~ Rapport de ZHPDiag v2013.10.13.35 - Nicolas Coolman  (13/10/2013)
~ Lancé par Patrick (15/10/2013 10:48:08)
~ Adresse du Site Web  http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version : 
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user


---\\ Navigateurs Internet
MSIE: Internet Explorer v10.0.9200.16721
MFIE: Mozilla Firefox 24.0 (Defaut)
GCIE: Google Chrome v30.0.1599.69

---\\ Informations sur les produits Windows
~ Langage: Français
Windows 8 Business Edition, 64-bit  (Build 9200)
Windows Server License Manager Script : OK
~ ion : Windows(R) Operating System, RETAIL channel
Windows ID Activation : OK
~ Windows Partial Key : G273H
Windows License : OK
~ Windows Remaining Initializations Number : 1000
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection du système
Windows Defender W8

---\\ Logiciels d'optimisation du système
CCleaner v4.00 =>Piriform Ltd

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 11 Plugin
Adobe Reader XI
Java 7 Update 25
Java 7 Update 25

---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8072 MB (76% free)
System Restore: Activé (Enable)
System drive C: has 216 GB (40%) free of 535 GB

---\\ Mode de connexion au système
~ Computer Name: PORT-POUNET
~ User Name: Patrick
~ All Users Names: ZendUser, postgres, Patrick, Oracle, HomeGroupUser$, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\Patrick\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Patrick\AppData\Roaming\
~ %Desktop% : C:\Users\Patrick\Desktop\
~ %Favorites% : C:\Users\Patrick\Favorites\
~ %LocalAppData% : C:\Users\Patrick\AppData\Local\
~ %StartMenu% : C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 216 Go of 535 Go)
D: CD-ROM drive (Not Inserted)
E: CD-ROM drive (Not Inserted)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Security Center: 38 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.0E8E6463F81C80AFBED533E0F1F8895D] - (.Microsoft Corporation - Explorateur Windows.) (.01/06/2013 - 12:34:21.) -- C:\Windows\Explorer.exe [2391280]
[MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Application de démarrage de Windows.) (.26/07/2012 - 04:08:50.) -- C:\Windows\System32\Wininit.exe [132608]
[MD5.D28B35DE88D27EFB27DF4B1E8319E3C0] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/09/2013 - 23:55:10.) -- C:\Windows\System32\wininet.dll [2241024]
[MD5.BCF2036A0DD579E47C008C133550283E] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.11/10/2012 - 06:46:58.) -- C:\Windows\System32\Winlogon.exe [517120]
[MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Bibliothèque de licences.) (.26/07/2012 - 04:07:20.) -- C:\Windows\System32\sppcomapi.dll [273408]
[MD5.36D6A3201721558A8AFBCC09C2DA4C2C] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.06/11/2012 - 04:53:44.) -- C:\Windows\system32\Drivers\AFD.sys [560640]
[MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 06:00:48.) -- C:\Windows\system32\Drivers\atapi.sys [25840]
[MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.26/07/2012 - 03:30:10.) -- C:\Windows\system32\Drivers\Cdfs.sys [108544]
[MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.26/07/2012 - 03:26:36.) -- C:\Windows\system32\Drivers\Cdrom.sys [174080]
[MD5.09D9EB9E7898F8E6561473A20CC808B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.26/07/2012 - 03:26:53.) -- C:\Windows\system32\Drivers\DfsC.sys [118784]
[MD5.7D87B5B6C7188D553E11B59DC7F0B111] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/09/2012 - 07:08:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [71168]
[MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Pilote de port i8042.) (.26/07/2012 - 03:28:51.) -- C:\Windows\system32\Drivers\i8042prt.sys [112640]
[MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2012 - 03:23:01.) -- C:\Windows\system32\Drivers\IpNat.sys [145920]
[MD5.93179D48066918323628CB016D8C94DC] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.05/02/2013 - 23:29:09.) -- C:\Windows\system32\Drivers\MRxSmb.sys [370688]
[MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.26/07/2012 - 03:24:28.) -- C:\Windows\system32\Drivers\netBT.sys [331776]
[MD5.76929F4A69E425911A63B407E26C2589] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.02/02/2013 - 11:54:54.) -- C:\Windows\system32\Drivers\ntfs.sys [1933544]
[MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Pilote de port parallèle.) (.26/07/2012 - 03:29:53.) -- C:\Windows\system32\Drivers\Parport.sys [105984]
[MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.26/07/2012 - 03:23:17.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [124928]
[MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.26/07/2012 - 03:25:18.) -- C:\Windows\system32\Drivers\rdpdr.sys [179712]
[MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 06:26:47.) -- C:\Windows\system32\Drivers\tdx.sys [117248]
[MD5.78A5BBA3819FFFC62FFEC3E2220D102D] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.01/06/2013 - 12:26:33.) -- C:\Windows\system32\Drivers\volsnap.sys [327936]
~ Generic Processes:  Scanned in 00mn 05s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/130
~ Mes musiques (My Musics) : 1/14
~ Mes Favoris (My Favorites) : 1/4
~ Mes Documents (My Documents) : 1/123670
~ Mon Bureau (My Desktop) : 2/32210
~ Menu demarrer (Programs) : 1/33
~ Hidden Files:  Scanned in 02mn 20s



---\\ Processus lancés
[MD5.A9182CE59CFC56F9C1DDE8B3C0AE8378] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe   [274840] [PID.2108]
[MD5.AB055E4E8A49E06469B137C93C8E11C6] - (.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe   [12631904] [PID.768]
[MD5.2176B4590387405E5F2405C3CEF0C02A] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [8078848] [PID.5988]
[MD5.C948AC73822CA662CF44185B909EA18B] - (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.exe   [720064] [PID.1720]
[MD5.C5B5552E5C1A0079C1F7313E7CC7707E] - (.Google - Google Calendar Sync.) -- C:\Program Files (x86)\Google\Google Calendar Sync\GoogleCalendarSync.exe   [542264] [PID.4920]
[MD5.775E4EC15715B322C160075BACCF75ED] - (.KONICA MINOLTA BUSINESS TECHNOLOGIES, INC. - Pas de description.) -- C:\Program Files (x86)\KONICA MINOLTA\PageScope Direct Print 1.1\KMDPHFMG.exe   [271704] [PID.5696]
[MD5.C64E9B1C9EA057DCECDCB98F34377811] - (.Microsoft Corporation - Microsoft OneNote Quick Launcher.) -- C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.exe   [228552] [PID.4644]
[MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [253816] [PID.6464]
~ Processes Running:  Scanned in 00mn 01s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
~ Google Browser: 1 Scanned in 00mn 03s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\prv50bf5.default\prefs.js
M3 - MFPP: Plugins - [Patrick] -- C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\prv50bf5.default\searchplugins\dalesearch.xml =>Hijacker.Dalesearch
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.25.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.25.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.25.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20913.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
~ Firefox Browser: 6 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16384 (win8_rtm.120725-1247)) -- C:\Windows\SysWOW64\ieframe.dll
~ IE Browser: 11 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
O1 - Hosts: ??????†††????
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 22



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: ExplorerBHO Class [64Bits] - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} . (.IvoSoft - Adds classic Windows Explorer features.) -- C:\Program Files\Classic Shell\ClassicExplorer32.dll
O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: ClassicIE9BHO Class [64Bits] - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} . (.IvoSoft - Customizations for the title bar and status.) -- C:\Program Files\Classic Shell\ClassicIE9dll_32.dll
~ BHO: 12 Scanned in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Classic Explorer Bar [64Bits] - [HKLM]{553891B7-A0D5-4526-BE18-D3CE461D6310} . (.IvoSoft - Adds classic Windows Explorer features.) -- C:\Program Files\Classic Shell\ClassicExplorer32.dll
~ Toolbar:  Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: AutoCAD 2012 - Français.lnk . (...)  -- C:\Program Files (x86)\Autodesk\AutoCAD 2012 - French\acad.exe (.not file.)
O4 - GS\Desktop [Public]: Biblio.lnk . (.EDP RC-System - Pas de description.)  -- C:\LogicPlus\Biblio.exe 
O4 - GS\Desktop [Public]: Canon MF Toolbox 4.9.lnk . (.CANON INC. - MF Toolbox Application.)  -- C:\Program Files (x86)\Canon\MF Toolbox Ver4.9\MFTBOX.exe 
O4 - GS\Desktop [Public]: CATIA P3 V5R20.lnk . (.Dassault Systemes - Administration.)  -- C:\Program Files (x86)\Dassault Systemes\B20\intel_a\code\bin\CATSTART.exe 
O4 - GS\Desktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.)  -- C:\Program Files\CCleaner\CCleaner64.exe =>Piriform Ltd
O4 - GS\Desktop [Public]: COMPUFIX 8.lnk . (.ZiWu-Soft EDV Systeme GmbH - COMPUFIX.)  -- C:\Program Files (x86)\fischer\Compufix8\COMPUFIX.exe 
O4 - GS\Desktop [Public]: Creo Elements Pro Distributed Batch.lnk . (...)  -- C:\Program Files (x86)\PTC\Creo Elements\Pro5.0\bin\ptcdbatch.bat  (.not file.)
O4 - GS\Desktop [Public]: Creo.lnk . (...)  -- C:\Program Files (x86)\PTC\Creo Elements\Pro5.0\bin\proe.exe (.not file.)
O4 - GS\Desktop [Public]: DAEMON Tools Lite.lnk . (.Disc Soft Ltd - DAEMON Tools Lite.)  -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe  =>.DT Soft Ltd
O4 - GS\Desktop [Public]: FreeFileSync.lnk . (.http://freefilesync.sourceforge.net - Folder Comparison and Synchronization.)  -- C:\Program Files\FreeFileSync\FreeFileSync.exe 
O4 - GS\Desktop [Public]: Freeplane.lnk . (...)  -- C:\Program Files\Freeplane\freeplane.exe
O4 - GS\Desktop [Public]: Git Bash.lnk . (...)  -- C:\Program Files (x86)\Git\bin\sh.exe
O4 - GS\Desktop [Public]: Google Calendar.lnk - Clé orpheline
O4 - GS\Desktop [Public]: HDClone.lnk . (.Miray Software AG - HDClone Launcher.)  -- C:\Program Files (x86)\HDClone 4.3 Free Edition\hdclone.exe 
O4 - GS\Desktop [Public]: Hilti PROFIS Anchor.lnk . (.Agito d.o.o. - Agito.Hilti.Anchor.WinUI.)  -- C:\Program Files (x86)\Hilti\PROFIS Anchor 2\ProfisAnchor.exe 
O4 - GS\Desktop [Public]: Installer le Centre Souris et Claviers Microsoft.lnk - Clé orpheline
O4 - GS\Desktop [Public]: IObit Unlocker.lnk . (.IObit - IObitUnlocker.)  -- C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.exe 
O4 - GS\Desktop [Public]: KONICA MINOLTA Device Set-Up.lnk . (...)  -- C:\Program Files (x86)\KONICA MINOLTA\PageScope Data Administrator V4\DeviceManager.exe
O4 - GS\Desktop [Public]: LibreOffice 3.6.lnk . (.The Document Foundation - LibreOffice 3.6.)  -- C:\Program Files (x86)\LibreOffice 3.6\program\soffice.exe 
O4 - GS\Desktop [Public]: LogicPlus.lnk . (.Sapa Building System - Pas de description.)  -- C:\LogicPlus\LogicPlus.exe 
O4 - GS\Desktop [Public]: MALODOS.lnk . (...)  -- C:\Program Files (x86)\MALODOS\Progs\homeDocs.exe
O4 - GS\Desktop [Public]: ModelCHECK.lnk . (...)  -- C:\Program Files (x86)\PTC\Creo Elements\Pro5.0\bin\modelcheck.bat  (.not file.)
O4 - GS\Desktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\Desktop [Public]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.)  -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe 
O4 - GS\Desktop [Public]: Openbravo POS.lnk . (...)  -- C:\Program Files (x86)\openbravopos-2.30.2\start.bat 
O4 - GS\Desktop [Public]: OpenProj.lnk . (.Serena Software Inc. - OpenProj.)  -- C:\Program Files (x86)\Serena Software Inc\OpenProj\OpenProj1.4.0.exe 
O4 - GS\Desktop [Public]: OptiCoupe 5.21c.lnk . (.Boole & Partners - OptiCoupe.)  -- C:\Program Files (x86)\Boole & Partners\OptiCoupe 5\OptiCoupe.exe 
O4 - GS\Desktop [Public]: Oracle VM VirtualBox.lnk . (...)  -- C:\Program Files (x86)\Oracle\VirtualBox\VirtualBox.exe (.not file.)
O4 - GS\Desktop [Public]: PageScope Direct Print 1.1.lnk . (.KONICA MINOLTA BUSINESS TECHNOLOGIES, INC. - Pas de description.)  -- C:\Program Files (x86)\KONICA MINOLTA\PageScope Direct Print 1.1\KMPSDP.exe 
O4 - GS\Desktop [Public]: Q-Dir.lnk . (.Nenad Hrg (SoftwareOK.com) - Q-Dir 5.57.)  -- C:\Program Files (x86)\Q-Dir\Q-Dir.exe 
O4 - GS\Desktop [Public]: Recuva.lnk . (.Piriform Ltd - Recuva.)  -- C:\Program Files\Recuva\recuva64.exe 
O4 - GS\Desktop [Public]: Revit Architecture 2013.lnk . (...)  -- C:\Program Files (x86)\Autodesk\Revit Architecture 2013\Program\Revit.exe (.not file.)
O4 - GS\Desktop [Public]: Samsung Kies (Lite).lnk . (...)  -- C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe
O4 - GS\Desktop [Public]: Samsung Kies.lnk . (...)  -- C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe
O4 - GS\Desktop [Public]: SapaLogic.lnk . (.Sapa Building System - SapaLogic.)  -- C:\Chacal_iX\exe\SapaLogic.exe 
O4 - GS\Desktop [Public]: SendBox.lnk . (...)  -- C:\Program Files (x86)\NETKOM\SendBox\Uploader2\SendBox.exe
O4 - GS\Desktop [Public]: Structure.lnk . (...)  -- C:\Program Files (x86)\PTC\Creo Elements\Pro5.0\mech\bin\mstruct.bat  (.not file.)
O4 - GS\Desktop [Public]: TeamViewer 8.lnk . (.TeamViewer GmbH - TeamViewer 8.)  -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe 
O4 - GS\Desktop [Public]: Thermal.lnk . (...)  -- C:\Program Files (x86)\PTC\Creo Elements\Pro5.0\mech\bin\mtherm.bat  (.not file.)
O4 - GS\Desktop [Public]: TopSolid 7.6 x64.lnk . (...)  -- C:\Program Files (x86)\Missler Software\TopSolid 7.6\bin\TopSolid.exe (.not file.)
O4 - GS\Desktop [Public]: TopSolid'Pdm Explorer 7.6 x64.lnk . (...)  -- C:\Program Files (x86)\Missler Software\TopSolid'Pdm Explorer 7.6\bin\TopSolid.Pdm.Explorer.exe (.not file.)
O4 - GS\Desktop [Public]: TopSolid'Quote 7.6 x64.lnk . (...)  -- C:\Program Files (x86)\Missler Software\TopSolid'Quote 7.6\bin\TopSolid.Quote.exe (.not file.)
O4 - GS\Desktop [Public]: TopSolid'Viewer 7.6 x64.lnk . (...)  -- C:\Program Files (x86)\Missler Software\TopSolid'Viewer 7.6\bin\TopSolid.Viewer.exe (.not file.)
O4 - GS\Desktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player 2.0.6.)  -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe  =>.VideoLAN
O4 - GS\Program [Public]: Adobe Reader XI.lnk . (...)  -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico 
O4 - GS\Program [Public]: Apple Software Update.lnk . (...)  -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe  =>.Apple Inc
O4 - GS\Program [Public]: Audacity.lnk . (.The Audacity Team - Audacity®, the Free, Cross-Platform Sound E.)  -- C:\Program Files (x86)\Audacity\audacity.exe  =>.The Audacity Team
O4 - GS\Program [Public]: Browser Choice.lnk . (...)  -- C:\Windows\BrowserChoice\html\default.html 
O4 - GS\Program [Public]: Desktop.lnk - Clé orpheline
O4 - GS\Program [Public]: KeePass 2.lnk . (.Dominik Reichl - KeePass.)  -- C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe 
O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\Program [Public]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.)  -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe 
O4 - GS\Program [Public]: TeamViewer 8.lnk . (.TeamViewer GmbH - TeamViewer 8.)  -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe 
O4 - GS\Program [Public]: Windows Store.lnk . (...)  -- C:\Windows\WinStore\WinStore.htm 
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.)  -- C:\Windows\system32\calc.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (...)  -- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe (.not file.)
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.)  -- C:\Windows\system32\mspaint.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.)  -- C:\Windows\system32\mstsc.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.)  -- C:\Windows\system32\SnippingTool.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.)  -- C:\Windows\system32\SoundRecorder.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Enregistreur d’actions.)  -- C:\Windows\system32\psr.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.)  -- C:\Windows\system32\StikyNot.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft  Windows Fax and Scan.)  -- C:\Windows\system32\WFS.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.)  -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.)  -- C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.)  -- C:\Windows\system32\xpsrchvw.exe  =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.)  -- C:\Windows\system32\charmap.exe  =>.Microsoft Corporation
O4 - GS\Accessories [postgres]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.)  -- C:\Windows\system32\notepad.exe  =>.Microsoft Corporation
O4 - GS\QuickLaunch [Patrick]: Freeplane.lnk . (...)  -- C:\Program Files\Freeplane\freeplane.exe
O4 - GS\QuickLaunch [Patrick]: Git Bash.lnk . (...)  -- C:\Program Files (x86)\Git\bin\sh.exe
O4 - GS\QuickLaunch [Patrick]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - GS\QuickLaunch [Patrick]: HDClone.lnk . (.Miray Software AG - HDClone Launcher.)  -- C:\Program Files (x86)\HDClone 4.3 Free Edition\hdclone.exe 
O4 - GS\QuickLaunch [Patrick]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch [Patrick]: Microsoft Outlook.lnk . (.Microsoft Corporation - Microsoft Outlook.)  -- C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.exe 
O4 - GS\QuickLaunch [Patrick]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.)  -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe 
O4 - GS\QuickLaunch [Patrick]: Oracle VM VirtualBox.lnk . (...)  -- C:\Program Files (x86)\Oracle\VirtualBox\VirtualBox.exe (.not file.)
O4 - GS\QuickLaunch [Patrick]: Q-Dir.lnk . (.Nenad Hrg (SoftwareOK.com) - Q-Dir 5.57.)  -- C:\Program Files (x86)\Q-Dir\Q-Dir.exe 
O4 - GS\QuickLaunch [Patrick]: Samsung Kies (Lite).lnk . (...)  -- C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe
O4 - GS\QuickLaunch [Patrick]: Samsung Kies.lnk . (...)  -- C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe
O4 - GS\QuickLaunch [Patrick]: Torch.lnk . (...)  -- C:\Users\Patrick\AppData\Local\Torch\Application\torch.exe (.not file.)
O4 - GS\TaskBar [Patrick]: AutoCAD 2012 - Français.lnk . (...)  -- C:\Program Files (x86)\Autodesk\AutoCAD 2012 - French\acad.exe (.not file.)
O4 - GS\TaskBar [Patrick]: Autodesk Inventor Professional 2013 - Français (French).lnk . (...)  -- C:\Program Files (x86)\Autodesk\Inventor 2013\Bin\Inventor.exe (.not file.)
O4 - GS\TaskBar [Patrick]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.)  -- C:\Windows\system32\calc.exe  =>.Microsoft Corporation
O4 - GS\TaskBar [Patrick]: CATIA P3 V5R20.lnk . (.Dassault Systemes - Administration.)  -- C:\Program Files (x86)\Dassault Systemes\B20\intel_a\code\bin\CATSTART.exe 
O4 - GS\TaskBar [Patrick]: FreeMind.lnk . (.FreeMind team - FreeMind — free mind mapping software.)  -- C:\Program Files (x86)\FreeMind\Freemind.exe 
O4 - GS\TaskBar [Patrick]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\TaskBar [Patrick]: KeePass 2.lnk . (.Dominik Reichl - KeePass.)  -- C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe 
O4 - GS\TaskBar [Patrick]: Microsoft Excel 2010.lnk . (...)  -- C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
O4 - GS\TaskBar [Patrick]: Microsoft Outlook 2010.lnk . (...)  -- C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\outicon.exe
O4 - GS\TaskBar [Patrick]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\TaskBar [Patrick]: Notepad (2).lnk . (.Microsoft Corporation - Bloc-notes.)  -- C:\Windows\system32\notepad.exe  =>.Microsoft Corporation
O4 - GS\TaskBar [Patrick]: Notepad++.lnk . (.Don HO don.h@free.fr - Notepad++ : a free (GNU) source code editor.)  -- C:\Program Files (x86)\Notepad++\notepad++.exe 
O4 - GS\TaskBar [Patrick]: OpenProj.lnk . (.Serena Software Inc. - OpenProj.)  -- C:\Program Files (x86)\Serena Software Inc\OpenProj\OpenProj1.4.0.exe 
O4 - GS\TaskBar [Patrick]: Q-Dir.lnk . (.Nenad Hrg (SoftwareOK.com) - Q-Dir 5.57.)  -- C:\Program Files (x86)\Q-Dir\Q-Dir.exe 
O4 - GS\TaskBar [Patrick]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.)  -- C:\Windows\system32\SnippingTool.exe  =>.Microsoft Corporation
O4 - GS\TaskBar [Patrick]: Torch.lnk . (...)  -- C:\Users\Patrick\AppData\Local\Torch\Application\torch.exe (.not file.)
O4 - GS\TaskBar [Patrick]: VLC media player.lnk . (.VideoLAN - VLC media player 2.0.6.)  -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe  =>.VideoLAN
O4 - GS\Program [Patrick]: Bureau.lnk . (...)  -- C:\Users\Patrick\Desktop 
O4 - GS\Program [Patrick]: Chantiers récents.lnk - Clé orpheline
O4 - GS\Program [Patrick]: Favoris.lnk - Clé orpheline
O4 - GS\Program [Patrick]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Program [Patrick]: Torch.lnk . (...)  -- C:\Users\Patrick\AppData\Local\Torch\Application\torch.exe (.not file.)
O4 - GS\Accessories [Patrick]: Notepad (2).lnk . (.Microsoft Corporation - Bloc-notes.)  -- C:\Windows\system32\notepad.exe  =>.Microsoft Corporation
O4 - GS\Desktop [Patrick]: acadiso.lin - Raccourci.lnk . (...)  -- C:\Autodesk\Autodesk_Inventor_2013_French_Win_64bit\x64\Inventor\Program Files\Autodesk\Inventor 2013\Compatibility\Support\acadiso.lin 
O4 - GS\Desktop [Patrick]: CATIA_P3_homepage - Raccourci.lnk . (...)  -- C:\Users\Patrick\Desktop\Tuto CATIA\Aide-Catia-French\CATIA_P3_homepage.htm 
O4 - GS\Desktop [Patrick]: Chantiers récents - Raccourci (2).lnk - Clé orpheline
O4 - GS\Desktop [Patrick]: Chantiers récents - Raccourci.lnk - Clé orpheline
O4 - GS\Desktop [Patrick]: Charmes - Maurice Barrès - Raccourci.lnk . (...)  -- \\Utilisateur-pc\e\uilisateurs2\betude\PLANS (Autocad)\Chantiers récents\Charmes - Maurice Barrès 
O4 - GS\Desktop [Patrick]: chrome - Raccourci.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - GS\Desktop [Patrick]: Facebook.lnk . (...)  -- C:\Users\Patrick\AppData\Local\Torch\Application\torch.exe (.not file.)
O4 - GS\Desktop [Patrick]: FEBUS.lnk . (...)  -- C:\FEBUS\FEBUS.exe
O4 - GS\Desktop [Patrick]: Formation Visual Cplusplus 2008 Express Edition.lnk . (...)  -- C:\Users\Patrick\Documents\MSDN\Introduction to Visual Cplusplus 2008 Express Edition 
O4 - GS\Desktop [Patrick]: FrameTitleBlock - Raccourci.lnk . (...)  -- C:\Program Files (x86)\Dassault Systemes\B20\intel_a\VBScript\FrameTitleBlock 
O4 - GS\Desktop [Patrick]: FreeOCR.lnk . (...)  -- C:\FreeOCR\FreeOCR.exe
O4 - GS\Desktop [Patrick]: Git-1.8.1.2-preview20130201 - Raccourci.lnk . (.The Git Development Community - Git Setup.)  -- C:\Users\Patrick\Documents\Install-base\Git-1.8.1.2-preview20130201.exe 
O4 - GS\Desktop [Patrick]: HJTs.exe - Raccourci.lnk . (.Trend Micro Inc. - HijackThis.)  -- C:\Program Files (x86)\Trend Micro\HiJackThis\HJTs.exe 
O4 - GS\Desktop [Patrick]: index - Raccourci.lnk . (...)  -- C:\Program Files (x86)\Autodesk\Inventor 2013\Local Help\index.html  (.not file.)
O4 - GS\Desktop [Patrick]: Inventor 2013 - Raccourci (2).lnk . (...)  -- C:\Users\Public\Documents\Autodesk\Inventor 2013 
O4 - GS\Desktop [Patrick]: Inventor 2013 - Raccourci.lnk . (...)  -- C:\Users\Public\Documents\Autodesk\Inventor 2013 
O4 - GS\Desktop [Patrick]: MagicISO - Raccourci.lnk . (.MagicISO, Inc. - MagicISO Maker.)  -- C:\Program Files (x86)\MagicISO\MagicISO.exe 
O4 - GS\Desktop [Patrick]: MagicISO.lnk . (.MagicISO, Inc. - MagicISO Maker.)  -- C:\Program Files (x86)\MagicISO\MagicISO.exe 
O4 - GS\Desktop [Patrick]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.)  -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe 
O4 - GS\Desktop [Patrick]: Nuxeo.lnk . (...)  -- C:\Users\Patrick\AppData\Local\Nuxeo\bin\Start Nuxeo.bat  (.not file.)
O4 - GS\Desktop [Patrick]: Oracle VM VirtualBox.lnk . (...)  -- C:\Program Files (x86)\Oracle\VirtualBox\VirtualBox.exe (.not file.)
O4 - GS\Desktop [Patrick]: Revo Uninstaller.lnk . (.VS Revo Group - Revo Uninstaller.)  -- C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe 
O4 - GS\Desktop [Patrick]: Torch.lnk . (...)  -- C:\Users\Patrick\AppData\Local\Torch\Application\torch.exe (.not file.)
O4 - GS\Desktop [Patrick]: Youtube.lnk . (...)  -- C:\Users\Patrick\AppData\Local\Torch\Application\torch.exe (.not file.)
O4 - GS\Desktop [Patrick]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.)  -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe  =>.Nicolas Coolman
O4 - GS\Desktop [Patrick]: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.)  -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe  =>.Nicolas Coolman
O4 - GS\Accessories [Oracle]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.)  -- C:\Windows\system32\notepad.exe  =>.Microsoft Corporation
~ Global Startup: 133 Scanned in 00mn 31s



---\\ Applications lancées au démarrage du sytème (O4)
O4 - GS\Startup [Public]: Google Calendar Sync.lnk . (.Google - Google Calendar Sync.)  -- C:\Program Files (x86)\Google\Google Calendar Sync\GoogleCalendarSync.exe 
O4 - GS\Startup [Public]: KMDPHFMG.lnk . (.KONICA MINOLTA BUSINESS TECHNOLOGIES, INC. - Pas de description.)  -- C:\Program Files (x86)\KONICA MINOLTA\PageScope Direct Print 1.1\KMDPHFMG.exe 
O4 - GS\Startup [Patrick]: OneNote 2010 - Capture d’écran et lancement.lnk . (.Microsoft Corporation - Microsoft OneNote Quick Launcher.)  -- C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.exe  =>.Microsoft Corporation
O4 - HKLM\..\Run: [Autodesk Sync] . (.Autodesk, Inc. - Autodesk Sync.) -- C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe 
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe 
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe 
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe 
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) 
O4 - HKLM\..\Run: [BTMTrayAgent] . (.Motorola Solutions, Inc. - Bluetooth Shell Extension.) -- C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll 
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe  =>.DT Soft Ltd
O4 - HKCU\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.exe 
O4 - HKCU\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files (x86)\Samsung\Kies\Kies.exe 
O4 - HKCU\..\Run: [KiesAirMessage] . (.Samsung Electronics - Pas de description.) -- C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe 
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe  =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [KeePass 2 PreLoad] . (.Dominik Reichl - KeePass.) -- C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe 
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe  =>.Microsoft Corporation
O4 - HKLM\..\Wow6432Node\Run: [NuTCSetupEnviron] . (.MKS Software Inc. - NuTCRACKER OE environment utility.) -- C:\Program Files (x86)\MKS Toolkit\bin\ncoeenv.exe 
O4 - HKLM\..\Wow6432Node\Run: [PROFIS AutoUpdate] . (.Agito d.o.o. - Hilti.AutoUpdate.Tray.) -- C:\Program Files (x86)\Hilti\PROFIS AutoUpdate\Hilti.AutoUpdate.Tray.exe 
O4 - HKLM\..\Wow6432Node\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe  =>.Samsung Electronics Co
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe 
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe 
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe  =>.Oracle Corporation
O4 - HKUS\S-1-5-21-3738773010-1709159401-3582800864-1001\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe  =>.DT Soft Ltd
O4 - HKUS\S-1-5-21-3738773010-1709159401-3582800864-1001\..\Run: [OfficeSyncProcess] . (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.exe 
O4 - HKUS\S-1-5-21-3738773010-1709159401-3582800864-1001\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files (x86)\Samsung\Kies\Kies.exe 
O4 - HKUS\S-1-5-21-3738773010-1709159401-3582800864-1001\..\Run: [KiesAirMessage] . (.Samsung Electronics - Pas de description.) -- C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe 
~ Application:  Scanned in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBttnIE.dll  =>.Microsoft Corporation
O9 - Extra button: Classic IE9 Settings [64Bits] - {56753E59-AF1D-4FBA-9E15-31557124ADA2} -- Clé orpheline
O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBTTN~1.dll  =>.Microsoft Corporation
~ IE Extra Buttons:  Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll  =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
~ Winsock: 6 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{DC8B1C3B-94FE-4FFB-8344-76ADE6719985}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{DC8B1C3B-94FE-4FFB-8344-76ADE6719985}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
~ Domain:  Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll  =>.Microsoft Corporation
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll  =>.Microsoft Corporation
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon:  Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Autodesk Content Service (Autodesk Content Service) . (.Pas de propriétaire - Service.) - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Backbone Service (BBDemon) . (.Dassault Systemes - System.) - C:\Program Files (x86)\Dassault Systemes\B20\intel_a\code\bin\CATSysDemon.exe
O23 - Service: Bluetooth Device Monitor (Bluetooth Device Monitor) . (.Motorola Solutions, Inc. - Bluetooth Device Monitor.) - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth OBEX Service (Bluetooth OBEX Service) . (.Motorola Solutions, Inc. - Bluetooth OBEX Service.) - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Classic Shell Service (ClassicShellService) . (.IvoSoft - Classic Shell Service.) - C:\Program Files\Classic Shell\ClassicShellService.exe
O23 - Service: DB2 Management Service (DB2COPY1) (DB2MGMTSVC_DB2COPY1) . (.International Business Machines Corporation - IBM(R) DB2(R).) - C:\Program Files (x86)\IBM\SQLLIB\BIN\db2mgmtsvc.exe
O23 - Service: FLEXlm server for PTC (FLEXlm server for PTC) . (.Macrovision Corporation - Pas de description.) - C:\Program Files\flexnet\x86e_win64\obj\lmgrd.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  =>.Google Inc
O23 - Service: Hilti PROFIS AutoUpdate Service (Hilti PROFIS AutoUpdate Service) . (.Agito d.o.o. - Hilti.AutoUpdate.Service.) - C:\Program Files (x86)\Hilti\PROFIS AutoUpdate\Hilti.AutoUpdate.Service.exe
O23 - Service: Gestionnaire des tâches d'Autodesk Moldf (mitsijm2013) . (.Pas de propriétaire - amijm.exe.) - C:\Program Files\Autodesk\Inventor 2013\Moldflow\bin\mitsijm.exe
O23 - Service: MySQL56 (MySQL56) . (...) - C:\ProgramData\MySQL\MySQL Server 5.6\my.ini
O23 - Service: NuTCRACKER Service (NuTCRACKERService) . (.MKS Software Inc. - NuTCRACKER Service.) - C:\Windows\system32\nutsrv4.exe
O23 - Service: OracleOraDB12Home1MTSRecoveryService (OracleOraDB12Home1MTSRecoveryService) . (.Oracle Corporation - Oracle MTS Recovery Service.) - C:\app\Patrick\Oracle\product\12.1.0\dbpvgm\bin\omtsreco.exe
O23 - Service: OracleOraDB12Home1TNSListener (OracleOraDB12Home1TNSListener) . (...) - C:\app\Patrick\product\12.1.0\dbhome_2\BIN\TNSLSNR (.not file.)
O23 - Service: OracleServicePVGM (OracleServicePVGM) . (.Oracle Corporation - Oracle RDBMS Kernel Executable.) - c:\app\patrick\oracle\product\12.1.0\dbpvgm\bin\ORACLE.exe
O23 - Service: OracleVssWriterPVGM (OracleVssWriterPVGM) . (...) - c:\app\patrick\oracle\product\12.1.0\dbpvgm\bin\OraVSSW.exe
O23 - Service: PortmapperService (PortmapperService) . (.PTC - Creo Elements/Pro from PTC.) - C:\Program Files\PTC Portmapper\x86e_win64\obj\portmap.exe
O23 - Service: postgresql-9.1 - PostgreSQL Server 9.1 (postgresql-9.1) . (.PostgreSQL Global Development Group - pg_ctl - starts/stops/restarts the PostgreS.) - C:\Program Files (x86)\PostgreSQL\9.1\bin\pg_ctl.exe
O23 - Service: postgresql-x64-9.2 - PostgreSQL Server 9 (postgresql-x64-9.2) . (.PostgreSQL Global Development Group - pg_ctl - starts/stops/restarts the PostgreS.) - C:\Program Files\PostgreSQL\9.2\bin\pg_ctl.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) . (.SafeNet, Inc. - Pas de description.) - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) . (.SafeNet, Inc - Sentinel Protection Server for SuperPro and.) - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: Sentinel Security Runtime (SentinelSecurityRuntime) . (.SafeNet, Inc. - Safenet Sentinel Security Runtime.) - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe
O23 - Service: TeamViewer 8 (TeamViewer8) . (.TeamViewer GmbH - TeamViewer 8.) - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service:  (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (.not file.)
~ Services: 23 Scanned in 00mn 05s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\Adobe Flash Player Updater.job   [1002]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\AutoKMS.job   [298]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job   [1090]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job   [1094]
[MD5.A283108E14F3970432C21AF4C0CB1BCE] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe   [257416]
[MD5.00000000000000000000000000000000] [APT] [AutoKMS] (...) -- C:\Windows\AutoKMS\AutoKMS.exe (.not file.)   [0]  =>Trojan.Keygen
[MD5.A9DA5B43CF597F83B1EB441968E24891] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe   [3497240]  =>Piriform Ltd
[MD5.00000000000000000000000000000000] [APT] [GoforFilesUpdate] (...) -- C:\Program Files (x86)\GoforFiles\GFFUpdater.exe (.not file.)   [0]  =>P2P.GoforFiles
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [116648]
[MD5.00000000000000000000000000000000] [APT] [SpyHunter4Startup] (...) -- C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe (.not file.)   [0]  =>Crapware.SpyHunter
[MD5.0C4B37EEC96325856618C971F7961466] [APT] [{494186EA-E0B1-4BB9-AA45-AA8B3BC8D0DF}] (.Autodesk, Inc..) -- C:\Program Files\Autodesk\AutoCAD 2012 - French\PC3exe.exe   [461024]
[MD5.2B468C76FDD1E06F5EF5B379C419FA1A] [APT] [{AAD175C9-5946-4CA8-A42E-546FA3C8D9B9}] (.Oracle Corporation.) -- C:\Windows\system32\javaws.exe   [312232]
~ Scheduled Task: 15 Scanned in 00mn 06s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll  =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll  =>.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe  =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll  =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll
~ Active Setup: 9 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (BasicDisplay) . (.Microsoft Corporation - Microsoft Basic Display Driver.) - C:\Windows\system32\drivers\BasicDisplay.sys
O41 - Driver: (BasicRender) . (.Microsoft Corporation - Microsoft Basic Render Driver.) - C:\Windows\system32\drivers\BasicRender.sys
O41 - Driver: cdrom.inf (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\System32\drivers\dam.sys (dam) . (.Microsoft Corporation - DAM Kernel Driver.) - C:\Windows\System32\drivers\dam.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (Dfsc) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (LUMDriver) . (.IBM - LUM Runtime.) - C:\Windows\system32\drivers\LUMDriver.sys
O41 - Driver: mssmbios.inf (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: netnb.inf (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: npsvctrig.inf (npsvctrig) . (.Microsoft Corporation - Named pipe service triggers.) - C:\Windows\system32\drivers\npsvctrig.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver:  (VBoxDrv) . (.Oracle Corporation - VirtualBox Support Driver.) - C:\Windows\system32\DRIVERS\VBoxDrv.sys
O41 - Driver:  (VBoxUSBMon) . (.Oracle Corporation - VirtualBox USB Monitor Driver.) - C:\Windows\system32\DRIVERS\VBoxUSBMon.sys
O41 - Driver: C:\Windows\System32\drivers\vwififlt.sys (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
~ Drivers: 42 Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 9.20 (x64 edition) - (.Igor Pavlov.) [HKLM][64Bits] -- {23170F69-40C1-2702-0920-000001000000}
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441}
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader XI (11.0.05) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {5D09C772-ECB3-442B-9CC6-B4341C78FDC2}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}  =>.Apple Inc
O42 - Logiciel: Application Verifier x64 External Package - (.Microsoft.) [HKLM][64Bits] -- {7346C35D-942D-3CCE-94CB-7008BA8D63CB}
O42 - Logiciel: Audacity 2.0.3 - (.Audacity Team.) [HKLM][64Bits] -- Audacity_is1
O42 - Logiciel: AutoCAD 2012 - French - (.Autodesk.) [HKLM][64Bits] -- AutoCAD 2012 - French
O42 - Logiciel: AutoCAD 2012 - French - (.Autodesk.) [HKLM][64Bits] -- {5783F2D7-A001-040C-0102-0060B0CE6BBA}
O42 - Logiciel: AutoCAD 2012 VBA Enabler - (.Autodesk.) [HKLM][64Bits] -- {2BD66EAF-062B-42F9-013A-028F3D6A10CD}
O42 - Logiciel: Autodesk CAD Manager Tools - (.Autodesk.) [HKLM][64Bits] -- {5783F2D7-0111-0409-0110-0060B0CE6BBA}
O42 - Logiciel: Autodesk Content Service - (.Autodesk.) [HKLM][64Bits] -- {086F9A69-CD39-4893-A9FB-D3A0634CE3F7}
O42 - Logiciel: Autodesk Design Review 2013 - (.Autodesk, Inc..) [HKLM][64Bits] -- Autodesk Design Review 2013
O42 - Logiciel: Autodesk Inventor 2013 Quick Uninstaller - (.Autodesk.) [HKLM][64Bits] -- {D25FF5C1-1764-469A-9794-69309387C193}
O42 - Logiciel: Autodesk Inventor Content Center Libraries 2013 (Desktop Content) - (.Autodesk.) [HKLM][64Bits] -- {B46DECD1-1764-4EF1-0000-22D71E81877C}
O42 - Logiciel: Autodesk Inventor Fusion 2013 - (.Autodesk, Inc..) [HKLM][64Bits] -- Autodesk Inventor Fusion 2013
O42 - Logiciel: Autodesk Inventor Fusion 2013 - (.Autodesk, Inc..) [HKLM][64Bits] -- {FFF5619F-2013-0064-A85E-9994F70A9E5D}
O42 - Logiciel: Autodesk Inventor Fusion for Inventor 2013 Add-in - (.Autodesk.) [HKLM][64Bits] -- {08BCFE15-8AA1-4A58-B018-4FEF486BA922}
O42 - Logiciel: Autodesk Inventor Fusion plug-in for AutoCAD 2012 - (.Autodesk.) [HKLM][64Bits] -- Plug-in Autodesk Inventor Fusion pour AutoCAD 2012
O42 - Logiciel: Autodesk Inventor Professional 2013 - (.Autodesk.) [HKLM][64Bits] -- {7F4DD591-1764-0001-0000-7107D70F3DB4}
O42 - Logiciel: Autodesk Inventor Professional 2013 Français (French) - (.Autodesk.) [HKLM][64Bits] -- Autodesk Inventor Professional 2013
O42 - Logiciel: Autodesk Inventor Professional 2013 Module linguistique - Français (French) - (.Autodesk.) [HKLM][64Bits] -- {7F4DD591-1764-0001-1036-7107D70F3DB4}
O42 - Logiciel: Autodesk Material Library 2013 - (.Autodesk.) [HKLM][64Bits] -- {117EBEEB-5DB0-43C8-9FD6-DD583DB152DD}
O42 - Logiciel: Autodesk Material Library Base Resolution Image Library 2012 - (.Autodesk.) [HKLM][64Bits] -- {65420DC9-306E-4371-905F-F4DC3B418E52}
O42 - Logiciel: Autodesk Material Library Base Resolution Image Library 2013 - (.Autodesk.) [HKLM][64Bits] -- {606E12B9-641F-4644-A22A-FF38AE980AFD}
O42 - Logiciel: Autodesk Material Library Low Resolution Image Library 2013 - (.Autodesk.) [HKLM][64Bits] -- {27C6C0A2-2EC9-4FEA-BE2B-659EAAC2C68C}
O42 - Logiciel: Autodesk Material Library Medium Resolution Image Library 2013 - (.Autodesk.) [HKLM][64Bits] -- {58760EEC-8B6A-43F4-81AA-696E381DFADD}
O42 - Logiciel: Autodesk Network License Manager - (.Autodesk.) [HKLM][64Bits] -- {4BE91685-1632-47FC-B563-A8A542C6664C}
O42 - Logiciel: Autodesk Revit Architecture 2013 - (.Autodesk.) [HKLM][64Bits] -- Autodesk Revit Architecture 2013
O42 - Logiciel: Autodesk Sync - (.Autodesk, Inc..) [HKLM][64Bits] -- {EE5F74BC-5CD5-4EF2-86BA-81E6CF46A18F}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>Piriform Ltd
O42 - Logiciel: Canon MF Toolbox 4.9.1.1.mf13 - (.CANON INC..) [HKLM][64Bits] -- {6767DFEE-8909-453A-B553-C7693912B2EB}
O42 - Logiciel: Centre Souris et Claviers Microsoft - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Mouse and Keyboard Center
O42 - Logiciel: Chacal iX 1.5 - (.DSI.) [HKLM][64Bits] -- {E167C48A-80BC-4EA1-AB43-8D6A4C9A83EE}
O42 - Logiciel: Classic Shell - (.IvoSoft.) [HKLM][64Bits] -- {7F34ADBE-77C0-47A0-BBC6-B3DA16CE8E68}
O42 - Logiciel: Compufix 8 - (.fischerwerke.) [HKLM][64Bits] -- Compufix8_is1
O42 - Logiciel: Creo Elements/Distributed Services Release 5.0 Datecode M110 - (.PTC.) [HKLM][64Bits] -- Creo Elements/Distributed Services Release 5.0 Datecode M110
O42 - Logiciel: Creo Elements/Help Release 5.0 Datecode M110 - (.PTC.) [HKLM][64Bits] -- Creo Elements/Help Release 5.0 Datecode M110
O42 - Logiciel: Creo Elements/Pro Release 5.0 Datecode M110 - (.PTC.) [HKLM][64Bits] -- Creo Elements/Pro Release 5.0 Datecode M110
O42 - Logiciel: Creo Thumbnail Viewer 1.0 - (.PTC.) [HKLM][64Bits] -- {DCC7ADF1-1C02-4FAC-AC5F-E9424A0F1C68}
O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite  =>.DT Soft Ltd
O42 - Logiciel: DWG TrueView 2013 - (.Autodesk.) [HKLM][64Bits] -- DWG TrueView 2013
O42 - Logiciel: Dassault Systemes Software B20 - (...) [HKLM][64Bits] -- Dassault Systemes B20_0
O42 - Logiciel: Dassault Systemes Software Prerequisites x86-x64 - (.Dassault Systemes.) [HKLM][64Bits] -- {CF1EB598-B424-436A-B15F-B763846BA970}
O42 - Logiciel: Dassault Systemes Software VC9 Prerequisites x86-x64 - (.Dassault Systemes.) [HKLM][64Bits] -- {F2F2DEA7-36AB-4E13-907C-D8BDE775EF97}
O42 - Logiciel: Eco Materials Adviser for Autodesk Inventor 2013 - (.Granta Design Limited.) [HKLM][64Bits] -- {792A9A32-718A-40D1-9867-A903F76AE2F8}
O42 - Logiciel: Enregistreur VSS Microsoft pour SQL Server 2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {CB5C654E-DA72-4B61-97F3-61C755C2E939}
O42 - Logiciel: FARO LS 1.1.406.58 - (.FARO Scanner Production.) [HKLM][64Bits] -- {951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}
O42 - Logiciel: FARO LS 1.1.408.2 - (.FARO Scanner Production.) [HKLM][64Bits] -- {91221AAC-F2A0-4028-8016-C7DAF63CB6CC}
O42 - Logiciel: FARO LS 4.8.2.25521 - (.FARO Technologies.) [HKLM][64Bits] -- FARO LS_is1
O42 - Logiciel: FileZilla Client 3.7.0.1 - (.FileZilla Project.) [HKLM][64Bits] -- FileZilla Client
O42 - Logiciel: FreeFileSync 5.15 - (.Zenju.) [HKLM][64Bits] -- FreeFileSync
O42 - Logiciel: FreeMind - (...) [HKLM][64Bits] -- B991B020-2968-11D8-AF23-444553540000_is1
O42 - Logiciel: FreeOCR v4.2 - (...) [HKLM][64Bits] -- freeocr_is1
O42 - Logiciel: Freeplane - (.Open source.) [HKLM][64Bits] -- {D3941722-C4DD-4509-88C4-0E87F675A859}_is1
O42 - Logiciel: GO Contact Sync Mod - (.WebGear, Create Software, Stru.be, saller.NET.) [HKLM][64Bits] -- {1784CB72-73BB-4A4E-9284-58990252EFA6}
O42 - Logiciel: Git version 1.8.1.2-preview20130201 - (.The Git Development Community.) [HKLM][64Bits] -- Git_is1
O42 - Logiciel: Google Apps Migration For Microsoft Outlook® 2.3.12.34 - (.Google, Inc..) [HKLM][64Bits] -- {0C262D84-FFA4-4621-8ED7-41F8287369F5}
O42 - Logiciel: Google Apps Sync™ for Microsoft Outlook® 3.3.355.950 - (.Google, Inc..) [HKLM][64Bits] -- {8049762C-799F-4063-A636-6A22A544FB6F}
O42 - Logiciel: Google Calendar Sync - (...) [HKLM][64Bits] -- Google Calendar Sync
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: HDClone 4.3 Free Edition - (.Miray Software AG.) [HKLM][64Bits] -- HDClone.Free.4.3.4.1036-{D3842F6F-094D-444F-856A-69F47F9DA49E}
O42 - Logiciel: HP System Default Settings - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {326133B9-7599-49F5-8BEE-EB653BCB775D}
O42 - Logiciel: HP Wireless Button Driver - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {941DE69D-6CEE-4171-8F1F-3D7E352AA498}
O42 - Logiciel: Hilti PROFIS Anchor - (.Hilti Corp..) [HKLM][64Bits] -- {5CDAAA6B-228B-44BC-A2A8-BB0863DA121A}
O42 - Logiciel: Hilti PROFIS AutoUpdate - (.Hilti corp..) [HKLM][64Bits] -- {7F2BDB4C-D2D7-47DE-A7D3-0B54F78D64B2}
O42 - Logiciel: Hotfix for Visual C++ Standard 2010 Beta 1 - ENU (KB2280741) - (.Microsoft Corporation.) [HKLM][64Bits] -- {2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}.KB2280741
O42 - Logiciel: Hotfix for Visual C++ Standard 2010 Beta 1 - ENU (KB2284668) - (.Microsoft Corporation.) [HKLM][64Bits] -- {2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}.KB2284668
O42 - Logiciel: Hotfix for Visual C++ Standard 2010 Beta 1 - ENU (KB2295689) - (.Microsoft Corporation.) [HKLM][64Bits] -- {2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}.KB2295689
O42 - Logiciel: Hotfix for Visual C++ Standard 2010 Beta 1 - ENU (KB2420513) - (.Microsoft Corporation.) [HKLM][64Bits] -- {2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}.KB2420513
O42 - Logiciel: Hotfix for Visual C++ Standard 2010 Beta 1 - ENU (KB2452649) - (.Microsoft Corporation.) [HKLM][64Bits] -- {2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}.KB2452649
O42 - Logiciel: Hotfix for Visual C++ Standard 2010 Beta 1 - ENU (KB2455033) - (.Microsoft Corporation.) [HKLM][64Bits] -- {2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}.KB2455033
O42 - Logiciel: Hotfix for Visual C++ Standard 2010 Beta 1 - ENU (KB2485545) - (.Microsoft Corporation.) [HKLM][64Bits] -- {2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}.KB2485545
O42 - Logiciel: Hotfix for Visual C++ Standard 2010 Beta 1 - ENU (KB982517) - (.Microsoft Corporation.) [HKLM][64Bits] -- {2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}.KB982517
O42 - Logiciel: Hotfix for Visual C++ Standard 2010 Beta 1 - ENU (KB982721) - (.Microsoft Corporation.) [HKLM][64Bits] -- {2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}.KB982721
O42 - Logiciel: Hotfix for Visual C++ Standard 2010 Beta 1 - ENU (KB983233) - (.Microsoft Corporation.) [HKLM][64Bits] -- {2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}.KB983233
O42 - Logiciel: IBM Data Server Runtime Client - DB2COPY1 - (.Nom de votre société.) [HKLM][64Bits] -- {BD126458-3EC1-4DC3-9678-F9DF1D71DBB4}
O42 - Logiciel: INSTALLFEBUS64 - (.Microsoft.) [HKLM][64Bits] -- {FA468015-9001-46AE-B559-44AC998F12A3}
O42 - Logiciel: IObit Unlocker - (.IObit.) [HKLM][64Bits] -- IObit Unlocker_is1
O42 - Logiciel: Intel(R) Display Audio Driver - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Introduction to Visual Cplusplus 2008 Express Edition - (.MSDN.) [HKLM][64Bits] -- {C4D838A0-A714-459D-A1A6-46386D129D27}
O42 - Logiciel: Java 7 Update 25 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86417025FF}
O42 - Logiciel: Java 7 Update 25 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217025FF}
O42 - Logiciel: KONICA MINOLTA Device Set-Up - (.KONICA MINOLTA.) [HKLM][64Bits] -- {41D41B31-E926-4E60-8BE9-0D8332F85DE2}
O42 - Logiciel: KONICA MINOLTA PageScope Direct Print 1.1 - (.KONICA MINOLTA.) [HKLM][64Bits] -- {385AEB7D-2D27-40B7-BFB2-1F9170C2CD73}
O42 - Logiciel: KONICA MINOLTA Print Status Notifier - (.KONICA MINOLTA.) [HKLM][64Bits] -- {773B62AE-E4AD-4F93-8921-5F71FFA06598}
O42 - Logiciel: KeePass Password Safe 2.23 - (.Dominik Reichl.) [HKLM][64Bits] -- KeePassPasswordSafe2_is1
O42 - Logiciel: Kits Configuration Installer - (.Microsoft.) [HKLM][64Bits] -- {E14DDED2-919B-FCCB-84AC-5ABB6D182D46}
O42 - Logiciel: Lahey/Fujitsu Fortran Redistributable Runtime - (.Lahey Computer Systems, Inc..) [HKLM][64Bits] -- {D2D9B867-2BFF-4095-AC1E-54CAF7CDC2CE}
O42 - Logiciel: LibreOffice 3.6 - (.The Document Foundation.) [HKLM][64Bits] -- {7654C4E3-86E8-4CD4-B1CE-8DBEA82C36E2}
O42 - Logiciel: LiveUpdate 1.0 - (.ZiWu-Soft EDV Systeme GmbH.) [HKLM][64Bits] -- {AB4EA1B6-67A6-4F00-A5D0-3912628B214C}_is1
O42 - Logiciel: LogicPlus - (.Sapa Building System.) [HKLM][64Bits] -- {14D6B68E-3A97-44F8-A5F2-4B219FDF693C}
O42 - Logiciel: MALODOS - (.David GUEZ.) [HKLM][64Bits] -- {12B0B7D0-AFDC-4658-9C1A-258707EB6971}_is1
O42 - Logiciel: MKS Platform Components 9.x - (.Mortice Kern Systems.) [HKLM][64Bits] -- {30023972-0000-0903-9ABB-000BDB5CF35D}
O42 - Logiciel: Magic ISO Maker v5.5 (build 0281) - (...) [HKLM][64Bits] -- Magic ISO Maker v5.5 (build 0281)
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft WSE 3.0 Runtime - (.Microsoft Corp..) [HKLM][64Bits] -- {E3E71D07-CD27-46CB-8448-16D4FB29AA13}
O42 - Logiciel: Module linguistique de la visionneuse d'aide Microsoft 1.0 - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Help Viewer 1.0 Language Pack - FRA
O42 - Logiciel: Module linguistique du plug-in Autodesk Inventor Fusion pour AutoCAD 2012 - (.Autodesk.) [HKLM][64Bits] -- {E552C39C-C70E-464F-9733-8311331BDD90}
O42 - Logiciel: Mozilla Firefox 24.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 24.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: Mozilla Thunderbird 17.0.8 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Thunderbird 17.0.8 (x86 fr)
O42 - Logiciel: MyFreeCodec - (...) [HKCU][64Bits] -- MyFreeCodec
O42 - Logiciel: Notepad++ - (.Notepad++ Team.) [HKLM][64Bits] -- Notepad++
O42 - Logiciel: Office - Automa - Alucam - (.Sapa Building System nv.) [HKLM][64Bits] -- {EE000FB1-2EEB-4236-A4C8-7D27168A805A}
O42 - Logiciel: OpenProj - (.Serena Software Inc..) [HKLM][64Bits] -- {13702021-43FB-480C-912F-D9B74A538288}
O42 - Logiciel: Openbravo POS - (.Openbravo.) [HKLM][64Bits] -- Openbravo POS 2.30.2
O42 - Logiciel: OptiCoupe 5.21c - (.Boole & Partners.) [HKLM][64Bits] -- OptiCoupe 5
O42 - Logiciel: Oracle VM VirtualBox 4.2.16 - (.Oracle Corporation.) [HKLM][64Bits] -- {4CC3444D-7279-4E83-984F-18E9A7B2E803}
O42 - Logiciel: PDF Split And Merge Basic - (.Andrea Vacondio.) [HKLM][64Bits] -- {C91B24F6-1629-11E2-B696-21676188709B}
O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM][64Bits] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
O42 - Logiciel: PL/Secure 9.2.1 - (.EnterpriseDB.) [HKLM][64Bits] -- PL/Secure 9.2.1-1
O42 - Logiciel: PTC License Server Release 5.0 Datecode M110 - (.PTC.) [HKLM][64Bits] -- PTC License Server Release 5.0 Datecode M110
O42 - Logiciel: PTC Portmapper Release 5.0 Datecode M110 - (.PTC.) [HKLM][64Bits] -- PTC Portmapper Release 5.0 Datecode M110
O42 - Logiciel: Plug-in Autodesk Inventor Fusion pour AutoCAD 2012 - (.Autodesk.) [HKLM][64Bits] -- {EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}
O42 - Logiciel: PostgreSQL 9.1  (x86) - (.PostgreSQL Global Development Group.) [HKLM][64Bits] -- PostgreSQL 9.1
O42 - Logiciel: PostgreSQL 9.2  - (.PostgreSQL Global Development Group.) [HKLM][64Bits] -- PostgreSQL 9.2
O42 - Logiciel: Postgres Enterprise Manager Client 3.0.1-7 - (.EnterpriseDB.) [HKLM][64Bits] -- Postgres Enterprise Manager Client v3 3.0.1-7
O42 - Logiciel: ProductView Express 9.1 - (.PTC.) [HKLM][64Bits] -- {7E5A1435-D1AD-49E2-AB89-31BD7BB350CF}
O42 - Logiciel: Q-Dir - (...) [HKLM][64Bits] -- Q-Dir
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044}
O42 - Logiciel: Recuva - (.Piriform.) [HKLM][64Bits] -- Recuva
O42 - Logiciel: Revit Architecture 2013 - (.Autodesk.) [HKLM][64Bits] -- {7346B4A0-1300-0110-0409-705C0D862004}
O42 - Logiciel: Revit Architecture 2013 Language Pack - English - (.Autodesk.) [HKLM][64Bits] -- {7346B4A0-1300-0111-0409-705C0D862004}
O42 - Logiciel: Revo Uninstaller 1.95 - (.VS Revo Group.) [HKLM][64Bits] -- Revo Uninstaller
O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM][64Bits] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}
O42 - Logiciel: SDK Debuggers - (.Microsoft Corporation.) [HKLM][64Bits] -- {E63A3353-003C-E4C2-230B-F155212D1479}
O42 - Logiciel: SQL Server 2012 Common Files - (.Microsoft Corporation.) [HKLM][64Bits] -- {202AAF1F-69AA-442A-B59F-6B54B1AD07C6}
O42 - Logiciel: SQL Server 2012 Common Files - (.Microsoft Corporation.) [HKLM][64Bits] -- {6493CA0F-4425-467B-A8D1-1E179C38186F}
O42 - Logiciel: SQL Server 2012 Database Engine Services - (.Microsoft Corporation.) [HKLM][64Bits] -- {26773F6F-E7B5-4F58-9347-0347C998BA7D}
O42 - Logiciel: SQL Server 2012 Database Engine Services - (.Microsoft Corporation.) [HKLM][64Bits] -- {57138C23-BE9A-4647-8E66-318B121A7BC2}
O42 - Logiciel: SQL Server 2012 Database Engine Shared - (.Microsoft Corporation.) [HKLM][64Bits] -- {54FF8FAB-DE27-4187-82F1-EBAE6AEE869A}
O42 - Logiciel: SQL Server 2012 Database Engine Shared - (.Microsoft Corporation.) [HKLM][64Bits] -- {FDAAEA11-D2C9-4234-B590-DD5156186BD0}
O42 - Logiciel: SQL Server Browser pour SQL Server 2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {437F5BA1-449C-4FF5-B136-8A037B950919}
O42 - Logiciel: SQL-Profiler 3.0.0 - (.EnterpriseDB.) [HKLM][64Bits] -- SQL-Profiler 3.0.0-3
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A}
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {758C8301-2696-4855-AF45-534B1200980A}
O42 - Logiciel: Samsung Universal Print Driver 2 - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- Samsung Universal Print Driver 2
O42 - Logiciel: SendBox - (.NETKOM.) [HKLM][64Bits] -- {4EC401EF-9EAE-478E-822B-75C99DE5E166}
O42 - Logiciel: Sentinel Protection Installer 7.6.6 - (.SafeNet, Inc..) [HKLM][64Bits] -- {8C2218AC-D1B1-4530-9E67-15164E0E52AB}
O42 - Logiciel: Service Pack 3 pour SQL Server 2008 (KB2546951) (64-bit) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB2546951
O42 - Logiciel: Slik Subversion 1.8.0 (x64) - (.SlikSvn & The SharpSvn Project.) [HKLM][64Bits] -- {49ECE3C0-A512-46F3-BF27-9784394412BD}
O42 - Logiciel: Speccy - (.Piriform.) [HKLM][64Bits] -- Speccy
O42 - Logiciel: Sql Server Customer Experience Improvement Program - (.Microsoft Corporation.) [HKLM][64Bits] -- {2F14965D-567B-4E59-ADEB-0A2CC1E3ADDF}
O42 - Logiciel: Sql Server Customer Experience Improvement Program - (.Microsoft Corporation.) [HKLM][64Bits] -- {BED1EA3D-592D-4305-9D1F-20F03726EFC1}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: Séries MF4100 de Canon - (...) [HKLM][64Bits] -- {239A8D60-270B-42e8-82D3-60D70A2942E0}
O42 - Logiciel: TeamViewer 8 - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer 8
O42 - Logiciel: TopSolid'Cam 7.6 x64 - (.Missler Software.) [HKLM][64Bits] -- {3815A0E1-DB20-4356-8F8F-06461A14EABD}
O42 - Logiciel: TopSolid'Cam Libraries 7.6 - (.Missler Software.) [HKLM][64Bits] -- {5025E366-F4C6-4D36-8DDC-024DB9B5207A}
O42 - Logiciel: TopSolid'Cam Post Processors Base 7.6 x64 - (.Missler Software.) [HKLM][64Bits] -- {EAA06C39-C42C-41FD-9797-CA631283DB39}
O42 - Logiciel: TopSolid'Design 7.6 x64 - (.Missler Software.) [HKLM][64Bits] -- {77417717-82F2-4B73-A54F-40D40056D1B1}
O42 - Logiciel: TopSolid'Design Libraries 7.6 - (.Missler Software.) [HKLM][64Bits] -- {B13E7D43-F3B2-4293-BFB2-3E7D58F6B789}
O42 - Logiciel: TopSolid'Interop Catia V5 7.6 x64 - (.Missler Software.) [HKLM][64Bits] -- {A9B9288F-3E34-40D9-9458-4F36B1EDFE67}
O42 - Logiciel: TopSolid'Interop TopSolid V6 7.6 x64 - (.Missler Software.) [HKLM][64Bits] -- {ABD27652-7F95-473E-8BE6-0022215D4AE7}
O42 - Logiciel: TopSolid'Pdm Explorer 7.6 x64 - (.Missler Software.) [HKLM][64Bits] -- {D671710D-7799-45FB-B5C2-F8E129038FD6}
O42 - Logiciel: TopSolid'Quote 7.6 x64 - (.Missler Software.) [HKLM][64Bits] -- {1F4C181E-6D86-4D7D-A302-5C84CAB10E92}
O42 - Logiciel: TopSolid'Update x64 - (.Missler Software.) [HKLM][64Bits] -- {213BF6F0-AC65-4D33-A9B6-0BF7C0CE5776}
O42 - Logiciel: TopSolid'Viewer 7.6 x64 - (.Missler Software.) [HKLM][64Bits] -- {7E0EA0AC-FF4F-4EE0-8821-4B5145154944}
O42 - Logiciel: VLC media player 2.0.6 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player  =>.VideoLAN
O42 - Logiciel: Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 - (.Microsoft Corporation.) [HKLM][64Bits] -- {6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357
O42 - Logiciel: Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 - (.Microsoft Corporation.) [HKLM][64Bits] -- {8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357
O42 - Logiciel: Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 - (.Microsoft Corporation.) [HKLM][64Bits] -- {C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357
O42 - Logiciel: Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 - (.Microsoft Corporation.) [HKLM][64Bits] -- {F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357
O42 - Logiciel: Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 - (.Microsoft Corporation.) [HKLM][64Bits] -- {04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357
O42 - Logiciel: Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 - (.Microsoft Corporation.) [HKLM][64Bits] -- {14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357
O42 - Logiciel: Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 - (.Microsoft Corporation.) [HKLM][64Bits] -- {4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357
O42 - Logiciel: Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 - (.Microsoft Corporation.) [HKLM][64Bits] -- {B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357
O42 - Logiciel: Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {D60023FA-3DF1-4537-93DD-13024CC4E366}
O42 - Logiciel: WPT Redistributables - (.Microsoft.) [HKLM][64Bits] -- {A5D42D71-4036-5F88-5085-657C9DF9F1DD}
O42 - Logiciel: WPTx64 - (.Microsoft.) [HKLM][64Bits] -- {986EABFC-92F6-CECD-9E5A-B13CAC40BB1D}
O42 - Logiciel: WampServer 2.2 - (.Hervé Leclerc (HeL).) [HKLM][64Bits] -- WampServer 2_is1
O42 - Logiciel: Windows App Certification Kit Native Components - (.Microsoft Corporation.) [HKLM][64Bits] -- {3FA063D7-EDC1-AFA8-54AF-0563C7DEE070}
O42 - Logiciel: Windows App Certification Kit x64 - (.Microsoft Corporation.) [HKLM][64Bits] -- {02213A81-CB13-7262-5ABE-1FFA2C75559F}
O42 - Logiciel: Windows Software Development Kit - (.Microsoft Corporation.) [HKLM][64Bits] -- {363a2c1e-637f-45ce-933b-5a5463efd945}
O42 - Logiciel: Windows Software Development Kit - (.Microsoft Corporation.) [HKLM][64Bits] -- {60D5EF2A-4E0C-2C30-38F6-59C26E134F4A}
O42 - Logiciel: Windows Software Development Kit DirectX x64 Remote - (.Microsoft Corporation.) [HKLM][64Bits] -- {5FB4C443-6BD6-1514-2717-3827D65AE6FB}
O42 - Logiciel: Windows Software Development Kit DirectX x86 Remote - (.Microsoft Corporation.) [HKLM][64Bits] -- {23176E97-26CB-C72A-19EB-BFB21AC1D15A}
O42 - Logiciel: Windows Software Development Kit EULA - (.Microsoft Corporations.) [HKLM][64Bits] -- {D4F102C5-EEA1-CAE1-8E67-1A7FCE27F673}
O42 - Logiciel: Windows Software Development Kit Redistributables - (.Microsoft Corporation.) [HKLM][64Bits] -- {512957F0-B211-C50A-C1FC-6867FC3348A1}
O42 - Logiciel: Windows Software Development Kit for Windows Store Apps - (.Microsoft Corporation.) [HKLM][64Bits] -- {D11F66FF-82B3-DDB8-1146-525370552BE1}
O42 - Logiciel: Windows Software Development Kit for Windows Store Apps DirectX x64 Remote - (.Microsoft Corporation.) [HKLM][64Bits] -- {27EF252D-800C-ED42-9904-459FE0046225}
O42 - Logiciel: Windows Software Development Kit for Windows Store Apps DirectX x86 Remote - (.Microsoft Corporation.) [HKLM][64Bits] -- {42F61556-29ED-8122-F39E-6F04EA5FF279}
~ Logic: 266 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\7-Zip]
[HKCU\Software\Adobe]
[HKCU\Software\Affinix]
[HKCU\Software\AppDataLow\Software\Autodesk]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow\Software\MarkAny]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Autodesk, Inc.]
[HKCU\Software\Autodesk]
[HKCU\Software\Boole & Partners]
[HKCU\Software\Borland]
[HKCU\Software\Canon]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Disc Soft]
[HKCU\Software\Dnldstr_Aggregator]
[HKCU\Software\Earth Resource Mapping]
[HKCU\Software\Git-Cheetah]
[HKCU\Software\GoforFiles] =>P2P.GoforFiles
[HKCU\Software\Google]
[HKCU\Software\Hilti Corp.]
[HKCU\Software\Hilti]
[HKCU\Software\Hugx]
[HKCU\Software\IBM]
[HKCU\Software\Intel]
[HKCU\Software\IvoSoft]
[HKCU\Software\JavaSoft]
[HKCU\Software\KONICA MINOLTA]
[HKCU\Software\Licenses]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\MCAFEE]
[HKCU\Software\Macromedia]
[HKCU\Software\MagicISO]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Mercury32]
[HKCU\Software\Missler Software]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Myfree Codec]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Oracle]
[HKCU\Software\PDF Split And Merge Basic]
[HKCU\Software\PDFCreator]
[HKCU\Software\PTC]
[HKCU\Software\Piriform]
[HKCU\Software\Pokki]
[HKCU\Software\Policies]
[HKCU\Software\PostgreSQL]
[HKCU\Software\Qtrax]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\SSPrint]
[HKCU\Software\SafeNet]
[HKCU\Software\Samsung]
[HKCU\Software\Skype]
[HKCU\Software\SoftwareOK.de]
[HKCU\Software\SolidWorks 2013]
[HKCU\Software\SolidWorks]
[HKCU\Software\Stardock]
[HKCU\Software\Synaptics]
[HKCU\Software\TeamViewer]
[HKCU\Software\The Document Foundation]
[HKCU\Software\TortoiseGit]
[HKCU\Software\Trend Micro]
[HKCU\Software\Trolltech]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VSRevoGroup]
[HKCU\Software\WebGear, Create Software, Stru.be, saller.NET]
[HKCU\Software\Webgear]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\ZiWu-Soft GmbH]
[HKCU\Software\dalesearch LTD] =>Hijacker.Dalesearch
[HKCU\Software\eDrawings]
[HKCU\Software\mozilla]
[HKCU\Software\pgAdmin III]
[HKLM\Software\7-Zip]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Autodesk]
[HKLM\Software\Canon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Dassault Systemes]
[HKLM\Software\Datafocus]
[HKLM\Software\EnigmaSoftwareGroup]
[HKLM\Software\EnterpriseDB]
[HKLM\Software\FLEXlm License Manager]
[HKLM\Software\FileZilla 3]
[HKLM\Software\GEAR Software]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\IvoSoft]
[HKLM\Software\JavaSoft]
[HKLM\Software\Kaydara]
[HKLM\Software\Khronos]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Missler Software]
[HKLM\Software\Mortice Kern Systems]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\OpenInfo3W]
[HKLM\Software\Oracle]
[HKLM\Software\PDF Split And Merge Basic]
[HKLM\Software\PTC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\PostgreSQL Global Development Group]
[HKLM\Software\PostgreSQL]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SAMSUNG]
[HKLM\Software\SONIX]
[HKLM\Software\SSPrint]
[HKLM\Software\Skype]
[HKLM\Software\SlikSvn]
[HKLM\Software\SolidWorks]
[HKLM\Software\Synaptics]
[HKLM\Software\Volatile]
[HKLM\Software\WIDCOMM_TEMP]
[HKLM\Software\Windows]
[HKLM\Software\Wow6432Node\ATI Technologies]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Agito]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\Autodesk]
[HKLM\Software\Wow6432Node\Boole & Partners]
[HKLM\Software\Wow6432Node\Borland]
[HKLM\Software\Wow6432Node\Canon]
[HKLM\Software\Wow6432Node\Caphyon]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Crystal Decisions]
[HKLM\Software\Wow6432Node\Datafocus]
[HKLM\Software\Wow6432Node\Disc Soft]
[HKLM\Software\Wow6432Node\EnterpriseDB]
[HKLM\Software\Wow6432Node\FileZilla 3]
[HKLM\Software\Wow6432Node\GoforFiles] =>P2P.GoforFiles
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\Gradient]
[HKLM\Software\Wow6432Node\Granta Design]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HKLM\Software\Wow6432Node\IBM]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\KONICA MINOLTA]
[HKLM\Software\Wow6432Node\Kaydara]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\LibreOffice]
[HKLM\Software\Wow6432Node\Licenses]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Macrovision]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\McAfee.com]
[HKLM\Software\Wow6432Node\Missler Software]
[HKLM\Software\Wow6432Node\Mortice Kern Systems]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\MySQL AB]
[HKLM\Software\Wow6432Node\Myfree Codec]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Openbravo]
[HKLM\Software\Wow6432Node\PDFCreator]
[HKLM\Software\Wow6432Node\PTC]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\PostgreSQL Global Development Group]
[HKLM\Software\Wow6432Node\PostgreSQL]
[HKLM\Software\Wow6432Node\Rainbow Technologies]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Safenet Sentinel]
[HKLM\Software\Wow6432Node\Samsung]
[HKLM\Software\Wow6432Node\SolidWorks]
[HKLM\Software\Wow6432Node\Stardock]
[HKLM\Software\Wow6432Node\TeamViewer]
[HKLM\Software\Wow6432Node\The Document Foundation]
[HKLM\Software\Wow6432Node\Uniblue]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\Windows]
[HKLM\Software\Wow6432Node\Wow6432Node]
[HKLM\Software\Wow6432Node\ZiWu-Soft GmbH]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node\mozilla]
[HKLM\Software\Wow6432Node]
[HKLM\Software\mozilla.org]
~ Key Software: 278 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 25/04/2013 - 00:45:12 - [120,785] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 21/05/2013 - 08:58:26 - [2,145] ----D C:\Program Files (x86)\AMD APP
O43 - CFD: 27/07/2013 - 17:02:21 - [2,316] ----D C:\Program Files (x86)\Apple Software Update  =>.Apple Inc
O43 - CFD: 01/05/2013 - 22:00:44 - [0,297] ----D C:\Program Files (x86)\Application Verifier
O43 - CFD: 27/04/2013 - 09:56:15 - [44,319] ----D C:\Program Files (x86)\Audacity
O43 - CFD: 02/06/2013 - 23:10:57 - [224,756] ----D C:\Program Files (x86)\Autodesk
O43 - CFD: 30/09/2013 - 17:03:21 - [4,890] ----D C:\Program Files (x86)\Boole & Partners
O43 - CFD: 26/04/2013 - 16:50:44 - [13,331] ----D C:\Program Files (x86)\Canon
O43 - CFD: 15/10/2013 - 09:54:44 - [-1322,185] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 15/05/2013 - 14:51:54 - [6,318] ----D C:\Program Files (x86)\Crystal Decisions
O43 - CFD: 02/05/2013 - 08:54:08 - [26,555] ----D C:\Program Files (x86)\DAEMON Tools Lite  =>.DT Soft Ltd
O43 - CFD: 24/04/2013 - 23:35:42 - [264,323] ----D C:\Program Files (x86)\Dassault Systemes
O43 - CFD: 24/04/2013 - 12:31:43 - [0,129] ----D C:\Program Files (x86)\DWG TrueView 2013
O43 - CFD: 04/05/2013 - 16:51:38 - [144,449] ----D C:\Program Files (x86)\EasyPHP-5.3.9
O43 - CFD: 04/05/2013 - 16:51:30 - [17,972] ----D C:\Program Files (x86)\EasyPHP-DevServer-13.1VC9
O43 - CFD: 26/04/2013 - 14:51:16 - [0,646] ----D C:\Program Files (x86)\FARO
O43 - CFD: 26/05/2013 - 10:17:45 - [17,288] ----D C:\Program Files (x86)\FileZilla FTP Client
O43 - CFD: 01/05/2013 - 15:44:13 - [93,080] ----D C:\Program Files (x86)\fischer
O43 - CFD: 26/04/2013 - 15:08:58 - [16,072] ----D C:\Program Files (x86)\FreeMind
O43 - CFD: 01/05/2013 - 21:58:29 - [220,206] ----D C:\Program Files (x86)\Git
O43 - CFD: 19/05/2013 - 22:43:50 - [485,155] ----D C:\Program Files (x86)\Google
O43 - CFD: 08/10/2013 - 09:54:58 - [29,756] ----D C:\Program Files (x86)\HDClone 4.3 Free Edition
O43 - CFD: 11/10/2013 - 11:37:44 - [2,358] ----D C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 13/05/2013 - 08:30:32 - [195,048] ----D C:\Program Files (x86)\Hilti
O43 - CFD: 01/05/2013 - 10:21:08 - [192,425] ----D C:\Program Files (x86)\IBM
O43 - CFD: 19/05/2013 - 19:27:59 - [3,006] ----D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 06/10/2013 - 18:49:25 - [125,926] ----D C:\Program Files (x86)\Intel
O43 - CFD: 09/10/2013 - 08:38:27 - [4,829] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 08/10/2013 - 09:42:43 - [5,386] ----D C:\Program Files (x86)\IObit
O43 - CFD: 28/07/2013 - 09:43:11 - [123,379] ----D C:\Program Files (x86)\Java
O43 - CFD: 15/08/2013 - 12:04:11 - [5,440] ----D C:\Program Files (x86)\KeePass Password Safe 2
O43 - CFD: 26/07/2013 - 13:03:06 - [96,165] ----D C:\Program Files (x86)\KONICA MINOLTA
O43 - CFD: 13/07/2013 - 22:53:25 - [319,747] ----D C:\Program Files (x86)\LibreOffice 3.6
O43 - CFD: 26/04/2013 - 19:17:21 - [2,982] ----D C:\Program Files (x86)\MagicISO
O43 - CFD: 11/07/2013 - 08:29:16 - [45,314] ----D C:\Program Files (x86)\MALODOS
O43 - CFD: 29/05/2013 - 22:14:00 - [0] ----D C:\Program Files (x86)\MediaFire Express
O43 - CFD: 26/07/2013 - 12:55:59 - [30,420] ----D C:\Program Files (x86)\MFP Utility
O43 - CFD: 26/04/2013 - 15:16:16 - [38,002] ----D C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 09/06/2013 - 07:49:49 - [959,902] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 01/05/2013 - 22:00:49 - [155,220] ----D C:\Program Files (x86)\Microsoft SDKs
O43 - CFD: 09/10/2013 - 08:39:53 - [40,851] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 21/05/2013 - 12:09:46 - [82,921] ----D C:\Program Files (x86)\Microsoft SQL Server
O43 - CFD: 11/05/2013 - 11:01:24 - [4,393] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 26/04/2013 - 15:18:26 - [0,757] ----D C:\Program Files (x86)\Microsoft Sync Framework
O43 - CFD: 25/04/2013 - 00:53:38 - [0,620] ----D C:\Program Files (x86)\Microsoft Synchronization Services
O43 - CFD: 11/05/2013 - 11:02:12 - [547,411] ----D C:\Program Files (x86)\Microsoft Visual Studio 10.0
O43 - CFD: 26/04/2013 - 15:17:10 - [1,314] ----D C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 06/05/2013 - 22:46:05 - [0,201] ----D C:\Program Files (x86)\Microsoft Visual Studio 9.0
O43 - CFD: 24/04/2013 - 12:31:20 - [0,934] ----D C:\Program Files (x86)\Microsoft WSE
O43 - CFD: 04/05/2013 - 12:01:22 - [10,070] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 26/04/2013 - 20:53:12 - [21,050] ----D C:\Program Files (x86)\MKS Toolkit
O43 - CFD: 01/10/2013 - 09:55:33 - [48,682] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 02/10/2013 - 21:31:04 - [0,216] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 09/08/2013 - 10:12:25 - [43,416] ----D C:\Program Files (x86)\Mozilla Thunderbird
O43 - CFD: 04/05/2013 - 11:55:53 - [0,860] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 19/05/2013 - 22:22:50 - [6,109] ----D C:\Program Files (x86)\MSECache
O43 - CFD: 05/05/2013 - 06:04:24 - [0,651] ----D C:\Program Files (x86)\MySQL
O43 - CFD: 26/05/2013 - 09:04:58 - [0,614] ----D C:\Program Files (x86)\NETKOM
O43 - CFD: 03/10/2013 - 08:16:24 - [14,685] ----D C:\Program Files (x86)\Notepad++
O43 - CFD: 07/10/2013 - 22:13:36 - [23,325] ----D C:\Program Files (x86)\openbravopos-2.30.2
O43 - CFD: 26/04/2013 - 14:35:00 - [29,222] ----D C:\Program Files (x86)\PDFCreator
O43 - CFD: 16/07/2013 - 09:18:03 - [94,947] ----D C:\Program Files (x86)\PEM
O43 - CFD: 05/10/2013 - 21:24:35 - [131,531] ----D C:\Program Files (x86)\PostgreSQL
O43 - CFD: 24/04/2013 - 13:52:43 - [268,269] ----D C:\Program Files (x86)\PTC
O43 - CFD: 24/04/2013 - 21:15:08 - [-1907,004] ----D C:\Program Files (x86)\ptc_custom
O43 - CFD: 17/05/2013 - 17:16:09 - [0,707] ----D C:\Program Files (x86)\Q-Dir
O43 - CFD: 27/07/2013 - 17:03:46 - [73,545] ----D C:\Program Files (x86)\QuickTime
O43 - CFD: 24/04/2013 - 12:23:29 - [60,584] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 30/09/2013 - 16:43:59 - [0,002] ----D C:\Program Files (x86)\RozetUtil
O43 - CFD: 11/10/2013 - 09:47:49 - [0,840] ----D C:\Program Files (x86)\SafeNet Sentinel
O43 - CFD: 07/06/2013 - 22:50:35 - [254,050] ----D C:\Program Files (x86)\Samsung
O43 - CFD: 25/09/2013 - 14:57:42 - [7,116] ----D C:\Program Files (x86)\Serena Software Inc
O43 - CFD: 13/05/2013 - 17:16:54 - [0] ----D C:\Program Files (x86)\SolidWorks Corp
O43 - CFD: 29/06/2013 - 19:47:04 - [37,508] ----D C:\Program Files (x86)\TeamViewer
O43 - CFD: 15/05/2013 - 23:26:27 - [0] ----D C:\Program Files (x86)\Temp
O43 - CFD: 03/09/2013 - 17:52:34 - [0,370] ----D C:\Program Files (x86)\Trend Micro
O43 - CFD: 27/04/2013 - 14:43:08 - [101,897] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 24/04/2013 - 21:39:16 - [6,523] ----D C:\Program Files (x86)\VS Revo Group
O43 - CFD: 20/05/2013 - 14:46:57 - [3,209] ----D C:\Program Files (x86)\WebGear
O43 - CFD: 18/08/2013 - 22:52:46 - [1,038] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 01/05/2013 - 21:59:04 - [594,796] ----D C:\Program Files (x86)\Windows Kits
O43 - CFD: 26/07/2012 - 12:08:59 - [5,466] ----D C:\Program Files (x86)\Windows Mail  =>.Microsoft Corporation
O43 - CFD: 26/04/2013 - 10:29:37 - [3,494] ----D C:\Program Files (x86)\Windows Media Player  =>.Microsoft Corporation
O43 - CFD: 26/07/2012 - 10:13:01 - [0,209] ----D C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 26/07/2012 - 10:12:59 - [7,243] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 21/06/2013 - 07:38:51 - [5,226] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 26/07/2012 - 10:13:01 - [0,209] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 26/07/2012 - 10:12:59 - [0] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 26/07/2013 - 14:52:47 - [1,395] ----D C:\Program Files (x86)\XMIND 2008
O43 - CFD: 08/05/2013 - 22:18:45 - [38,646] ----D C:\Program Files (x86)\Zend
O43 - CFD: 15/10/2013 - 10:47:46 - [16,995] ----D C:\Program Files (x86)\ZHPDiag  =>.Nicolas Coolman
O43 - CFD: 25/04/2013 - 00:45:19 - [6,289] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 27/07/2013 - 17:02:29 - [63,895] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 02/06/2013 - 23:30:40 - [1421,648] ----D C:\Program Files (x86)\Common Files\Autodesk Shared
O43 - CFD: 15/05/2013 - 14:51:54 - [31,031] ----D C:\Program Files (x86)\Common Files\Crystal Decisions
O43 - CFD: 26/04/2013 - 15:18:46 - [0,201] ----D C:\Program Files (x86)\Common Files\Designer
O43 - CFD: 13/05/2013 - 17:29:22 - [1,636] ----D C:\Program Files (x86)\Common Files\Gestionnaire d'installation SolidWorks
O43 - CFD: 13/05/2013 - 08:30:33 - [3,373] ----D C:\Program Files (x86)\Common Files\Hilti
O43 - CFD: 21/05/2013 - 08:58:42 - [13,419] ----D C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 28/07/2013 - 09:43:26 - [1,189] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 13/05/2013 - 15:54:32 - [0,997] ----D C:\Program Files (x86)\Common Files\Macrovision Shared
O43 - CFD: 04/05/2013 - 11:55:53 - [0] ----D C:\Program Files (x86)\Common Files\Merge Modules
O43 - CFD: 01/05/2013 - 21:59:04 - [0,002] ----D C:\Program Files (x86)\Common Files\Microsoft
O43 - CFD: 11/09/2013 - 16:32:29 - [265,739] ----D C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 26/04/2013 - 14:30:55 - [896,759] ----D C:\Program Files (x86)\Common Files\Missler Software
O43 - CFD: 24/04/2013 - 13:52:48 - [0,344] ----D C:\Program Files (x86)\Common Files\PTC
O43 - CFD: 11/10/2013 - 09:47:49 - [4,668] ----D C:\Program Files (x86)\Common Files\SafeNet Sentinel
O43 - CFD: 26/07/2012 - 10:13:01 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 13/05/2013 - 17:16:53 - [0,076] ----D C:\Program Files (x86)\Common Files\SolidWorks Shared
O43 - CFD: 29/04/2013 - 13:16:43 - [13,505] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 06/10/2013 - 11:54:30 - [44,064] ----D C:\Program Files (x86)\Common Files\Wise Installation Wizard
O43 - CFD: 01/05/2013 - 15:48:30 - [4,977] ----D C:\Program Files (x86)\Common Files\XPressUpdate
O43 - CFD: 20/05/2013 - 07:28:28 - [0,007] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 29/04/2013 - 07:46:11 - [147,185] ----D C:\ProgramData\Adobe
O43 - CFD: 18/05/2013 - 08:19:30 - [43,233] ----D C:\ProgramData\Apple
O43 - CFD: 27/07/2013 - 17:03:28 - [26,332] ----D C:\ProgramData\Apple Computer
O43 - CFD: 26/07/2012 - 09:22:08 - [0] -SH-D C:\ProgramData\Application Data
O43 - CFD: 02/06/2013 - 23:06:54 - [1766,576] ----D C:\ProgramData\Autodesk
O43 - CFD: 30/09/2013 - 17:03:24 - [0,002] ----D C:\ProgramData\Boole & Partners
O43 - CFD: 24/04/2013 - 08:53:39 - [0] -SH-D C:\ProgramData\Bureau
O43 - CFD: 03/05/2013 - 00:02:52 - [0,002] ----D C:\ProgramData\DAEMON Tools Lite  =>.DT Soft Ltd
O43 - CFD: 26/04/2013 - 16:26:11 - [0,005] ----D C:\ProgramData\DassaultSystemes
O43 - CFD: 26/07/2012 - 09:22:08 - [0] -SH-D C:\ProgramData\Desktop
O43 - CFD: 26/07/2012 - 09:22:08 - [0] -SH-D C:\ProgramData\Documents
O43 - CFD: 17/09/2013 - 08:36:20 - [0,173] ----D C:\ProgramData\FLEXnet
O43 - CFD: 11/10/2013 - 11:37:35 - [1,586] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 13/05/2013 - 08:28:49 - [0,024] ----D C:\ProgramData\HILTI
O43 - CFD: 04/06/2013 - 23:00:57 - [0,021] ----D C:\ProgramData\IBM
O43 - CFD: 08/10/2013 - 09:42:45 - [0] ----D C:\ProgramData\IObit
O43 - CFD: 26/07/2013 - 13:03:26 - [0,026] ----D C:\ProgramData\KONICA MINOLTA
O43 - CFD: 26/04/2013 - 20:26:25 - [0,001] ----D C:\ProgramData\Macrovision
O43 - CFD: 06/10/2013 - 14:10:11 - [0,001] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 26/04/2013 - 21:54:07 - [0] ----D C:\ProgramData\McAfee
O43 - CFD: 24/04/2013 - 08:53:39 - [0] -SH-D C:\ProgramData\Menu Démarrer
O43 - CFD: 22/05/2013 - 09:07:26 - [48,388] -S--D C:\ProgramData\Microsoft
O43 - CFD: 09/10/2013 - 08:35:58 - [0,062] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 26/05/2013 - 12:23:09 - [581,966] ----D C:\ProgramData\Missler Software
O43 - CFD: 24/04/2013 - 08:53:39 - [0] -SH-D C:\ProgramData\Modèles
O43 - CFD: 26/04/2013 - 16:16:12 - [0,036] ----D C:\ProgramData\Mozilla
O43 - CFD: 05/05/2013 - 06:03:32 - [1133,220] ----D C:\ProgramData\MySQL
O43 - CFD: 01/05/2013 - 21:59:00 - [371,282] ----D C:\ProgramData\Package Cache
O43 - CFD: 01/05/2013 - 15:44:47 - [0,143] ----D C:\ProgramData\PixelPlanet
O43 - CFD: 24/04/2013 - 11:52:18 - [0,039] ----D C:\ProgramData\PRICache
O43 - CFD: 24/04/2013 - 11:45:56 - [0,001] ----D C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 17/05/2013 - 15:03:42 - [0,193] ----D C:\ProgramData\SafeNet Sentinel
O43 - CFD: 07/06/2013 - 22:50:50 - [11,152] ----D C:\ProgramData\Samsung
O43 - CFD: 05/05/2013 - 05:36:00 - [0] ----D C:\ProgramData\Software
O43 - CFD: 24/04/2013 - 22:47:38 - [0] ----D C:\ProgramData\Stardock
O43 - CFD: 26/07/2012 - 09:22:08 - [0] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 26/04/2013 - 15:24:50 - [0] ----D C:\ProgramData\Sun
O43 - CFD: 07/05/2013 - 08:33:16 - [0,177] ----D C:\ProgramData\Synaptics
O43 - CFD: 05/10/2013 - 19:27:12 - [0] ---AD C:\ProgramData\TEMP
O43 - CFD: 26/07/2012 - 09:22:08 - [0] -SH-D C:\ProgramData\Templates
O43 - CFD: 21/05/2013 - 16:40:44 - [19,705] ----D C:\ProgramData\VS
O43 - CFD: 01/05/2013 - 22:01:20 - [1,051] ----D C:\ProgramData\Windows App Certification Kit
O43 - CFD: 01/05/2013 - 10:11:59 - [0] ----D C:\ProgramData\Zend
O43 - CFD: 25/04/2013 - 21:47:58 - [2,286] ----D C:\Users\Patrick\AppData\Roaming\Adobe
O43 - CFD: 18/05/2013 - 08:24:16 - [38,657] ----D C:\Users\Patrick\AppData\Roaming\Apple Computer
O43 - CFD: 26/07/2013 - 12:39:28 - [9,154] ----D C:\Users\Patrick\AppData\Roaming\Autodesk
O43 - CFD: 02/05/2013 - 08:03:16 - [1,437] ----D C:\Users\Patrick\AppData\Roaming\cadenas
O43 - CFD: 02/06/2013 - 17:40:55 - [1,245] ----D C:\Users\Patrick\AppData\Roaming\DAEMON Tools Lite  =>.DT Soft Ltd
O43 - CFD: 26/04/2013 - 14:35:47 - [0,755] ----D C:\Users\Patrick\AppData\Roaming\DassaultSystemes
O43 - CFD: 13/05/2013 - 16:38:00 - [0] ----D C:\Users\Patrick\AppData\Roaming\EDrawings
O43 - CFD: 02/06/2013 - 17:40:52 - [0,019] ----D C:\Users\Patrick\AppData\Roaming\FileZilla
O43 - CFD: 18/09/2013 - 09:50:44 - [0,004] ----D C:\Users\Patrick\AppData\Roaming\FocusCAD DWG to Image Converter
O43 - CFD: 12/05/2013 - 23:23:19 - [0,035] ----D C:\Users\Patrick\AppData\Roaming\FreeFileSync
O43 - CFD: 26/07/2013 - 15:21:44 - [0,042] ----D C:\Users\Patrick\AppData\Roaming\Freeplane
O43 - CFD: 20/05/2013 - 14:55:07 - [0,030] ----D C:\Users\Patrick\AppData\Roaming\GoContactSyncMOD
O43 - CFD: 11/10/2013 - 11:22:23 - [0] ----D C:\Users\Patrick\AppData\Roaming\Hewlett-Packard
O43 - CFD: 13/05/2013 - 17:04:45 - [0,142] ----D C:\Users\Patrick\AppData\Roaming\HILTI
O43 - CFD: 11/10/2013 - 11:37:45 - [0,139] ----D C:\Users\Patrick\AppData\Roaming\hpqLog
O43 - CFD: 12/08/2013 - 00:21:06 - [0] ----D C:\Users\Patrick\AppData\Roaming\Identities
O43 - CFD: 10/10/2013 - 08:17:04 - [0,004] ----D C:\Users\Patrick\AppData\Roaming\KeePass
O43 - CFD: 13/05/2013 - 16:45:52 - [0] ----D C:\Users\Patrick\AppData\Roaming\Kits
O43 - CFD: 26/07/2013 - 13:10:22 - [0,001] ----D C:\Users\Patrick\AppData\Roaming\KONICA MINOLTA
O43 - CFD: 15/07/2013 - 13:16:43 - [2,320] ----D C:\Users\Patrick\AppData\Roaming\LibreOffice
O43 - CFD: 13/05/2013 - 16:46:51 - [0,066] ----D C:\Users\Patrick\AppData\Roaming\Luxology
O43 - CFD: 24/04/2013 - 12:07:31 - [0,001] ----D C:\Users\Patrick\AppData\Roaming\Macromedia
O43 - CFD: 06/10/2013 - 14:10:31 - [49,807] ----D C:\Users\Patrick\AppData\Roaming\Malwarebytes
O43 - CFD: 15/07/2013 - 11:50:16 - [20,785] -S--D C:\Users\Patrick\AppData\Roaming\Microsoft
O43 - CFD: 26/05/2013 - 12:23:09 - [0,142] ----D C:\Users\Patrick\AppData\Roaming\Missler Software
O43 - CFD: 26/07/2013 - 14:24:43 - [44,696] ----D C:\Users\Patrick\AppData\Roaming\Mozilla
O43 - CFD: 04/05/2013 - 11:33:12 - [0,171] ----D C:\Users\Patrick\AppData\Roaming\MySQL
O43 - CFD: 03/10/2013 - 08:16:26 - [0,456] ----D C:\Users\Patrick\AppData\Roaming\Notepad++
O43 - CFD: 05/10/2013 - 16:55:29 - [39,092] ----D C:\Users\Patrick\AppData\Roaming\Nuxeo
O43 - CFD: 04/05/2013 - 11:49:27 - [0,001] ----D C:\Users\Patrick\AppData\Roaming\Oracle
O43 - CFD: 01/05/2013 - 15:47:43 - [0,106] ----D C:\Users\Patrick\AppData\Roaming\PixelPlanet
O43 - CFD: 05/05/2013 - 05:29:52 - [0,016] ----D C:\Users\Patrick\AppData\Roaming\player
O43 - CFD: 26/04/2013 - 14:36:51 - [0,056] ----D C:\Users\Patrick\AppData\Roaming\PlusWinks
O43 - CFD: 13/07/2013 - 22:59:12 - [0] ----D C:\Users\Patrick\AppData\Roaming\postgresql
O43 - CFD: 26/04/2013 - 20:58:34 - [0,003] ----D C:\Users\Patrick\AppData\Roaming\ptc
O43 - CFD: 17/05/2013 - 18:46:09 - [0,002] ----D C:\Users\Patrick\AppData\Roaming\Q-Dir
O43 - CFD: 19/05/2013 - 19:33:26 - [18,880] ----D C:\Users\Patrick\AppData\Roaming\Samsung
O43 - CFD: 15/05/2013 - 23:21:39 - [0,138] ----D C:\Users\Patrick\AppData\Roaming\Scribus
O43 - CFD: 26/04/2013 - 15:45:41 - [11,193] ----D C:\Users\Patrick\AppData\Roaming\SolidWorks
O43 - CFD: 26/04/2013 - 10:34:53 - [0] ----D C:\Users\Patrick\AppData\Roaming\Synaptics
O43 - CFD: 30/06/2013 - 09:41:08 - [0,975] ----D C:\Users\Patrick\AppData\Roaming\TeamViewer
O43 - CFD: 24/04/2013 - 21:45:25 - [0] ----D C:\Users\Patrick\AppData\Roaming\TFP
O43 - CFD: 26/04/2013 - 17:31:04 - [355,913] ----D C:\Users\Patrick\AppData\Roaming\Thunderbird
O43 - CFD: 15/10/2013 - 10:18:21 - [0,080] ----D C:\Users\Patrick\AppData\Roaming\vlc
O43 - CFD: 26/07/2013 - 14:12:36 - [1,019] ----D C:\Users\Patrick\AppData\Roaming\XMIND
O43 - CFD: 15/10/2013 - 10:51:33 - [0,507] ----D C:\Users\Patrick\AppData\Roaming\ZHP  =>.Nicolas Coolman
O43 - CFD: 01/05/2013 - 15:45:27 - [0,033] ----D C:\Users\Patrick\AppData\Roaming\ZiWu-Soft
O43 - CFD: 19/05/2013 - 11:54:59 - [0] ----D C:\Users\Patrick\AppData\Local\4Videosoft Studio
O43 - CFD: 27/07/2013 - 17:02:25 - [18,080] ----D C:\Users\Patrick\AppData\Local\Adobe
O43 - CFD: 27/04/2013 - 09:24:18 - [0] ----D C:\Users\Patrick\AppData\Local\Apple
O43 - CFD: 18/05/2013 - 08:20:37 - [6,228] ----D C:\Users\Patrick\AppData\Local\Apple Computer
O43 - CFD: 24/04/2013 - 09:02:17 - [0] -SH-D C:\Users\Patrick\AppData\Local\Application Data
O43 - CFD: 15/07/2013 - 13:28:53 - [0] ----D C:\Users\Patrick\AppData\Local\Apps
O43 - CFD: 04/05/2013 - 02:41:35 - [0,741] ----D C:\Users\Patrick\AppData\Local\assembly
O43 - CFD: 30/04/2013 - 22:29:56 - [134,850] ----D C:\Users\Patrick\AppData\Local\Autodesk
O43 - CFD: 24/04/2013 - 12:55:15 - [0,017] ----D C:\Users\Patrick\AppData\Local\Autodesk,_Inc
O43 - CFD: 06/10/2013 - 11:32:39 - [0,148] ----D C:\Users\Patrick\AppData\Local\avgchrome
O43 - CFD: 28/06/2013 - 14:44:48 - [2,354] ----D C:\Users\Patrick\AppData\Local\cache
O43 - CFD: 24/04/2013 - 23:10:06 - [0] ----D C:\Users\Patrick\AppData\Local\CrashRpt
O43 - CFD: 25/04/2013 - 06:27:17 - [159,355] ----D C:\Users\Patrick\AppData\Local\DassaultSystemes
O43 - CFD: 28/09/2013 - 08:58:09 - [3,500] ----D C:\Users\Patrick\AppData\Local\Diagnostics
O43 - CFD: 11/10/2013 - 09:37:33 - [688,352] ----D C:\Users\Patrick\AppData\Local\Downloaded Installations
O43 - CFD: 09/10/2013 - 09:11:47 - [0,379] ----D C:\Users\Patrick\AppData\Local\ElevatedDiagnostics
O43 - CFD: 16/05/2013 - 16:48:30 - [0] ----D C:\Users\Patrick\AppData\Local\FreeOCR
O43 - CFD: 19/05/2013 - 22:45:39 - [62,485] ----D C:\Users\Patrick\AppData\Local\Google
O43 - CFD: 24/04/2013 - 12:53:04 - [0,522] ----D C:\Users\Patrick\AppData\Local\Granta Design
O43 - CFD: 30/04/2013 - 13:48:33 - [0] ----D C:\Users\Patrick\AppData\Local\GrantaGateway
O43 - CFD: 24/04/2013 - 09:02:17 - [0] -SH-D C:\Users\Patrick\AppData\Local\Historique
O43 - CFD: 31/05/2013 - 15:45:35 - [0,004] ----D C:\Users\Patrick\AppData\Local\KONICA MINOLTA
O43 - CFD: 26/04/2013 - 21:56:09 - [0] ----D C:\Users\Patrick\AppData\Local\Macromedia
O43 - CFD: 09/10/2013 - 08:57:05 - [1578,793] ----D C:\Users\Patrick\AppData\Local\Microsoft
O43 - CFD: 09/08/2013 - 13:13:38 - [0,283] ----D C:\Users\Patrick\AppData\Local\Microsoft Help
O43 - CFD: 04/05/2013 - 12:33:02 - [0,003] ----D C:\Users\Patrick\AppData\Local\Microsoft_Corporation
O43 - CFD: 01/10/2013 - 20:35:13 - [173,120] ----D C:\Users\Patrick\AppData\Local\Mozilla
O43 - CFD: 28/05/2013 - 20:07:48 - [71,557] ----D C:\Users\Patrick\AppData\Local\Packages
O43 - CFD: 02/05/2013 - 11:41:01 - [0,367] ----D C:\Users\Patrick\AppData\Local\Pokki
O43 - CFD: 24/04/2013 - 23:09:43 - [0] ----D C:\Users\Patrick\AppData\Local\Programs
O43 - CFD: 19/05/2013 - 19:33:33 - [0,016] ----D C:\Users\Patrick\AppData\Local\Samsung
O43 - CFD: 05/05/2013 - 05:26:47 - [0] ----D C:\Users\Patrick\AppData\Local\Software
O43 - CFD: 26/04/2013 - 14:35:28 - [0,001] ----D C:\Users\Patrick\AppData\Local\Stimulsoft
O43 - CFD: 15/10/2013 - 10:51:52 - [1,200] ----D C:\Users\Patrick\AppData\Local\Temp
O43 - CFD: 24/04/2013 - 09:02:17 - [0] -SH-D C:\Users\Patrick\AppData\Local\Temporary Internet Files
O43 - CFD: 15/05/2013 - 10:26:07 - [17,221] ----D C:\Users\Patrick\AppData\Local\Thunderbird
O43 - CFD: 26/07/2013 - 13:08:16 - [0,289] ----D C:\Users\Patrick\AppData\Local\VirtualStore
O43 - CFD: 24/04/2013 - 09:17:10 - [0] ----D C:\Users\Patrick\AppData\Local\Western Digital
O43 - CFD: 01/05/2013 - 15:45:29 - [0,338] ----D C:\Users\Patrick\AppData\Local\ZiWu-Soft
O43 - CFD: 26/07/2012 - 10:13:00 - [0,004] R---D C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 26/07/2013 - 12:40:05 - [0,002] R---D C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 15/10/2013 - 10:23:07 - [0] R---D C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 11/05/2013 - 18:29:16 - [0,001] ----D C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk
O43 - CFD: 20/05/2013 - 14:46:58 - [0,006] ----D C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GO Contact Sync Mod
O43 - CFD: 03/09/2013 - 17:52:35 - [0,003] ----D C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
O43 - CFD: 26/04/2013 - 19:17:19 - [0] ----D C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MagicISO
O43 - CFD: 26/04/2013 - 16:21:55 - [0] ----D C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
O43 - CFD: 27/07/2013 - 08:15:24 - [0,005] ----D C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
O43 - CFD: 15/10/2013 - 10:23:07 - [0,001] R---D C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 26/07/2012 - 10:13:00 - [0,005] R---D C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
~ Program Folder: 253 Scanned in 04mn 28s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 06/10/2013 - 10:55:17 ---A- . (...) -- C:\autoexec.bat   [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 06/10/2013 - 17:50:53 ---A- . (...) -- C:\Windows\setuperr.log   [0]
O44 - LFC:[MD5.88F65E51283914F3A11A961E83683BAE] - 06/10/2013 - 20:41:25 ---A- . (...) -- C:\Windows\PFRO.log   [51704]
O44 - LFC:[MD5.D0A652D5BA6F9E2058045DC8AC851D06] - 07/10/2013 - 21:05:53 ---A- . (...) -- C:\Windows\ODBCINST.INI   [413]
O44 - LFC:[MD5.20E0FC5F724B85CA09C82D2776E84C5E] - 09/10/2013 - 06:54:27 ---A- . (.Microsoft Corporation - WinFX OpenType/CFF Rasterizer.) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll   [124112]
O44 - LFC:[MD5.20E0FC5F724B85CA09C82D2776E84C5E] - 09/10/2013 - 06:54:27 ---A- . (.Microsoft Corporation - WinFX OpenType/CFF Rasterizer.) -- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll   [124112]
O44 - LFC:[MD5.F8C2A832DF9403F5EA8080CBDBDA95FB] - 09/10/2013 - 06:54:33 ---A- . (.Microsoft Corporation - Default Hub Driver for USB.) -- C:\Windows\System32\Drivers\usbhub.sys   [623448]
O44 - LFC:[MD5.B24FDEB1B18496F1B463782235AA3AF1] - 09/10/2013 - 06:54:33 ---A- . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\Windows\System32\Drivers\usbehci.sys   [79192]
O44 - LFC:[MD5.7CB7E04259F323D051A10515B8863564] - 09/10/2013 - 06:54:33 ---A- . (.Microsoft Corporation - Pilote de port USB 1.1 & 2.0.) -- C:\Windows\System32\Drivers\usbport.sys   [498008]
O44 - LFC:[MD5.1ABF657259DB57F7E5558E4DF1357C0C] - 09/10/2013 - 06:54:33 ---A- . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\Windows\System32\Drivers\usbuhci.sys   [32256]
O44 - LFC:[MD5.C976C4306F9AE133D6BBD47FDFC3BF92] - 09/10/2013 - 06:54:33 ---A- . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\Windows\System32\Drivers\usbccgp.sys   [120832]
O44 - LFC:[MD5.9F83642C3709D1A4DD49EEE9F48F839D] - 09/10/2013 - 06:54:33 ---A- . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\Windows\System32\Drivers\usbd.sys   [21848]
O44 - LFC:[MD5.061BA3EE0D2BE17944990544008CF190] - 09/10/2013 - 06:54:34 ---A- . (.Microsoft Corporation - USB Controller Extension.) -- C:\Windows\System32\Drivers\UCX01000.SYS   [213336]
O44 - LFC:[MD5.8DC398D7B8E02C929A2096E74A170970] - 09/10/2013 - 06:54:34 ---A- . (.Microsoft Corporation - USB XHCI Driver.) -- C:\Windows\System32\Drivers\USBXHCI.SYS   [337752]
O44 - LFC:[MD5.B1E910DDC08A8536116214326124903C] - 09/10/2013 - 06:54:34 ---A- . (.Microsoft Corporation - USB3 HUB Driver.) -- C:\Windows\System32\Drivers\USBHUB3.SYS   [447320]
O44 - LFC:[MD5.86665E9EBE033CCF6A6041A025F56E6B] - 09/10/2013 - 06:54:38 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\SysNative\win32k.sys   [4040192]
O44 - LFC:[MD5.86665E9EBE033CCF6A6041A025F56E6B] - 09/10/2013 - 06:54:38 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\System32\win32k.sys   [4040192]
O44 - LFC:[MD5.469A5DCF1E51DC9AF03CE1B3B4360DEE] - 09/10/2013 - 06:54:39 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\SysNative\atmlib.dll   [46080]
O44 - LFC:[MD5.469A5DCF1E51DC9AF03CE1B3B4360DEE] - 09/10/2013 - 06:54:39 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\System32\atmlib.dll   [46080]
O44 - LFC:[MD5.FD16BDF463EF68ADD48026ACCEA100B8] - 09/10/2013 - 06:54:39 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\SysNative\atmfd.dll   [362496]
O44 - LFC:[MD5.FD16BDF463EF68ADD48026ACCEA100B8] - 09/10/2013 - 06:54:39 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\System32\atmfd.dll   [362496]
O44 - LFC:[MD5.427B6DB8C05A5A977E8C3525370A2595] - 09/10/2013 - 06:54:46 ---A- . (.Microsoft Corporation - USB Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\usbcir.sys   [99328]
O44 - LFC:[MD5.9EF7C01D3ACCBC243B5CB1A95865B2FF] - 09/10/2013 - 06:54:46 ---A- . (.Microsoft Corporation - USB Video Class Driver.) -- C:\Windows\System32\Drivers\usbvideo.sys   [210560]
O44 - LFC:[MD5.2C2A9A4D53DC90A5195BB51F0A4B1E21] - 09/10/2013 - 06:54:47 ---A- . (.Microsoft Corporation - Hid Class Library.) -- C:\Windows\System32\Drivers\hidclass.sys   [83968]
O44 - LFC:[MD5.346DEF1A9DB0B4133CE0FA38AAF565C0] - 09/10/2013 - 06:54:47 ---A- . (.Microsoft Corporation - Hid Parsing Library.) -- C:\Windows\System32\Drivers\hidparse.sys   [32768]
O44 - LFC:[MD5.11876881E87BACEBBCEE41A037614D48] - 09/10/2013 - 06:54:47 ---A- . (.Microsoft Corporation - Kernel Mode Driver Framework Loader.) -- C:\Windows\System32\Drivers\WdfLdr.sys   [54488]
O44 - LFC:[MD5.E2C933EDBC389386EBE6D2BA953F43D8] - 09/10/2013 - 06:54:47 ---A- . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) -- C:\Windows\System32\Drivers\Wdf01000.sys   [785624]
O44 - LFC:[MD5.9FDBA6982582A6F2354144980F641E7B] - 09/10/2013 - 06:54:47 ---A- . (.Microsoft Corporation - USB Printer driver.) -- C:\Windows\System32\Drivers\usbprint.sys   [25600]
O44 - LFC:[MD5.AD91D1BBE5D3CF4501887DC1C09384FD] - 09/10/2013 - 06:54:47 ---A- . (.Microsoft Corporation - USB Scanner Driver.) -- C:\Windows\System32\Drivers\usbscan.sys   [43008]
O44 - LFC:[MD5.199BD40B1890E1EEFF7438B59787534F] - 09/10/2013 - 06:57:43 ---A- . (.Microsoft Corporation - Utilitaire à l’exécution pour Internet Expl.) -- C:\Windows\SysNative\iertutil.dll   [2647552]
O44 - LFC:[MD5.199BD40B1890E1EEFF7438B59787534F] - 09/10/2013 - 06:57:43 ---A- . (.Microsoft Corporation - Utilitaire à l’exécution pour Internet Expl.) -- C:\Windows\System32\iertutil.dll   [2647552]
O44 - LFC:[MD5.D383602755758FA81166B0FD8AFE6D40] - 09/10/2013 - 06:57:44 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\SysNative\jscript9.dll   [3959296]
O44 - LFC:[MD5.D383602755758FA81166B0FD8AFE6D40] - 09/10/2013 - 06:57:44 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript9.dll   [3959296]
O44 - LFC:[MD5.F026C6F104758D0EB215B017016FAE27] - 09/10/2013 - 06:57:52 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysNative\mshtml.dll   [19252224]
O44 - LFC:[MD5.F026C6F104758D0EB215B017016FAE27] - 09/10/2013 - 06:57:52 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll   [19252224]
O44 - LFC:[MD5.D28B35DE88D27EFB27DF4B1E8319E3C0] - 09/10/2013 - 06:57:53 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\SysNative\wininet.dll   [2241024]
O44 - LFC:[MD5.D28B35DE88D27EFB27DF4B1E8319E3C0] - 09/10/2013 - 06:57:53 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll   [2241024]
O44 - LFC:[MD5.194125E7839D4902F2490A70049E8F78] - 09/10/2013 - 06:57:53 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\SysNative\jsproxy.dll   [53248]
O44 - LFC:[MD5.194125E7839D4902F2490A70049E8F78] - 09/10/2013 - 06:57:53 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\System32\jsproxy.dll   [53248]
O44 - LFC:[MD5.38BEBBC4CF9FE6566262F0037DF843BF] - 09/10/2013 - 06:57:54 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\SysNative\iesysprep.dll   [136704]
O44 - LFC:[MD5.38BEBBC4CF9FE6566262F0037DF843BF] - 09/10/2013 - 06:57:54 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\System32\iesysprep.dll   [136704]
O44 - LFC:[MD5.CCDB8FDC289AA9AFA5F8827A2ADB21AD] - 09/10/2013 - 06:57:55 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\SysNative\ieframe.dll   [15404544]
O44 - LFC:[MD5.CCDB8FDC289AA9AFA5F8827A2ADB21AD] - 09/10/2013 - 06:57:55 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\System32\ieframe.dll   [15404544]
O44 - LFC:[MD5.901D4A3CB11BE92DE65FE52C6258B5FA] - 09/10/2013 - 06:57:56 ---A- . (.Microsoft Corporation - Bibliothèque de thèmes Ux Microsoft.) -- C:\Windows\SysNative\uxtheme.dll   [915968]
O44 - LFC:[MD5.901D4A3CB11BE92DE65FE52C6258B5FA] - 09/10/2013 - 06:57:56 ---A- . (.Microsoft Corporation - Bibliothèque de thèmes Ux Microsoft.) -- C:\Windows\System32\uxtheme.dll   [915968]
O44 - LFC:[MD5.7B4E06047031B2AAA4AE10F00C59BFC7] - 09/10/2013 - 06:57:56 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\SysNative\jscript.dll   [855552]
O44 - LFC:[MD5.7B4E06047031B2AAA4AE10F00C59BFC7] - 09/10/2013 - 06:57:56 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript.dll   [855552]
O44 - LFC:[MD5.547FFE0E4C267FAB1299F2334C728F59] - 09/10/2013 - 06:57:56 ---A- . (.Microsoft Corporation - Traitement de RunOnce complet avec interfac.) -- C:\Windows\SysNative\iernonce.dll   [39936]
O44 - LFC:[MD5.547FFE0E4C267FAB1299F2334C728F59] - 09/10/2013 - 06:57:56 ---A- . (.Microsoft Corporation - Traitement de RunOnce complet avec interfac.) -- C:\Windows\System32\iernonce.dll   [39936]
O44 - LFC:[MD5.C4DDAC3F3062739C4C2BB759B36E005D] - 09/10/2013 - 06:57:56 ---A- . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\SysNative\ie4uinit.exe   [51712]
O44 - LFC:[MD5.C4DDAC3F3062739C4C2BB759B36E005D] - 09/10/2013 - 06:57:56 ---A- . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe   [51712]
O44 - LFC:[MD5.882AC0DD997CFC90FBB468D698BD55C6] - 09/10/2013 - 06:57:57 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysNative\urlmon.dll   [1365504]
O44 - LFC:[MD5.882AC0DD997CFC90FBB468D698BD55C6] - 09/10/2013 - 06:57:57 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll   [1365504]
O44 - LFC:[MD5.E80F66239BCA6CDECC360CA78CECAE61] - 09/10/2013 - 06:57:57 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\Windows\SysNative\iesetup.dll   [67072]
O44 - LFC:[MD5.E80F66239BCA6CDECC360CA78CECAE61] - 09/10/2013 - 06:57:57 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\Windows\System32\iesetup.dll   [67072]
O44 - LFC:[MD5.214E39F0A8E382F1889B26B46DE0AF81] - 09/10/2013 - 06:57:57 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\SysNative\msfeeds.dll   [603136]
O44 - LFC:[MD5.214E39F0A8E382F1889B26B46DE0AF81] - 09/10/2013 - 06:57:57 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll   [603136]
O44 - LFC:[MD5.AD00E5D3B748150CF1A53A1ABB52E320] - 09/10/2013 - 06:57:57 ---A- . (.Microsoft Corporation - Windows User Experience Session Initializat.) -- C:\Windows\SysNative\UXInit.dll   [53760]
O44 - LFC:[MD5.AD00E5D3B748150CF1A53A1ABB52E320] - 09/10/2013 - 06:57:57 ---A- . (.Microsoft Corporation - Windows User Experience Session Initializat.) -- C:\Windows\System32\UXInit.dll   [53760]
O44 - LFC:[MD5.F827BD7A09F9FCDF76AB2C3E27650E71] - 09/10/2013 - 06:57:58 ---A- . (.Microsoft Corporation - Microsoft® MSHTML Typelib.) -- C:\Windows\SysNative\mshtml.tlb   [2706432]
O44 - LFC:[MD5.F827BD7A09F9FCDF76AB2C3E27650E71] - 09/10/2013 - 06:57:58 ---A- . (.Microsoft Corporation - Microsoft® MSHTML Typelib.) -- C:\Windows\System32\mshtml.tlb   [2706432]
O44 - LFC:[MD5.8A8DB47DDF6B2118DF4D1561CEA586B3] - 09/10/2013 - 06:58:01 ---A- . (.Microsoft Corporation - Bibliothèque de contrôles de l’expérience u.) -- C:\Windows\SysNative\comctl32.dll   [652288]
O44 - LFC:[MD5.8A8DB47DDF6B2118DF4D1561CEA586B3] - 09/10/2013 - 06:58:01 ---A- . (.Microsoft Corporation - Bibliothèque de contrôles de l’expérience u.) -- C:\Windows\System32\comctl32.dll   [652288]
O44 - LFC:[MD5.C53BA50404665A17707D9D4FD78699CB] - 09/10/2013 - 07:33:16 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\SysNative\MRT.exe   [80541720]
O44 - LFC:[MD5.C53BA50404665A17707D9D4FD78699CB] - 09/10/2013 - 07:33:16 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe   [80541720]
O44 - LFC:[MD5.7ECDAD056880A097563EC67F3D4143A3] - 11/10/2013 - 08:32:05 ---A- . (...) -- C:\Windows\setupact.log   [1028]
O44 - LFC:[MD5.19D663D8876FEDD10E31CBCE1087BDD0] - 11/10/2013 - 08:45:18 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI   [2431456]
O44 - LFC:[MD5.10C984C2B5FC0C1B72F2D6FB28917B02] - 11/10/2013 - 08:45:18 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat   [214056]
O44 - LFC:[MD5.767F4477F20994C3F7B64451E62A8634] - 11/10/2013 - 08:45:18 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat   [243324]
O44 - LFC:[MD5.240FE7E33A7E929B7DB469B2D3391EF5] - 11/10/2013 - 08:45:18 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat   [926730]
O44 - LFC:[MD5.249E5517826C74E077207B75483E73D6] - 11/10/2013 - 08:45:18 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat   [1041912]
O44 - LFC:[MD5.19D663D8876FEDD10E31CBCE1087BDD0] - 11/10/2013 - 08:45:18 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI   [2431456]
O44 - LFC:[MD5.10C984C2B5FC0C1B72F2D6FB28917B02] - 11/10/2013 - 08:45:18 ---A- . (...) -- C:\Windows\System32\perfc009.dat   [214056]
O44 - LFC:[MD5.767F4477F20994C3F7B64451E62A8634] - 11/10/2013 - 08:45:18 ---A- . (...) -- C:\Windows\System32\perfc00C.dat   [243324]
O44 - LFC:[MD5.240FE7E33A7E929B7DB469B2D3391EF5] - 11/10/2013 - 08:45:18 ---A- . (...) -- C:\Windows\System32\perfh009.dat   [926730]
O44 - LFC:[MD5.249E5517826C74E077207B75483E73D6] - 11/10/2013 - 08:45:18 ---A- . (...) -- C:\Windows\System32\perfh00C.dat   [1041912]
O44 - LFC:[MD5.9B393CB769FED979D81B81BB6540CE8C] - 12/10/2013 - 13:52:42 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT   [588088]
O44 - LFC:[MD5.9B393CB769FED979D81B81BB6540CE8C] - 12/10/2013 - 13:52:42 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT   [588088]
O44 - LFC:[MD5.6A4B9FBC1E88C400AD671A50DADFA84D] - 14/10/2013 - 06:49:54 ---A- . (...) -- C:\Windows\SysNative\ApnDatabase.xml   [386923]
O44 - LFC:[MD5.6A4B9FBC1E88C400AD671A50DADFA84D] - 14/10/2013 - 06:49:54 ---A- . (...) -- C:\Windows\System32\ApnDatabase.xml   [386923]
O44 - LFC:[MD5.60CF5B27BBEF38F11729B847541E33A3] - 14/10/2013 - 06:49:54 ---A- . (.Microsoft Corporation - Microsoft Windows Mobile Broadband SMS API.) -- C:\Windows\SysNative\mbsmsapi.dll   [225280]
O44 - LFC:[MD5.60CF5B27BBEF38F11729B847541E33A3] - 14/10/2013 - 06:49:54 ---A- . (.Microsoft Corporation - Microsoft Windows Mobile Broadband SMS API.) -- C:\Windows\System32\mbsmsapi.dll   [225280]
O44 - LFC:[MD5.755059FD6A758EA4413B58A1B423E7D1] - 14/10/2013 - 06:49:54 ---A- . (.Microsoft Corporation - Setting Synchronization Information.) -- C:\Windows\SysNative\SettingSyncInfo.dll   [128512]
O44 - LFC:[MD5.755059FD6A758EA4413B58A1B423E7D1] - 14/10/2013 - 06:49:54 ---A- . (.Microsoft Corporation - Setting Synchronization Information.) -- C:\Windows\System32\SettingSyncInfo.dll   [128512]
O44 - LFC:[MD5.DFB8703836AF863A25FC55BF88176591] - 14/10/2013 - 06:49:55 ---A- . (.Microsoft Corporation - Bibliothèque d’objets et de contrôles de do.) -- C:\Windows\SysNative\shdocvw.dll   [222208]
O44 - LFC:[MD5.DFB8703836AF863A25FC55BF88176591] - 14/10/2013 - 06:49:55 ---A- . (.Microsoft Corporation - Bibliothèque d’objets et de contrôles de do.) -- C:\Windows\System32\shdocvw.dll   [222208]
O44 - LFC:[MD5.7D5FEB67505A6D983F5D8AE0B474581D] - 14/10/2013 - 06:49:55 ---A- . (.Microsoft Corporation - Interface utilisateur d’authentification Wi.) -- C:\Windows\SysNative\authui.dll   [2304512]
O44 - LFC:[MD5.7D5FEB67505A6D983F5D8AE0B474581D] - 14/10/2013 - 06:49:55 ---A- . (.Microsoft Corporation - Interface utilisateur d’authentification Wi.) -- C:\Windows\System32\authui.dll   [2304512]
O44 - LFC:[MD5.5690B3793FD93716EF4C5CE71D9FF156] - 14/10/2013 - 06:49:55 ---A- . (.Microsoft Corporation - Synchronisation des paramètres.) -- C:\Windows\SysNative\SettingSync.dll   [448512]
O44 - LFC:[MD5.5690B3793FD93716EF4C5CE71D9FF156] - 14/10/2013 - 06:49:55 ---A- . (.Microsoft Corporation - Synchronisation des paramètres.) -- C:\Windows\System32\SettingSync.dll   [448512]
O44 - LFC:[MD5.BD72916CC1E9FE5F29EC1A2682CBB0EB] - 14/10/2013 - 06:49:58 ---A- . (.Microsoft Corporation - Extension du composant logiciel enfichable.) -- C:\Windows\SysNative\appmgr.dll   [459776]
O44 - LFC:[MD5.BD72916CC1E9FE5F29EC1A2682CBB0EB] - 14/10/2013 - 06:49:58 ---A- . (.Microsoft Corporation - Extension du composant logiciel enfichable.) -- C:\Windows\System32\appmgr.dll   [459776]
O44 - LFC:[MD5.37D85E873C9531A2F88DD9C63D3F8A9E] - 14/10/2013 - 06:50:00 ---A- . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\Windows\System32\Drivers\tcpip.sys   [2233688]
O44 - LFC:[MD5.F85D33830D2655FB2916667579D45725] - 14/10/2013 - 06:50:02 ---A- . (.Microsoft Corporation - DLL de MSCTF Server.) -- C:\Windows\SysNative\msctf.dll   [1125888]
O44 - LFC:[MD5.F85D33830D2655FB2916667579D45725] - 14/10/2013 - 06:50:02 ---A- . (.Microsoft Corporation - DLL de MSCTF Server.) -- C:\Windows\System32\msctf.dll   [1125888]
O44 - LFC:[MD5.09B07DFC6792D49516073FEF024315C9] - 14/10/2013 - 06:50:11 ---A- . (.Microsoft Corporation - TWINUI.) -- C:\Windows\SysNative\twinui.dll   [10116608]
O44 - LFC:[MD5.09B07DFC6792D49516073FEF024315C9] - 14/10/2013 - 06:50:11 ---A- . (.Microsoft Corporation - TWINUI.) -- C:\Windows\System32\twinui.dll   [10116608]
O44 - LFC:[MD5.4416D7F0F05098711EA45C9D95610A6E] - 14/10/2013 - 06:50:20 ---A- . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\SysNative\shell32.dll   [19758080]
O44 - LFC:[MD5.4416D7F0F05098711EA45C9D95610A6E] - 14/10/2013 - 06:50:20 ---A- . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll   [19758080]
O44 - LFC:[MD5.CA45D615BA0102CEDE9C25F4C6EE0983] - 14/10/2013 - 06:50:30 ---A- . (.Microsoft Corporation - Analyseur de performances.) -- C:\Windows\SysNative\wdc.dll   [1374208]
O44 - LFC:[MD5.CA45D615BA0102CEDE9C25F4C6EE0983] - 14/10/2013 - 06:50:30 ---A- . (.Microsoft Corporation - Analyseur de performances.) -- C:\Windows\System32\wdc.dll   [1374208]
O44 - LFC:[MD5.EEB55974CFE4DB0B4FC840E6101090B8] - 14/10/2013 - 06:50:30 ---A- . (.Microsoft Corporation - Contrôle du Moniteur système.) -- C:\Windows\SysNative\sysmon.ocx   [462336]
O44 - LFC:[MD5.EEB55974CFE4DB0B4FC840E6101090B8] - 14/10/2013 - 06:50:30 ---A- . (.Microsoft Corporation - Contrôle du Moniteur système.) -- C:\Windows\System32\sysmon.ocx   [462336]
O44 - LFC:[MD5.20E76634DE7792397261A8AC442B9ACB] - 14/10/2013 - 06:50:30 ---A- . (.Microsoft Corporation - Windows Visual Components.) -- C:\Windows\SysNative\wvc.dll   [566784]
O44 - LFC:[MD5.20E76634DE7792397261A8AC442B9ACB] - 14/10/2013 - 06:50:30 ---A- . (.Microsoft Corporation - Windows Visual Components.) -- C:\Windows\System32\wvc.dll   [566784]
O44 - LFC:[MD5.5563EE86216A1C21E78CFA8297C1CEA8] - 15/10/2013 - 08:06:56 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin   [512]
O44 - LFC:[MD5.28B45E3AC2996362B013B818B2D8D0DF] - 15/10/2013 - 09:43:59 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [1300161]
O44 - LFC:[MD5.F59ACEC1AE2CC472746222F523DCCA0A] - 15/10/2013 - 09:46:43 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
~ Files: 108 Scanned in 00mn 21s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.F5DD65C3012C6C227B19A788A249E734] - 01/10/2013 - 09:21:23 ---A- - C:\Windows\Prefetch\INVENTOR.EXE-F7B820AD.pf
O45 - LFCP:[MD5.B4BA361E74063E3D3548D08F6937D740] - 02/10/2013 - 20:44:02 ---A- - C:\Windows\Prefetch\BIBLIO.EXE-3FACE1F4.pf
O45 - LFCP:[MD5.AC9CFE6EC63672C4443F41915099B419] - 03/10/2013 - 16:10:24 ---A- - C:\Windows\Prefetch\UPDATECONTROLS_201012.EXE-916410B1.pf
O45 - LFCP:[MD5.8893687319AEA5BD032B506340C0FAC4] - 03/10/2013 - 16:11:11 ---A- - C:\Windows\Prefetch\NOTEPAD++.EXE-E7DBD7BD.pf
O45 - LFCP:[MD5.751D681BAA1E3A6ABCBB9F7B59C8A1C1] - 03/10/2013 - 18:14:39 ---A- - C:\Windows\Prefetch\SAM131.EXE-EE47CF8A.pf
O45 - LFCP:[MD5.A09BE7B9F7262D2B080001AB8A35118A] - 03/10/2013 - 18:18:13 ---A- - C:\Windows\Prefetch\SAM1.3.1.EXE-A2464A9E.pf
O45 - LFCP:[MD5.1A9C7996101D6FA62A98F1D4303ACE03] - 05/10/2013 - 20:32:20 ---A- - C:\Windows\Prefetch\BICLIENT.EXE-F16300BB.pf
O45 - LFCP:[MD5.9FFD8536BBE75B551D65321073AB0DA3] - 05/10/2013 - 20:58:52 ---A- - C:\Windows\Prefetch\WAMPMANAGER.EXE-2A7E36FE.pf
O45 - LFCP:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 05/12/2157 - 17:30:10 ----D - C:\Windows\Prefetch\ReadyBoot
O45 - LFCP:[MD5.991E76210EDEE754F30D923139F7382A] - 06/10/2013 - 11:06:15 ---A- - C:\Windows\Prefetch\REVOUNINSTALLER.EXE-3D1962E3.pf
O45 - LFCP:[MD5.AA3403A05F7FB454FB55A818E59950AA] - 06/10/2013 - 15:22:13 ---A- - C:\Windows\Prefetch\PCFIXSPEED.EXE-55D396A9.pf  =>PUP.PCFixSpeed
O45 - LFCP:[MD5.3D9067CEF04333A84BF8BD3E70D5AA97] - 06/10/2013 - 15:22:15 ---A- - C:\Windows\Prefetch\NET.EXE-C3772C91.pf
O45 - LFCP:[MD5.EA8FB808AD17DDC592E1B64D32981E5C] - 06/10/2013 - 15:22:21 ---A- - C:\Windows\Prefetch\APP24X7HELP.EXE-44A3B6EC.pf  =>PUP.24x7Help
O45 - LFCP:[MD5.A100907C8953FC39FC36221DCAA28EAD] - 06/10/2013 - 15:24:21 ---A- - C:\Windows\Prefetch\AU_.EXE-14446B15.pf
O45 - LFCP:[MD5.94A84CA8302935DF2042B16A004B5639] - 06/10/2013 - 15:28:05 ---A- - C:\Windows\Prefetch\_IU14D2N.TMP-60C7217A.pf
O45 - LFCP:[MD5.786A9E14C8122BF6F6310415AABF665D] - 06/10/2013 - 17:45:52 ---A- - C:\Windows\Prefetch\SP59207.EXE-0A08DDBE.pf
O45 - LFCP:[MD5.3ED8FA6E887583AF736D94B14D139D6B] - 06/10/2013 - 20:44:08 ---A- - C:\Windows\Prefetch\DTLITE.EXE-AEE5B4A0.pf
O45 - LFCP:[MD5.EE37991E0DF78EA0A6634213E3D162DE] - 06/10/2013 - 20:44:09 ---A- - C:\Windows\Prefetch\GOOGLECALENDARSYNC.EXE-26A07F80.pf
O45 - LFCP:[MD5.F6EEB4737A11F1893BB5E2F31F2C2D52] - 06/10/2013 - 20:53:05 ---A- - C:\Windows\Prefetch\FLASHPLAYERPLUGIN_11_8_800_16-B0E978DF.pf
O45 - LFCP:[MD5.1694EAFC6701780C56DEBB5E88210C56] - 06/10/2013 - 20:53:05 ---A- - C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-E510713D.pf
O45 - LFCP:[MD5.F574E9C8C4576AA3556D83A4848371E1] - 07/10/2013 - 21:06:16 ---A- - C:\Windows\Prefetch\OUI.EXE-B92C7E37.pf
O45 - LFCP:[MD5.BAD327D06FAF77CC969053354DA768BA] - 07/10/2013 - 21:18:26 ---A- - C:\Windows\Prefetch\JAVAW.EXE-A336154F.pf
O45 - LFCP:[MD5.7BED754C62896D800FF57E2E3C3B52A0] - 07/10/2013 - 21:27:47 ---A- - C:\Windows\Prefetch\OPENINFO3W-2012-04-10.EXE-89C78F09.pf
O45 - LFCP:[MD5.DBBC350168C7272ED8AC2B534F9C4E58] - 07/10/2013 - 21:27:58 ---A- - C:\Windows\Prefetch\SQLPLUS.EXE-2CEE06B2.pf
O45 - LFCP:[MD5.9F9E53E820F960CA603A1B5C9696BA7D] - 08/10/2013 - 08:42:46 ---A- - C:\Windows\Prefetch\REGSVR32.EXE-E1DBB6D8.pf
O45 - LFCP:[MD5.AB9B5128667DCF231DD3B70844D02936] - 08/10/2013 - 10:11:55 ---A- - C:\Windows\Prefetch\PDFCREATOR.EXE-5B3289A7.pf
O45 - LFCP:[MD5.681607251BCC1D4D2CEA3790EA7E7FDE] - 09/10/2013 - 09:40:53 ---A- - C:\Windows\Prefetch\OPENWITH.EXE-BA0DC300.pf
O45 - LFCP:[MD5.947F54382C23054658601BFEA94E5D38] - 09/10/2013 - 10:25:58 ---A- - C:\Windows\Prefetch\MSPAINT.EXE-512C7E1E.pf
O45 - LFCP:[MD5.2C989C60DF516510E40C8E2A12153F73] - 10/10/2013 - 07:53:51 ---A- - C:\Windows\Prefetch\MSASCUI.EXE-4ED47FD9.pf
O45 - LFCP:[MD5.00832538BF69BFD732AE01A721F5B702] - 10/10/2013 - 15:29:06 ---A- - C:\Windows\Prefetch\CREER_DXF.EXE-699AFA50.pf
O45 - LFCP:[MD5.06C6B29BCF32A25540C65D533F2D9C14] - 10/10/2013 - 17:54:52 ---A- - C:\Windows\Prefetch\CLVIEW.EXE-4B98AE98.pf
O45 - LFCP:[MD5.82E663D3E08FA758087AEB76B5CEDBBD] - 10/10/2013 - 20:34:54 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-86B26863.pf
O45 - LFCP:[MD5.931B1023B4B0384554182F506570C0F4] - 10/10/2013 - 20:34:59 ---A- - C:\Windows\Prefetch\XWIZARD.EXE-8AD27557.pf
O45 - LFCP:[MD5.3F18B68065C9055C6923F278F742F7B9] - 11/10/2013 - 07:07:32 ---A- - C:\Windows\Prefetch\MSDT.EXE-A16F1692.pf
O45 - LFCP:[MD5.7D8FFC5D96622664EB101C4E523D68D1] - 11/10/2013 - 07:48:01 ---A- - C:\Windows\Prefetch\SYSTEMSETTINGS.EXE-D8CC3B5E.pf
O45 - LFCP:[MD5.F2B9D9F6D9C21A1435CF8FDCE6AF24F6] - 11/10/2013 - 07:53:39 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-20A1E568.pf
O45 - LFCP:[MD5.97BCC2C93327708E02FD2998463F84E1] - 11/10/2013 - 08:05:07 ---A- - C:\Windows\Prefetch\HELPPANE.EXE-5A92E3D5.pf
O45 - LFCP:[MD5.1C44DFA05D92CC0BCC03A90272DABAB0] - 11/10/2013 - 08:34:23 ---A- - C:\Windows\Prefetch\CHACXXI.EXE-A37C113E.pf
O45 - LFCP:[MD5.630CBA6FB49C0E5C66D71FAAF8BB5494] - 11/10/2013 - 08:34:51 ---A- - C:\Windows\Prefetch\CDIX.EXE-E2F6C24E.pf
O45 - LFCP:[MD5.43C694A910C0968D98784C13B1D2B7EF] - 11/10/2013 - 08:35:07 ---A- - C:\Windows\Prefetch\CHACAL_IX_1_5_02_FR.EXE-3C6948D6.pf
O45 - LFCP:[MD5.918737E43A75A39203E91E45ACAD8F14] - 11/10/2013 - 08:37:20 ---A- - C:\Windows\Prefetch\SBSOFFICEIXINSTALL.EXE-B0319D62.pf
O45 - LFCP:[MD5.DE8DAF3EC869D5E7CCFAD1D981649EB5] - 11/10/2013 - 08:38:14 ---A- - C:\Windows\Prefetch\SBSDOC.EXE-CCE90DE4.pf
O45 - LFCP:[MD5.408C5102F3B4E0FDECEAA2F3D93D86F8] - 11/10/2013 - 08:38:16 ---A- - C:\Windows\Prefetch\EXEV97.EXE-C8AFFF46.pf
O45 - LFCP:[MD5.198BB01CB7276733105C9021D9D987B3] - 11/10/2013 - 08:38:18 ---A- - C:\Windows\Prefetch\MAJ.EXE-C749B716.pf
O45 - LFCP:[MD5.81F17088668772BDAC55A8ABE8FDF3D2] - 11/10/2013 - 08:44:07 ---A- - C:\Windows\Prefetch\SBSINITPATHS.EXE-B7439E9A.pf
O45 - LFCP:[MD5.C3E32F0AFAD17E098439EE637220D3C5] - 11/10/2013 - 08:47:38 ---A- - C:\Windows\Prefetch\SENTINEL PROTECTION INSTALLER-63A5F7A4.pf
O45 - LFCP:[MD5.6F497F6DB9409808E5F781E269745BEE] - 11/10/2013 - 08:50:21 ---A- - C:\Windows\Prefetch\IX_TOOLS.EXE-9B1E7264.pf
O45 - LFCP:[MD5.294C2B48D250604F921F39D163AA74D3] - 11/10/2013 - 09:35:24 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-92AE8069.pf
O45 - LFCP:[MD5.F0F56CD852910F9457DD8D7AB04ECEFD] - 11/10/2013 - 09:48:39 ---A- - C:\Windows\Prefetch\DUMPER.EXE-B08DDC0A.pf
O45 - LFCP:[MD5.BEF501F5FCB678B82E71FE947472F814] - 11/10/2013 - 09:49:04 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-94CE7668.pf
O45 - LFCP:[MD5.E9547609EDFB98AD21D8311B1238FDE3] - 11/10/2013 - 10:06:48 ---A- - C:\Windows\Prefetch\SSPRO_DMP.EXE-8438D73C.pf
O45 - LFCP:[MD5.BCF3C9DA86F0BEF9A63C6952C1F77B68] - 11/10/2013 - 10:20:45 ---A- - C:\Windows\Prefetch\MOUNTVOL.EXE-84487FEE.pf
O45 - LFCP:[MD5.A52DB06CC8D34415A023EB96F4F6EF6E] - 11/10/2013 - 10:21:42 ---A- - C:\Windows\Prefetch\SP61101.EXE-3749A4E8.pf
O45 - LFCP:[MD5.863E3C1F14EA4D2B123E07F0FEB9CD92] - 11/10/2013 - 10:22:13 ---A- - C:\Windows\Prefetch\SETUP.EXE-ECC0B101.pf
O45 - LFCP:[MD5.DE2F9C3BC18CE1583DFDFF84C961970F] - 11/10/2013 - 10:23:36 ---A- - C:\Windows\Prefetch\EXPLORER.EXE-03C49D11.pf
O45 - LFCP:[MD5.55894DE5F89FA1912DC427F721CF231A] - 11/10/2013 - 10:28:56 ---A- - C:\Windows\Prefetch\SP62225.EXE-A729D318.pf
O45 - LFCP:[MD5.5468A99DFD98734A9296360A7C9F48C5] - 11/10/2013 - 10:29:27 ---A- - C:\Windows\Prefetch\SETUP.EXE-C121784D.pf
O45 - LFCP:[MD5.8BFB86F9B6F404E7E44AF34E6EBD78D8] - 11/10/2013 - 10:33:12 ---A- - C:\Windows\Prefetch\Op-EXPLORER.EXE-03C49D11-000000F5.pf
O45 - LFCP:[MD5.2FAA4035256EDA925EE94CDDC03882E0] - 11/10/2013 - 10:36:48 ---A- - C:\Windows\Prefetch\WERMGR.EXE-D948C216.pf
O45 - LFCP:[MD5.B70585D568E98E749E927B718BBF2142] - 11/10/2013 - 10:37:42 ---A- - C:\Windows\Prefetch\SETUP.EXE-FAC07D92.pf
O45 - LFCP:[MD5.AAC841B2DFABD23C93A604544C05BB53] - 11/10/2013 - 13:15:59 ---A- - C:\Windows\Prefetch\SETUP.EXE-271D2167.pf
O45 - LFCP:[MD5.679408FBCA1B14400FCE306124EF64E2] - 11/10/2013 - 13:16:08 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-BAE57A74.pf
O45 - LFCP:[MD5.B8A7186BB1198693B3F42AE095701BA8] - 11/10/2013 - 13:16:09 ---A- - C:\Windows\Prefetch\DSMUSERTASK.EXE-D4A83970.pf
O45 - LFCP:[MD5.478BBB4DEF096529E01AA568BF7FF99C] - 11/10/2013 - 13:16:32 ---A- - C:\Windows\Prefetch\SOFFICE.BIN-8148433A.pf
O45 - LFCP:[MD5.E8B5381123799E93795B7C660D1B88EB] - 11/10/2013 - 13:39:26 ---A- - C:\Windows\Prefetch\SPECCY_1-23-569_FR_309808.EXE-A3937300.pf
O45 - LFCP:[MD5.6A42298175F3AEE9EDD96C7B7C90C184] - 11/10/2013 - 13:39:51 ---A- - C:\Windows\Prefetch\SPECCY64.EXE-943BD3B0.pf
O45 - LFCP:[MD5.BBDEB4355075EB9F566137D509D0FADB] - 11/10/2013 - 13:39:57 ---A- - C:\Windows\Prefetch\JAVA.EXE-4EF2C834.pf
O45 - LFCP:[MD5.65CA2871FDFAF7CFFD148C131A0E3254] - 11/10/2013 - 17:56:10 ---A- - C:\Windows\Prefetch\SETUP.TMP-E3984735.pf
O45 - LFCP:[MD5.FD0CA529546426CDAA85E1C24122A732] - 11/10/2013 - 17:56:12 ---A- - C:\Windows\Prefetch\SETUP.TMP-5D26B842.pf
O45 - LFCP:[MD5.5E525B1F3D23D619867CDF864089260F] - 11/10/2013 - 17:57:24 ---A- - C:\Windows\Prefetch\SETUP (1).TMP-40E68AC1.pf
O45 - LFCP:[MD5.267B3FABFD64ECAF3DB4E12AAAD321B7] - 11/10/2013 - 17:57:26 ---A- - C:\Windows\Prefetch\SETUP (1).TMP-1FBD47ED.pf
O45 - LFCP:[MD5.F3D5780671A3478955DA1C8C3E19657F] - 11/10/2013 - 18:01:35 ---A- - C:\Windows\Prefetch\CATALYST_MOBILITY_BETA_64-BIT-9E3809F6.pf
O45 - LFCP:[MD5.571FBC0E1302BE8945D48EDF704C0165] - 11/10/2013 - 18:01:45 ---A- - C:\Windows\Prefetch\CATALYSTMOBILITY.EXE-CE4A65CB.pf
O45 - LFCP:[MD5.7F4E58EFFB3F05FA59E8ED20B8C23DEA] - 12/10/2013 - 13:56:25 ---A- - C:\Windows\Prefetch\MMC.EXE-787EFBBC.pf
O45 - LFCP:[MD5.32181A235DF75EF608AE1584453C4CE2] - 12/10/2013 - 20:47:21 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:[MD5.901C7C7400BD97301FB0A2472CD30F1A] - 13/10/2013 - 22:39:07 ---A- - C:\Windows\Prefetch\AgCx_SC1.db
O45 - LFCP:[MD5.265A83B05788EA2072CF7C4BB7836AE5] - 14/10/2013 - 06:45:10 ---A- - C:\Windows\Prefetch\AgCx_SC5.db
O45 - LFCP:[MD5.2364A7E7B1362A639C4055B7971077A1] - 14/10/2013 - 06:45:23 ---A- - C:\Windows\Prefetch\OPENPROJ1.4.0.EXE-222218D5.pf
O45 - LFCP:[MD5.36137BD01953E9BA37040A5B126BDD35] - 14/10/2013 - 07:26:12 ---A- - C:\Windows\Prefetch\dynreservedpri.db
O45 - LFCP:[MD5.48ACE124752076FD8AC226CA325DFA64] - 14/10/2013 - 07:26:21 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-AB312CEC.pf
O45 - LFCP:[MD5.0C63466B382D1215785A6E009C2B850C] - 14/10/2013 - 07:26:25 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-9F989E84.pf
O45 - LFCP:[MD5.9D8857EDF56ADFD4BA12046876BAA876] - 14/10/2013 - 07:44:54 ---A- - C:\Windows\Prefetch\OUTLOOK.EXE-4A0CAF77.pf
O45 - LFCP:[MD5.8C68CE33868066482BAF10FF1775CCBE] - 14/10/2013 - 07:47:58 ---A- - C:\Windows\Prefetch\CATSTART.EXE-631D601B.pf
O45 - LFCP:[MD5.CEF61EFFCC90E74108A913E5A12E4F0F] - 14/10/2013 - 07:48:03 ---A- - C:\Windows\Prefetch\CNEXT.EXE-4694B1D7.pf
O45 - LFCP:[MD5.821294E5111C6BFA59982FC3D15E0E65] - 14/10/2013 - 07:57:44 ---A- - C:\Windows\Prefetch\SPLWOW64.EXE-853292E2.pf
O45 - LFCP:[MD5.4ACFE8097201D2EE43DDF2DD092BE320] - 14/10/2013 - 08:02:42 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-B98D9700.pf
O45 - LFCP:[MD5.47EB1009C22F125067C0638C709BF257] - 14/10/2013 - 08:02:42 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-D3C34F4B.pf
O45 - LFCP:[MD5.F26803C126F220C33596A97292744FBF] - 14/10/2013 - 09:02:45 ---A- - C:\Windows\Prefetch\CALC.EXE-0FE8F3A9.pf
O45 - LFCP:[MD5.FE1E5CFBEBF2F7482253A777A9B8F8D9] - 14/10/2013 - 09:11:10 ---A- - C:\Windows\Prefetch\EXCEL.EXE-359C5413.pf
O45 - LFCP:[MD5.44E134C1142A30622E9BADB46B8D0AEE] - 14/10/2013 - 09:16:13 ---A- - C:\Windows\Prefetch\OSE.EXE-C8296816.pf
O45 - LFCP:[MD5.E8743859FEF98347970C32DFFF6DF03E] - 14/10/2013 - 09:40:43 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-29741569.pf
O45 - LFCP:[MD5.D4C17ECE06BFD8541BC5562DCF2B2935] - 14/10/2013 - 09:54:34 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-9E940D77.pf
O45 - LFCP:[MD5.07FD780E99166ADC851F403DC6BBF6EC] - 14/10/2013 - 11:45:30 ---A- - C:\Windows\Prefetch\AM_DELTA_PATCH_1.159.2040.0.E-DCBCB963.pf
O45 - LFCP:[MD5.31E8F896CCC8007751F4EC93DA889AC8] - 14/10/2013 - 11:54:40 ---A- - C:\Windows\Prefetch\DEFRAG.EXE-22AD8A37.pf
O45 - LFCP:[MD5.88BF2E7A12539758209DD92F749B5315] - 14/10/2013 - 11:54:41 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-5511E724.pf
O45 - LFCP:[MD5.1239E8C650328F9A9118C1C2B9303D14] - 14/10/2013 - 12:23:10 ---A- - C:\Windows\Prefetch\FEBUS.EXE-816363AF.pf
O45 - LFCP:[MD5.B8C3ED9DF5AFC58EC8B2979BC5456101] - 14/10/2013 - 13:35:54 ---A- - C:\Windows\Prefetch\HELPER.EXE-75B6E880.pf
O45 - LFCP:[MD5.019A51E69AA7DD3DA72E6BD5C694F363] - 14/10/2013 - 13:37:22 ---A- - C:\Windows\Prefetch\WINWORD.EXE-FAE43428.pf
O45 - LFCP:[MD5.3C5A3F2FF686487DDA952B7B4B661A94] - 14/10/2013 - 13:38:42 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-108FCA08.pf
O45 - LFCP:[MD5.CEC9CC547A8CBCC6ACE4647FBF7D1430] - 14/10/2013 - 14:43:25 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-F2C7AEBC.pf
O45 - LFCP:[MD5.63DF4E732D97C6AC6B6E36F2A1F95F5A] - 14/10/2013 - 14:43:56 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-05B3EDF6.pf
O45 - LFCP:[MD5.60147ED139213914CBD7716E1C7542EB] - 14/10/2013 - 16:00:32 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-1E4F75DC.pf
O45 - LFCP:[MD5.D738AA99AE2377F06447A266CF4479B1] - 14/10/2013 - 16:39:13 ---A- - C:\Windows\Prefetch\CONTROL.EXE-998FACDB.pf
O45 - LFCP:[MD5.9D42A382133309DD448FADCF4BF2DFDA] - 14/10/2013 - 16:39:13 ---A- - C:\Windows\Prefetch\HELPER.EXE-FDD78328.pf
O45 - LFCP:[MD5.77A38565D830DCC6823FB2E1510CDA29] - 14/10/2013 - 16:39:18 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-AEB615A8.pf
O45 - LFCP:[MD5.2515319F7051CDEB2879532C052D6F4A] - 14/10/2013 - 16:51:28 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-202A5AFB.pf
O45 - LFCP:[MD5.A0ED9D02B7E550113E3CF9B60B515205] - 14/10/2013 - 16:51:30 ---A- - C:\Windows\Prefetch\ZHPDIAG2.EXE-054E5D01.pf
O45 - LFCP:[MD5.FFE49DF09184CA408E580E26158F6CBC] - 14/10/2013 - 16:51:31 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-A6D3EBCD.pf
O45 - LFCP:[MD5.057E24258E93DEBD030FCCBC68960DA9] - 14/10/2013 - 16:59:09 ---A- - C:\Windows\Prefetch\LAUNCHTM.EXE-B444BC8E.pf
O45 - LFCP:[MD5.1A36C1E1F6751FDAE28EC6A80A038E3F] - 14/10/2013 - 16:59:19 ---A- - C:\Windows\Prefetch\TASKMGR.EXE-39AABA37.pf
O45 - LFCP:[MD5.D10F4507179EFB6FA9C490C539D940E4] - 14/10/2013 - 17:54:33 ---A- - C:\Windows\Prefetch\SNIPPINGTOOL.EXE-74818B88.pf
O45 - LFCP:[MD5.6AC0ADCBF7EE365A2827B6926788A494] - 15/10/2013 - 06:31:18 ---A- - C:\Windows\Prefetch\THUNDERBIRD.EXE-33138219.pf
O45 - LFCP:[MD5.9092AC5170910714C800C262F63DBDC7] - 15/10/2013 - 06:31:20 ---A- - C:\Windows\Prefetch\SNDVOL.EXE-276AC160.pf
O45 - LFCP:[MD5.D7650F0DCD27E4650FC5180B2F5D4C98] - 15/10/2013 - 06:31:54 ---A- - C:\Windows\Prefetch\AgCx_SC2.db
O45 - LFCP:[MD5.4824C3FE442CCEB3BD0071EC1294DAC2] - 15/10/2013 - 06:33:31 ---A- - C:\Windows\Prefetch\PREVHOST.EXE-FD4B5B1D.pf
O45 - LFCP:[MD5.8DE2F607D2C98852215E96D104C94A27] - 15/10/2013 - 06:33:32 ---A- - C:\Windows\Prefetch\ACRORD32.EXE-4E288B88.pf
O45 - LFCP:[MD5.5D0860D311942606491082C04C53BA20] - 15/10/2013 - 06:33:59 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-3738773010-1709159401-3582800864-1001.db
O45 - LFCP:[MD5.67FBDC31D02FCC67C669F0C087FE583A] - 15/10/2013 - 06:33:59 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-3738773010-1709159401-3582800864-1001.db
O45 - LFCP:[MD5.186E203372D2A377E1B15A9E6B806580] - 15/10/2013 - 06:34:07 ---A- - C:\Windows\Prefetch\AM_DELTA_PATCH_1.159.2127.0.E-8DD947E1.pf
O45 - LFCP:[MD5.B851FA41A2BA19E5CFE2D90B91F36C49] - 15/10/2013 - 06:34:07 ---A- - C:\Windows\Prefetch\MPSIGSTUB.EXE-4D562760.pf
O45 - LFCP:[MD5.7DD7378FF0F03A0E39BFCA7FE56B38FE] - 15/10/2013 - 06:34:07 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-4A7CF88B.pf
O45 - LFCP:[MD5.73955FFA9083302BBC35EE1542DD0D58] - 15/10/2013 - 06:45:22 ---A- - C:\Windows\Prefetch\Layout.ini
O45 - LFCP:[MD5.DB5D411B872F53A30C0F9EE1189420B6] - 15/10/2013 - 07:01:37 ---A- - C:\Windows\Prefetch\ACAD.EXE-5841F3DE.pf
O45 - LFCP:[MD5.2B347EE297A69794903ACCC67697148D] - 15/10/2013 - 07:01:43 ---A- - C:\Windows\Prefetch\FNPLICENSINGSERVICE64.EXE-0CDC1A94.pf
O45 - LFCP:[MD5.712A5315C46F9624EF70920B32C89578] - 15/10/2013 - 07:01:57 ---A- - C:\Windows\Prefetch\WSCOMMCNTR3.EXE-455D260E.pf
O45 - LFCP:[MD5.872F7A5845817F855DA5A78208DFC25F] - 15/10/2013 - 07:07:46 ---A- - C:\Windows\Prefetch\DELEGATE_EXECUTE.EXE-9EEAAA42.pf
O45 - LFCP:[MD5.03C98F9C7BF2DE8BE3DFC102E28B601E] - 15/10/2013 - 07:07:57 ---A- - C:\Windows\Prefetch\TORCHUPDATE.EXE-86978F23.pf
O45 - LFCP:[MD5.7F1130ED117229CA11F0D044ED905CAF] - 15/10/2013 - 07:10:17 ---A- - C:\Windows\Prefetch\TORCHSETUP.EXE-9F0B9227.pf
O45 - LFCP:[MD5.3E8179F6E38F7DBFDFB189C814F79F92] - 15/10/2013 - 07:10:31 ---A- - C:\Windows\Prefetch\PACK.EXE-2DBFB151.pf
O45 - LFCP:[MD5.0B061C9A017CE806FD602D27F247D989] - 15/10/2013 - 07:10:40 ---A- - C:\Windows\Prefetch\SETUP.EXE-F2829283.pf
O45 - LFCP:[MD5.E906B5832DB4FA759E906C7E2850B3E2] - 15/10/2013 - 07:10:56 ---A- - C:\Windows\Prefetch\TORCHTORRENT.EXE-66AF2D9C.pf
O45 - LFCP:[MD5.E6959D5E9CCE8CA22B86BDD2D7BA8299] - 15/10/2013 - 07:13:07 ---A- - C:\Windows\Prefetch\HIJACKTHIS.EXE-232A1D6E.pf
O45 - LFCP:[MD5.716E18D8EC122FF83B340AEAD4908BB6] - 15/10/2013 - 08:04:06 ---A- - C:\Windows\Prefetch\HOUSECALLLAUNCHER64.EXE-2A923780.pf
O45 - LFCP:[MD5.EF8B2FF15C414CD325E800339CAD67AE] - 15/10/2013 - 08:04:08 ---A- - C:\Windows\Prefetch\SETUP.EXE-196D679A.pf
O45 - LFCP:[MD5.C8DFA34B6CAAA2CD0F1E4916843BB1D2] - 15/10/2013 - 08:04:13 ---A- - C:\Windows\Prefetch\HCPACKAGE64.EXE.TMP-F7421872.pf
O45 - LFCP:[MD5.9E74B422F138962D08E8C59BC6690EA2] - 15/10/2013 - 08:04:43 ---A- - C:\Windows\Prefetch\VLC.EXE-F1ED81B3.pf
O45 - LFCP:[MD5.5F542BE8FDC12B9F38DD29BE168D1C68] - 15/10/2013 - 08:05:26 ---A- - C:\Windows\Prefetch\LADS.EXE-BC89FD22.pf
O45 - LFCP:[MD5.ED39174BBA47FE23E2BD0FFD546C1CC9] - 15/10/2013 - 08:05:26 ---A- - C:\Windows\Prefetch\PATCH64.EXE-22220B11.pf
O45 - LFCP:[MD5.44DF0358F1E97AEFB5656D661161F76D] - 15/10/2013 - 08:05:44 ---A- - C:\Windows\Prefetch\NSLOOKUP.EXE-EB35EDAD.pf
O45 - LFCP:[MD5.3B34708B4EE47758768604C8DF57F9E0] - 15/10/2013 - 08:06:33 ---A- - C:\Windows\Prefetch\HOUSECALL.BIN-96B14C78.pf
O45 - LFCP:[MD5.79E090F66D48CECF9B0071A77C6E4E6D] - 15/10/2013 - 08:06:56 ---A- - C:\Windows\Prefetch\MBRCHECK.EXE-52282269.pf
O45 - LFCP:[MD5.B8397ED1F7A7B801E7E3F936585C62BF] - 15/10/2013 - 08:11:23 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-4492B02F.pf
O45 - LFCP:[MD5.7D9DAEEBE464237B904BDB8248180183] - 15/10/2013 - 08:11:55 ---A- - C:\Windows\Prefetch\HJTS.EXE-78298E01.pf
O45 - LFCP:[MD5.AA5654A13AEF2815BCE5F061A59CA7BA] - 15/10/2013 - 08:29:19 ---A- - C:\Windows\Prefetch\REGSVR32.EXE-3290E8FC.pf
O45 - LFCP:[MD5.38026CF801378BF216F9795C201F92DA] - 15/10/2013 - 08:29:27 ---A- - C:\Windows\Prefetch\MBAM.EXE-125A28F9.pf
O45 - LFCP:[MD5.989036E9F3D0EDCD6A3D04331986BBA0] - 15/10/2013 - 08:30:48 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-FCF8E58C.pf
O45 - LFCP:[MD5.6BA3C66FD43CE8C128EC1A1CF980CB89] - 15/10/2013 - 08:32:54 ---A- - C:\Windows\Prefetch\CLEANMGR.EXE-91F4F5AB.pf
O45 - LFCP:[MD5.D152CC0DB0943EE7B2B8BAE5F5CD95DB] - 15/10/2013 - 08:35:30 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-7D20CFB0.pf
O45 - LFCP:[MD5.8216BA9606144FCFDA04D30BF8BBB8C6] - 15/10/2013 - 08:39:48 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-29D61DAB.pf
O45 - LFCP:[MD5.30DD972058A27B1A262D09F62964B810] - 15/10/2013 - 08:39:49 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-EA0A52C8.pf
O45 - LFCP:[MD5.445E5B21D0258333AC2C9ECA212A5835] - 15/10/2013 - 08:39:52 ---A- - C:\Windows\Prefetch\NGEN.EXE-A8DBB043.pf
O45 - LFCP:[MD5.083934E4698CF958CE408C96C8F75F39] - 15/10/2013 - 08:39:53 ---A- - C:\Windows\Prefetch\NGEN.EXE-383F81D5.pf
O45 - LFCP:[MD5.E8AB8526F05946086E1BC1DD2039DD58] - 15/10/2013 - 08:39:57 ---A- - C:\Windows\Prefetch\TASKHOSTEX.EXE-7356AAC0.pf
O45 - LFCP:[MD5.2FB67AA8ABD853F0B51E41DE19A8E58D] - 15/10/2013 - 08:39:59 ---A- - C:\Windows\Prefetch\SETTINGSYNCHOST.EXE-DD400067.pf
O45 - LFCP:[MD5.970665512D9A52A77F2DC59E6C68063E] - 15/10/2013 - 08:39:59 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-3C5D03F7.pf
O45 - LFCP:[MD5.FF6CAD52CF8F909D0F4B567E5E5AE137] - 15/10/2013 - 08:40:00 ---A- - C:\Windows\Prefetch\NGENTASK.EXE-4DB88ADA.pf
O45 - LFCP:[MD5.C8A47843C8B2434DB4B0CFAD5F72B3FA] - 15/10/2013 - 08:40:00 ---A- - C:\Windows\Prefetch\NGENTASK.EXE-CD4E002C.pf
O45 - LFCP:[MD5.7D16D2361E2211BD70C71F3DF9BD8C6F] - 15/10/2013 - 08:40:04 ---A- - C:\Windows\Prefetch\MPCMDRUN.EXE-6520183E.pf
O45 - LFCP:[MD5.D6AACF4F3BE1219BEF3A389E48BACBE3] - 15/10/2013 - 08:40:41 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-D593A5D9.pf
O45 - LFCP:[MD5.A562BC67C96FB40C1456C1FE94EB0F95] - 15/10/2013 - 08:40:42 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-55FE3087.pf
O45 - LFCP:[MD5.4F837E4978CFCB5DACA9B94EB77436B3] - 15/10/2013 - 08:47:19 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-F2EC6B1B.pf
O45 - LFCP:[MD5.72AC4A89236185B7D6D21D8648C508AB] - 15/10/2013 - 08:49:25 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-6AA5D6C5.pf
O45 - LFCP:[MD5.25D4C6287C1E1A4199CF79D77AE959B5] - 15/10/2013 - 08:50:01 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-7A9337F2.pf
O45 - LFCP:[MD5.5F437FB0CED3C8D6F6010680237CB9FB] - 15/10/2013 - 08:50:02 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-F4FB5D2F.pf
O45 - LFCP:[MD5.829E23B6F372AED454C23C810E0D9E7A] - 15/10/2013 - 08:50:14 ---A- - C:\Windows\Prefetch\FLASHUTIL_ACTIVEX.EXE-4E6AE223.pf
O45 - LFCP:[MD5.56154B94650954CDA7F55763330258C1] - 15/10/2013 - 08:53:21 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-F0516D55.pf
O45 - LFCP:[MD5.4B31A0F41220174F90C5CC677ABAEE26] - 15/10/2013 - 08:54:40 ---A- - C:\Windows\Prefetch\PARETOLOGIC PC HEALTH ADVISOR-C88BD061.pf  =>Rogue.PCHealthAdvisor
O45 - LFCP:[MD5.83A851DFFFD0F47390A18AC1521CB098] - 15/10/2013 - 08:56:00 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-E0E5E52F.pf
O45 - LFCP:[MD5.ACB190CB93059BAA4C1B168810C1E52C] - 15/10/2013 - 09:07:39 ---A- - C:\Windows\Prefetch\PARETOLOGIC PC HEALTH ADVISOR-8F735723.pf  =>Rogue.PCHealthAdvisor
O45 - LFCP:[MD5.A8DBC5D0D9C2263BC4090CFA1A786108] - 15/10/2013 - 09:08:13 ---A- - C:\Windows\Prefetch\PARETO_UPDATE3.EXE-47B35D44.pf
O45 - LFCP:[MD5.F1E42770331BCBA710361AB947435194] - 15/10/2013 - 09:08:19 ---A- - C:\Windows\Prefetch\PCHA.EXE-92C507AC.pf
O45 - LFCP:[MD5.9D6828EAF38C8DB90293EDB6DB2737E0] - 15/10/2013 - 09:08:22 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-8D368B00.pf
O45 - LFCP:[MD5.114477FAFFCA7FCDDD8D495B00C4274B] - 15/10/2013 - 09:08:27 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-574A519D.pf
O45 - LFCP:[MD5.34778820F0E8E1936483938C3B89B3AA] - 15/10/2013 - 09:08:27 ---A- - C:\Windows\Prefetch\VSSVC.EXE-206E55B3.pf
O45 - LFCP:[MD5.57E41D5A4E5DCFFC82E5BAD87CF3CFFC] - 15/10/2013 - 09:14:52 ---A- - C:\Windows\Prefetch\ZHPFIX.EXE-AFDB3DAC.pf
O45 - LFCP:[MD5.885A16D2AB8B4132AE28F5997E369752] - 15/10/2013 - 09:16:58 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-BB49B536.pf
O45 - LFCP:[MD5.8A0971BFCD92C9CF72CA7D49EDCC1B3B] - 15/10/2013 - 09:18:03 ---A- - C:\Windows\Prefetch\SETUP.EXE-2A1FAEC5.pf
O45 - LFCP:[MD5.62E494DEF16B5192934914808E8571C6] - 15/10/2013 - 09:18:48 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-E35F76FB.pf
O45 - LFCP:[MD5.F36A1711E135E42C2C44326B3AC317E7] - 15/10/2013 - 09:18:56 ---A- - C:\Windows\Prefetch\POQEXEC.EXE-43A49B23.pf
O45 - LFCP:[MD5.EDC3CAC551B17637F5CB944B899C4647] - 15/10/2013 - 09:23:26 ---A- - C:\Windows\Prefetch\SEARCHINDEXER.EXE-EF8503D3.pf
O45 - LFCP:[MD5.A63FCB8A8D7AB764C78F483804C6B19C] - 15/10/2013 - 09:23:48 ---A- - C:\Windows\Prefetch\MOBSYNC.EXE-A02D9B49.pf
O45 - LFCP:[MD5.56EBB6604946918118B332B9D7641A59] - 15/10/2013 - 09:23:51 ---A- - C:\Windows\Prefetch\ADSYNC.EXE-8F9EC557.pf
O45 - LFCP:[MD5.8E515171EBDE59E72FDE31D5C6CC61F9] - 15/10/2013 - 09:23:51 ---A- - C:\Windows\Prefetch\IGFXTRAY.EXE-21BDFE68.pf
O45 - LFCP:[MD5.E7DC830BAA283EA139AAD56D74B0E165] - 15/10/2013 - 09:23:52 ---A- - C:\Windows\Prefetch\HKCMD.EXE-15DC91D5.pf
O45 - LFCP:[MD5.2F4C2A245396B0ADB6C3934B0690DC78] - 15/10/2013 - 09:23:53 ---A- - C:\Windows\Prefetch\IGFXPERS.EXE-82C794F2.pf
O45 - LFCP:[MD5.7B832C297CA083857B9F5E9738F07117] - 15/10/2013 - 09:23:53 ---A- - C:\Windows\Prefetch\SYNTPENH.EXE-2DD080ED.pf
O45 - LFCP:[MD5.387AF4A15E3376E49C60B25FDF168F11] - 15/10/2013 - 09:23:56 ---A- - C:\Windows\Prefetch\RUNONCE.EXE-E874B0D0.pf
O45 - LFCP:[MD5.B16ECDB180ECCF146A1944EC8E918484] - 15/10/2013 - 09:23:58 ---A- - C:\Windows\Prefetch\ONENOTEM.EXE-5F9CC0FF.pf
O45 - LFCP:[MD5.EC4472736B5FA17A08E42D031FDC6760] - 15/10/2013 - 09:24:04 ---A- - C:\Windows\Prefetch\BCSSYNC.EXE-C2C11C9F.pf
O45 - LFCP:[MD5.3A810E70E1DBD4294F5C888DB78EB5AD] - 15/10/2013 - 09:24:04 ---A- - C:\Windows\Prefetch\DEVMONSRV.EXE-5003B175.pf
O45 - LFCP:[MD5.024B8D74887122EE6B1ECFC7B2357A0D] - 15/10/2013 - 09:24:06 ---A- - C:\Windows\Prefetch\ADOBEARM.EXE-813E932C.pf
O45 - LFCP:[MD5.7AE60241D2E92FA0CC7ABA21907522CF] - 15/10/2013 - 09:24:11 ---A- - C:\Windows\Prefetch\AgCx_SC4.db
O45 - LFCP:[MD5.3617B9E156F7343BB3AF1DF9A995F8F7] - 15/10/2013 - 09:24:11 ---A- - C:\Windows\Prefetch\OBEXSRV.EXE-081FCA6E.pf
O45 - LFCP:[MD5.C2912E6F023756394D7171D6B795B659] - 15/10/2013 - 09:24:13 ---A- - C:\Windows\Prefetch\NCOEENV.EXE-BAFB96D7.pf
O45 - LFCP:[MD5.F95F15DB385D6490AD9621E7A21470E5] - 15/10/2013 - 09:24:13 ---A- - C:\Windows\Prefetch\SYNTPHELPER.EXE-878378AE.pf
O45 - LFCP:[MD5.54CA8DB715F6E09CDBEF334D5382127E] - 15/10/2013 - 09:24:15 ---A- - C:\Windows\Prefetch\KEEPASS.EXE-AF846BFF.pf
O45 - LFCP:[MD5.5B1B076E43533ABEA584208574A5BB99] - 15/10/2013 - 09:24:16 ---A- - C:\Windows\Prefetch\APSDAEMON.EXE-8C865900.pf
O45 - LFCP:[MD5.BB25D8604EE1C4CDD1F0DE6F50369A3A] - 15/10/2013 - 09:24:16 ---A- - C:\Windows\Prefetch\READER_SL.EXE-BC0A991D.pf
O45 - LFCP:[MD5.67544C91E335FBFEE4A3E225EEEC3C65] - 15/10/2013 - 09:24:18 ---A- - C:\Windows\Prefetch\JUSCHED.EXE-4B303C70.pf
O45 - LFCP:[MD5.3177FD89F363FCFFCEA9F37D2BF3EC9B] - 15/10/2013 - 09:26:10 ---A- - C:\Windows\Prefetch\ZHPHEP.EXE-5F2753B1.pf
O45 - LFCP:[MD5.8AF9F57C307A8ACA1B2B211473B56E2C] - 15/10/2013 - 09:26:20 ---A- - C:\Windows\Prefetch\ZHPDIAG.EXE-C7289479.pf
O45 - LFCP:[MD5.2A434D6F16E5BF5F961AC0BB2A5F299A] - 15/10/2013 - 09:26:49 ---A- - C:\Windows\Prefetch\CSCRIPT.EXE-E9FF6526.pf
O45 - LFCP:[MD5.580717EDD1B3A058F4800FEC1FAF6841] - 15/10/2013 - 09:26:58 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-B018CCBF.pf
O45 - LFCP:[MD5.B4EC01E3FDB9448E13D26C31B222F04F] - 15/10/2013 - 09:26:59 ---A- - C:\Windows\Prefetch\TIWORKER.EXE-375F3D59.pf
O45 - LFCP:[MD5.B4DFBC9A185ED55F1772C0B36CD136D8] - 15/10/2013 - 09:31:51 ---A- - C:\Windows\Prefetch\DELEGATE_EXECUTE.EXE-3C145E1F.pf
O45 - LFCP:[MD5.AF7D6FF53692898E4BB23945428C4C54] - 15/10/2013 - 09:32:02 ---A- - C:\Windows\Prefetch\TORCH.EXE-637CE433.pf
O45 - LFCP:[MD5.119BAD2F7AFA44CCD95B7C09289639DD] - 15/10/2013 - 09:32:06 ---A- - C:\Windows\Prefetch\TORCH.EXE-637CE43A.pf
O45 - LFCP:[MD5.366E3365D8DDD8F506EDEEE04D42A154] - 15/10/2013 - 09:32:06 ---A- - C:\Windows\Prefetch\TORCHUPDATE.EXE-AF5C86E8.pf
O45 - LFCP:[MD5.08EABBA66ECAC9FBD0C1A1A5D7E48B3F] - 15/10/2013 - 09:32:20 ---A- - C:\Windows\Prefetch\TORCH.EXE-637CE437.pf
O45 - LFCP:[MD5.1457637D576E976E97EA7F3748252DA4] - 15/10/2013 - 09:34:27 ---A- - C:\Windows\Prefetch\TORCH.EXE-637CE436.pf
O45 - LFCP:[MD5.10E6B1CCC850BBED278EE020235DE3F0] - 15/10/2013 - 09:34:49 ---A- - C:\Windows\Prefetch\CONSENT.EXE-2D674CE4.pf
O45 - LFCP:[MD5.685D0DAA98660413301BEEBC4F16816A] - 15/10/2013 - 09:34:54 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-50AF0BCC.pf
O45 - LFCP:[MD5.AB661D1AF26A5E16ADAD31B84ACD0D80] - 15/10/2013 - 09:34:59 ---A- - C:\Windows\Prefetch\ADWCLEANER.EXE-7E84DFE2.pf
O45 - LFCP:[MD5.974177655D5EB70E3A9617ECCCDF85C8] - 15/10/2013 - 09:35:19 ---A- - C:\Windows\Prefetch\CCLEANER64.EXE-1137D9AC.pf  =>Piriform Ltd
O45 - LFCP:[MD5.6C2C5C0943D36E60C4F25C1161B2DBCD] - 15/10/2013 - 09:35:22 ---A- - C:\Windows\Prefetch\IGFXSRVC.EXE-F41E6E8E.pf
O45 - LFCP:[MD5.7B2657C3A839EA2E57D4A7C7A9066D97] - 15/10/2013 - 09:35:54 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-985C34E6.pf
O45 - LFCP:[MD5.0B12B3A67BBA136B2081FE04F2A5BA1C] - 15/10/2013 - 09:37:13 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-C7028A70.pf
O45 - LFCP:[MD5.07546FBBA3A406B041FCFF1809116D00] - 15/10/2013 - 09:39:31 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-44194444.pf
O45 - LFCP:[MD5.9B7176C3CFBE29946C0CFF55387DD63A] - 15/10/2013 - 09:43:20 ---A- - C:\Windows\Prefetch\CMD.EXE-CD245F9E.pf
O45 - LFCP:[MD5.2E0A0BE55B9442717A0B7F5BDBC55DB6] - 15/10/2013 - 09:43:20 ---A- - C:\Windows\Prefetch\REG.EXE-6A8B6960.pf
O45 - LFCP:[MD5.0FE7E1989FC1150DA16D911881CCC01B] - 15/10/2013 - 09:43:58 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.02DB4F9C59BE861828C93601477501AA] - 15/10/2013 - 09:43:58 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.A59B3ED96EE258AB62E237A5C8B2E711] - 15/10/2013 - 09:43:58 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.7529D62C8260F934E4C5670AE4C9A199] - 15/10/2013 - 09:43:58 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:[MD5.C260A78EE9F9E660339D59FFEF9062AC] - 15/10/2013 - 09:43:58 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-210D3DBE.pf
O45 - LFCP:[MD5.DB4003D7D318A95CFDE4391CD18007C0] - 15/10/2013 - 09:43:59 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.394CC0A14727CF73F847CD3D83DB9CF3] - 15/10/2013 - 09:48:10 ---A- - C:\Windows\Prefetch\CATSYSDEMON.EXE-2333ED07.pf
O45 - LFCP:[MD5.7D006170D0F338DB3897F2C5B5558DD5] - 15/10/2013 - 09:48:10 ---A- - C:\Windows\Prefetch\DB2MGMTSVC.EXE-D2FE4040.pf
O45 - LFCP:[MD5.E2ABD88EBDBEFA3F299A108172E77CA9] - 15/10/2013 - 09:48:10 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-38926D07.pf
O45 - LFCP:[MD5.EDF9612866D14F582D0702E81CA641A1] - 15/10/2013 - 09:48:10 ---A- - C:\Windows\Prefetch\FIREFOX.EXE-528BC649.pf
O45 - LFCP:[MD5.710A800C47D7BD7F55E50DF8B94BAC39] - 15/10/2013 - 09:48:10 ---A- - C:\Windows\Prefetch\THUMBNAILEXTRACTIONHOST.EXE-C3FB8861.pf
O45 - LFCP:[MD5.7A2FAB6A48DEA5A9E130D33D917732A1] - 15/10/2013 - 09:48:10 ---A- - C:\Windows\Prefetch\ZHPHEP.EXE-8162C2FA.pf
O45 - LFCP:[MD5.C32B80F35A58D7E3F7A98585611D3480] - 15/10/2013 - 09:48:22 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-0C8A533A.pf
O45 - LFCP:[MD5.E0F3B034B19B338A362758E940DB16D1] - 15/10/2013 - 09:48:52 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-C6CFE2A8.pf
O45 - LFCP:[MD5.CAC6A75DB0AA11FFE1890962716124BB] - 15/10/2013 - 09:49:40 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-7B160CA5.pf
O45 - LFCP:[MD5.63745A68B53420DA30F087596FDB90A5] - 15/10/2013 - 09:49:56 ---A- - C:\Windows\Prefetch\SAPALOGIC.EXE-70B9C5DE.pf
O45 - LFCP:[MD5.CD580BF5C85CC1D48E950A283E3393D1] - 15/10/2013 - 09:50:03 ---A- - C:\Windows\Prefetch\CHACAL_IX.EXE-9F0F346B.pf
O45 - LFCP:[MD5.054196BBE1185E2DAD41C12D1265D97F] - 15/10/2013 - 09:50:08 ---A- - C:\Windows\Prefetch\WMPNETWK.EXE-13D172B9.pf
O45 - LFCP:[MD5.3CD22B56D11B2F0705DAA27971AFA7BE] - 15/10/2013 - 09:50:49 ---A- - C:\Windows\Prefetch\CMD.EXE-2EB3E6E2.pf
O45 - LFCP:[MD5.21B3A31B2BFB0EA122464ACD07795C29] - 15/10/2013 - 09:50:49 ---A- - C:\Windows\Prefetch\CONHOST.EXE-F98A1078.pf
O45 - LFCP:[MD5.1D40A157D9444C84A16AF15CCFC0B378] - 15/10/2013 - 09:50:49 ---A- - C:\Windows\Prefetch\PV.EXE-D9D90B9C.pf
O45 - LFCP:[MD5.0C91F94F798A41EEDF2F3EB534E563B6] - 15/10/2013 - 09:51:22 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-7D63BB4C.pf
O45 - LFCP:[MD5.FE3D7B38518772739B3202ACA4AAF85F] - 15/10/2013 - 09:51:28 ---A- - C:\Windows\Prefetch\SUBINACL.EXE-D08B2113.pf
O45 - LFCP:[MD5.050ACFBFE03D29B516BEB6BD21F8C05D] - 15/10/2013 - 09:51:39 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-0AD36442.pf
O45 - LFCP:[MD5.26BC1B6BA4BE6157D02BCD91702E5805] - 15/10/2013 - 09:53:00 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-62E5E10F.pf
O45 - LFCP:[MD5.12FB3CAD5CCC776BF606B55CB507F494] - 15/10/2013 - 09:53:00 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-10E4267C.pf
O45 - LFCP:[MD5.35B31F553DDF4A0D058D82D4F63CD9C4] - 15/10/2013 - 09:53:10 ---A- - C:\Windows\Prefetch\TASKENG.EXE-23205583.pf
O45 - LFCP:[MD5.116728D642805C6004BACBC46C0DBAB0] - 15/10/2013 - 09:53:17 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-2C88A316.pf
O45 - LFCP:[MD5.EDB99646C95D437B6556967C0485F4B5] - 15/10/2013 - 09:53:26 ---A- - C:\Windows\Prefetch\GIT.EXE-D6282A9C.pf
O45 - LFCP:[MD5.52463460BF549016C1BD70484E4F9805] - 15/10/2013 - 09:53:43 ---A- - C:\Windows\Prefetch\7ZG.EXE-D9AA3A0B.pf
O45 - LFCP:[MD5.FB7BD1F5C3D01BDB92FC02D4C6101482] - 15/10/2013 - 09:54:05 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-B28CC291.pf
O45 - LFCP:[MD5.DB90DE4AB9DA168AA0D7FA262748ED51] - 15/10/2013 - 09:54:28 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-5B401A7E.pf
O45 - LFCP:[MD5.733BE17920512D1404C529144E25CFEF] - 15/10/2013 - 09:55:39 ---A- - C:\Windows\Prefetch\AUDIODG.EXE-9848A323.pf
O45 - LFCP:[MD5.C102288A5E0F2E58F7E2B969CE2D9A2F] - 25/09/2013 - 08:58:14 ---A- - C:\Windows\Prefetch\CATUTIL.EXE-E6AADE73.pf
O45 - LFCP:[MD5.74FB268481FC85EA233E5F764D692BD1] - 26/09/2013 - 06:41:07 ---A- - C:\Windows\Prefetch\ONENOTE.EXE-413531AE.pf
O45 - LFCP:[MD5.0A08E675D4206C14A02D394081C7817C] - 26/09/2013 - 06:45:23 ---A- - C:\Windows\Prefetch\CHROME.EXE-CCF9F3F4.pf
O45 - LFCP:[MD5.7B86963BB9133EE5008AB3AE1A2B7C16] - 30/09/2013 - 07:48:11 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-41C08A31.pf
~ Prefetcher: 257 Scanned in 00mn 05s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
~ ShellExecuteHooks:  Scanned in 00mn 00s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Fournisseur de sécurité TLS/SSL.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Live Security Package.) -- C:\Windows\System32\livessp.dll
~ LSA: 9 Scanned in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\BasicDisplay.sys . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\BasicRender.sys . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dxgkrnl.sys . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\FsDepends.sys . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\FsDepends.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\BasicDisplay.sys . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\Drivers\BasicDisplay.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\BasicRender.sys . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\Drivers\BasicRender.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dxgkrnl.sys . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\FsDepends.sys . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\FsDepends.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (...) -- C:\Windows\System32\Drivers\rdpencdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ CSB: 17 Scanned in 00mn 00s



---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{5502e247-acae-11e2-be68-b4b52f862325}\AutoRun\command. (...) -- F:\unlock.exe (.not file.)
~ Keys:  Scanned in 00mn 00s



---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ TDSD: 2 Scanned in 00mn 00s



---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableCursorSuppression"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLinkedConnections"=1
~ MWPS: 18 Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
~ MWPE Keys: 3 Scanned in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.4F18D4C7EA14F11A7211F60D553C03DB] - 26/07/2012 - 06:00:49 ---A- . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\Drivers\3ware.sys   [106736]
O58 - SDL:[MD5.EFE001F8B312CF3BB5E29C57BCF742DF] - 17/05/2013 - 07:41:28 ---A- . (...) -- C:\Windows\SysWOW64\drivers\XRNBO.sys   [177152]
~ Drivers: 18 Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 12/10/2013 - 10:57:54 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\Cache\1\09\49870d01   [20172]
O61 - LFC: 12/10/2013 - 10:57:54 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\Cache\2\79\5346Ed01   [25366]
O61 - LFC: 12/10/2013 - 10:57:54 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\Cache\3\1D\97827d01   [47590]
O61 - LFC: 12/10/2013 - 10:57:54 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\Cache\3\42\5C074d01   [77737]
O61 - LFC: 12/10/2013 - 10:57:55 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\Cache\A\B5\0728Dd01   [63855]
O61 - LFC: 12/10/2013 - 10:57:55 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\Cache\B\30\0308Bd01   [25459]
O61 - LFC: 12/10/2013 - 10:57:55 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\Cache\C\15\C3E4Ed01   [30389]
O61 - LFC: 12/10/2013 - 10:57:55 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\Cache\D\A6\A9D60d01   [16965]
O61 - LFC: 12/10/2013 - 10:58:45 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch   [59991]
O61 - LFC: 12/10/2013 - 10:59:27 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\INBOX.mozmsgs\wfityy.hmoesryq6c9o5nl%40newsletter.macway.com.wdseml   [1296]
O61 - LFC: 12/10/2013 - 10:59:30 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Saved.sbd\Boulevard Voltaire.mozmsgs\51e3861403b406b07f6c5091a1baee1dddc.20131012050405%40mail84.us4.mcsv.net.wdseml   [8859]
O61 - LFC: 12/10/2013 - 11:00:01 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam.mozmsgs\a3d9e7ba90fa62369186bcee50c158848c7d842647e83ea83fc15d5900b8e293e6403c99c8fe1e7d%40revueshopping.com.wdseml   [43692]
O61 - LFC: 12/10/2013 - 11:00:04 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\0.0.C.8A7.1CEC66A3EBE250A.1CB7D03%40mta141.2.mdrctr.com.wdseml   [2113]
O61 - LFC: 12/10/2013 - 11:00:05 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\10815_71826022.6275718260223-4600187%40newsletter.conrad.fr.wdseml   [27275]
O61 - LFC: 12/10/2013 - 11:00:06 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\17.8B.30264.904F8525%40t.contactlab.it.wdseml   [601]
O61 - LFC: 12/10/2013 - 11:00:09 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\20131012105708.865EA85CDC7D1%40acadie.benchmark.fr.wdseml   [50517]
O61 - LFC: 12/10/2013 - 11:00:10 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\39ec6f6fa75d24a652468005cf9f97f3d56d27d6f5ad4ff9b33c7111948e7100%40web-offres.com.wdseml   [18763]
O61 - LFC: 12/10/2013 - 11:00:11 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\635171708159061154.H364069017%40emailsocket.dc.lan.wdseml   [1532]
O61 - LFC: 12/10/2013 - 11:00:12 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\6f24f5fadfdbc51f0ebf829e32f8b784%40www.affinimail.com.wdseml   [915]
O61 - LFC: 12/10/2013 - 11:00:13 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\a5947c49960696351f1b1518719f6f17%40www.affinimail.com.wdseml   [885]
O61 - LFC: 12/10/2013 - 11:00:14 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\AmericanExpress.6tqhn39630.d4z-%40email-1.americanexpress.com.wdseml   [50465]
O61 - LFC: 12/10/2013 - 11:00:16 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\E1VUkXZ-0IAPbQ-D5%40zeplan.fr.wdseml   [1291]
O61 - LFC: 12/10/2013 - 11:00:18 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\md5%3AAN1stMwozQbgAXUMahGvNw%3D%3D.wdseml   [3745]
O61 - LFC: 12/10/2013 - 11:00:18 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\md5%3ABhoj9t%2Fag6G0Hc8OClt3ow%3D%3D.wdseml   [50549]
O61 - LFC: 12/10/2013 - 11:00:18 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\md5%3AEam%2FrG%2BsJ4kI1ieqO6aQCw%3D%3D.wdseml   [3306]
O61 - LFC: 12/10/2013 - 11:00:19 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\NzM2MDcyMQAC3739281Y281BAMTM4MTUyMzU0MTU4NDYx%40mailing3.information-du-jour.com.wdseml   [8380]
O61 - LFC: 12/10/2013 - 11:00:19 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\md5%3AziQomVqx6B%2Ffs2mgBooufw%3D%3D.wdseml   [3788]
O61 - LFC: 12/10/2013 - 11:00:34 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX.mozmsgs\38.4A.27320.DA8E8525%40prs.wdseml   [50367]
O61 - LFC: 12/10/2013 - 11:01:00 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX.mozmsgs\FF.2B.27320.56E19525%40prs.wdseml   [50414]
O61 - LFC: 12/10/2013 - 11:01:05 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Important.mozmsgs\1209005870.20131011170237%40nyu.edu.wdseml   [389]
O61 - LFC: 12/10/2013 - 11:01:08 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Spam.mozmsgs\LYRIS-65967574-1785484-2013.10.12-00.00.51--cherchastus%23gmail.com%40m110.pinkmediaone.com.wdseml   [3176]
O61 - LFC: 12/10/2013 - 11:04:19 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\Junk.mozmsgs\20131012061950.CF91885E81A%40mailflip53.edt02.net.wdseml   [19004]
O61 - LFC: 12/10/2013 - 11:04:21 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\Junk.mozmsgs\NM662EADF5B126B6BEAcadremploi%40emailing.cadremploi.fr.wdseml   [5310]
O61 - LFC: 12/10/2013 - 11:04:26 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Corbeille.mozmsgs\2128960640.265881381540521437.JavaMail.root%4010.12.94.70.wdseml   [428]
O61 - LFC: 12/10/2013 - 11:04:30 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Corbeille.mozmsgs\TDGX031001C6K001000DIBQC053713101839%40bp06.net.wdseml   [2479]
O61 - LFC: 12/10/2013 - 11:04:48 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Important.mozmsgs\20131011193329.9CB5DB78%40vptrans10.leboncoin.lan.wdseml   [1386]
O61 - LFC: 12/10/2013 - 11:06:16 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\Mail\pop3.live.com\Inbox.msf   [22011]
O61 - LFC: 12/10/2013 - 11:06:17 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\training.dat   [154813]
O61 - LFC: 12/10/2013 - 11:06:17 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\traits.dat   [8]
O61 - LFC: 14/10/2013 - 10:57:32 ---A- . (...) -- C:\Users\Patrick\AppData\Local\DassaultSystemes\CATTemp\SessionInfoFile_Patrick_d287_h08m47_0.txt   [22419]
O61 - LFC: 14/10/2013 - 10:57:45 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\BrowserChoice_cw5n1h2txyewy\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:45 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.BingFinance_8wekyb3d8bbwe\Settings\settings.dat   [262144]
O61 - LFC: 14/10/2013 - 10:57:45 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.BingMaps_8wekyb3d8bbwe\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:46 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.BingNews_8wekyb3d8bbwe\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:46 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.BingSports_8wekyb3d8bbwe\Settings\settings.dat   [262144]
O61 - LFC: 14/10/2013 - 10:57:46 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.BingTravel_8wekyb3d8bbwe\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:47 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:47 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.Bing_8wekyb3d8bbwe\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:47 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.Camera_8wekyb3d8bbwe\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:47 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.Media.PlayReadyClient_8wekyb3d8bbwe\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:47 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.Reader_8wekyb3d8bbwe\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:47 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\microsoft.microsoftskydrive_8wekyb3d8bbwe\Settings\settings.dat   [262144]
O61 - LFC: 14/10/2013 - 10:57:48 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:48 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.VCLibs.110.00_8wekyb3d8bbwe\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:48 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:51 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.WinJS.1.0_8wekyb3d8bbwe\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:51 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.XboxLIVEGames_8wekyb3d8bbwe\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:51 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:51 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\microsoft.windowsphotos_8wekyb3d8bbwe\Settings\settings.dat   [262144]
O61 - LFC: 14/10/2013 - 10:57:52 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat   [262144]
O61 - LFC: 14/10/2013 - 10:57:52 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\WinStore_cw5n1h2txyewy\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:52 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\Settings\settings.dat   [8192]
O61 - LFC: 14/10/2013 - 10:57:54 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\Cache\4\9C\32F1Cd01   [47331]
O61 - LFC: 14/10/2013 - 10:58:24 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Autodesk\ACD\2012\{5783F2D7-A001-040C-0102-0060B0CE6BBA}\18.2.51.0.0\MC3\ProdDep_UserDep.mc3   [1611]
O61 - LFC: 14/10/2013 - 10:58:27 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Autodesk\AutoCAD 2012 - French\R18.2\fra\Recent\Sélectionner un fichier\13-235-IMPLANTATION-01_C.dwg.lnk   [1440]
O61 - LFC: 14/10/2013 - 10:58:30 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Autodesk\AutoCAD 2012 - French\R18.2\fra\Recent\Sélectionner un fichier\EXE-Vues en plan.dxf.lnk   [1177]
O61 - LFC: 14/10/2013 - 10:58:30 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Autodesk\AutoCAD 2012 - French\R18.2\fra\Recent\Sélectionner un fichier\Longwy-1_Poteaux.dxf.lnk   [1315]
O61 - LFC: 14/10/2013 - 10:58:35 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Autodesk\MC3\ProdInd_UserDep.mc3   [1124]
O61 - LFC: 14/10/2013 - 10:58:39 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\CATFmuPrefRepository.CATPreferences   [3296]
O61 - LFC: 14/10/2013 - 10:58:39 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\DefaultAttributesRepository.CATSettings   [888]
O61 - LFC: 14/10/2013 - 10:58:39 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\DefaultCreationAttributesPreference.CATPreferences   [1193]
O61 - LFC: 14/10/2013 - 10:58:39 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\DialogEditStack.CATSettings   [64220]
O61 - LFC: 14/10/2013 - 10:58:40 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\DialogPosition.CATSettings   [349627]
O61 - LFC: 14/10/2013 - 10:58:40 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\DraftingOptions.CATSettings   [19056]
O61 - LFC: 14/10/2013 - 10:58:40 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\DraftingSession.CATPreferences   [1183]
O61 - LFC: 14/10/2013 - 10:58:40 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\DraftingSession.CATSettings   [16740]
O61 - LFC: 14/10/2013 - 10:58:40 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\FrameConfig.CATSettings   [9648]
O61 - LFC: 14/10/2013 - 10:58:40 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\FrameGeneral.CATSettings   [61641]
O61 - LFC: 14/10/2013 - 10:58:41 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\LowGraph.CATSettings   [315]
O61 - LFC: 14/10/2013 - 10:58:41 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\MRU.CATSettings   [1530]
O61 - LFC: 14/10/2013 - 10:58:41 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\Print.CATSettings   [3054]
O61 - LFC: 14/10/2013 - 10:58:41 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\SettingsDialog.CATSettings   [834]
O61 - LFC: 14/10/2013 - 10:58:42 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\DassaultSystemes\CATSettings\WarmStart.CATSettings   [425]
O61 - LFC: 14/10/2013 - 10:58:45 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Microsoft\Excel\Excel14.xlb   [10288]
O61 - LFC: 14/10/2013 - 10:58:45 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Microsoft\IdentityCRL\Production\MetaConfig.xml   [163]
O61 - LFC: 14/10/2013 - 10:58:46 ----- . (...) -- C:\Users\Patrick\AppData\Roaming\Microsoft\Office\Recent\index.dat   [825]
O61 - LFC: 14/10/2013 - 10:58:46 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Microsoft\Office\Recent\Descriptif_illmod_600_Menuiserie_FR_8558.doc.LNK   [1193]
O61 - LFC: 14/10/2013 - 10:58:46 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Microsoft\Office\Recent\LettreMotiv.docx.LNK   [1257]
O61 - LFC: 14/10/2013 - 10:58:46 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Microsoft\Office\Recent\PlanMillet-Indice-0.zip.LNK   [1427]
O61 - LFC: 14/10/2013 - 10:58:46 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Microsoft\Outlook\Outlook~1.srs   [3584]
O61 - LFC: 14/10/2013 - 10:58:48 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Microsoft\Templates\Normal.dotm   [22185]
O61 - LFC: 14/10/2013 - 10:58:49 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Microsoft\UProof\PT12W.XML   [39736]
O61 - LFC: 14/10/2013 - 10:59:13 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\addons.sqlite   [524288]
O61 - LFC: 14/10/2013 - 10:59:13 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\blocklist.xml   [47331]
O61 - LFC: 14/10/2013 - 10:59:13 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\downloads.sqlite   [65536]
O61 - LFC: 14/10/2013 - 10:59:14 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\history.mab   [11736]
O61 - LFC: 14/10/2013 - 10:59:16 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\INBOX.mozmsgs\10811_71986226.6275719862263-4600187%40newsletter.conrad.fr.wdseml   [50430]
O61 - LFC: 14/10/2013 - 10:59:18 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\INBOX.mozmsgs\2.1.2.1101042621.762187.10018028800%40em.Iforexmail.com.wdseml   [2411]
O61 - LFC: 14/10/2013 - 10:59:20 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\INBOX.mozmsgs\20131014091210.15.841%40p.emailing.caf.fr.wdseml   [2065]
O61 - LFC: 14/10/2013 - 10:59:21 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\INBOX.mozmsgs\509acac406a97b864adf15e43468506ef34.20131014070247%40mail291.us3.mcdlv.net.wdseml   [8289]
O61 - LFC: 14/10/2013 - 10:59:30 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Saved.sbd\Boulevard Voltaire.mozmsgs\51e3861403b406b07f6c5091a1baee1dddc.20131013050314%40mail7.us2.mcsv.net.wdseml   [8854]
O61 - LFC: 14/10/2013 - 11:00:04 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash   [28199729]
O61 - LFC: 14/10/2013 - 11:00:06 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\10817_71905724.6275719057243-4600187%40newsletter.conrad.fr.wdseml   [27275]
O61 - LFC: 14/10/2013 - 11:00:07 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\2.1.1.35714.12771819.8005018958%40info.maisonapart.com.wdseml   [4428]
O61 - LFC: 14/10/2013 - 11:00:09 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\20131013153157.8DE658B6DD59F%40hercule.benchmark.fr.wdseml   [50561]
O61 - LFC: 14/10/2013 - 11:00:09 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\20468-15-9-0000012479%40sbr33.net.wdseml   [2203]
O61 - LFC: 14/10/2013 - 11:00:10 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\33.71.08266.A22AB525%40dc4mta04.wdseml   [1531]
O61 - LFC: 14/10/2013 - 11:00:11 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\5f0933b7e4eb61d23ea207ce370cc798627b5a2afb4e91d108a47f8465d0d49d0f06b46c94a78957%40revue-shopping.com.wdseml   [17093]
O61 - LFC: 14/10/2013 - 11:00:12 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\667291dc42cc85a0ca9ef80946ef361dde49e65f1608346cce34277340e78de1cac2c587d46efd3a%40r-shopping.com.wdseml   [17003]
O61 - LFC: 14/10/2013 - 11:00:12 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\6KJAExA2Z-dm9pcm9ucEBhb2wuY29t%40today.dailygeekshow.com.wdseml   [30772]
O61 - LFC: 14/10/2013 - 11:00:12 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\7aedd323f9a9647468b91e25fbe9a157%40async.facebook.com.wdseml   [1930]
O61 - LFC: 14/10/2013 - 11:00:12 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\7d4db250d7d5874f0b2251e176519939%40www.affinimail.com.wdseml   [866]
O61 - LFC: 14/10/2013 - 11:00:13 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\8a71c1136f02e0f8d850440356042238%40www.affinimail.com.wdseml   [887]
O61 - LFC: 14/10/2013 - 11:00:13 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\90e5e8a02a60c468b399f8e2162ee166bd13bdd917c46a760b72d90ed8766234%40vacances-news.com.wdseml   [19964]
O61 - LFC: 14/10/2013 - 11:00:14 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\a80bc36cf284b0c5db1fa37bf5b6e43a%40www.affinimail.com.wdseml   [891]
O61 - LFC: 14/10/2013 - 11:00:15 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\C6.26.14856.48A7B525%40t.contactlab.it.wdseml   [637]
O61 - LFC: 14/10/2013 - 11:00:15 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\cb16331fb11b464a97eed85be3edc37a%40info-emailetvous.com.wdseml   [3538]
O61 - LFC: 14/10/2013 - 11:00:16 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\E1VV5EA-0IALfZ-AC%40zeplan.fr.wdseml   [1293]
O61 - LFC: 14/10/2013 - 11:00:16 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\E1VVJ9r-0IAP6d-DA%40zeplan.fr.wdseml   [1304]
O61 - LFC: 14/10/2013 - 11:00:17 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\LISA02L0003X40030013OGWH23887313781%40bp06.net.wdseml   [2550]
O61 - LFC: 14/10/2013 - 11:00:17 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\ec992387e8f2a3f493356760212a9553af721bfc4e384a45944777a3a86d073f9718f87a1cd170a3%40infos-infomail.com.wdseml   [8245]
O61 - LFC: 14/10/2013 - 11:00:17 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\fc8cc7bb9b96497f2e90edf14d62b272%40async.facebook.com.wdseml   [1771]
O61 - LFC: 14/10/2013 - 11:00:19 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\NM600D6332B0009EDBFlapostegp%40info.eservices-laposte.fr.wdseml   [38292]
O61 - LFC: 14/10/2013 - 11:00:20 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.mozmsgs\yy0yaa.hmpve3pnt35uvwl%40newsletter.macway.com.wdseml   [1177]
O61 - LFC: 14/10/2013 - 11:00:27 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX.mozmsgs\15.5F.14364.456DB525%40washburn.wdseml   [13228]
O61 - LFC: 14/10/2013 - 11:00:36 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX.mozmsgs\47.66.27320.FBCCB525%40prs.wdseml   [11323]
O61 - LFC: 14/10/2013 - 11:00:45 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX.mozmsgs\8B.05.27320.82B5A525%40prs.wdseml   [50385]
O61 - LFC: 14/10/2013 - 11:00:50 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX.mozmsgs\B3.4E.06816.DCACB525%40fender.wdseml   [12559]
O61 - LFC: 14/10/2013 - 11:00:58 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX.mozmsgs\EF.D4.14364.91189525%40washburn.wdseml   [7899]
O61 - LFC: 14/10/2013 - 11:03:23 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\INBOX.mozmsgs\2.1.4.1101012782.2237717.624973217%40candidat.ecandidat.fr.wdseml   [3775]
O61 - LFC: 14/10/2013 - 11:03:33 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\INBOX.mozmsgs\20131014163419.22898.qmail%40ks24846.kimsufi.com.wdseml   [604]
O61 - LFC: 14/10/2013 - 11:03:34 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\INBOX.mozmsgs\20131014163631.23201.qmail%40ks24846.kimsufi.com.wdseml   [606]
O61 - LFC: 14/10/2013 - 11:03:34 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\INBOX.mozmsgs\20956592.200298.1381589189782.JavaMail.www%40wsfrf1119.wdseml   [2602]
O61 - LFC: 14/10/2013 - 11:03:47 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\INBOX.mozmsgs\81.4A.18418.065AA525%40ec2.wdseml   [3305]
O61 - LFC: 14/10/2013 - 11:03:51 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\INBOX.mozmsgs\c20edf10c0dc0b02c018ef32d27d4002%40forum-windows7-windows8.fr.wdseml   [1174]
O61 - LFC: 14/10/2013 - 11:03:57 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\INBOX.mozmsgs\NM662EF8467126CD91Bcadremploi%40emailing.cadremploi.fr.wdseml   [2403]
O61 - LFC: 14/10/2013 - 11:04:17 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\Junk.mozmsgs\2.1.4.1101012782.2252401.624973217%40candidat.ecandidat.fr.wdseml   [1495]
O61 - LFC: 14/10/2013 - 11:04:17 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\Junk.mozmsgs\2.1.4.1101012782.2252506.624973217%40candidat.ecandidat.fr.wdseml   [1270]
O61 - LFC: 14/10/2013 - 11:04:19 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\Junk.mozmsgs\20131013060729.D7571D912C%40mailflip42.edt02.net.wdseml   [20915]
O61 - LFC: 14/10/2013 - 11:04:19 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\Junk.mozmsgs\20131014060305.A196312AC7A%40mailflip34.edt02.net.wdseml   [15996]
O61 - LFC: 14/10/2013 - 11:04:25 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Corbeille.mozmsgs\2.1.5.1100009325.1113410584.1097271830523%40communication.santevet.fr.wdseml   [4931]
O61 - LFC: 14/10/2013 - 11:04:28 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Corbeille.mozmsgs\NM662F8A259126DF5E8cadremploi%40emailing.cadremploi.fr.wdseml   [36147]
O61 - LFC: 14/10/2013 - 11:04:29 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Corbeille.mozmsgs\TDGX028001C7C006000BTV49520943102003%40bp06.net.wdseml   [1352]
O61 - LFC: 14/10/2013 - 11:04:30 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Corbeille.mozmsgs\TDGX02X001C8P003000BOQ0M239753101975%40bp06.net.wdseml   [2367]
O61 - LFC: 14/10/2013 - 11:04:31 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Corbeille.mozmsgs\TDGX031001C7P001000DIBQC052463101909%40bp06.net.wdseml   [2060]
O61 - LFC: 14/10/2013 - 11:05:13 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Messages envoy&AOk-s   [327315405]
O61 - LFC: 14/10/2013 - 11:05:25 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Messages envoy&AOk-s.msf   [340138]
O61 - LFC: 14/10/2013 - 11:06:17 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\permissions.sqlite   [65536]
O61 - LFC: 14/10/2013 - 11:06:27 ---A- . (...) -- C:\Users\Patrick\Catia\Longwy\Bet-Trigo\PlanMillet-Indice-0\PlanMillet-Indice-0.zip   [2777092]
O61 - LFC: 14/10/2013 - 11:06:27 ---A- . (...) -- C:\Users\Patrick\Catia\Longwy\Coupe-SansChappe.CATProduct   [369716]
O61 - LFC: 14/10/2013 - 11:06:27 ---A- . (...) -- C:\Users\Patrick\Catia\Longwy\Longwy-1.CATDrawing   [8309999]
O61 - LFC: 14/10/2013 - 11:06:28 ----- . (...) -- C:\Users\Patrick\Catia\Longwy\PlansBat-Service\Reçu\14-10-13\13-235-SOUS-FACE-06_0.dwg   [286799]
O61 - LFC: 14/10/2013 - 11:06:28 ---A- . (...) -- C:\Users\Patrick\Catia\Longwy\PlansBat-Service\Reçu\11-10-13\13-235-ENSEMBLE-03_A.dwg   [1854850]
O61 - LFC: 14/10/2013 - 11:06:28 ---A- . (...) -- C:\Users\Patrick\Catia\Longwy\PlansBat-Service\Reçu\11-10-13\13-235-IMPLANTATION-01_C.dwg   [5842303]
O61 - LFC: 14/10/2013 - 11:06:28 ---A- . (...) -- C:\Users\Patrick\Catia\Longwy\PlansBat-Service\Reçu\11-10-13\PLANS CHARPENTE AU 11-10-2013.pdf   [1334578]
O61 - LFC: 14/10/2013 - 11:06:29 ----- . (...) -- C:\Users\Patrick\Catia\Longwy\PlansBat-Service\Reçu\14-10-13\13-235-SOUS-FACE-06_0.pdf   [269507]
O61 - LFC: 14/10/2013 - 11:06:29 ---A- . (...) -- C:\Users\Patrick\Catia\Longwy\PlansBat-Service\Reçu\4-10-13\13-235-ELEVATIONS-04_0.dwg   [1725052]
O61 - LFC: 14/10/2013 - 11:06:29 ---A- . (...) -- C:\Users\Patrick\Catia\Longwy\PlansBat-Service\Reçu\4-10-13\13-235-ENSEMBLE-03_0.dwg   [2053850]
O61 - LFC: 14/10/2013 - 11:06:29 ---A- . (...) -- C:\Users\Patrick\Catia\Longwy\PlansBat-Service\Reçu\4-10-13\13-235-IMPLANTATION-01_B.dwg   [5985882]
O61 - LFC: 14/10/2013 - 11:06:29 ---A- . (...) -- C:\Users\Patrick\Catia\Longwy\PlansBat-Service\Reçu\4-10-13\3D-PDF-Model.pdf   [2677123]
O61 - LFC: 14/10/2013 - 11:06:38 ---A- . (...) -- C:\Users\Patrick\Documents\!GillesGillet\Commandes.xlsx   [27259]
O61 - LFC: 14/10/2013 - 11:25:24 ---A- . (...) -- C:\Users\Patrick\Downloads\didacticiel_openproj.pdf   [122950]
O61 - LFC: 14/10/2013 - 11:25:24 ---A- . (.Illbruck Bâtiment Illbruck.) -- C:\Users\Patrick\Downloads\Descriptif_illmod_600_Menuiserie_FR_8558.doc   [90112]
O61 - LFC: 14/10/2013 - 11:25:25 ---A- . (...) -- C:\Users\Patrick\Downloads\FR-Serena-ReleaseManagement.pdf   [1817352]
O61 - LFC: 14/10/2013 - 11:25:25 ---A- . (...) -- C:\Users\Patrick\Downloads\FR-Serena-support.pdf   [131727]
O61 - LFC: 14/10/2013 - 11:26:14 ---A- . (...) -- C:\Users\Patrick\Downloads\pdf-FR-Serena-Corp-brochure.pdf   [270267]
O61 - LFC: 14/10/2013 - 11:26:15 ---A- . (.Nicolas Coolman.) -- C:\Users\Patrick\Downloads\ZHPDiag2.exe   [6834317]  =>.Nicolas Coolman
O61 - LFC: 15/10/2013 - 10:56:42 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Autodesk\AutoCAD 2012 - French\R18.2\fra\Support\infocenter.xml   [1310]
O61 - LFC: 15/10/2013 - 10:56:42 ---A- . (...) -- C:\Users\Patrick\AppData\Local\ars.cache   [166383]
O61 - LFC: 15/10/2013 - 10:56:44 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Autodesk\AutoCAD 2012 - French\R18.2\fra\WebServices\WSCommCntrData.xml   [3523]
O61 - LFC: 15/10/2013 - 10:57:20 ---A- . (...) -- C:\Users\Patrick\AppData\Local\census.cache   [364442]
O61 - LFC: 15/10/2013 - 10:57:42 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\preferences   [137264]
O61 - LFC: 15/10/2013 - 10:57:43 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Google\Google Calendar Sync\data_files\22210A2E64DF5E666C6D37F8286CAC59   [22839]
O61 - LFC: 15/10/2013 - 10:57:43 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Google\Google Calendar Sync\data_files\AC97F017270CC215A6B3A9B22A7224BF.FEED   [470]
O61 - LFC: 15/10/2013 - 10:57:43 ---A- . (...) -- C:\Users\Patrick\AppData\Local\housecall.guid.cache   [36]
O61 - LFC: 15/10/2013 - 10:57:43 --HA- . (...) -- C:\Users\Patrick\AppData\Local\IconCache.db   [144336]
O61 - LFC: 15/10/2013 - 10:57:52 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Temp\Patrick.bmp   [802870]
O61 - LFC: 15/10/2013 - 10:57:52 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Temp\preferences   [0]
O61 - LFC: 15/10/2013 - 10:57:54 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Mozilla Thunderbird\active-update.xml   [1174]
O61 - LFC: 15/10/2013 - 10:57:54 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Mozilla Thunderbird\updates.xml   [4636]
O61 - LFC: 15/10/2013 - 10:57:54 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Mozilla Thunderbird\updates\0\update.mar   [12900000]
O61 - LFC: 15/10/2013 - 10:57:54 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Mozilla Thunderbird\updates\0\update.status   [12]
O61 - LFC: 15/10/2013 - 10:57:55 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\Cache\B\09\AF61Ad01   [63519]
O61 - LFC: 15/10/2013 - 10:57:55 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\Cache\_CACHE_001_   [182265]
O61 - LFC: 15/10/2013 - 10:57:56 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\Cache\_CACHE_002_   [253384]
O61 - LFC: 15/10/2013 - 10:57:56 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\Cache\_CACHE_003_   [326542]
O61 - LFC: 15/10/2013 - 10:57:56 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\Cache\_CACHE_MAP_   [8468]
O61 - LFC: 15/10/2013 - 10:57:56 ---A- . (...) -- C:\Users\Patrick\AppData\Local\Thunderbird\Profiles\tftsv3nm.default\_CACHE_CLEAN_   [1]
O61 - LFC: 15/10/2013 - 10:57:56 ---A- . (...) -- C:\Users\Patrick\AppData\Local\ZHPFixReport.txt   [540]  =>.Nicolas Coolman
O61 - LFC: 15/10/2013 - 10:58:31 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Autodesk\AutoCAD 2012 - French\R18.2\fra\Support\Profiles\FixedProfile.aws   [1977]
O61 - LFC: 15/10/2013 - 10:58:32 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Autodesk\AutoCAD 2012 - French\R18.2\fra\Support\Profiles\Profil sans nom\Profile.aws   [112517]
O61 - LFC: 15/10/2013 - 10:58:46 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Microsoft\Outlook\Outlook.xml   [2958]
O61 - LFC: 15/10/2013 - 10:59:09 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Nuxeo\pgsql\global\config_exec_params   [2414]
O61 - LFC: 15/10/2013 - 10:59:09 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Nuxeo\pgsql\global\pg_control   [8192]
O61 - LFC: 15/10/2013 - 10:59:09 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Nuxeo\pgsql\pg_clog\0000   [8192]
O61 - LFC: 15/10/2013 - 10:59:09 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Nuxeo\pgsql\pg_multixact\offsets\0000   [8192]
O61 - LFC: 15/10/2013 - 10:59:09 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Nuxeo\pgsql\pg_notify\0000   [8192]
O61 - LFC: 15/10/2013 - 10:59:09 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Nuxeo\pgsql\pg_stat_tmp\pgstat.stat   [85]
O61 - LFC: 15/10/2013 - 10:59:09 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Nuxeo\pgsql\pg_subtrans\0000   [8192]
O61 - LFC: 15/10/2013 - 10:59:09 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Nuxeo\pgsql\pg_xlog\000000010000000000000001   [16777216]
O61 - LFC: 15/10/2013 - 10:59:09 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Nuxeo\pgsql\postmaster.opts   [107]
O61 - LFC: 15/10/2013 - 10:59:09 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Nuxeo\pgsql\postmaster.pid   [69]
O61 - LFC: 15/10/2013 - 10:59:13 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\cert8.db   [98304]
O61 - LFC: 15/10/2013 - 10:59:13 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\cookies.sqlite   [524288]
O61 - LFC: 15/10/2013 - 10:59:14 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\folderTree.json   [325]
O61 - LFC: 15/10/2013 - 10:59:14 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\global-messages-db.sqlite   [43188224]
O61 - LFC: 15/10/2013 - 10:59:15 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\INBOX   [212755187]
O61 - LFC: 15/10/2013 - 10:59:20 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\INBOX.mozmsgs\20131014093255.15.842%40p.emailing.caf.fr.wdseml   [2067]
O61 - LFC: 15/10/2013 - 10:59:21 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\INBOX.mozmsgs\3bfebe04813935f5d78557276638225e%40www.affinimail.com.wdseml   [909]
O61 - LFC: 15/10/2013 - 10:59:23 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\INBOX.mozmsgs\C5.16.14856.0FDCC525%40t.contactlab.it.wdseml   [637]
O61 - LFC: 15/10/2013 - 10:59:26 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\INBOX.mozmsgs\NM635CDA0950265FCF5redoute%40news.laredoute.fr.wdseml   [28953]
O61 - LFC: 15/10/2013 - 10:59:27 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\INBOX.msf   [510568]
O61 - LFC: 15/10/2013 - 10:59:28 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Saved.sbd\Boulevard Voltaire   [3549163]
O61 - LFC: 15/10/2013 - 10:59:30 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Saved.sbd\Boulevard Voltaire.mozmsgs\51e3861403b406b07f6c5091a1baee1dddc.20131015050625%40mail70.us2.rsgsv.net.wdseml   [10188]
O61 - LFC: 15/10/2013 - 10:59:30 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Saved.sbd\Boulevard Voltaire.msf   [37821]
O61 - LFC: 15/10/2013 - 11:00:00 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam   [10431703]
O61 - LFC: 15/10/2013 - 11:00:00 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam.mozmsgs\0.0.10.383.1CEC73351F188C8.1964C41%40mta141.2.mdrctr.com.wdseml   [2046]
O61 - LFC: 15/10/2013 - 11:00:01 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam.mozmsgs\113232f50f6fa6a888cb4a10e2979907b9954dbda1524d3267abbd6729ab7d8e14eb2d3114bcd3f6%40a4-mxdiscount.com.wdseml   [12042]
O61 - LFC: 15/10/2013 - 11:00:01 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam.mozmsgs\20131012083115.1B5696148151%40impulsion360.pulsation.fr.wdseml   [922]
O61 - LFC: 15/10/2013 - 11:00:01 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam.mozmsgs\577aa3120db2f581ba560523fa3f3b4daa86a377a3dffa0719a0ca71dfe9d814%40voyages-meilleurs.com.wdseml   [14852]
O61 - LFC: 15/10/2013 - 11:00:01 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam.mozmsgs\5f0933b7e4eb61d26dd9429ddc11c2211e07ed3fa477d18f417268c700d47fba7edd0603fd7a02da%40revueshopping.com.wdseml   [33999]
O61 - LFC: 15/10/2013 - 11:00:01 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam.mozmsgs\7130c217ef33a9db2cef241b18eba6e7%40mailer5.mailway.fr.wdseml   [780]
O61 - LFC: 15/10/2013 - 11:00:01 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam.mozmsgs\E1VVUGS-0IAO1g-4g%40zeplan.fr.wdseml   [1265]
O61 - LFC: 15/10/2013 - 11:00:01 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam.mozmsgs\MjA3ODMyMwAC3739281Y282BAMTM4MTYwODc3Njk3NTI5%40mailing3.information-du-jour.com.wdseml   [2604]
O61 - LFC: 15/10/2013 - 11:00:01 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam.mozmsgs\NDA0NzAxNgAC3739281Y283BAMTM4MTY5MTYxMzMzNjIy%40mailing3.information-du-jour.com.wdseml   [4667]
O61 - LFC: 15/10/2013 - 11:00:01 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam.mozmsgs\OTk5MTExOAAC3739281Y280BAMTM4MTc2OTc2ODM4NzIw%40mailing3.information-du-jour.com.wdseml   [3311]
O61 - LFC: 15/10/2013 - 11:00:01 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam.mozmsgs\af417335d00d7a334a48d460170a4c082961cab4a93155df4ac34d4bd8fb5a56%40web-offres.com.wdseml   [14889]
O61 - LFC: 15/10/2013 - 11:00:01 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam.mozmsgs\e5322a5f60f6a99b08ab6547b864b9c37fcd9e0f02f3c1bc399a6f5bb4eaff20%40web-offres.com.wdseml   [8576]
O61 - LFC: 15/10/2013 - 11:00:01 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Spam.msf   [16533]
O61 - LFC: 15/10/2013 - 11:00:21 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.aol.com\Trash.msf   [350963]
O61 - LFC: 15/10/2013 - 11:00:24 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX   [47143985]
O61 - LFC: 15/10/2013 - 11:00:24 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX.mozmsgs\05.33.06816.4182C525%40fender.wdseml   [3127]
O61 - LFC: 15/10/2013 - 11:00:34 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX.mozmsgs\38.52.27320.3ED2C525%40prs.wdseml   [2154]
O61 - LFC: 15/10/2013 - 11:00:38 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX.mozmsgs\53.5F.14364.05A2C525%40washburn.wdseml   [2121]
O61 - LFC: 15/10/2013 - 11:00:45 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX.mozmsgs\86.10.06816.E813C525%40fender.wdseml   [13428]
O61 - LFC: 15/10/2013 - 11:00:48 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX.mozmsgs\9B.EA.06816.3B52C525%40fender.wdseml   [3353]
O61 - LFC: 15/10/2013 - 11:00:48 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX.mozmsgs\A1.1B.14364.CE43C525%40washburn.wdseml   [2827]
O61 - LFC: 15/10/2013 - 11:01:00 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\INBOX.msf   [920018]
O61 - LFC: 15/10/2013 - 11:01:04 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Corbeille.msf   [3827]
O61 - LFC: 15/10/2013 - 11:01:06 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Important.msf   [53349]
O61 - LFC: 15/10/2013 - 11:01:06 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Spam   [3975870]
O61 - LFC: 15/10/2013 - 11:01:08 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Spam.msf   [86682]
O61 - LFC: 15/10/2013 - 11:02:43 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Tous les messages.msf   [1046920]
O61 - LFC: 15/10/2013 - 11:03:00 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\Envoy&AOk-s.msf   [172342]
O61 - LFC: 15/10/2013 - 11:03:08 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\INBOX   [234349952]
O61 - LFC: 15/10/2013 - 11:03:13 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\INBOX.mozmsgs\1104713880.251031381801505298.JavaMail.root%4010.12.94.70.wdseml   [428]
O61 - LFC: 15/10/2013 - 11:03:14 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\INBOX.mozmsgs\1171167774.12064311381809485449.JavaMail.admin%40travelsoft.fr.wdseml   [1563]
O61 - LFC: 15/10/2013 - 11:03:23 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\INBOX.mozmsgs\2.1.5.1100010265.1113439266.1105765838335%40messages.viadeo.com.wdseml   [4567]
O61 - LFC: 15/10/2013 - 11:03:39 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\INBOX.mozmsgs\47.19.17441.2904C525%40ec1.wdseml   [3257]
O61 - LFC: 15/10/2013 - 11:03:57 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\INBOX.mozmsgs\NM6630C1B43126F1515cadremploi%40emailing.cadremploi.fr.wdseml   [2499]
O61 - LFC: 15/10/2013 - 11:03:59 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\INBOX.msf   [898495]
O61 - LFC: 15/10/2013 - 11:04:16 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\Junk   [10089964]
O61 - LFC: 15/10/2013 - 11:04:19 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\Junk.mozmsgs\20131015010354.58C1B366%40heinrich.experteer.com.wdseml   [3278]
O61 - LFC: 15/10/2013 - 11:04:20 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\Junk.mozmsgs\51554ME13536D2013101419393379N503797%40mcom.pcsoft.fr.wdseml   [2415]
O61 - LFC: 15/10/2013 - 11:04:21 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\Junk.msf   [196729]
O61 - LFC: 15/10/2013 - 11:04:23 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Corbeille   [18250932]
O61 - LFC: 15/10/2013 - 11:04:31 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Corbeille.msf   [248730]
O61 - LFC: 15/10/2013 - 11:05:13 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Important.msf   [992863]
O61 - LFC: 15/10/2013 - 11:05:25 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Spam   [1641156]
O61 - LFC: 15/10/2013 - 11:05:25 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Spam.mozmsgs\20131014191758.B8812028EFB44C7F%40infos-hotelbb.com.wdseml   [19985]
O61 - LFC: 15/10/2013 - 11:05:25 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Spam.msf   [9594]
O61 - LFC: 15/10/2013 - 11:05:25 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Tous les messages   [111205451]
O61 - LFC: 15/10/2013 - 11:06:11 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Tous les messages.mozmsgs\NM662EADF5B126B6BEAcadremploi%40emailing.cadremploi.fr.wdseml   [0]
O61 - LFC: 15/10/2013 - 11:06:14 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Tous les messages.msf   [2284101]
O61 - LFC: 15/10/2013 - 11:06:14 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\junklog.html   [177829]
O61 - LFC: 15/10/2013 - 11:06:14 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\key3.db   [16384]
O61 - LFC: 15/10/2013 - 11:06:14 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\localstore.rdf   [18158]
O61 - LFC: 15/10/2013 - 11:06:16 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\Mail\pop3.live.com\popstate.dat   [64]
O61 - LFC: 15/10/2013 - 11:06:17 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\panacea.dat   [47918]
O61 - LFC: 15/10/2013 - 11:06:17 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\parent.lock   [0]
O61 - LFC: 15/10/2013 - 11:06:17 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\prefs.js   [21987]
O61 - LFC: 15/10/2013 - 11:06:17 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\session.json   [499]
O61 - LFC: 15/10/2013 - 11:06:17 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\Thunderbird\Profiles\tftsv3nm.default\virtualFolders.dat   [10]
O61 - LFC: 15/10/2013 - 11:06:22 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\ZHP\Log.txt   [120871]  =>.Nicolas Coolman
O61 - LFC: 15/10/2013 - 11:06:22 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\ZHP\TestsZHPDiag.txt   [2892]  =>.Nicolas Coolman
O61 - LFC: 15/10/2013 - 11:06:22 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\ZHP\ZHPADSReport.txt   [351]  =>.Nicolas Coolman
O61 - LFC: 15/10/2013 - 11:06:22 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\ZHP\ZHPDiag.txt   [406377]  =>.Nicolas Coolman
O61 - LFC: 15/10/2013 - 11:06:22 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\ZHP\ZHPFix[R1].txt   [540]  =>.Nicolas Coolman
O61 - LFC: 15/10/2013 - 11:06:22 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\ZHP\ZHPFix[R2].txt   [684]  =>.Nicolas Coolman
O61 - LFC: 15/10/2013 - 11:06:22 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\ZHP\ZHPFix[R3].txt   [753]  =>.Nicolas Coolman
O61 - LFC: 15/10/2013 - 11:06:22 ---A- . (...) -- C:\Users\Patrick\AppData\Roaming\ZHP\ZHPFix[R4].txt   [1422]  =>.Nicolas Coolman
O61 - LFC: 15/10/2013 - 11:06:57 ---A- . (...) -- C:\Users\Patrick\Documents\Bât G.pod   [19483]
O61 - LFC: 15/10/2013 - 11:14:26 ---A- . (...) -- C:\Users\Patrick\Documents\Fichiers Outlook\Fichier de données Outlook.pst   [1033216]
O61 - LFC: 15/10/2013 - 11:17:20 ---A- . (...) -- C:\Users\Patrick\Documents\N2.pod   [55281]
O61 - LFC: 15/10/2013 - 11:17:20 ---A- . (...) -- C:\Users\Patrick\Documents\OpenProj\Base.pod   [9085]
O61 - LFC: 15/10/2013 - 11:17:20 ---A- . (...) -- C:\Users\Patrick\Documents\OpenProj\Longwy.pod   [62326]
O61 - LFC: 15/10/2013 - 11:17:22 ---A- . (...) -- C:\Users\Patrick\Documents\Sauv-BaseRegistre\cc_20131015_101553.reg   [100644]
O61 - LFC: 15/10/2013 - 11:17:22 ---A- . (...) -- C:\Users\Patrick\Documents\Sauv-BaseRegistre\cc_20131015_101613.reg   [2300]
O61 - LFC: 15/10/2013 - 11:17:33 ---A- . (...) -- C:\Users\Patrick\Downloads\AdwCleaner (1).exe   [1048960]
O61 - LFC: 15/10/2013 - 11:17:33 ---A- . (...) -- C:\Users\Patrick\Downloads\AdwCleaner.exe   [1048960]
O61 - LFC: 15/10/2013 - 11:17:33 ---A- . (...) -- C:\Users\Patrick\Downloads\BestCodecsPackSetup.exe   [816512]
O61 - LFC: 15/10/2013 - 11:25:25 ---A- . (...) -- C:\Users\Patrick\Downloads\Hard_Disk_Sentinel_Pro_4.00_Build_5237_inclus_patch_Adham-Astuce.rar   [13249067]
O61 - LFC: 15/10/2013 - 11:25:26 ---A- . (.Trend Micro Inc..) -- C:\Users\Patrick\Downloads\HousecallLauncher64.exe   [2405672]
O61 - LFC: 15/10/2013 - 11:26:14 ---A- . (.ParetoLogic Inc..) -- C:\Users\Patrick\Downloads\ParetoLogic PC Health Advisor_fr (1).exe   [5248216] =>Rogue.PCHealthAdvisor
O61 - LFC: 15/10/2013 - 11:26:14 ---A- . (.ParetoLogic Inc..) -- C:\Users\Patrick\Downloads\ParetoLogic PC Health Advisor_fr.exe   [5248216] =>Rogue.PCHealthAdvisor
O61 - LFC: 15/10/2013 - 11:26:30 ---A- . (...) -- C:\Users\Patrick\Links\Desktop.lnk   [484]
O61 - LFC: 15/10/2013 - 11:26:30 ---A- . (...) -- C:\Users\Patrick\Links\Downloads.lnk   [943]
O61 - LFC: 15/10/2013 - 11:26:30 ---A- . (...) -- C:\Users\Patrick\Links\RecentPlaces.lnk   [383]
~ 2 Fichiers temporaires (Temporary files)
~ Files: 298 Scanned in 29mn 57s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1  =>.Nicolas Coolman
O63 - Logiciel: HiJackThis - (.Trend Micro.) [HKLM] -- {45A66726-69BC-466B-A7A4-12FCBA4883D7}
~ ADS:  Scanned in 00mn 00s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe  =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe  =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
~ FASS Keys: 19 Scanned in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <Torch> <>[HKLM\..\Shell\open\Command] (.Not Key.)
~ Keys:  Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
~ Keys:  Scanned in 00mn 00s



---\\ Enumère les fichiers Crack & Keygen (CKF) (O82)
C:\Program Files (x86)\Git\bin\ssh-keygen.exe
C:\Users\Patrick\Desktop\Documents\Documents (2)\Autodesk\Inventor\INVENTOR-cle\Keygen ALL AUTODESK 2012\xf-a2012-64bits.rar
C:\Users\Patrick\Documents\CleUSB\INVENTOR KEYGEN\Keygen ALL AUTODESK 2012\xf-a2012-32bits.rar
C:\Users\Patrick\Documents\CleUSB\INVENTOR KEYGEN\Keygen ALL AUTODESK 2012\xf-a2012-64bits.rar
C:\Users\Patrick\Documents\CleUSB\INVENTOR KEYGEN\Keygen ALL AUTODESK 2012\xf-adesk2012x64.exe
C:\Users\Patrick\Documents\CleUSB\INVENTOR KEYGEN\XFORCE\xf-invpro2013x64.exe
C:\Users\Patrick\Documents\CleUSB\INVENTOR KEYGEN\XFORCE Inventor pro 32bit\XFORCE\xf-invpro2013_x32.rar
C:\Users\Patrick\Downloads\Biblio-1\Archives3\Windows_7_Professional_keygen(1).zip
C:\Users\Patrick\Downloads\Biblio-1\Archives3\Windows_7_Professional_keygen.zip
~ Files:  Scanned in 02mn 41s



---\\ Enumère les service demarrés par Svchost (SSS) (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll   [190976]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [149504]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [149504]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [309248]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll   [1366016]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [1156096]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll   [99840]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à distance.) -- C:\Windows\System32\rasmans.dll   [358400]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [107520]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll   [62976]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [438784]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [305664]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\system32\wuaueng.dll   [3275776]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll   [826368]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [565760]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [894464]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [70144]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [151552]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [105472]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1285632]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [219648]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll   [80896]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [134144]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [209920]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll   [291328]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll   [84992]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll   [97792]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [190976]
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll   [1964544]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [47104]
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll   [207872]
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Microsoft.) -- C:\Windows\System32\ncasvc.dll   [161792]
O83 - Search Svchost Services: SystemEventsBroker (SystemEventsBroker) . (.Microsoft Corporation - Service Broker pour les événements système.) -- C:\Windows\System32\SystemEventsBrokerServer.dll   [180224]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll   [187392]
~ Services: 35 Scanned in 00mn 00s



---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.6EA18C193AAF14F9EDFF65EED8EFAB2C] [SPRF][09/10/2013] (...) -- C:\Users\Patrick\AppData\Local\Temp\Quarantine.exe   [344355]
[MD5.5BE58EBEB5A37D40369A15C8CCF3972E] [SPRF][11/10/2013] (...) -- C:\Users\Patrick\Desktop\8883.bin   [192]
[MD5.E6C5EA995B88B2BEE003BC998CDFE57F] [SPRF][04/04/2013] (.Microsoft - Testcab.) -- C:\Users\Patrick\Desktop\INSTALLW8SEPA.exe   [20992]
[MD5.3B89AD8795A7DD6BABD7C7D34E8AF3DF] [SPRF][17/05/2013] (...) -- C:\Users\Patrick\Desktop\setup_bis.exe   [60512286]
[MD5.DCA441DA67F1D3779E1834F2183555A6] [SPRF][09/02/2007] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropCHS.dll   [114768]
[MD5.1CBB5398A05D23F6D969AD80B10658C9] [SPRF][14/02/2007] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropCHT.dll   [116304]
[MD5.A2C9B7C5D98C7B7DCE8BAC1A9788DEB8] [SPRF][13/02/2007] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropCSY.dll   [116304]
[MD5.2783553FB910F6FDEC97622E049C51E4] [SPRF][14/02/2007] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropDEU.dll   [114768]
[MD5.8E8CEA4D58BBAA30FDF39EE1936360F2] [SPRF][04/02/2011] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropENU.dll   [113888]
[MD5.90F7188AFE06B3D16BCF6733A4C17ACE] [SPRF][14/02/2007] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropESP.dll   [114768]
[MD5.CBE31015B53BE10F453C7B93A3056CB8] [SPRF][18/02/2011] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropFRA.dll   [116040]
[MD5.4E31C888269AC0B27DDD11584EF86A38] [SPRF][13/02/2007] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropHUN.dll   [114768]
[MD5.E046BBFA5DFCE6CD1A2A302358031484] [SPRF][12/02/2007] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropITA.dll   [114768]
[MD5.3BF9FC1355DC01AC9CA407B987578A12] [SPRF][13/02/2007] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropJPN.dll   [114768]
[MD5.ED05114F05E1DE36B10CE3801FB5E7EC] [SPRF][15/02/2007] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropKOR.dll   [126032]
[MD5.A6B78CBECB2A203AD4A1DD9ACAEDB0B3] [SPRF][12/02/2007] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropPLK.dll   [114768]
[MD5.D41D8CD98F00B204E9800998ECF8427E] [SPRF][12/06/2009] (...) -- C:\Windows\Downloaded Program Files\IDropPTB.dll   [0]
[MD5.484407027EDBB6DCAD9496038D35F9F2] [SPRF][09/02/2007] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropRUS.dll   [116816]
~ Files: 18 Scanned in 00mn 00s



---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "vm-monitoring-rpc" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "vm-monitoring-dcom" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMP-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMP-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "SNMPTRAP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "SNMPTRAP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "Wininit-Shutdown-In-Rule-TCP-RPC" | In - None - P6 - FALSE | .(.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\system32\wininit.exe
O87 - FAEL: "Wininit-Shutdown-In-Rule-TCP-RPC-EPMapper" | In - None - P6 - FALSE | .(.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\system32\wininit.exe
O87 - FAEL: "PNRPMNRS-PNRP-In-UDP" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Netlogon-TCP-RPC-In" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\System32\lsass.exe
O87 - FAEL: "WMI-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "MsiScsi-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "ProximityUxHost-Sharing-In-TCP-NoScope" | In - None - P6 - TRUE | .(.Microsoft Corporation - Hôte UX de proximité.) -- C:\Windows\system32\proximityuxhost.exe
O87 - FAEL: "ProximityUxHost-Sharing-Out-TCP-NoScope" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Hôte UX de proximité.) -- C:\Windows\system32\proximityuxhost.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnPHost-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNTS-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnPHost-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-DAS-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Device Association Framework Provider Host.) -- C:\Windows\system32\dashost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNTS-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNT-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnPHost-Out-TCP" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-DAS-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Device Association Framework Provider Host.) -- C:\Windows\system32\dashost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNTS-Out-TCP" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-WSDEVNT-Out-TCP" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-RAServer-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-RAServer-Out-TCP-NoScope-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-DCOM-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-WMP-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-WMP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-QWave-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-WMP-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-WMP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-In-UDP-NoScope" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-UDP-LocalSubnetScope" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-UDP-PlayToScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-Out-UDP-NoScope" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-Out-UDP-LocalSubnetScope" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-Out-UDP-PlayToScope" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-RTSP-NoScope" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-RTSP-LocalSubnetScope" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-In-RTSP-PlayToScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Serveur Lire sur.) -- C:\Windows\system32\mdeserver.exe
O87 - FAEL: "PlayTo-SSDP-Discovery-PlayToScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-QWave-In-UDP-PlayToScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-QWave-Out-UDP-PlayToScope" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-QWave-In-TCP-PlayToScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PlayTo-QWave-Out-TCP-PlayToScope" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "TPMVSCMGR-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "TPMVSCMGR-Server-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - TPM Virtual Smart Card Manager DCOM Server.) -- C:\Windows\system32\RmtTpmVscMgrSvr.exe
O87 - FAEL: "TPMVSCMGR-Server-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - TPM Virtual Smart Card Manager DCOM Server.) -- C:\Windows\system32\RmtTpmVscMgrSvr.exe
O87 - FAEL: "TPMVSCMGR-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "TPMVSCMGR-Server-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - TPM Virtual Smart Card Manager DCOM Server.) -- C:\Windows\system32\RmtTpmVscMgrSvr.exe
O87 - FAEL: "TPMVSCMGR-Server-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - TPM Virtual Smart Card Manager DCOM Server.) -- C:\Windows\system32\RmtTpmVscMgrSvr.exe
O87 - FAEL: "Collab-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-IPHTTPS-Out" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DNS-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe
O87 - FAEL: "RVM-VDS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-TERMSRV-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-MCX2SVC-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-PlayTo-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-PlayTo-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-FDPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-PeerDist-WSD-In" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-PeerDist-WSD-Out" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "SPPSVC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - KMS Connection Broker.) -- C:\Windows\system32\sppextcomobj.exe
O87 - FAEL: "SPPSVC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - KMS Connection Broker.) -- C:\Windows\system32\sppextcomobj.exe
O87 - FAEL: "RemoteDesktop-UserMode-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteDesktop-UserMode-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{F9A9B85C-703E-4535-B30B-14E8F3046EB7}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Microsoft OneNote.) -- C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.exe  =>.Microsoft Corporation
O87 - FAEL: "{5F9F4DB6-6ED0-45B7-A224-EBD5574E1877}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Microsoft OneNote.) -- C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.exe  =>.Microsoft Corporation
O87 - FAEL: "{49C8BBA2-5438-4E9F-B292-44840F4F253A}" | In - None - P17 - TRUE | .(.PTC - ProductView (TM) - productview.exe.) -- C:\Program Files (x86)\PTC\PVX\i486_nt\obj\productview.exe
O87 - FAEL: "{72C1F4A5-E311-43C6-9788-A6099E3A282F}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{08010AA1-319B-4FA2-949A-474B5672265C}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{DF971A4F-C208-4799-BF01-DA3AD68F6112}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "{51DE77D2-FD35-4CCA-A0AE-318719D1EFBB}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{A8B2D98E-AA4D-4D00-A009-017ED7B9EB0D}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{3BE73516-05EE-4471-B4A5-0B984808847F}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{C7CC0BCB-55B1-457C-840E-69571BF0BD62}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{6F1CA2D1-C204-4461-B6D8-E08D01AA4C15}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{CDA564CB-CEA9-4976-B3BC-C65E1EBC5211}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Device Association Framework Provider Host.) -- C:\Windows\system32\dashost.exe
O87 - FAEL: "{C1931BDC-0629-4926-BEED-43BA2A4642F4}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{622D2D36-D599-4630-A1B4-BF07AD84C8B6}" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{F8E2224D-034A-4138-8029-8B6AAA5A893C}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{B7724545-8278-4979-9C80-340A39BED51B}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "TCP Query User{4F2E8C7F-E0B7-4EA6-A8E3-7CD64761FB57}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\orbixd.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\orbixd.exe
O87 - FAEL: "UDP Query User{BFB93CEC-5FE4-4E18-A2FD-A0C3424CB7DB}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\orbixd.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\orbixd.exe
O87 - FAEL: "TCP Query User{CCF0F9D3-3114-4409-8A8E-DE99ADC14723}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe" | In - Private - P6 - TRUE | .(.Dassault Systemes.) -- C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe
O87 - FAEL: "UDP Query User{F7AE76C1-86EF-47EA-8CD4-08375EBC16BF}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe" | In - Private - P17 - TRUE | .(.Dassault Systemes.) -- C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe
O87 - FAEL: "TCP Query User{5B9095A2-4AEA-4A2B-B945-71705438A997}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" | In - Private - P6 - TRUE | .(.Microsoft Corporation.) -- C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
O87 - FAEL: "UDP Query User{3A7CC99A-08D9-4DA9-AD97-3269EE2E8909}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" | In - Private - P17 - TRUE | .(.Microsoft Corporation.) -- C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
O87 - FAEL: "{FBC9A143-C603-48B2-A686-1EF02B2F506E}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Visual Basic Command Line Compiler.) -- C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
O87 - FAEL: "{7E0AC1ED-C55B-431D-8A05-B192657845AE}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Visual Basic Command Line Compiler.) -- C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
O87 - FAEL: "{4C9C6825-3168-4CD9-B38F-3E9425C74BB1}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{731B2E21-C30C-4FC4-B1D2-679F4D05C598}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{260898DE-F2B3-4A47-A7E3-5FCDDB6FACAB}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Microsoft SharePoint Workspace.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.exe
O87 - FAEL: "{0C0528F5-2A46-4FF2-A6C4-97FC0EA83F84}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Microsoft SharePoint Workspace.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.exe
O87 - FAEL: "{6C82E299-1D97-4A8A-AEBE-2B05E6055F78}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Microsoft OneNote.) -- C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.exe  =>.Microsoft Corporation
O87 - FAEL: "{3126D6DA-C0DC-4ECE-A53A-C0C4D6160AB2}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Microsoft OneNote.) -- C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.exe  =>.Microsoft Corporation
O87 - FAEL: "{510497A1-39AE-4969-AB8A-76D5C32C9166}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Microsoft Outlook.) -- C:\Program Files (x86)\Microsoft Office\Office14\outlook.exe
O87 - FAEL: "TCP Query User{506284EE-EF46-4221-B797-5B44AEBEBDD8}C:\program files\ptc\creo elements\pro5.0\x86e_win64\nms\nmsd.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files\ptc\creo elements\pro5.0\x86e_win64\nms\nmsd.exe
O87 - FAEL: "UDP Query User{6719D776-2BC0-459E-B13B-6148956F9D16}C:\program files\ptc\creo elements\pro5.0\x86e_win64\nms\nmsd.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files\ptc\creo elements\pro5.0\x86e_win64\nms\nmsd.exe
O87 - FAEL: "TCP Query User{F9F9DD07-2DC1-4972-9937-4D4815B1817F}C:\program files\ptc\creo elements\pro5.0\x86e_win64\obj\xtop.exe" | In - Public - P6 - TRUE | .(.PTC.) -- C:\program files\ptc\creo elements\pro5.0\x86e_win64\obj\xtop.exe
O87 - FAEL: "UDP Query User{E7DFD2DF-E614-469B-BBA0-D42A8FE7B590}C:\program files\ptc\creo elements\pro5.0\x86e_win64\obj\xtop.exe" | In - Public - P17 - TRUE | .(.PTC.) -- C:\program files\ptc\creo elements\pro5.0\x86e_win64\obj\xtop.exe
O87 - FAEL: "TCP Query User{2E32F8CE-285A-42F5-9B1B-3FB8163E4B1B}C:\program files\ptc\creo elements\pro5.0\x86e_win64\obj\pro_comm_msg.exe" | In - Public - P6 - TRUE | .(...) -- C:\program files\ptc\creo elements\pro5.0\x86e_win64\obj\pro_comm_msg.exe
O87 - FAEL: "UDP Query User{325FF26C-576A-428A-B287-8ED11B1C5F57}C:\program files\ptc\creo elements\pro5.0\x86e_win64\obj\pro_comm_msg.exe" | In - Public - P17 - TRUE | .(...) -- C:\program files\ptc\creo elements\pro5.0\x86e_win64\obj\pro_comm_msg.exe
O87 - FAEL: "TCP Query User{B39BC3B3-01C2-4A43-9157-74FB5B83DDF8}C:\program files (x86)\videolan\vlc\vlc.exe" | In - Public - P6 - TRUE | .(.VideoLAN - VLC media player 2.0.6.) -- C:\program files (x86)\videolan\vlc\vlc.exe  =>.VideoLAN
O87 - FAEL: "UDP Query User{5D41A727-2E39-4CF1-92E0-BB6962A7FFFB}C:\program files (x86)\videolan\vlc\vlc.exe" | In - Public - P17 - TRUE | .(.VideoLAN - VLC media player 2.0.6.) -- C:\program files (x86)\videolan\vlc\vlc.exe  =>.VideoLAN
O87 - FAEL: "{71BE0671-BBFD-4C38-A38D-3D5D1457E5A7}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{ED7E5487-D4AA-4581-99CD-5F8EAA356656}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\System32\lsass.exe
O87 - FAEL: "{B6EC5D71-9363-4669-A1A3-C69E6A9701BE}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{B4ADD51C-B26A-4CD6-BDF0-64CCEEED8DAC}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{B43DB588-F768-441C-B6F6-6AD0F534DE15}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{95652BF7-27EE-4B68-9EDD-305792D7D281}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{929A497F-EAA8-4448-89E8-27F73D820262}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{477DDCAE-D679-4FE1-92AF-DA8BB5BB38A2}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)  =>.Microsoft Corporation
O87 - FAEL: "{17235BBB-0DDB-48AA-A4D7-C680A299A034}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)  =>.Microsoft Corporation
O87 - FAEL: "{4024BEF1-75EB-4D09-A195-9C73E13EDA92}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)  =>.Microsoft Corporation
O87 - FAEL: "{1560C88A-8297-46FB-B297-43E3AB28FA93}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)  =>.Microsoft Corporation
O87 - FAEL: "{1D07E1E5-657E-4F5F-9550-E5823EC66CE5}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "{7783A5AB-BEE2-478D-9868-0EC48F201522}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "{52F1C420-63B3-4A9C-9900-4B4D46B917E1}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "{C66EC5A6-824E-4293-ADA3-8669FDF7F99A}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{C9F5BB43-2BE8-4569-B519-26994032D1E1}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{FDA368E9-2BCE-49A2-A562-A9384A3F8345}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{924D34D7-9F40-41D6-BCE9-56951FA95B26}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{96522DF1-6C4F-4A7D-B8AD-B00086C31ED7}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{6A84B7B6-0239-43E8-970D-1F04E95A9034}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{D012111D-55A5-45FA-92D9-0936AFB448B4}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{B977644B-62F8-4785-8C00-58631D1C0595}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{58F77080-3124-4BA4-BFB0-3F64854F9133}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "{4A7A4180-3720-4180-917A-61A4AA88466D}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "{49A199F0-F3C3-4F94-A4BC-D5FB170EF886}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "{A92C6B53-4A28-4493-834D-2A7ED17B31D7}" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{92D7B63B-1713-42FE-9320-5B875A1E247C}" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{1C96AB80-E9F4-4820-B62D-A816DB1F4A86}" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{8E553840-4B52-47D9-8687-0867DF5954CA}" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{5F197572-CA27-48BD-898D-05C81EEF738B}" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{4F640007-A9EC-4B7E-B9C7-957DD5D66058}" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{30E4E2DC-7FDC-4885-A039-E270428A3936}" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{712B3C1F-F2E7-4E68-9F03-A761ADE97DCA}" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "TCP Query User{9A4D9DF2-69DE-4A8B-8AF5-4B4E8CC9F526}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\catutil.exe" | In - Private - P6 - TRUE | .(.Dassault Systemes.) -- C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\catutil.exe
O87 - FAEL: "UDP Query User{280ABE62-244E-47D1-8869-1D5D894E5365}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\catutil.exe" | In - Private - P17 - TRUE | .(.Dassault Systemes.) -- C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\catutil.exe
O87 - FAEL: "{2B4C69DE-454D-4F60-9C4C-CF40267A8118}" | In - None - P17 - TRUE | .(.Samsung Electronics Co., Ltd. - Samsung UPD Printer Selector.) -- C:\Program Files (x86)\Samsung\Samsung Universal Print Driver 2\PrinterSelector\SUPDApp.exe
O87 - FAEL: "TCP Query User{FBD06CE7-9A3B-4E23-A3B2-27AD285CC9B8}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe" | In - Public - P6 - TRUE | .(.Dassault Systemes.) -- C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe
O87 - FAEL: "UDP Query User{7321C19A-DF66-48ED-A96D-DC8B206F0B3F}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe" | In - Public - P17 - TRUE | .(.Dassault Systemes.) -- C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe
O87 - FAEL: "TCP Query User{C1430216-65C5-40DE-8578-9550A4DBD0E1}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\catutil.exe" | In - Public - P6 - TRUE | .(.Dassault Systemes.) -- C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\catutil.exe
O87 - FAEL: "UDP Query User{9F245F68-7065-401D-8B8C-76CCBD8A4D7D}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\catutil.exe" | In - Public - P17 - TRUE | .(.Dassault Systemes.) -- C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\catutil.exe
O87 - FAEL: "TCP Query User{DFCDE1C2-7FE2-4900-B0F3-4D86E67D882B}C:\app\patrick\product\12.1.0\dbhome_2\jdk\jre\bin\java.exe" | In - Private - P6 - TRUE | .(.Sun Microsystems, Inc..) -- C:\app\patrick\product\12.1.0\dbhome_2\jdk\jre\bin\java.exe
O87 - FAEL: "UDP Query User{B000D7EB-2DD5-4DE6-A393-D71781C2A717}C:\app\patrick\product\12.1.0\dbhome_2\jdk\jre\bin\java.exe" | In - Private - P17 - TRUE | .(.Sun Microsystems, Inc..) -- C:\app\patrick\product\12.1.0\dbhome_2\jdk\jre\bin\java.exe
O87 - FAEL: "{E3787DB3-56C3-4FF6-B911-4CF688180F08}" |In - None - P17 - TRUE | .(...) -- C:\Users\Patrick\AppData\Local\Torch\Plugins\Torrent\TorchTorrent.exe (.not file.)
O87 - FAEL: "TCP Query User{18B94B8B-B19F-4094-B2CA-4CB60392177E}C:\windows\system32\java.exe" | In - Private - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\windows\system32\java.exe
O87 - FAEL: "UDP Query User{8A458A7A-D628-4158-BA77-23DC1807B2B5}C:\windows\system32\java.exe" | In - Private - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\windows\system32\java.exe
O87 - FAEL: "TCP Query User{00D69718-AE3D-4045-BF8F-224CC7391F8E}C:\program files\java\jre7\bin\java.exe" | In - Private - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\java.exe
O87 - FAEL: "UDP Query User{8593F522-8884-46CB-8C9E-A3DB0C8ECA45}C:\program files\java\jre7\bin\java.exe" | In - Private - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\java.exe
O87 - FAEL: "{9014A39C-6D4F-40B1-8F31-61F5BFB73895}" | In - Private - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
O87 - FAEL: "{7EE38C29-CAC4-468B-9EC7-F49CDF11E101}" | In - Private - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
O87 - FAEL: "{75A8E550-58DE-48BF-A27E-399B98C5836E}" | In - Private - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O87 - FAEL: "{192A5314-1A7B-48BD-BCA2-1CF4B113D318}" | In - Private - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O87 - FAEL: "TCP Query User{31931A4C-8077-4A5E-89DF-97D10F008215}C:\program files (x86)\konica minolta\print status notifier\kmpsnv3.exe" | In - Private - P6 - TRUE | .(.KONICA MINOLTA BUSINESS TECHNOLOGIES, INC..) -- C:\program files (x86)\konica minolta\print status notifier\kmpsnv3.exe
O87 - FAEL: "UDP Query User{F8E04ABB-713E-4D9B-820A-D46A53A569C4}C:\program files (x86)\konica minolta\print status notifier\kmpsnv3.exe" | In - Private - P17 - TRUE | .(.KONICA MINOLTA BUSINESS TECHNOLOGIES, INC..) -- C:\program files (x86)\konica minolta\print status notifier\kmpsnv3.exe
O87 - FAEL: "{EAB9CB18-BDC8-48E2-8673-98ECE521DC90}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
O87 - FAEL: "TCP Query User{1C9F20F3-CED5-4D13-A14C-85CB8E974B5B}C:\program files (x86)\konica minolta\print status notifier\kmpsnv3.exe" | In - Public - P6 - TRUE | .(.KONICA MINOLTA BUSINESS TECHNOLOGIES, INC..) -- C:\program files (x86)\konica minolta\print status notifier\kmpsnv3.exe
O87 - FAEL: "UDP Query User{9A80E794-2B4E-4BD1-900F-1AD786FBEB14}C:\program files (x86)\konica minolta\print status notifier\kmpsnv3.exe" | In - Public - P17 - TRUE | .(.KONICA MINOLTA BUSINESS TECHNOLOGIES, INC..) -- C:\program files (x86)\konica minolta\print status notifier\kmpsnv3.exe
O87 - FAEL: "TCP Query User{D3DF8CC8-E611-40DD-9EB5-05755E4D8DFB}C:\wamp\bin\apache\apache2.4.2\bin\httpd.exe" | In - Private - P6 - TRUE | .(.Apache Software Foundation - Apache HTTP Server.) -- C:\wamp\bin\apache\apache2.4.2\bin\httpd.exe
O87 - FAEL: "UDP Query User{DB6FAE48-4CF5-4B67-AB0E-2250EAFAFCBF}C:\wamp\bin\apache\apache2.4.2\bin\httpd.exe" | In - Private - P17 - TRUE | .(.Apache Software Foundation - Apache HTTP Server.) -- C:\wamp\bin\apache\apache2.4.2\bin\httpd.exe
O87 - FAEL: "{9F80BFCD-93C0-4E00-BC3C-2343A0867AC1}" | In - Public - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
O87 - FAEL: "{5F907B78-C260-4DDB-984C-4B27B6182E85}" | In - Public - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
O87 - FAEL: "{64E05B51-126E-48CE-BB49-697F456E4600}" | In - Public - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O87 - FAEL: "{7DF69E2A-C325-423F-91C5-BA0D7A2882A3}" | In - Public - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O87 - FAEL: "{AF9DB25F-ED90-4FEA-B7D1-493C4D2F892B}" | In - Private - P6 - TRUE | .(.SafeNet, Inc.) -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O87 - FAEL: "{2BE0CF73-7CAA-41E4-AE4A-903912AE143E}" | In - Private - P17 - TRUE | .(.SafeNet, Inc.) -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O87 - FAEL: "{CDF45F26-CA69-4F42-AC47-7F7FABDEF7B6}" | In - Public - P6 - TRUE | .(.SafeNet, Inc.) -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O87 - FAEL: "{1674C2DE-AA8D-46E4-8322-9FC570D482CC}" | In - Public - P17 - TRUE | .(.SafeNet, Inc.) -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O87 - FAEL: "{F55E0784-9783-477F-A84B-ED9D5900506D}" | In - Private - P6 - TRUE | .(.SafeNet, Inc. - Pas de description.) -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O87 - FAEL: "{EF57FAB5-D475-4592-92BE-B29C03BC9D94}" | In - Private - P17 - TRUE | .(.SafeNet, Inc. - Pas de description.) -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O87 - FAEL: "{F7127E9E-B036-4CAF-BD4D-9C8BF82B29B9}" | In - Public - P6 - TRUE | .(.SafeNet, Inc. - Pas de description.) -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O87 - FAEL: "{88FDF0AF-F1FD-4E26-93B6-035D18ACB3B6}" | In - Public - P17 - TRUE | .(.SafeNet, Inc. - Pas de description.) -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
~ Firewall: 303 Scanned in 00mn 02s



---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "000041591800C0400000000000F01FEC" . (.Microsoft Office Outlook Connector.) -- C:\Windows\Installer\{95140000-0081-040C-0000-0000000FF1CE}\OLCIcon.exe  =>.Microsoft Corporation
O90 - PUC: "0A4B643700310110409007C5D0680240" . (.Revit Architecture 2013.) -- C:\Windows\Installer\{7346B4A0-1300-0110-0409-705C0D862004}\RAC.ico
O90 - PUC: "0A4B643700311110409007C5D0680240" . (.Revit Architecture 2013 Language Pack - English.) -- C:\Windows\Installer\{7346B4A0-1300-0111-0409-705C0D862004}\ARPPRODUCTICON.exe
O90 - PUC: "0D9196FA196553F4D956459F18105341" . (.Microsoft SQL Server Compact 3.5 SP2 FRA.) -- C:\Windows\Installer\{AF6919D0-5691-4F35-9D65-54F981013514}\ProductIcon
O90 - PUC: "1038C85769625584FA5435B4210089A0" . (.Samsung Kies.) -- C:\Windows\Installer\{758C8301-2696-4855-AF45-534B1200980A}\ARPPRODUCTICON.exe
O90 - PUC: "12020731BF34C08419F29D7BA4352888" . (.OpenProj.) -- C:\Windows\Installer\{13702021-43FB-480C-912F-D9B74A538288}\controlPanelIcon.exe
O90 - PUC: "13B14D14629E06E4B89ED038238FD52E" . (.KONICA MINOLTA Device Set-Up.) -- C:\Windows\Installer\{41D41B31-E926-4E60-8BE9-0D8332F85DE2}\ARPPRODUCTICON.exe
O90 - PUC: "1AB5F734C9445FF41B63A830B7599091" . (.SQL Server Browser pour SQL Server 2012.) -- c:\Windows\Installer\{437F5BA1-449C-4FF5-B136-8A037B950919}\ARPIco
O90 - PUC: "1BF000EEBEE263244A8CD77261A808A5" . (.Office - Automa - Alucam.) -- C:\Windows\Installer\{EE000FB1-2EEB-4236-A4C8-7D27168A805A}\ARPPRODUCTICON.exe
O90 - PUC: "1DCED64B46711FE40000227DE11878C7" . (.Autodesk Inventor Content Center Libraries 2013 (Desktop Content).) -- C:\Windows\Installer\{B46DECD1-1764-4EF1-0000-22D71E81877C}\DisplayIcon
O90 - PUC: "23A9A297A8171D0489769A307FA62E8F" . (.Eco Materials Adviser for Autodesk Inventor 2013.) -- C:\Windows\Installer\{792A9A32-718A-40D1-9867-A903F76AE2F8}\none
O90 - PUC: "277C90D53BCEB244C96C4B43C187DF2C" . (.Apple Application Support.) -- C:\Windows\Installer\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}\WinInstall.ico
O90 - PUC: "2793200300003090A9BB00B0BDC53FD5" . (.MKS Platform Components 9.x.) -- C:\Windows\Installer\{30023972-0000-0903-9ABB-000BDB5CF35D}\cpdrv.ico
O90 - PUC: "2A0C6C729CE2AEF4EBB256E9AA2C6CC8" . (.Autodesk Material Library Low Resolution Image Library 2013.) -- C:\Windows\Installer\{27C6C0A2-2EC9-4FEA-BE2B-659EAAC2C68C}\ARPPRODUCTICON.exe
O90 - PUC: "30AED35CF2F37BC498D54CEE6975E19A" . (.Microsoft SQL Server 2008 Native Client.) -- c:\Windows\Installer\{C53DEA03-3F2F-4CB7-895D-C4EE96571EA9}\ARPIco
O90 - PUC: "31B0ACEB2456B6D4BA050CA60D3E7C9A" . (.Microsoft SQL Server 2012 Transact-SQL ScriptDom .) -- c:\Windows\Installer\{BECA0B13-6542-4D6B-AB50-C06AD0E3C7A9}\ARPIco
O90 - PUC: "35BA73DED20820642BE03E0ECEDDB83E" . (.Installation de Microsoft SQL Server 2012 (Français).) -- c:\Windows\Installer\{ED37AB53-802D-4602-B20E-E3E0ECDD8BE3}\ARPIco
O90 - PUC: "382C79BFC3F14D24EA10DA1CCD217F47" . (.Visual Basic for Applications (R) Core.) -- C:\Windows\Installer\{FB97C283-1F3C-42D4-AE01-ADC1DC12F774}\vbasdk.ico,0
O90 - PUC: "3E4C45678E684DC41BECD8EB8AC2632E" . (.LibreOffice 3.6.) -- C:\Windows\Installer\{7654C4E3-86E8-4CD4-B1CE-8DBEA82C36E2}\soffice.ico
O90 - PUC: "45810F76E4624E4449431170475137AA" . (.Microsoft SQL Server 2012 Native Client .) -- c:\Windows\Installer\{67F01854-264E-44E4-9434-1107741573AA}\ARPIco
O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico  =>.Apple Inc
O90 - PUC: "481A8270998F65349BD3288276F4D0BE" . (.Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology.) -- C:\Windows\Installer\{0728A184-F899-4356-B93D-8228674F0DEB}\IntelBluetoothICO
O90 - PUC: "48D262C04AFF1264E87D148F8237965F" . (.Google Apps Migration For Microsoft Outlook® 2.3.12.34.) -- C:\Windows\Installer\{0C262D84-FFA4-4621-8ED7-41F8287369F5}\MainIcon.exe
O90 - PUC: "5341A5E7DA1D2E94BA9813DBB73B05FC" . (.ProductView Express 9.1.) -- C:\Windows\Installer\{7E5A1435-D1AD-49E2-AB89-31BD7BB350CF}\ProductView_large.ico
O90 - PUC: "56E6DBDABC6479A4A9BF4669F3AECC04" . (.Microsoft SQL Server 2008 RsFx Driver.) -- c:\Windows\Installer\{ADBD6E65-46CB-4A97-9AFB-64963FEACC40}\ARPIco
O90 - PUC: "5C61D31A9A8369D4697495CFAC1BA258" . (.Visual Basic for Applications (R) Core - English.) -- C:\Windows\Installer\{A13D16C5-38A9-4D96-9647-59FCCAB12A85}\vbasdk.ico,0
O90 - PUC: "65B39F425F16F514589BAA44D43AA4CF" . (.Centre Souris et Claviers Microsoft.) -- c:\Windows\Installer\{24F93B56-61F5-415F-85B9-AA444DA34AFC}\DeviceCenter.ico
O90 - PUC: "68AB67CA7DA76301B744BA0000000010" . (.Adobe Reader XI (11.0.05) - Français.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico
O90 - PUC: "6F42B19C92612E116B691276168807B9" . (.PDF Split And Merge Basic.) -- C:\Windows\Installer\{C91B24F6-1629-11E2-B696-21676188709B}\pdfsam.ico
O90 - PUC: "765BD3513FF6DA94CAF4688F3ACCDFBF" . (.Autodesk Design Review 2013.) -- C:\Windows\Installer\{153DB567-6FF3-49AD-AC4F-86F8A3CCFDFB}\ARPPRODUCTICON.exe
O90 - PUC: "84050F0A3567DCF4F9A37C044E50A2EC" . (.Microsoft SQL Server 2012 RsFx Driver.) -- c:\Windows\Installer\{A0F05048-7653-4FCD-9F3A-C740E4052ACE}\ARPIco
O90 - PUC: "96A9F68093DC39849ABF3D0A36C43E7F" . (.Autodesk Content Service.) -- C:\Windows\Installer\{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}\appicon.ico
O90 - PUC: "9B21E606F14644642AA2FF83EA89A0DF" . (.Autodesk Material Library Base Resolution Image Library 2013.) -- C:\Windows\Installer\{606E12B9-641F-4644-A22A-FF38AE980AFD}\ARPPRODUCTICON.exe
O90 - PUC: "9B33162399575F94B8EEBE56B3BC77D5" . (.HP System Default Settings.) -- C:\Windows\Installer\{326133B9-7599-49F5-8BEE-EB653BCB775D}\ARPPRODUCTICON.exe
O90 - PUC: "9CD02456E603173409F54FCDB314E825" . (.Autodesk Material Library Base Resolution Image Library 2012.) -- C:\Windows\Installer\{65420DC9-306E-4371-905F-F4DC3B418E52}\ARPPRODUCTICON.exe
O90 - PUC: "A84C761ECB081AE4BA34D8A6C4A938EE" . (.Chacal iX 1.5.) -- C:\Windows\Installer\{E167C48A-80BC-4EA1-AB43-8D6A4C9A83EE}\ARPPRODUCTICON.exe
O90 - PUC: "ABFAB76BF9C4AF84496939E3B3520544" . (.QuickTime.) -- C:\Windows\Installer\{B67BAFBA-4C9F-48FA-9496-933E3B255044}\Installer.ico
O90 - PUC: "AF32006D1FD3735439DD3120C44C3E66" . (.Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 FRA.) -- C:\Windows\Installer\{D60023FA-3DF1-4537-93DD-13024CC4E366}\ProductIcon
O90 - PUC: "B6AAADC5B822CB442A8ABB8036AD21A1" . (.Hilti PROFIS Anchor.) -- C:\Windows\Installer\{5CDAAA6B-228B-44BC-A2A8-BB0863DA121A}\ProductIcon
O90 - PUC: "B83389C27280DD541BD26340A7867CC7" . (.Fichiers de support d'installation de Microsoft SQL Server 2008.) -- c:\Windows\Installer\{2C98338B-0827-45DD-B12D-36047A68C77C}\ARPIco
O90 - PUC: "BEEBE7110BD58C34F96DDD85D31B25DD" . (.Autodesk Material Library 2013.) -- C:\Windows\Installer\{117EBEEB-5DB0-43C8-9FD6-DD583DB152DD}\ARPPRODUCTICON.exe
O90 - PUC: "C0711260485C8C1409E6FDD97597F8F6" . (.Objets de gestion Microsoft SQL Server 2008 R2.) -- C:\Windows\Installer\{0621170C-C584-41C8-906E-DF9D57798F6F}\ARPIco
O90 - PUC: "C2679408F99736046A63A6225A44BFF6" . (.Google Apps Sync™ for Microsoft Outlook® 3.3.355.950.) -- C:\Windows\Installer\{8049762C-799F-4063-A636-6A22A544FB6F}\MainIcon.exe
O90 - PUC: "C4BDB2F77D2DED747A3DB0457FD8462B" . (.Hilti PROFIS AutoUpdate.) -- C:\Windows\Installer\{7F2BDB4C-D2D7-47DE-A7D3-0B54F78D64B2}\trayIcon
O90 - PUC: "CA8122C81B1D0354E9765161E4E025BA" . (.Sentinel Protection Installer 7.6.6.) -- C:\Windows\Installer\{8C2218AC-D1B1-4530-9E67-15164E0E52AB}\ARPPRODUCTICON.exe
O90 - PUC: "CB47F5EE5DC52FE468AB186EFC641AF8" . (.Autodesk Sync.) -- C:\Windows\Installer\{EE5F74BC-5CD5-4EF2-86BA-81E6CF46A18F}\WorkflowIcon
O90 - PUC: "CEE06785A6B84F3418AA96E683D1AFDD" . (.Autodesk Material Library Medium Resolution Image Library 2013.) -- C:\Windows\Installer\{58760EEC-8B6A-43F4-81AA-696E381DFADD}\ARPPRODUCTICON.exe
O90 - PUC: "D276F30548C6A844F8F8B43CA58C4314" . (.AMD APP SDK Runtime.) -- C:\Windows\Installer\{503F672D-6C84-448A-8F8F-4BC35AC83441}\ARPPRODUCTICON.exe
O90 - PUC: "D3AE1DEBD2955034D9F1020F7362FE1C" . (.Sql Server Customer Experience Improvement Program.) -- c:\Windows\Installer\{BED1EA3D-592D-4305-9D1F-20F03726EFC1}\ARPIco
O90 - PUC: "D4443CC4972738E489F4819E7A2B8E30" . (.Oracle VM VirtualBox 4.2.16.) -- C:\Windows\Installer\{4CC3444D-7279-4E83-984F-18E9A7B2E803}\IconVirtualBox
O90 - PUC: "D56941F2B76595E4DABEA0C21C3EDAFD" . (.Sql Server Customer Experience Improvement Program.) -- c:\Windows\Installer\{2F14965D-567B-4E59-ADEB-0A2CC1E3ADDF}\ARPIco
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "D7BEA58372D27B04FB2BF119072CDC37" . (.KONICA MINOLTA PageScope Direct Print 1.1.) -- C:\Windows\Installer\{385AEB7D-2D27-40B7-BFB2-1F9170C2CD73}\ARPPRODUCTICON.exe
O90 - PUC: "D96ED149EEC61714F8F1D3E753A24A89" . (.HP Wireless Button Driver.) -- C:\Windows\Installer\{941DE69D-6CEE-4171-8F1F-3D7E352AA498}\ARPPRODUCTICON.exe
O90 - PUC: "DA93DA4DE19033D4BBB2956FCF8BDA3C" . (.Microsoft SQL Server Compact 3.5 SP2 x64 ENU.) -- C:\Windows\Installer\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}\ProductIcon
O90 - PUC: "E456C5BC27AD16B4793F167C552C9E93" . (.Enregistreur VSS Microsoft pour SQL Server 2012.) -- c:\Windows\Installer\{CB5C654E-DA72-4B61-97F3-61C755C2E939}\ARPIco
O90 - PUC: "E50A609283D274B4582A3D84E573C2F8" . (.Microsoft SQL Server Compact 3.5 SP2 x64 FRA.) -- C:\Windows\Installer\{2906A05E-2D38-4B47-85A2-D3485E372C8F}\ProductIcon
O90 - PUC: "E86B6D4179A38F445A2FB412F9FD96C3" . (.LogicPlus.) -- C:\Windows\Installer\{14D6B68E-3A97-44F8-A5F2-4B219FDF693C}\ARPPRODUCTICON.exe
O90 - PUC: "EA26B377DA4E39F49812F517FF0A5689" . (.KONICA MINOLTA Print Status Notifier.) -- C:\Windows\Installer\{773B62AE-E4AD-4F93-8921-5F71FFA06598}\ARPPRODUCTICON.exe
O90 - PUC: "EBDA43F70C770A74BB6C3BAD61ECE886" . (.Classic Shell.) -- C:\Windows\Installer\{7F34ADBE-77C0-47A0-BBC6-B3DA16CE8E68}\icon.ico
O90 - PUC: "F665D1359A5F5ED48B93B831022D38E0" . (.Microsoft SQL Server System CLR Types.) -- C:\Windows\Installer\{531D566F-F5A9-4DE5-B839-8B1320D2830E}\ARPIco
~ Update Products: 190 Scanned in 00mn 00s



---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.C1549D5FC3E4BEF68C25580761B5F174] [WIS][14/07/2013] (.SlikSvn & The SharpSvn Project - Slik Subversion 1.8.0 (x64).) -- C:\Windows\Installer\1773d2a.msi   [5390336]
[MD5.36534E14E5B62080B1090A05B2865A5C] [WIS][24/04/2013] (.IvoSoft - Classic Shell.) -- C:\Windows\Installer\1787a1e.msi   [4632576]
[MD5.5EC5A30C34A77421B12403FBD8B9DA68] [WIS][08/12/2009] (.KONICA MINOLTA - KONICA MINOLTA DeviceManager.) -- C:\Windows\Installer\18f704c.msi   [4652544]
[MD5.DC64330C623785BA1D78837D2CDFC527] [WIS][10/01/2012] (.Granta Design Limited - Eco Materials Adviser for Autodesk Inventor 2013.) -- C:\Windows\Installer\1cb37f.msi   [17798656]
[MD5.7B73D800C47F36DA6C3E804D34E4B855] [WIS][15/04/2008] (.Dassault Systemes - Dassault Systemes Prerequisites (8.1.3).) -- C:\Windows\Installer\1d9236.msi   [8513024]
[MD5.2AD8B7E6343C87332B01CD9CED16B2AE] [WIS][24/10/2007] (.jjames - Visual Basic for Applications (R) Core - English.) -- C:\Windows\Installer\1d9259.msi   [5172736]
[MD5.ABFBF6BCB5E12993BD71DCB77925DDA3] [WIS][29/04/2013] (.Hilti corp. - Hilti PROFIS AutoUpdate.) -- C:\Windows\Installer\2668768.msi   [2867200]
[MD5.47C954CA55D7F6381203987F5FDB8659] [WIS][29/04/2013] (.Hilti Corp. - Hilti PROFIS Anchor.) -- C:\Windows\Installer\266876b.msi   [149474816]
[MD5.3F73274A691001973D52D0C8FEF4ADAC] [WIS][11/10/2013] (.DSI - Chacal iX 1.5.) -- C:\Windows\Installer\2b603ac.msi   [135287296]
[MD5.4C60256B7EA4AC3E21BC52F89105BF83] [WIS][11/10/2013] (.Sapa Building System - Office V. 2.7.19 - Automa V2.8.10 - Alucam V13.05.701.) -- C:\Windows\Installer\2b603f0.msi   [60143616]
[MD5.74829DF5B4C3232CE3ECF80DA45F695B] [WIS][11/10/2013] (.SafeNet, Inc. - Sentinel Protection Installer 7.6.6.) -- C:\Windows\Installer\2be8d13.msi   [8142336]
[MD5.D2ACC8BA7BF8A1AA0566250A43111485] [WIS][25/09/2013] (.Serena Software Inc. - OpenProj.) -- C:\Windows\Installer\41f5abf1.msi   [6831104]
[MD5.E26BBFD430B526C4CA7E4E7C08C96FB2] [WIS][03/09/2013] (.Trend Micro Inc. - Trend Micro's HiJackThis.) -- C:\Windows\Installer\4f25afd4.msi   [1402880]
[MD5.E21D4CDA59F00D2EF1DFF50BD073F253] [WIS][17/03/2010] (.KONICA MINOLTA - Print Status Notifier.) -- C:\Windows\Installer\5d6f15.msi   [5522944]
[MD5.CFA087B6FE39DF92D021E0EA150D3226] [WIS][26/02/2012] (.Bruce Walker - Autodesk CAD Manager Tools 4.0.) -- C:\Windows\Installer\5d9b1.msi   [3477504]
[MD5.64BF5CA70B7036C779859E1AC30B2D46] [WIS][24/04/2013] (.PTC - Rich visualization tools for the enterprise.With ProductView E.) -- C:\Windows\Installer\67e864.msi   [82780672]
[MD5.86CD06D0E14BB6B078131CB02A1ECB32] [WIS][15/09/2011] (.Google, Inc. - Google Apps Migration For Microsoft Outlook® lets you migrate E.) -- C:\Windows\Installer\822e41e.msi   [34259968]
[MD5.1F22B1A86CF83C855D9D5B7DC244B4A9] [WIS][12/10/2009] (.FARO Scanner Production - FARO LS.) -- C:\Windows\Installer\83c886.msi   [8010752]
[MD5.D509300A939861993E969DFCD32D844C] [WIS][26/05/2013] (.NETKOM - SendBox.) -- C:\Windows\Installer\8cfebd0.msi   [776192]
[MD5.4E21CDA2AED2416F39B7D0BE13468A0C] [WIS][31/05/2013] (.Google, Inc. - Google Apps Sync™ for Microsoft Outlook® lets you use GMail, Go.) -- C:\Windows\Installer\8d1fe2b.msi   [52056576]
[MD5.335EC9F460BB68118ECA3434253BB4F8] [WIS][15/05/2013] (.Sapa Building System nv - LogicPlus V1.3.30.) -- C:\Windows\Installer\9b54dbf.msi   [142115840]
[MD5.CAC92727C33BEC0A79965C61BBB1C82F] [WIS][18/04/2013] (.Igor Pavlov - 7-Zip (x64 edition) Package.) -- C:\Windows\Installer\a3de05.msi   [1376768]
[MD5.5B24533059EE5FF16324276957603136] [WIS][11/05/2013] (.MSDN - Introduction to Visual Cplusplus 2008 Express Edition.) -- C:\Windows\Installer\b181326.msi   [400363008]
[MD5.B50448DE3BD90F3523D74EA52F03A5A6] [WIS][26/04/2013] (.PTC - With PTC Creo Thumbnail Viewer 1.0, you can preview all forms o.) -- C:\Windows\Installer\c244ff.msi   [6651440]
[MD5.C3CA6BC1EE727E387C1780B87E0EFFE9] [WIS][02/04/2010] (.NuTCOE - NuTCRACKER Runtime Environment.) -- C:\Windows\Installer\d12062.msi   [2368884]
[MD5.894F12D0ADBD6100C13DA768D6B28ED0] [WIS][03/02/2012] (.Missler Software - TopSolid'Design 7.6 Setup x64.) -- C:\Windows\Installer\d9a46a.msi   [335106048]
[MD5.18CC5F173E975B25E85C8AC72B97D8AF] [WIS][03/02/2012] (.Missler Software - TopSolid'Design Libraries 7.6 Setup.) -- C:\Windows\Installer\d9a471.msi   [59338752]
[MD5.86DCA424B37D7FE9E841B7DBEACA4FA3] [WIS][03/02/2012] (.Missler Software - TopSolid'Cam Post Processors Base 7.6 Setup x64.) -- C:\Windows\Installer\d9a478.msi   [1077248]
[MD5.5450B0E63CA7076A3E8DD323CA13DCDA] [WIS][03/02/2012] (.Missler Software - TopSolid'Cam 7.6 Setup x64.) -- C:\Windows\Installer\d9a47f.msi   [227217408]
[MD5.CF67C0A70B8806C39E0867B312E49244] [WIS][03/02/2012] (.Missler Software - TopSolid'Cam Libraries 7.6 Setup.) -- C:\Windows\Installer\d9a486.msi   [637218816]
[MD5.DCA4024360E91D3A3BABDA0EC710568A] [WIS][03/02/2012] (.Missler Software - TopSolid'Interop Catia V5 7.6 Setup x64.) -- C:\Windows\Installer\d9a48d.msi   [157908992]
[MD5.69DE2D3FCF99D4A3F28241CEAC57EA48] [WIS][03/02/2012] (.Missler Software - TopSolid'Interop TopSolid V6 7.6 Setup x64.) -- C:\Windows\Installer\d9a494.msi   [173486080]
[MD5.74994F4F31F751AB6C4EFC7DBAEDA75C] [WIS][03/02/2012] (.Missler Software - TopSolid'Pdm Explorer 7.6 Setup x64.) -- C:\Windows\Installer\d9a49b.msi   [35581952]
[MD5.3D4FE6A2CAAA443D636EB82EDE57E6E7] [WIS][03/02/2012] (.Missler Software - TopSolid'Viewer 7.6 Setup x64.) -- C:\Windows\Installer\d9a4a2.msi   [17170432]
[MD5.337B67DA1489F86AE4490D8701F4F2E3] [WIS][03/02/2012] (.Missler Software - TopSolid'Quote 7.6 Setup x64.) -- C:\Windows\Installer\d9a4a9.msi   [18419712]
[MD5.63180009883D1F0911D2D18CA9469F6E] [WIS][26/04/2013] (.Missler Software - TopSolid'Update Setup x64.) -- C:\Windows\Installer\e6fab5.msi   [1622016]
[MD5.246CBAD044093824451F629A1CC7FE62] [WIS][25/07/2011] (.FARO Scanner Production - FARO LS.) -- C:\Windows\Installer\e6fb1f.msi   [10116096]
[MD5.D0F88A9EE8E4290872D147E43ED2EBD2] [WIS][07/03/2013] (.Andrea Vacondio - A free open source tool to manipulate PDF documents.) -- C:\Windows\Installer\f406eeb.msi   [16357416]
[MD5.72CE1866D1D4F39F3367AD1B8958977B] [WIS][01/05/2013] (.IBM - DB2 Run-Time Client Lite.) -- C:\Windows\Installer\f7882f5.msi   [148395008]
[MD5.8B958BEEE1BA70F89ADFE65DFFA7890E] [WIS][16/06/2010] (.Dassault Systemes - Dassault Systemes VC9 Prerequisites (9.1.2).) -- C:\Windows\Installer\fdfe4e2.msi   [21235712]
~ WIS: 197 Scanned in 00mn 51s



---\\ Etat général des services not Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 11/05/2013 65640 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 09/10/2013 257416 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Auto 02/02/2011 18656 |  (Autodesk Content Service) . (...) - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
SR - | Auto 20/02/2010 36864 |  (BBDemon) . (.Dassault Systemes.) - C:\Program Files (x86)\Dassault Systemes\B20\intel_a\code\bin\CATSysDemon.exe
SR - | Auto 27/08/2012 1112000 |  (Bluetooth Device Monitor) . (.Motorola Solutions, Inc..) - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
SR - | Auto 06/09/2012 1124288 |  (Bluetooth OBEX Service) . (.Motorola Solutions, Inc..) - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
SR - | Auto 12/04/2013 68608 |  (ClassicShellService) . (.IvoSoft.) - C:\Program Files\Classic Shell\ClassicShellService.exe
SS - | Demand 14/12/2012 277616 |  (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
SR - | Auto 04/04/2012 37736 |  (DB2MGMTSVC_DB2COPY1) . (.International Business Machines Corporation.) - C:\Program Files (x86)\IBM\SQLLIB\BIN\db2mgmtsvc.exe
SR - | Auto 26/04/2013 1617408 |  (FLEXlm server for PTC) . (.Macrovision Corporation.) - C:\Program Files\flexnet\x86e_win64\obj\lmgrd.exe
SS - | Demand 13/05/2013 1044816 |  (FLEXnet Licensing Service) . (.Flexera Software, Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - | Demand 24/04/2013 1432400 |  (FLEXnet Licensing Service 64) . (.Flexera Software, Inc..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
SS - | Auto 09/05/2013 116648 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 09/05/2013 116648 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SR - | Auto 14/09/2011 206336 |  (Hilti PROFIS AutoUpdate Service) . (.Agito d.o.o..) - C:\Program Files (x86)\Hilti\PROFIS AutoUpdate\Hilti.AutoUpdate.Service.exe
SR - | Auto 31/01/2012 339776 |  (mitsijm2013) . (...) - C:\Program Files\Autodesk\Inventor 2013\Moldflow\bin\mitsijm.exe
SS - | Demand 01/10/2013 118680 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Auto 04/05/2013 14253 |  (MySQL56) . (...) - C:\ProgramData\MySQL\MySQL Server 5.6\my.ini
SR - | Auto 10/11/2009 563424 |  (NuTCRACKERService) . (.MKS Software Inc..) - C:\Windows\system32\nutsrv4.exe
SS - | Auto 25/06/2013 69120 |  (OracleOraDB12Home1MTSRecoveryService) . (.Oracle Corporation.) - C:\app\Patrick\Oracle\product\12.1.0\dbpvgm\bin\omtsreco.exe
SS - | Auto 10/07/1658 0 |  (OracleOraDB12Home1TNSListener) . (...) - C:\app\Patrick\product\12.1.0\dbhome_2\BIN\TNSLSNR
SR - | Auto 28/06/2013 187659264 |  (OracleServicePVGM) . (.Oracle Corporation.) - c:\app\patrick\oracle\product\12.1.0\dbpvgm\bin\ORACLE.exe
SR - | Auto 28/06/2013 208384 |  (OracleVssWriterPVGM) . (...) - c:\app\patrick\oracle\product\12.1.0\dbpvgm\bin\OraVSSW.exe
SR - | Auto 05/08/2011 742400 |  (PortmapperService) . (.PTC.) - C:\Program Files\PTC Portmapper\x86e_win64\obj\portmap.exe
SR - | Auto 01/06/2012 99840 |  (postgresql-9.1) . (.PostgreSQL Global Development Group.) - C:\Program Files (x86)\PostgreSQL\9.1\bin\pg_ctl.exe
SR - | Auto 02/04/2013 89600 |  (postgresql-x64-9.2) . (.PostgreSQL Global Development Group.) - C:\Program Files\PostgreSQL\9.2\bin\pg_ctl.exe
SR - | Auto 09/01/2013 376832 |  (SentinelKeysServer) . (.SafeNet, Inc..) - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
SR - | Auto 09/01/2013 1259872 |  (SentinelProtectionServer) . (.SafeNet, Inc.) - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
SR - | Auto 09/01/2013 293216 |  (SentinelSecurityRuntime) . (.SafeNet, Inc..) - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe
SS - | Demand 13/05/2013 79360 |  (SolidWorks Licensing Service) . (.SolidWorks.) - C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
SR - | Auto 01/10/2013 5087584 |  (TeamViewer8) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
SS - | Demand 13/05/2012 24576 |  (wampapache) . (.Apache Software Foundation.) - c:\wamp\bin\apache\apache2.4.2\bin\httpd.exe
SS - | Demand 19/04/2012 9693696 |  (wampmysqld) . (...) - c:\wamp\bin\mysql\mysql5.5.24\bin\mysqld.exe
SR - | Auto 10/07/1658 0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
SR - | Auto 20/09/2012 29696 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services:  Scanned in 00mn 55s



---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Run by Patrick at 15/10/2013 11:30:38
~ OS 64 not supported by MBR tool
~ MBR: 0 Scanned in 00mn 00s



---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Patrick at 15/10/2013 11:30:40

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR:  Scanned in 00mn 02s



---\\ Liste des émulateurs de CD/DVD (MBR Hook)
O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite  =>.DT Soft Ltd
~ Emulateurs:  Scanned in 00mn 02s



---\\ Scan Additionnel (O88)
Database Version : 12946 - (13/10/2013)
Clés trouvées (Keys found) : 3
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 3
Fichiers trouvés  (Files found) : 8

[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375]   =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5]   =>PUP.Tarma
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC]   =>Adware.Boxore^
C:\ProgramData\Software   =>Adware.Boxore
C:\Users\Patrick\AppData\Local\Software   =>Adware.Boxore
C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl   =>PUP.QuickShare
C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\prv50bf5.default\searchplugins\dalesearch.xml   =>Hijacker.Dalesearch^
[HKCU\Software\dalesearch LTD]   =>Hijacker.Dalesearch^
C:\Windows\Prefetch\PCFIXSPEED.EXE-55D396A9.pf   =>PUP.PCFixSpeed^
C:\Windows\Prefetch\APP24X7HELP.EXE-44A3B6EC.pf   =>PUP.24x7Help^
C:\Windows\Prefetch\PARETOLOGIC PC HEALTH ADVISOR-C88BD061.pf   =>Rogue.PCHealthAdvisor^
C:\Windows\Prefetch\PARETOLOGIC PC HEALTH ADVISOR-8F735723.pf   =>Rogue.PCHealthAdvisor^
C:\Users\Patrick\Downloads\ParetoLogic PC Health Advisor_fr (1).exe   =>Rogue.PCHealthAdvisor^
C:\Users\Patrick\Downloads\ParetoLogic PC Health Advisor_fr.exe   =>Rogue.PCHealthAdvisor^
~ Additionnel Scan: 912464 Items scanned in 00mn 19s



---\\ Récapitulatif des détections trouvées sur votre station
~ http://nicolascoolman.webs.com/apps/blog/show/32978102-hijacker-dalesearch   =>Hijacker.Dalesearch
~ http://nicolascoolman.webs.com/apps/blog/show/26609241-crapware-spyhunter   =>Crapware.SpyHunter
~ http://nicolascoolman.webs.com/apps/blog/show/33519836-pup-pcfixspeed   =>PUP.PCFixSpeed
~ http://nicolascoolman.webs.com/apps/blog/show/33002268-pup-24x7help   =>PUP.24x7Help
~ http://nicolascoolman.webs.com/apps/blog/show/29637859-toolbar-tarma   =>PUP.Tarma
~ http://nicolascoolman.webs.com/apps/blog/show/26626977-adware-boxore  =>Adware.Boxore
~ http://nicolascoolman.webs.com/apps/blog/show/28577022-pup-quickshare   =>PUP.QuickShare
~ MSI: 7 link(s) detected in 00mn 20s



End of the scan (2601 lines in 42mn 54s)(9)