25:17 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Web Data   [94208]
O61 - LFC: 10/08/2013 - 11:25:17 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal   [16384]
O61 - LFC: 10/08/2013 - 11:25:26 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\macromedia.com\support\flashplayer\sys\settings.sol   [997]
O61 - LFC: 10/08/2013 - 11:25:53 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S6LPXCM4\cdn4.telemetryverification.net\mb.sol   [158]
O61 - LFC: 10/08/2013 - 11:26:04 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\bistats.db   [176128]
O61 - LFC: 10/08/2013 - 11:26:04 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\bistats.db-journal   [78488]
O61 - LFC: 10/08/2013 - 11:26:05 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\config.xml   [11729]
O61 - LFC: 10/08/2013 - 11:26:12 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3   [638976]
O61 - LFC: 10/08/2013 - 11:26:12 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Sync Data\SyncData.sqlite3-journal   [16384]
O61 - LFC: 10/08/2013 - 11:27:28 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Safe Browsing Download   [660684]
O61 - LFC: 10/08/2013 - 11:27:29 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom   [10098908]
O61 - LFC: 10/08/2013 - 11:27:29 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set   [1960730]
O61 - LFC: 10/08/2013 - 11:27:29 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Safe Browsing Csd Whitelist   [135184]
O61 - LFC: 10/08/2013 - 11:27:29 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Safe Browsing Download Whitelist   [19656]
O61 - LFC: 10/08/2013 - 11:27:29 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Safe Browsing Extension Blacklist   [5960]
O61 - LFC: 10/08/2013 - 11:27:35 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-08   [5009408]
O61 - LFC: 10/08/2013 - 11:27:35 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\History Index 2013-08-journal   [16384]
O61 - LFC: 10/08/2013 - 11:27:57 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies   [6144]
O61 - LFC: 10/08/2013 - 11:27:57 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies-journal   [4640]
O61 - LFC: 10/08/2013 - 11:29:17 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists   [259439]
O61 - LFC: 10/08/2013 - 11:29:17 ---A- C:\Users\jojo\AppData\Local\Temp\CRX_75DAF8CB7768\crl-set   [1523]
O61 - LFC: 10/08/2013 - 11:29:17 ---A- C:\Users\jojo\AppData\Local\Temp\CRX_75DAF8CB7768\manifest.json   [34]
O61 - LFC: 10/08/2013 - 11:30:19 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Preferences   [98291]
O61 - LFC: 10/08/2013 - 11:30:30 ---A- C:\Users\jojo\AppData\Local\ATI\ACE\Profiles.xml   [16001]
O61 - LFC: 10/08/2013 - 11:30:39 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\History   [1110016]
O61 - LFC: 10/08/2013 - 11:30:39 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\History-journal   [16384]
O61 - LFC: 10/08/2013 - 11:30:58 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Cookies   [542720]
O61 - LFC: 10/08/2013 - 11:30:58 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal   [16384]
O61 - LFC: 10/08/2013 - 11:31:32 ---A- C:\Users\jojo\AppData\Local\Temp\LedWallpaper_jojo.bmp   [3888054]
O61 - LFC: 10/08/2013 - 11:31:33 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\main.db   [1163264]
O61 - LFC: 10/08/2013 - 11:31:33 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\main.db-journal   [312416]
O61 - LFC: 10/08/2013 - 11:32:04 ---A- C:\Users\jojo\AppData\Local\PMB Files\pando.save   [19937]  =>P2P.Pando
O61 - LFC: 10/08/2013 - 11:32:04 ---A- C:\Users\jojo\AppData\Roaming\Skype\johnwolf931\dc.db   [172032]
O61 - LFC: 10/08/2013 - 11:32:10 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Favicons   [538624]
O61 - LFC: 10/08/2013 - 11:32:10 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal   [16384]
O61 - LFC: 10/08/2013 - 11:32:10 ---A- C:\Users\jojo\AppData\Local\Google\Chrome\User Data\Local State   [37230]
~ 17 Fichiers temporaires (Temporary files)
~ Files: 287 Scanned in 00mn 02s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS:  Scanned in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\drivers\afd.sys (AFD)  .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - 19/12/2012 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag)  .(.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
O64 - Services: CurCS - 09/05/2013 - C:\Windows\System32\Drivers\aswFsBlk.sys (aswFsBlk)  .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK
O64 - Services: CurCS - 09/05/2013 - C:\Windows\system32\drivers\aswMonFlt.sys (aswMonFlt)  .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - 09/05/2013 - C:\Windows\system32\Drivers\aswrdr2.sys (aswRdr)  .(.AVAST Software - avast! WFP Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - 09/05/2013 - Pas de propriétaire (aswRvrt)  .(...) - LEGACY_ASWRVRT
O64 - Services: CurCS - 27/06/2013 - C:\Windows\System32\Drivers\aswSnx.sys (aswSnx)  .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - 27/06/2013 - C:\Windows\System32\Drivers\aswSP.sys (aswSP)  .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - 09/05/2013 - C:\Windows\System32\Drivers\aswTdi.sys (aswTdi)  .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI
O64 - Services: CurCS - 27/06/2013 - Pas de propriétaire (aswVmm)  .(...) - LEGACY_ASWVMM
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\atapi.sys (atapi)  .(.Microsoft Corporation - ATAPI IDE Miniport Driver.) - LEGACY_ATAPI
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\Beep.sys (Beep)  .(.Microsoft Corporation - BEEP Driver.) - LEGACY_BEEP
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\browser.dll (bowser)  .(.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) - LEGACY_BOWSER
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\cdfs.sys (cdfs)  .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\clfs.sys (CLFS)  .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
O64 - Services: CurCS - 20/01/2011 - C:\Windows\System32\Drivers\cng.sys (CNG)  .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\cscsvc.dll (CSC)  .(.Microsoft Corporation - DLL du service CSC.) - LEGACY_CSC
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\drivers\dfsc.sys (DfsC)  .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\discache.sys (discache)  .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
O64 - Services: CurCS - 21/07/2011 - C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys (driverhardwarev2x64)  .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2X64
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\drivers\dxgkrnl.sys (DXGKrnl)  .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\fastfat.sys (fastfat)  .(.Microsoft Corporation - Fast FAT File System Driver.) - LEGACY_FASTFAT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\fileinfo.sys (FileInfo)  .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\drivers\fltmgr.sys (FltMgr)  .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\drivers\fvevol.sys (fvevol)  .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\drivers\http.sys (HTTP)  .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy)  .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
O64 - Services: CurCS - 20/01/2011 - C:\Windows\System32\Drivers\ksecdd.sys (KSecDD)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
O64 - Services: CurCS - 20/01/2011 - C:\Windows\System32\Drivers\ksecpkg.sys (KSecPkg)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\lltdio.sys (lltdio)  .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\luafv.sys (luafv)  .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
O64 - Services: CurCS - 04/04/2013 - C:\Windows\system32\drivers\mbam.sys (MBAMProtector)  .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\drivers\mountmgr.sys (mountmgr)  .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\FirewallAPI.dll (mpsdrv)  .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\wkssvc.dll (mrxsmb)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\wkssvc.dll (mrxsmb10)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\wkssvc.dll (mrxsmb20)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\msisadrv.sys (msisadrv)  .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\mup.sys (Mup)  .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\nwifi.sys (NativeWifiP)  .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\drivers\ndis.sys (NDIS)  .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
O64 - Services: CurCS - 20/01/2011 - C:\Windows\System32\DRIVERS\ndisuio.sys (Ndisuio)  .(.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\netbios.sys (NetBIOS)  .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\drivers\netbt.sys (NetBT)  .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy)  .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\pcw.sys (pcw)  .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\peauth.sys (PEAUTH)  .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
O64 - Services: CurCS - 20/01/2011 - C:\Windows\System32\drivers\pacer.sys (Psched)  .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\qwavedrv.sys (QWAVEdrv)  .(.Microsoft Corporation - Pilote du support de Microsoft Quality Wind.) - LEGACY_QWAVEDRV
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\wkssvc.dll (rdbss)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD)  .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD)  .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP)  .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\rspndr.sys (rspndr)  .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\spldr.sys (spldr)  .(.Microsoft Corporation - loader for security processor.) - LEGACY_SPLDR
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\srvsvc.dll (srv)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\srvsvc.dll (srv2)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
O64 - Services: CurCS - 20/01/2011 - C:\Windows\System32\DRIVERS\srvnet.sys (srvnet)  .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\vmstorfltres.dll (storflt)  .(.Microsoft Corporation - Fichier DLL de ressources du filtre de stoc.) - LEGACY_STORFLT
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\tcpipcfg.dll (Tcpip)  .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP
O64 - Services: CurCS - 20/01/2011 - C:\Windows\System32\drivers\tcpipreg.sys (tcpipreg)  .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\tcpipcfg.dll (tdx)  .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX
O64 - Services: CurCS - 20/01/2011 - C:\Windows\System32\DRIVERS\udfs.sys (udfs)  .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\vga.sys (VgaSave)  .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
O64 - Services: CurCS - 20/01/2011 - C:\Windows\system32\drivers\volmgrx.sys (volmgrx)  .(.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) - LEGACY_VOLMGRX
O64 - Services: CurCS - 20/01/2011 - C:\Windows\System32\DRIVERS\volsnap.sys (volsnap)  .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\vwififlt.sys (vwififlt)  .(.Microsoft Corporation - Virtual WiFi Filter Driver.) - LEGACY_VWIFIFLT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\rascfg.dll (Wanarpv6)  .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\Wdf01000.sys (Wdf01000)  .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\wfplwf.sys (WfpLwf)  .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF
O64 - Services: CurCS - 20/01/2011 - C:\Windows\System32\drivers\WudfPf.sys (WudfPf)  .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF
~ Legacy: 79 Scanned in 00mn 00s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- D:\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- D:\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
~ FASS Keys: 19 Scanned in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- D:\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Keys:  Scanned in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
~ Keys:  Scanned in 00mn 00s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll   [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll   [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll   [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll   [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll   [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll   [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll   [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll   [2420736]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll   [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [70656]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll   [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll   [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [136192]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll   [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll   [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [100864]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll   [193536]
~ Services: 33 Scanned in 00mn 00s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.F92067543402AF7026A45B413646ACBF] [SPRF][30/08/2012] (.Foxit Corporation - Foxit Updater.) -- C:\Users\jojo\AppData\Local\Temp\Foxit Updater.exe   [4327024]
[MD5.1B1D86A574E842946E5D5317892B45C5] [SPRF][19/07/2013] (.Skype Technologies S.A. - Skype.) -- C:\Users\jojo\AppData\Local\Temp\SkypeSetup.exe   [31954536]
[MD5.B9270BA1B0D210F786D2E001A7BB902B] [SPRF][05/05/2013] (.Eclipse Foundation - SWT for Windows native library.) -- C:\Users\jojo\AppData\Local\Temp\swt-win32-3740.dll   [430080]
[MD5.AA99027CB375A7EECA1852AEC8E5396B] [SPRF][30/06/2011] (.Pas de propriétaire - StreamPrivacy.) -- C:\Users\jojo\Desktop\StreamPrivacy.exe   [141312]
[MD5.D1A4899F5DD3799521A3BFADBDCFBC8D] [SPRF][12/07/2013] (.Pas de propriétaire - Look for error.) -- C:\Users\jojo\Desktop\SysChecker_Bêta.exe   [312713]
~ Files:  Scanned in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "SNMPTRAP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "SNMPTRAP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "WMP-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-QWave-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-QWave-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-P2PHost-In-TCP" | In - None - P6 - TRUE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-IPHTTPS-Out" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DNS-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-RAServer-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-RAServer-Out-TCP-NoScope-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-DCOM-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-TCP-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NetPres-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "Microsoft-Windows-PeerDist-WSD-In" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-PeerDist-WSD-Out" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteDesktop-UserMode-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "SPPSVC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de la plateforme de protection logicielle Microsoft.) -- C:\Windows\system32\sppsvc.exe
O87 - FAEL: "SPPSVC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de la plateforme de protection logicielle Microsoft.) -- C:\Windows\system32\sppsvc.exe
O87 - FAEL: "MCX-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-QWave-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-MCX2SVC-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-Prov-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - MCX2 Provisioning library.) -- C:\Windows\ehome\mcx2prov.exe
O87 - FAEL: "MCX-PlayTo-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-McrMgr-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Media Center Extender Manager.) -- C:\Windows\ehome\mcrmgr.exe
O87 - FAEL: "MCX-PlayTo-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-FDPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{53830088-6AD6-4B74-9700-E3165C201FCA}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\x64\maconfservice.exe
O87 - FAEL: "{BE5D8A66-D0B3-4560-A968-183B3C360AEC}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\x64\maconfservice.exe
O87 - FAEL: "TCP Query User{3D5D6489-B422-4ED5-975F-A9651BB1B4CE}C:\programdata\battle.net\agent\agent.524\agent.exe" | In - Private - P6 - TRUE | .(.Blizzard Entertainment.) -- C:\programdata\battle.net\agent\agent.524\agent.exe
O87 - FAEL: "UDP Query User{DBE9CA04-4F44-43C4-8743-688FBF9C6D5D}C:\programdata\battle.net\agent\agent.524\agent.exe" | In - Private - P17 - TRUE | .(.Blizzard Entertainment.) -- C:\programdata\battle.net\agent\agent.524\agent.exe
O87 - FAEL: "{5467F650-0F36-4B0D-8030-67055C9E43F5}" | In - Private - P6 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
O87 - FAEL: "{50B11183-8A3A-4B5B-A2A7-5A16A680EA88}" | In - Private - P17 - TRUE | .(.Blizzard Entertainment - Battle.net Update Agent.) -- C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
O87 - FAEL: "{06F0C775-1CDE-457F-9BC1-BE2D4BF200DE}" | In - Private - P6 - TRUE | .(.Valve Corporation - Steam Client Bootstrapper (buildbot_winslave04_steam_steam_rel_client_win.) -- D:\Steam\Steam.exe
O87 - FAEL: "{9B20F83A-00E4-428F-92CF-DDC9A503CCEE}" | In - Private - P17 - TRUE | .(.Valve Corporation - Steam Client Bootstrapper (buildbot_winslave04_steam_steam_rel_client_win.) -- D:\Steam\Steam.exe
O87 - FAEL: "TCP Query User{AECEF34E-2112-4749-A21B-58D7D2B7FCF7}D:\steam\steamapps\johnwolf931\team fortress 2\hl2.exe" | In - Private - P6 - TRUE | .(...) -- D:\steam\steamapps\johnwolf931\team fortress 2\hl2.exe
O87 - FAEL: "UDP Query User{976DC1D5-9D02-4FC3-A30F-B9D785476EBD}D:\steam\steamapps\johnwolf931\team fortress 2\hl2.exe" | In - Private - P17 - TRUE | .(...) -- D:\steam\steamapps\johnwolf931\team fortress 2\hl2.exe
O87 - FAEL: "{10B01411-C90E-454F-8306-399C466EB97D}" | In - Private - P6 - TRUE | .(.Edmund Mcmillen & Florian Himsl - The Binding of Isaac.) -- D:\Steam\SteamApps\common\the binding of isaac\Isaac.exe
O87 - FAEL: "{93534203-AC1A-4652-A39B-A3656FE10121}" | In - Private - P17 - TRUE | .(.Edmund Mcmillen & Florian Himsl - The Binding of Isaac.) -- D:\Steam\SteamApps\common\the binding of isaac\Isaac.exe
O87 - FAEL: "{F24B5DD3-C2C7-441D-8A82-25E6C1344CDD}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O87 - FAEL: "{E1AE40FA-EFA7-4BFF-AE9A-F629A539623D}" | In - Private - P6 - TRUE | .(.NAMCO BANDAI Games Inc. - DARK SOULS PREPARE TO DIE EDITION Launcher.) -- D:\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
O87 - FAEL: "{3DD0F067-3701-40AF-B9EB-84E72D509FCB}" | In - Private - P17 - TRUE | .(.NAMCO BANDAI Games Inc. - DARK SOULS PREPARE TO DIE EDITION Launcher.) -- D:\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
O87 - FAEL: "TCP Query User{49069058-3282-4F70-BE53-0EB97D9F6084}D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe" | In - Private - P6 - TRUE | .(.NAMCO BANDAI Games Inc..) -- D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
O87 - FAEL: "UDP Query User{734D2BA3-56B8-4224-9A2C-1004A520666B}D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe" | In - Private - P17 - TRUE | .(.NAMCO BANDAI Games Inc..) -- D:\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
O87 - FAEL: "{8C56FDE6-ED66-4695-B437-218242D34742}" | In - Private - P6 - TRUE | .(.Easygamestation, Carpe Fulgur LLC - Chantelise v.1.16.) -- D:\Steam\SteamApps\common\Chantelise\chantelise.exe
O87 - FAEL: "{8750F053-F529-47A4-834A-4454277C4867}" | In - Private - P17 - TRUE | .(.Easygamestation, Carpe Fulgur LLC - Chantelise v.1.16.) -- D:\Steam\SteamApps\common\Chantelise\chantelise.exe
O87 - FAEL: "{22BBC190-B822-41FF-B0B3-126FAD1C661C}" | In - Private - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\Chantelise\custom.exe
O87 - FAEL: "{56F2A249-C572-4ED9-8457-EAF789A60746}" | In - Private - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\Chantelise\custom.exe
O87 - FAEL: "{82DC43A5-FAB3-4B53-B2AB-936A44C64DA0}" |In - Private - P6 - TRUE | .(...) -- C:\Users\jojo\AppData\Roaming\2YourFace\Updater.exe (.not file.)  =>Adware.2YourFace
O87 - FAEL: "{444AD8BC-1B01-43E3-ACDA-02B7141D4DAF}" |In - Private - P17 - TRUE | .(...) -- C:\Users\jojo\AppData\Roaming\2YourFace\Updater.exe (.not file.)  =>Adware.2YourFace
O87 - FAEL: "TCP Query User{04D1CCCA-0F2D-47FC-828A-E753EF23EB0E}C:\users\jojo\desktop\snes9x\snes9x.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\jojo\desktop\snes9x\snes9x.exe (.not file.)
O87 - FAEL: "UDP Query User{744355B1-EA40-4FCD-A501-5BDDB005CDE5}C:\users\jojo\desktop\snes9x\snes9x.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\jojo\desktop\snes9x\snes9x.exe (.not file.)
O87 - FAEL: "TCP Query User{FC844060-F370-4F7E-900A-368815CA0D40}C:\users\jojo\desktop\zsnes\zsnesw.exe" | In - Private - P6 - TRUE | .(...) -- C:\users\jojo\desktop\zsnes\zsnesw.exe
O87 - FAEL: "UDP Query User{2752EF46-B1B9-41FE-868D-72EFD5D96074}C:\users\jojo\desktop\zsnes\zsnesw.exe" | In - Private - P17 - TRUE | .(...) -- C:\users\jojo\desktop\zsnes\zsnesw.exe
O87 - FAEL: "TCP Query User{F800B07C-47CE-40A5-9A0F-39FE14DC1D54}D:\bin\javaw.exe" | In - Private - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- D:\bin\javaw.exe
O87 - FAEL: "UDP Query User{F2A75137-9095-4403-9ADE-FA12F48D33D2}D:\bin\javaw.exe" | In - Private - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- D:\bin\javaw.exe
O87 - FAEL: "{C9B0F009-1D66-4901-BDF9-6D9D6F463355}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\SysWOW64\msiexec.exe
O87 - FAEL: "{D0B16597-800A-4BDD-8B3D-6B9BB60E388C}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\SysWOW64\msiexec.exe
O87 - FAEL: "{C4BA9ACB-B4FD-4CE6-9F06-990B34A0D547}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.)  =>PUP.SweetIM
O87 - FAEL: "{0F32F3C9-F175-4B04-B1ED-4418E1DD3D88}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.)  =>PUP.SweetIM
O87 - FAEL: "{C05F60F8-76F3-41B2-8C96-398D28DA536E}" | In - Private - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\10000000\10000000.exe
O87 - FAEL: "{232431A0-B98C-40D7-B3A7-10E0722C987D}" | In - Private - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\10000000\10000000.exe
O87 - FAEL: "{626BD4EB-8427-4173-91CA-943C3197B79E}" | In - Private - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\HackSlashLoot\HackSlashLoot.exe
O87 - FAEL: "{C1E4BE46-7D1A-4E4D-B149-AC85C41CE75D}" | In - Private - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\HackSlashLoot\HackSlashLoot.exe
O87 - FAEL: "TCP Query User{A562179D-3FE9-4FD1-A6FC-B2C089CDD50F}C:\users\jojo\appdata\local\temp\gw2.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\jojo\appdata\local\temp\gw2.exe (.not file.)
O87 - FAEL: "UDP Query User{60CC96D2-6888-4459-999D-569B58EE3293}C:\users\jojo\appdata\local\temp\gw2.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\jojo\appdata\local\temp\gw2.exe (.not file.)
O87 - FAEL: "TCP Query User{7221D1B4-E6AD-4EF6-ACCD-20DE40841140}D:\guild wars 2\gw2.exe" | In - Private - P6 - TRUE | .(.ArenaNet - Guild Wars 2 Game Client.) -- D:\guild wars 2\gw2.exe
O87 - FAEL: "UDP Query User{215315D6-5222-41FF-9A6C-B0D177CB5EC5}D:\guild wars 2\gw2.exe" | In - Private - P17 - TRUE | .(.ArenaNet - Guild Wars 2 Game Client.) -- D:\guild wars 2\gw2.exe
O87 - FAEL: "TCP Query User{5DFF4854-3696-42BC-99CE-6BBBE6FEC806}D:\steam\steamapps\_magicshadow_\team fortress 2\hl2.exe" |In - Private - P6 - TRUE | .(...) -- D:\steam\steamapps\_magicshadow_\team fortress 2\hl2.exe (.not file.)
O87 - FAEL: "UDP Query User{97D7B013-B3C0-4CD0-A2C7-6AA86FCA0768}D:\steam\steamapps\_magicshadow_\team fortress 2\hl2.exe" |In - Private - P17 - TRUE | .(...) -- D:\steam\steamapps\_magicshadow_\team fortress 2\hl2.exe (.not file.)
O87 - FAEL: "{AB2398CA-7061-4CF0-9E46-3756DF205ABA}" | In - Private - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\Gish\gish.exe
O87 - FAEL: "{6ED7076F-E1E5-4B3A-AC00-2492D513BA20}" | In - Private - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\Gish\gish.exe
O87 - FAEL: "{5DA10AFB-CFB0-47BF-9BF5-AAECD6BA895A}" | In - Private - P6 - TRUE | .(.SEIKO EPSON CORPORATION - EpsonNet Setup.) -- F:\Network\EpsonNetSetup\ENEasyApp.exe
O87 - FAEL: "{697F7E54-5B54-44DD-AA4E-C6A0C1AE6DD9}" | In - Private - P17 - TRUE | .(.SEIKO EPSON CORPORATION - EpsonNet Setup.) -- F:\Network\EpsonNetSetup\ENEasyApp.exe
O87 - FAEL: "TCP Query User{D873C513-A6D1-455A-9C12-8BEE68153C51}C:\program files (x86)\epson software\event manager\eeventmanager.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\epson software\event manager\eeventmanager.exe (.not file.)
O87 - FAEL: "UDP Query User{EC53DD34-21D8-4E07-8565-445681D2CA56}C:\program files (x86)\epson software\event manager\eeventmanager.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\epson software\event manager\eeventmanager.exe (.not file.)
O87 - FAEL: "TCP Query User{B4E3D8B2-2654-4183-9510-35DD19EB41C5}D:\steam\steamapps\johnwolf931\source sdk base\hl2.exe" | In - Private - P6 - TRUE | .(...) -- D:\steam\steamapps\johnwolf931\source sdk base\hl2.exe
O87 - FAEL: "UDP Query User{097A38E6-DD39-45BF-B82A-3B4F853388B5}D:\steam\steamapps\johnwolf931\source sdk base\hl2.exe" | In - Private - P17 - TRUE | .(...) -- D:\steam\steamapps\johnwolf931\source sdk base\hl2.exe
O87 - FAEL: "{EFB2A7DE-98C4-4ADB-878B-ED8424E8E67E}" | In - Private - P6 - TRUE | .(.Telltale Games - Pas de description.) -- D:\Steam\SteamApps\common\Poker Night 2\PokerNight2.exe
O87 - FAEL: "{EAB5C9EB-AAA0-4595-B841-D199AFA1EC66}" | In - Private - P17 - TRUE | .(.Telltale Games - Pas de description.) -- D:\Steam\SteamApps\common\Poker Night 2\PokerNight2.exe
O87 - FAEL: "{9A9950C5-14B2-49D2-A365-F98F6EEE6704}" | In - Domain - P6 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{00A45979-19BA-4B65-8E1D-464DD2BB2120}" | In - Domain - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{7DD1207B-BCBF-49A3-8F22-A2E8564E80FA}" | In - Private - P6 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{238C884F-0314-4709-A07B-354D00C80108}" | In - Private - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{B7414AB4-C339-403B-81DE-FC3BAA139E9B}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{AC1AD379-195E-4FFE-A4F9-AF2EE62F5184}" |In - Private - P6 - TRUE | .(...) -- D:\HappyCloud\Cache\TERA\TERA-Launcher.exe (.not file.)
O87 - FAEL: "{6FA28D8E-0B60-482F-877F-49C0E1C75C10}" |In - Private - P17 - TRUE | .(...) -- D:\HappyCloud\Cache\TERA\TERA-Launcher.exe (.not file.)
O87 - FAEL: "{22ECB3D6-08C5-4520-B867-B93B810BB36B}" |In - Private - P6 - TRUE | .(...) -- D:\HappyCloud\Cache\TERA\Client\TL.exe (.not file.)
O87 - FAEL: "{79350B3A-13D6-4089-B917-3570072498F7}" |In - Private - P17 - TRUE | .(...) -- D:\HappyCloud\Cache\TERA\Client\TL.exe (.not file.)
O87 - FAEL: "{D3C4287C-10FF-4E9D-86A0-E3E137CDA5BA}" |In - Private - P6 - TRUE | .(...) -- D:\HappyCloud\Cache\TERA\Client\Binaries\TERA.exe (.not file.)
O87 - FAEL: "{55A7EFF5-88D1-4B70-9C4D-DE6F06B49956}" |In - Private - P17 - TRUE | .(...) -- D:\HappyCloud\Cache\TERA\Client\Binaries\TERA.exe (.not file.)
O87 - FAEL: "TCP Query User{2D666F2F-E45F-448D-A872-130BE9FEB099}D:\tera\tera-launcher.exe" | In - Private - P6 - TRUE | .(.Solid State Networks - TERA.) -- D:\tera\tera-launcher.exe
O87 - FAEL: "UDP Query User{E045A1B7-F464-4067-8A83-91F280019274}D:\tera\tera-launcher.exe" | In - Private - P17 - TRUE | .(.Solid State Networks - TERA.) -- D:\tera\tera-launcher.exe
O87 - FAEL: "TCP Query User{F4121A32-85C0-4DBA-A56E-111197ADC96F}C:\program files (x86)\google\chrome\application\chrome.exe" | In - Private - P6 - TRUE | .(.Google Inc..) -- C:\program files (x86)\google\chrome\application\chrome.exe
O87 - FAEL: "UDP Query User{5FA3ACE6-F902-43FB-9DD5-98428F01C589}C:\program files (x86)\google\chrome\application\chrome.exe" | In - Private - P17 - TRUE | .(.Google Inc..) -- C:\program files (x86)\google\chrome\application\chrome.exe
O87 - FAEL: "{36B92C91-A57B-4525-A7E0-12A093C9BAC0}" | In - Private - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\Evoland\Evoland.exe
O87 - FAEL: "{615294DB-FCDC-4CBD-A549-4E4C3A7F9C2F}" | In - Private - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\Evoland\Evoland.exe
O87 - FAEL: "{5E206B4A-5592-4284-A24C-28F334482C09}" | In - Private - P6 - TRUE | .(.Re-Logic - Terraria.) -- D:\Steam\SteamApps\common\Terraria\Terraria.exe
O87 - FAEL: "{0D5FDFA0-9745-46C5-98A1-891395D8F622}" | In - Private - P17 - TRUE | .(.Re-Logic - Terraria.) -- D:\Steam\SteamApps\common\Terraria\Terraria.exe
O87 - FAEL: "{814A0070-3541-473E-B197-7F66A3D5E3E9}" | In - None - P6 - FALSE | .(.Microsoft Corporation - SMSvcHost.exe.) -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
O87 - FAEL: "{E56C1FC3-C944-4AF8-813E-A6A7BB7CAA5F}" | In - Private - P6 - TRUE | .(...) -- D:\Steam\SteamApps\johnwolf931\garrysmod\hl2.exe
O87 - FAEL: "{9BC0226B-64C7-4C21-9F29-A62B03BAA185}" | In - Private - P17 - TRUE | .(...) -- D:\Steam\SteamApps\johnwolf931\garrysmod\hl2.exe
O87 - FAEL: "{3BD70741-C190-4779-B6C6-00D3A01B048F}" | In - Private - P6 - TRUE | .(...) -- D:\Steam\SteamApps\johnwolf931\source sdk base 2007\hl2.exe
O87 - FAEL: "{427F18E9-BEEE-4658-B70B-74F83152D30A}" | In - Private - P17 - TRUE | .(...) -- D:\Steam\SteamApps\johnwolf931\source sdk base 2007\hl2.exe
O87 - FAEL: "{063EE5D2-947C-45FC-8C66-C5DD700124A5}" | In - Private - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
O87 - FAEL: "{44825865-323D-4508-8416-435D2EAD9D06}" | In - Private - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
O87 - FAEL: "{01827747-A87E-4EA1-AC07-ACB74A776E88}" | In - Private - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O87 - FAEL: "{29E5B1A3-9279-4E8D-A634-5918074B97C4}" | In - Private - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O87 - FAEL: "{0C8C417B-644A-46D4-BFFC-6532FEB17513}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{AA972A17-ED50-44B7-931F-5CDCB1268652}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{A42EEEC6-E8D9-45D5-A82E-DEF4B056D922}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{5C584194-D8DB-4958-AB3B-CC373985C30E}" | Out - Private - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{68BD73A2-56E4-4D88-A4B8-24C2E4D7E543}" |Out - Private - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{09F3A85D-77EE-436E-8EA0-101044AAF559}" |In - Private - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{DCACF72F-2335-4666-A57D-B245D9E57E1A}" |Out - Private - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{F28A26A2-6048-4192-B86B-CD5A312088E1}" |In - Private - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{63717C97-C34D-4BFE-995F-7E04C9EC4456}" | Out - Private - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{98BB7751-DD55-49AB-AD36-A49944279049}" | Out - Private - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{E2362FFB-7565-4732-98BE-119E2D61019D}" | In - Private - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{B25AC9EC-C35C-4675-B806-766EFD5ABDB3}" | Out - Private - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{E4EB8B8A-A74C-46AE-A91C-B98EA6C23E42}" | In - Private - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{D2680D1B-728D-43DA-8C24-C8FC905CBBA4}" | Out - Private - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{B0BD8718-4700-4F44-8273-1F2F6235EC88}" | In - Private - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{98614132-D599-41F4-9DE0-A30A7A5C43CB}" | Out - Private - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{CA59652B-C58F-40CB-B6BB-21ECC723A34C}" | In - Private - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{047E9F44-7E37-4F1A-866F-C466113CA399}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{86168021-C61F-45B6-AC4E-BCC00B4DFF2E}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{B0288E9B-00DA-4B48-BB4A-A20D0D883EE1}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "TCP Query User{1A5F4F3B-1EFD-4F0F-AD7F-FC8CF2269123}D:\cube world\server.exe" | In - Private - P6 - TRUE | .(...) -- D:\cube world\server.exe
O87 - FAEL: "UDP Query User{4A02AC7D-6A54-499D-960F-9024D8F5A7EE}D:\cube world\server.exe" | In - Private - P17 - TRUE | .(...) -- D:\cube world\server.exe
O87 - FAEL: "{406295D4-38E0-4F8B-82B1-493F01733A81}" | In - Private - P6 - TRUE | .(.Cellar Door Games, Inc. - Rogue Legacy.) -- D:\Steam\SteamApps\common\Rogue Legacy\RogueLegacy.exe
O87 - FAEL: "{959E0ADA-9FA3-4889-8844-F83707892410}" | In - Private - P17 - TRUE | .(.Cellar Door Games, Inc. - Rogue Legacy.) -- D:\Steam\SteamApps\common\Rogue Legacy\RogueLegacy.exe
O87 - FAEL: "{5793C24F-0F95-4A72-AC28-8868B4BA3ED4}" | In - Private - P6 - TRUE | .(.Gearbox Software - Borderlands 2 launcher.) -- D:\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
O87 - FAEL: "{89C9AF7A-51CE-499C-971E-71B9B0C27275}" | In - Private - P17 - TRUE | .(.Gearbox Software - Borderlands 2 launcher.) -- D:\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
O87 - FAEL: "{CF17C7F7-43C9-4A0D-B916-0AF8C5F2CFA5}" | In - Private - P6 - TRUE | .(.Nihon Falcom Corporation - 1.2.1.0.) -- D:\Steam\SteamApps\common\Ys The Oath in Felghana\ysf_win_dx9.exe
O87 - FAEL: "{FFABC77C-EB5B-441B-9799-519E245BEC7F}" | In - Private - P17 - TRUE | .(.Nihon Falcom Corporation - 1.2.1.0.) -- D:\Steam\SteamApps\common\Ys The Oath in Felghana\ysf_win_dx9.exe
O87 - FAEL: "{32B56E1A-D3A4-40DE-BDE6-83366B3A9591}" | In - Private - P6 - TRUE | .(.Nihon Falcom Corporation - 1.2.1.0.) -- D:\Steam\SteamApps\common\Ys The Oath in Felghana\config_dx9.exe
O87 - FAEL: "{6802B33D-030A-4C80-ADE2-50FA402B9AF0}" | In - Private - P17 - TRUE | .(.Nihon Falcom Corporation - 1.2.1.0.) -- D:\Steam\SteamApps\common\Ys The Oath in Felghana\config_dx9.exe
O87 - FAEL: "{AEB2DC3F-5D17-4938-8238-E9E1DBA4A516}" | In - Private - P6 - TRUE | .(.Nihon Falcom Corporation - 1.2.1.0.) -- D:\Steam\SteamApps\common\Ys The Oath in Felghana\ysf_win.exe
O87 - FAEL: "{46629190-48DF-43E7-BFA4-F82962266892}" | In - Private - P17 - TRUE | .(.Nihon Falcom Corporation - 1.2.1.0.) -- D:\Steam\SteamApps\common\Ys The Oath in Felghana\ysf_win.exe
O87 - FAEL: "{CB5C885D-7DE1-4F7E-8082-80F58E08A00A}" | In - Private - P6 - TRUE | .(.Nihon Falcom Corporation - 1.2.1.0.) -- D:\Steam\SteamApps\common\Ys The Oath in Felghana\config.exe
O87 - FAEL: "{924A882D-2BE1-4D3F-BF7A-E7C5B117A7DC}" | In - Private - P17 - TRUE | .(.Nihon Falcom Corporation - 1.2.1.0.) -- D:\Steam\SteamApps\common\Ys The Oath in Felghana\config.exe
O87 - FAEL: "{03190886-3CC1-4971-BD80-A02644CE7D25}" | In - Private - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
O87 - FAEL: "{7DFEA8B2-C4AC-4D98-84EA-F9DDD5CF6FE4}" | In - Private - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
O87 - FAEL: "{E7B3DFA8-8837-4478-A6A3-D9C9D9170F41}" | In - Private - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\left 4 dead 2\left4dead2.exe
O87 - FAEL: "{3398839A-17B7-4889-A9B3-8353941B6D17}" | In - Private - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\left 4 dead 2\left4dead2.exe
O87 - FAEL: "{A00D4032-5F16-4587-A68F-7B5480E1F7F9}" | In - Private - P6 - TRUE | .(...) -- D:\Steam\SteamApps\common\dota 2 beta\dota.exe
O87 - FAEL: "{B2C27E80-8300-4BFE-83EF-C157C01ED3DC}" | In - Private - P17 - TRUE | .(...) -- D:\Steam\SteamApps\common\dota 2 beta\dota.exe
~ Firewall: 293 Scanned in 00mn 02s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "0000009F810000000000709475387300" . (.ABBYY FineReader 9.0 Sprint.) -- C:\Windows\Installer\{F9000000-0018-0000-0000-074957833700}\ARPPRODUCTICON.exe
O90 - PUC: "03A4EE98F08059C2F6879CD881BF7DD4" . (.AMD Accelerated Video Transcoding.) -- C:\Windows\Installer\{89EE4A30-080F-2C95-6F78-C98D18FBD74D}\ARPPRODUCTICON.exe
O90 - PUC: "03E9C206838F2DA4D82C62C591D2A4CA" . (.Ma-Config.com (64 bits).) -- C:\Windows\Installer\{602C9E30-F838-4AD2-8DC2-265C192D4AAC}\maconfico
O90 - PUC: "0ED9D238CFA898648991D4BBEDDBE3F4" . (.Microsoft Games for Windows - LIVE Redistributable.) -- C:\Windows\Installer\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}\GameForWindowsLiveRedist.exe
O90 - PUC: "1459101E2A01F4642AE34A2FD36A1506" . (.Mumble 1.2.3.) -- C:\Windows\Installer\{E1019541-10A2-464F-A23E-A4F23DA65160}\mumble.ico
O90 - PUC: "16ED57946FB6CB9BF1ED0CC4E57CE8C4" . (.AMD Media Foundation Decoders.) -- C:\Windows\Installer\{4975DE61-6BF6-B9BC-1FDE-C04C5EC78E4C}\ARPPRODUCTICON.exe
O90 - PUC: "2B754B4DF062165CAC7807B33D7B42AC" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{D4B457B2-260F-C561-CA87-703BD3B724CA}\ARPPRODUCTICON.exe
O90 - PUC: "32FA0F2EF2EF2224A934556EC34CE11F" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}\ARPPRODUCTICON.exe
O90 - PUC: "42962336FAC3858CA3F858898C07917D" . (.Catalyst Control Center.) -- C:\Windows\Installer\{63326924-3CAF-C858-3A8F-8598C87019D7}\ARPPRODUCTICON.exe
O90 - PUC: "61D11FC9BECE5A090A82ACE960D848B8" . (.ccc-utility64.) -- C:\Windows\Installer\{9CF11D16-ECEB-90A5-A028-CA9E068D848B}\ARPPRODUCTICON.exe
O90 - PUC: "762A30E5E5143835AFF8C34E4165369B" . (.AMD Catalyst Install Manager.) -- C:\Windows\Installer\{5E03A267-415E-5383-FA8F-3CE4145663B9}\ARPPRODUCTICON.exe
O90 - PUC: "93B0BF4E199C7EE459DDA1A187753DD3" . (.Asmedia ASM104x USB 3.0 Host Controller Driver.) -- C:\Windows\Installer\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}\ARPPRODUCTICON.exe
O90 - PUC: "B4A2F9673A486849DA2DE9A54B4B1E3E" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{769F2A4B-84A3-9486-ADD2-9E5AB4B4E1E3}\ARPPRODUCTICON.exe
O90 - PUC: "C7030BC4E565144468EBD02F4EBF28C8" . (.Microsoft Games for Windows Marketplace.) -- C:\Windows\Installer\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}\GameForWindowsLiveDash.exe
O90 - PUC: "CA0B84B9318C4714092474A68857297C" . (.Windows Live ID Sign-in Assistant.) -- C:\Windows\Installer\{9B48B0AC-C813-4174-9042-476A887592C7}\prodicon.ico
O90 - PUC: "D276F30548C6A844F8F8B43CA58C4314" . (.AMD APP SDK Runtime.) -- C:\Windows\Installer\{503F672D-6C84-448A-8F8F-4BC35AC83441}\ARPPRODUCTICON.exe
O90 - PUC: "DF76DC54812370240A2ACB144215983E" . (.Microsoft Xbox 360 Accessories 1.2.) -- C:\Windows\Installer\{45CD67FD-3218-4207-A0A2-BC41245189E3}\ARPIcon
O90 - PUC: "E7FF67E4ABEA78C47B88DC745E24B5D9" . (.Skype™ 6.3.) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
O90 - PUC: "E805DFCE2A862B1964DDD1307D389DB4" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{ECFD508E-68A2-91B2-46DD-1D03D783D94B}\ARPPRODUCTICON.exe
O90 - PUC: "EDD95BD626E1CDF469C356302A3B7193" . (.XSplit.) -- C:\Windows\Installer\{6DB59DDE-1E62-4FDC-963C-6503A2B31739}\XSplit.Core.exe
O90 - PUC: "EDE8C96D5CBBB634E8E05C6A3D11FCF4" . (.Microsoft XNA Framework Redistributable 4.0 Refresh.) -- C:\Windows\Installer\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}\ProductIcon
O90 - PUC: "F3987040C253281B0EA48A3C33D32AB9" . (.AMD Drag and Drop Transcoding.) -- C:\Windows\Installer\{0407893F-352C-B182-E04A-A8C3333DA29B}\ARPPRODUCTICON.exe
~ Update Products: 60 Scanned in 00mn 00s



---\\ Windows Installer Scan (O93) (NTFS)
[MD5.534DB961A96DCFBE667B22DE350FB52E] [WIS][28/10/2012] (.Cybelsoft - Hardware Detection Ma-Config.com.) -- C:\Windows\Installer\1266a2.msi   [5591040]
[MD5.7FA435DC3ED0B5C0D95456C32D775F1A] [WIS][18/03/2010] (.Microsoft Corporation - Microsoft .NET Framework 4 Client Profile.) -- C:\Windows\Installer\1266a9.msi   [1901056]
[MD5.6150D01E664937FFDDF592769680423E] [WIS][07/08/2013] (.Oracle - Java SE Runtime Environment 7.0.) -- C:\Windows\Installer\1472de1e.msi   [913408]
[MD5.2CD4D4FA25FB5B348A0F0C2829B326A9] [WIS][19/05/2013] (.Oracle - Java SE Runtime Environment 7.0.) -- C:\Windows\Installer\152009f1.msi   [28007936]
[MD5.DCD54A1A3DAD706A9FA959E8DE1F1C87] [WIS][28/11/2007] (.InstallShield Software Corporation - Blank Project Template.) -- C:\Windows\Installer\15dc0707.msi   [886784]
[MD5.93BB8E3E96A206B39175345111D452E2] [WIS][20/04/2010] (.Microsoft Corporation - Visual C++ 2010  x64 Redistributable.) -- C:\Windows\Installer\165b20.msi   [168960]
[MD5.A8914794AD697B2899F1A7766E49F50C] [WIS][30/10/2012] (.Advanced Micro Devices, Inc. - Drag & Drop Transcoding.) -- C:\Windows\Installer\165bf4.msi   [1480704]
[MD5.D53737CEA320B066C099894ED1780705] [WIS][07/11/2007] (.Microsoft Corporation - Visual C++ 2008 Redistributable US English Intel x86 IExpress.) -- C:\Windows\Installer\1b69dba4.msi   [242176]
[MD5.CAC92727C33BEC0A79965C61BBB1C82F] [WIS][29/12/2012] (.Igor Pavlov - 7-Zip (x64 edition) Package.) -- C:\Windows\Installer\1bf3d.msi   [1376768]
[MD5.92D76E3C784D3419FDF1C89A79F28947] [WIS][29/12/2012] (.Thorvald Natvig - Mumble 1.2.3.) -- C:\Windows\Installer\1c22b0.msi   [17904640]
[MD5.3BEA739AF7E8189D713E28A0100E0DFA] [WIS][21/07/2013] (.LogMeIn, Inc. - LogMeIn Hamachi Installer.) -- C:\Windows\Installer\20835b75.msi   [4296704]
[MD5.24CC715A1C05F8FCB40996105D4DBC04] [WIS][15/06/2013] (.Adobe Systems Incorporated - Adobe AIR Installer.) -- C:\Windows\Installer\287e3064.msi   [33792]
[MD5.EADB43461CA9172AAA530AEC509C4082] [WIS][19/03/2010] (.Microsoft Corporation - Microsoft .NET Framework 4 Extended.) -- C:\Windows\Installer\2a9b2f01.msi   [872448]
[MD5.C22676FCC847C5024F658AE619692E7D] [WIS][03/04/2010] (.Microsoft Corporation - Module linguistique Microsoft .NET Framework 4 Client Profile F.) -- C:\Windows\Installer\2a9b2f08.msi   [786432]
[MD5.8B80140EC42C8C3F473C406FA25468AA] [WIS][03/04/2010] (.Microsoft Corporation - Module linguistique Microsoft .NET Framework 4 Extended FRA.) -- C:\Windows\Installer\2a9b2f0f.msi   [779264]
[MD5.F949909F4CFE27A17E6CA047FB8D4A46] [WIS][28/06/2013] (.Microsoft Corporation - Microsoft XNA Framework Redistributable 4.0 Refresh Installer.) -- C:\Windows\Installer\30750743.msi   [7060992]
[MD5.C93102D26CC671373241FD363AC7B924] [WIS][19/05/2013] (.Skype Technologies S.A. - Skype.) -- C:\Windows\Installer\61e1.msi   [20627456]
[MD5.075AFFBDFC36C956D9C2176B215F7F16] [WIS][01/10/2009] (.Microsoft - Microsoft Xbox 360 Accessories.) -- C:\Windows\Installer\776d89.msi   [1219584]
[MD5.425BBF8467BBA3E2CEF947C0CD9F9E63] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93aa0.msi   [623104]
[MD5.6F4641040A43326212324152B02A6EFA] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - AMD Catalyst Install Manager Installer (64 bit).) -- C:\Windows\Installer\93aa8.msi   [8340992]
[MD5.207C9DDEC7FBF993B9FA5C183EB29E71] [WIS][04/05/2012] (.Advanced Micro Devices, Inc. - Branding.) -- C:\Windows\Installer\93cbc.msi   [507392]
[MD5.DD1C877A3DACC7438F62235028513B0B] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93cc3.msi   [1884672]
[MD5.BF57C39BF0C7B90E543B007C38E629BD] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93cca.msi   [792576]
[MD5.3E4CEB0AE4E995719722A43D49E13E2F] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93cd1.msi   [763904]
[MD5.066BB7B1FDFED543A026700162615603] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93cd8.msi   [788992]
[MD5.8686A9E557C2B4C99B2B05B5024BDA51] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93cdf.msi   [910336]
[MD5.910CE1CD4CF3B302DF05043B47565B95] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93ce6.msi   [731136]
[MD5.9BACB2A4936CD16661085C6F51840E84] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93ced.msi   [772096]
[MD5.AA5C3E5FEEAB22CBD6E0AACDD0E9EAA4] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93cf4.msi   [760320]
[MD5.60EDAF8C24A4F6C102774434F8EA9635] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93cfb.msi   [779776]
[MD5.7C9DA4EE441502CF5A50CBB18D3B0311] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d02.msi   [797184]
[MD5.1F5A1AD236A95E9CAD4B4D2282EF5958] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d09.msi   [768512]
[MD5.2A7D08DE6BAC891F7D0B42CABC304BFD] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d10.msi   [824832]
[MD5.D34D110B8B1FAE816DCE13E97A60E4C5] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d17.msi   [805888]
[MD5.9E51C05B6274C0C84B46B6A98EF9F9FE] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d1e.msi   [758784]
[MD5.0A53F5560AB3CEE9EB6ED4605167A3EA] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d25.msi   [751616]
[MD5.84757B962A65A089D10C392C7432BAD4] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d2c.msi   [788480]
[MD5.A817AF25B6624F6FE72DB2D73ED1BB16] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d33.msi   [769024]
[MD5.93BE2B1D4098FBF50127AFC856003923] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d3a.msi   [887808]
[MD5.CD1CDED98A3AF98F34C656C799A5A6EE] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d41.msi   [756224]
[MD5.892ECB91210772FF6AE7107E2B6EB99F] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d48.msi   [860672]
[MD5.46D9391D54468D82BC5C432F28408C07] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d4f.msi   [776192]
[MD5.536EA57A1052764D4E0B061B2097D92B] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d56.msi   [766464]
[MD5.9F748BFD40635D395ACC228FFA45D54B] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d5d.msi   [781824]
[MD5.F6D92F11FAA24695F4A0C9B084D33EC6] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d64.msi   [863232]
[MD5.E00A89DD186539E437851693216492B4] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center Utility 64.) -- C:\Windows\Installer\93d6b.msi   [389632]
[MD5.432BC3359CF1ACA24AD42D97CC48E32F] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - Catalyst Control Center.) -- C:\Windows\Installer\93d73.msi   [13794816]
[MD5.242F886B4EC7095816081D2D9C02BD2F] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - AMD Media Foundation Decoders.) -- C:\Windows\Installer\93d85.msi   [1843712]
[MD5.967B25ADED87B3B9E46F5B95EBC34F6B] [WIS][18/01/2013] (.Advanced Micro Devices Inc. - AMD Accelerated Parallel Processing SDK.) -- C:\Windows\Installer\93da0.msi   [32564736]
[MD5.8C1A0AE2A6A96AB1A12004949AC4251C] [WIS][18/01/2013] (.Advanced Micro Devices, Inc. - AMD Accelerated Video Transcoding INstallation package.) -- C:\Windows\Installer\93db3.msi   [2439168]
[MD5.B20BBEB818222B657DF49A9CFE4FED79] [WIS][16/04/2011] (.Microsoft Corporation - Microsoft Visual C++ 2005 Redistributable.) -- C:\Windows\Installer\a75bf.msi   [2770944]
[MD5.7CA28C6A0625FA3FDB38EF053F9FE699] [WIS][26/11/2009] (.ABBYY - ABBYY FineReader 9.0 Sprint setup package.) -- C:\Windows\Installer\a75c7.msi   [81089024]
[MD5.9D1FC3737A86F6B516152DFF025F2FC7] [WIS][13/07/2013] (.Google Inc. - Google Update Helper.) -- C:\Windows\Installer\aef55.msi   [26112]
[MD5.73A3285306C7A1375926096DC9A721A0] [WIS][29/12/2012] (.Microsoft Corporation - Windows Live ID Sign-in Assistant.) -- C:\Windows\Installer\be6c24.msi   [6575616]
[MD5.68F91A6A1F96BA7DC366DC643264BE09] [WIS][29/12/2012] (.Microsoft Corporation - Microsoft® Games for Windows® - LIVE.) -- C:\Windows\Installer\be6c2b.msi   [3371008]
[MD5.37F79F460F6B0DCBC84874D0793FD5C8] [WIS][29/12/2012] (.Microsoft Corporation - Microsoft® Games for Windows® - LIVE Runtime Installation.) -- C:\Windows\Installer\be6c32.msi   [21598208]
[MD5.F10464B5FFE2652B0ACBDAEE1DE46DD3] [WIS][19/10/2012] (.SplitMediaLabs - XSplit.) -- C:\Windows\Installer\c9042.msi   [890880]
[MD5.E493A21C57D160F4FA023C63145FE580] [WIS][12/07/2009] (.Microsoft Corporation - Visual C++ 2008 Redistributable US English Intel x86 IExpress.) -- C:\Windows\Installer\d374b.msi   [223232]
[MD5.B4F73967C0DAF6BC551C2D900D40EFCB] [WIS][29/12/2012] (.Asmedia Technology - Asmedia ASM104x USB 3.0 Host Controller Driver.) -- C:\Windows\Installer\faa67.msi   [4963328]
[MD5.D2F34AF196CCAF29A124324392FC3DFF] [WIS][29/12/2012] (.Valve Corporation - Steam.) -- C:\Windows\Installer\faa75.msi   [8532992]
~ WIS: 60 Scanned in 00mn 03s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 14/05/2009 759048 |  (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY.) - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
SR - | Auto 19/12/2012 240640 |  (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 09/05/2013 46808 |  (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 12/12/2011 135824 |  (EpsonScanSvc) . (.Seiko Epson Corporation.) - C:\Windows\system32\EscSvc64.exe
SS - | Auto 20/01/2013 116648 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 20/01/2013 116648 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SR - | Auto 28/06/2013 2470736 |  (Hamachi2Svc) . (.LogMeIn Inc..) - D:\hamachi-2.exe
SS - | Demand 28/10/2012 427976 |  (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\x64\maconfservice.exe
SR - | Auto 04/04/2013 418376 |  (MBAMScheduler) . (.Malwarebytes Corporation.) - D:\Malwarebytes' Anti-Malware\mbamscheduler.exe
SR - | Auto 04/04/2013 701512 |  (MBAMService) . (.Malwarebytes Corporation.) - D:\Malwarebytes' Anti-Malware\mbamservice.exe
SS - | Demand 05/01/2013 115760 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Demand 28/11/2007 53248 |  (MSCSPTISRV) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
SS - | Demand 28/11/2007 53248 |  (PACSPTISVR) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
SS - | Auto 28/02/2013 161384 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 05/02/2007 112184 |  (SonicStage Back-End Service) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SsBeSvc.exe
SS - | Demand 28/11/2007 77824 |  (SPTISRV) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe
SS - | Demand 05/02/2007 75320 |  (SSScsiSV) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SSScsiSV.exe
SR - | Demand 26/07/2013 563624 |  (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
SR - | Auto 08/07/2013 4153184 |  (TeamViewer8) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto  0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services:  Scanned in 00mn 03s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Run by jojo at 10/08/2013 12:33:55
~ OS 64 not supported by MBR tool
~ MBR: 0 Scanned in 00mn 00s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by jojo at 10/08/2013 12:33:57

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR:  Scanned in 00mn 02s



---\\ Scan Additionnel (O88)
Database Version : v2.12849 - (10/08/2013)
Clés trouvées (Keys found) : 74
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 0
Fichiers trouvés  (Files found) : 0

[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635]   =>PUP.SweetIM
[HKCU\Software\SweetIM]   =>PUP.SweetIM
[HKLM\Software\Wow6432Node\SweetIM]   =>PUP.SweetIM
[HKCU\Software\AppDataLow\Software\Smart Address Bar]   =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B2FD9C0A5B9838449838816A28001F4B]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420]   =>PUP.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]   =>Toolbar.Avast
[HKLM\Software\Classes\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]   =>Toolbar.Avast
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]   =>Toolbar.Avast
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]   =>Toolbar.Avast
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]   =>Toolbar.Avast
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]   =>Toolbar.Avast
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156]   =>PUP.SweetIM^
~ Additionnel Scan: 159761 Items scanned in 00mn 12s



---\\ Récapitulatif des détections trouvées sur votre station
~ http://nicolascoolman.webs.com/apps/blog/show/29216159-pup-sweetim   =>PUP.SweetIM
~ http://nicolascoolman.webs.com/apps/blog/show/26593722-adware-2yourface  =>Adware.2YourFace
~ http://nicolascoolman.webs.com/apps/blog/show/30898585-toolbar-avast   =>Toolbar.Avast
~ MSI: 3 link(s) detected in 00mn 12s



End of the scan (1917 lines in 02mn 18s)(0)