~ Rapport de ZHPDiag v2014.3.2.6 - Nicolas Coolman  (03/03/2014)
~ Lancé par TFSL (04/03/2014 18:51:09)
~ Adresse du Site Web  http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version : 
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user


---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.16518
MFIE: Mozilla Firefox 27.0.1 (Defaut)
GCIE: Google Chrome v33.0.1750.146

---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Home Premium, 32-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_COA_NSLP channel
Windows ID Activation : OK
~ Windows Partial Key : TCVHP
Windows License : OK
~ Windows Remaining Initializations Number : 5
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection du système
avast! Free Antivirus v9.0.2013
Malwarebytes Anti-Malware version 1.75.0.1300
Windows Defender W7

---\\ Logiciels d'optimisation du système
CCleaner v4.07 =>Piriform Ltd

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 11 Plugin
Adobe Reader X
Java 7 Update 51

---\\ Informations sur le système
~ Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3069 MB (57% free)
System Restore: Activé (Enable)
System drive C: has 96 GB (43%) free of 224 GB

---\\ Mode de connexion au système
~ Computer Name: PC-DE-TFSL
~ User Name: TFSL
~ All Users Names: UpdatusUser, TFSL, HomeGroupUser$, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\TFSL\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\TFSL\AppData\Roaming\
~ %Desktop% : C:\Users\TFSL\Desktop\
~ %Favorites% : C:\Users\TFSL\Favorites\
~ %LocalAppData% : C:\Users\TFSL\AppData\Local\
~ %StartMenu% : C:\Users\TFSL\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 96 Go of 224 Go)
D: Hard drive, Flash drive, Thumb drive (Free 2 Go of 9 Go)
E: CD-ROM drive (Not Inserted)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Security Center: 50 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 06:30:54.) -- C:\Windows\Explorer.exe [2616320]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
[MD5.9C89246184979A070B0C6CCF61C68136] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.06/02/2014 - 09:41:35.) -- C:\Windows\System32\wininet.dll [1820160]
[MD5.6D13E1406F50C66E2A95D97F22C47560] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 13:17:54.) -- C:\Windows\System32\Winlogon.exe [286720]
[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 13:21:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
[MD5.F81BB7E487EDCEAB630A7EE66CF23913] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.14/09/2013 - 01:48:58.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 09:38:10.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 09:42:32.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 10:59:29.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 00:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
[MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 09:39:44.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
[MD5.5E43D2B0EE64123D4880DFA6626DEFDE] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 14:45:29.) -- C:\Windows\system32\Drivers\ntfs.sys [1211752]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 00:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/07/2009 - 00:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 00:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
[MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 09:39:17.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 13:30:16.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
~ Generic Processes:  Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes musiques (My Musics) : 1/8
~ Mes Videos (My Videos) : 1/88
~ Mes Favoris (My Favorites) : 1/826
~ Mes Documents (My Documents) : 1/406
~ Mon Bureau (My Desktop) : 1/9
~ Menu demarrer (Programs) : 1/40
~ Hidden Files:  Scanned in 00mn 00s



---\\ Processus lancés
[MD5.A78AAB0D2D70EF7DD56B7328AC502059] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe   [3767096] [PID.2692]
[MD5.048EA4B978851788E9F5E8E4F081DF7A] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe   [959904] [PID.2716]
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe   [254336] [PID.2724]
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] - (.Google Inc. - Programme d'installation de Google.) -- C:\Users\TFSL\AppData\Local\Google\Update\GoogleUpdate.exe   [135664] [PID.2748]
[MD5.C98ACDE22458C8F46FD0503CB9E2D01F] - (.Google Inc. - Google Crash Handler.) -- C:\Users\TFSL\AppData\Local\Google\Update\1.3.22.5\GoogleCrashHandler.exe   [223112] [PID.3148]
[MD5.66EA3B698F9A7EA2DBF0E4B246B6C958] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [8349696] [PID.952]
[MD5.026C4CA19FAE1F84894A99735B15AACA] - (.Google Inc. - Google Chrome.) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\chrome.exe   [859464] [PID.3684]
[MD5.0136C91BBD22751D79940E62AC95195F] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 311.0.) -- C:\Windows\system32\nvvsvc.exe   [639776] [PID.780]
[MD5.FE7F776F2590C8331123BDA3A3A21DE6] - (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\STacSV.exe   [229458] [PID.1096]
[MD5.C0BEB56ED79B59B7B33D0AA6C38A0BA6] - (.Hewlett-Packard Company - HpService.) -- C:\Windows\system32\Hpservice.exe   [26168] [PID.1320]
[MD5.A8AD00BD5DEE43BA76EC0FC8DD91C057] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe   [873248] [PID.1348]
[MD5.CC42F104172B4A62793083D380867317] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe   [50344] [PID.1584]
[MD5.6F44F5C0BC6B210FE5F5A1C8D899AD0A] - (.Microsoft Corporation - Infrastructure d’extensibilité pour les ser.) -- C:\Windows\system32\WLANExt.exe   [77312] [PID.1592]
[MD5.5BC1D876DFD53C31C5FC65D2E9614015] - (.DigitalPersona, Inc. - DigitalPersona Local Host.) -- C:\Program Files\DigitalPersona\Bin\DpHostW.exe   [322624] [PID.1860]
[MD5.B362181ED3771DC03B4141927C80F801] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe   [65432] [PID.1764]
[MD5.827DBC22C96EECF6D36A13162FABAFD3] - (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\aestsrv.exe   [81920] [PID.2052]
[MD5.F2060A34C8A75BC24A9222EB4F8C07BD] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe   [349472] [PID.2108]
[MD5.A493916072D17ACCE7F82C21D7F5A81F] - (.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\MaConfigAgent.exe   [2077008] [PID.2204]
[MD5.6803B69C14696CC4907C5F77FBB04A14] - (.Pas de propriétaire - CLCapSvc Module.) -- C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe   [292232] [PID.2408]
[MD5.B9570481A1BABCC4A9E941C553596077] - (.Pas de propriétaire - Application MFC STServices.) -- C:\Windows\SMINST\BLService.exe   [341328] [PID.2472]
[MD5.0AB254994A460550258446950BB58311] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe   [14904] [PID.2396]
[MD5.CF87A1DE791347E75B98885214CED2B8] - (.Microsoft Corporation - Service de la plateforme de protection logi.) -- C:\Windows\system32\sppsvc.exe   [3179520] [PID.4060]
~ Processes Running:  Scanned in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Google Store v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [gfdkimpbcpahaombhbimeihdjnejgicl] Feedback v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Wallet v.0.0.6.1 (Activé)
~ Google Browser: 10 Scanned in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\TFSL\AppData\Roaming\Mozilla\Firefox\Profiles\rmwaif8j.default\prefs.js
M0 - MFSP: prefs.js [TFSL - rmwaif8j.default] http://www.google.fr
M2 - MFEP: prefs.js [TFSL - rmwaif8j.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (..)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.9.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (...) -- C:\Program Files\Mozilla Firefox\Plugins\NPSibelius.dll
P2 - FPN:Firefox Plugin Navigator . (.PDFTron Systems Inc. - PDFNet Dynamic Link Library for C/C++/JAVA.) -- C:\Program Files\Mozilla Firefox\Plugins\PDFNetC.dll
P2 - FPN:Firefox Plugin Navigator . (...) -- C:\Program Files\Mozilla Firefox\Plugins\ScorchAxPlugin.dll
P2 - FPN:Firefox Plugin Navigator . (...) -- C:\Program Files\Mozilla Firefox\Plugins\ScorchPDFWrapper.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.8.612.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.51.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.51.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.51.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20913.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.5] - (.Microsoft Corp. - Office Live Update v1.5.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@Sibelius.com/Scorch Plugin,version=6.2.0.88] - (...) -- C:\Program Files\Sibelius Software\Scorch\npsibelius.dll
P2 - FPN: [HKLM] [@veetle.com/veetleCorePlugin,version=0.9.18] - (.Veetle Inc - Version 0.9.18, Copyright 2006-2009 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\plugins\npVeetle.dll
P2 - FPN: [HKLM] [@veetle.com/veetlePlayerPlugin,version=0.9.18] - (.Veetle Inc - Version 0.9.18, copyright 2006-2010 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\Player\npvlc.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.8] - (.VideoLAN - VLC media player Web Plugin 2.1.0.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll  =>.VideoLAN
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.9.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\TFSL\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\TFSL\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll
~ Firefox Browser: 30 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Google Inc. - Google Update.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
~ IE Browser: 12 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 20



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll
~ BHO: 6 Scanned in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! Online Security - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
~ Toolbar:  Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Program [Public]: Adobe Reader X.lnk . (...)  -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico 
O4 - GS\Program [Public]: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.)  -- C:\Windows\ehome\ehshell.exe  =>.Microsoft Corporation
O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files\Mozilla Firefox\firefox.exe 
O4 - GS\Program [Public]: NewShortcut1.lnk . (.DigitalPersona, Inc. - DigitalPersona Dashboard.)  -- C:\Program Files\DigitalPersona\Bin\DPDashBoard.exe 
O4 - GS\Program [Public]: NoteWorthy Composer.lnk . (...)  -- C:\Program Files\NoteWorthy Composer\NWC32.exe
O4 - GS\Program [Public]: Windows Anytime Upgrade.lnk . (.Microsoft Corporation - Interface utilisateur de Mise à niveau expr.)  -- C:\Windows\system32\WindowsAnytimeUpgradeUI.exe 
O4 - GS\Program [Public]: Windows DVD Maker.lnk . (.Microsoft Corporation - Création de DVD Windows.)  -- C:\Program Files\DVD Maker\DVDMaker.exe  =>.Microsoft Corporation
O4 - GS\Program [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft  Windows Fax and Scan.)  -- C:\Windows\system32\WFS.exe  =>.Microsoft Corporation
O4 - GS\Program [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.)  -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O4 - GS\Program [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.)  -- C:\Windows\system32\xpsrchvw.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.)  -- C:\Windows\system32\calc.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: displayswitch.lnk . (.Microsoft Corporation - Afficher le commutateur.)  -- C:\Windows\system32\displayswitch.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilité Windows.)  -- C:\Windows\system32\mblctr.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.)  -- C:\Windows\system32\mspaint.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.)  -- C:\Windows\system32\mstsc.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.)  -- C:\Windows\system32\SnippingTool.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.)  -- C:\Windows\system32\SoundRecorder.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.)  -- C:\Windows\system32\StikyNot.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.)  -- C:\Windows\System32\mobsync.exe  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Mise en route.)  -- C:\Windows\system32\OobeFldr.dll  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.)  -- C:\Program Files\Windows NT\Accessories\wordpad.exe  =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.)  -- C:\Windows\system32\charmap.exe  =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.)  -- C:\Windows\system32\dfrgui.exe  =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestionnaire de nettoyage de disque pour Wi.)  -- C:\Windows\system32\cleanmgr.exe  =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Resource Monitor.lnk . (.Microsoft Corporation - Moniteur de ressources et de performances.)  -- C:\Windows\system32\perfmon.exe  =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informations système.)  -- C:\Windows\system32\msinfo32.exe  =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.)  -- C:\Windows\system32\rstrui.exe  =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...)  -- C:\Windows\system32\taskschd.msc
O4 - GS\SystemTools [Public]: Windows Easy Transfer Reports.lnk . (.Microsoft Corporation - Application post-migration de transfert de.)  -- C:\Windows\system32\migwiz\postmig.exe  =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Windows Easy Transfer.lnk . (.Microsoft Corporation - Application Transfert de fichiers et paramè.)  -- C:\Windows\system32\migwiz\migwiz.exe  =>.Microsoft Corporation
O4 - GS\Accessories [UpdatusUser]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.)  -- C:\Windows\system32\cmd.exe  =>.Microsoft Corporation
O4 - GS\Accessories [UpdatusUser]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.)  -- C:\Windows\system32\notepad.exe  =>.Microsoft Corporation
O4 - GS\Accessories [UpdatusUser]: Run.lnk - Clé orpheline
O4 - GS\Accessories [UpdatusUser]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.)  -- C:\Windows\explorer.exe  =>.Microsoft Corporation
O4 - GS\SystemTools [UpdatusUser]: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.)  -- C:\Windows\system32\eudcedit.exe  =>.Microsoft Corporation
O4 - GS\QuickLaunch [TFSL]: Finale 2011.lnk . (.MakeMusic Inc. - Finale 2011 for Windows.)  -- C:\Program Files\Finale 2011\finale.exe 
O4 - GS\QuickLaunch [TFSL]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch [TFSL]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files\Mozilla Firefox\firefox.exe 
O4 - GS\QuickLaunch [TFSL]: Skype.lnk . (...)  -- C:\Windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe (.not file.)
O4 - GS\QuickLaunch [TFSL]: VLC media player.lnk . (.VideoLAN - VLC media player 2.1.2.)  -- C:\Program Files\VideoLAN\VLC\vlc.exe  =>.VideoLAN
O4 - GS\QuickLaunch [TFSL]: Windows Live Messenger .lnk . (...)  -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.not file.)
O4 - GS\TaskBar [TFSL]: AIMP3.lnk . (.AIMP DevTeam - AIMP3.)  -- C:\Program Files\AIMP3\AIMP3.exe 
O4 - GS\TaskBar [TFSL]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\chrome.exe 
O4 - GS\TaskBar [TFSL]: Microsoft Office Word 2007.lnk . (...)  -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
O4 - GS\TaskBar [TFSL]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files\Mozilla Firefox\firefox.exe 
O4 - GS\TaskBar [TFSL]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.)  -- C:\Windows\system32\SnippingTool.exe  =>.Microsoft Corporation
O4 - GS\TaskBar [TFSL]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.)  -- C:\Windows\explorer.exe  =>.Microsoft Corporation
O4 - GS\Program [TFSL]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe 
O4 - GS\Accessories [TFSL]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.)  -- C:\Windows\system32\cmd.exe  =>.Microsoft Corporation
O4 - GS\Accessories [TFSL]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.)  -- C:\Windows\system32\notepad.exe  =>.Microsoft Corporation
O4 - GS\Accessories [TFSL]: Run.lnk - Clé orpheline
O4 - GS\Accessories [TFSL]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.)  -- C:\Windows\explorer.exe  =>.Microsoft Corporation
O4 - GS\SystemTools [TFSL]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe 
O4 - GS\SystemTools [TFSL]: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.)  -- C:\Windows\system32\eudcedit.exe  =>.Microsoft Corporation
O4 - GS\Desktop [TFSL]: Bibliothèques - Raccourci.lnk . (...)  -- C:\Users\TFSL\AppData\Roaming\Microsoft\Windows\Libraries 
O4 - GS\Desktop [TFSL]: Ordinateur.lnk - Clé orpheline
O4 - GS\Desktop [TFSL]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.)  -- C:\Program Files\ZHPDiag\ZHPhep.exe  =>.Nicolas Coolman
O4 - GS\Desktop [TFSL]: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.)  -- C:\Program Files\ZHPDiag\ZHPFix\ZHPhep.exe  =>.Nicolas Coolman
~ Global Startup: 58 Scanned in 00mn 01s



---\\ Applications lancées au démarrage du sytème (O4)
O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe 
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe  =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe  =>.Oracle Corporation
O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe 
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\TFSL\AppData\Local\Google\Update\GoogleUpdate.exe  =>.Google Inc
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\Sidebar.exe (.not file.) 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\Sidebar.exe (.not file.) 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe  =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe  =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-3816597742-2779814927-815833142-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\TFSL\AppData\Local\Google\Update\GoogleUpdate.exe  =>.Google Inc
~ Application:  Scanned in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
~ IE Extra Buttons:  Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll  =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Winsock: 7 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{D15D6AAB-78FF-4BBA-AF94-B73D8AA52BD5}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CCS\Services\Tcpip\..\{F51B00EA-55E8-4693-B6C9-A5DA57D81264}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CCS\Services\Tcpip\..\{D15D6AAB-78FF-4BBA-AF94-B73D8AA52BD5}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{F51B00EA-55E8-4693-B6C9-A5DA57D81264}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{F51B00EA-55E8-4693-B6C9-A5DA57D81264}: DhcpDomain = r16.an.cnav
O17 - HKLM\System\CS1\Services\Tcpip\..\{D15D6AAB-78FF-4BBA-AF94-B73D8AA52BD5}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS1\Services\Tcpip\..\{F51B00EA-55E8-4693-B6C9-A5DA57D81264}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS1\Services\Tcpip\..\{D15D6AAB-78FF-4BBA-AF94-B73D8AA52BD5}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{F51B00EA-55E8-4693-B6C9-A5DA57D81264}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{F51B00EA-55E8-4693-B6C9-A5DA57D81264}: DhcpDomain = r16.an.cnav
O17 - HKLM\System\CS2\Services\Tcpip\..\{D15D6AAB-78FF-4BBA-AF94-B73D8AA52BD5}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS2\Services\Tcpip\..\{F51B00EA-55E8-4693-B6C9-A5DA57D81264}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS2\Services\Tcpip\..\{D15D6AAB-78FF-4BBA-AF94-B73D8AA52BD5}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{F51B00EA-55E8-4693-B6C9-A5DA57D81264}: DhcpNameServer = 50.128.147.106 50.128.147.86
O17 - HKLM\System\CS2\Services\Tcpip\..\{F51B00EA-55E8-4693-B6C9-A5DA57D81264}: DhcpDomain = r16.an.cnav
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254
~ Domain:  Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll  =>.Microsoft Corporation
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll  =>.Microsoft Corporation
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (...) - C:\Windows\System32\AirfoilInject3.dll
~ AppInit DLL:  Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\aestsrv.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: C:\Program Files\DigitalPersona\Bin\DpHostW.exe (DpHost) . (.DigitalPersona, Inc. - DigitalPersona Local Host.) - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: HP Service (hpsrv) . (.Hewlett-Packard Company - HpService.) - C:\Windows\System32\Hpservice.exe
O23 - Service: Technologie de stockage Intel(R) Rapid (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Ma-Config Agent (MaConfigAgent) . (.CybelSoft - Service de détection matériel.) - C:\Program Files\ma-config.com\MaConfigAgent.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 311.0.) - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) . (.Pas de propriétaire - CLCapSvc Module.) - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) . (.Pas de propriétaire - CLSched Module.) - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Recovery Service for Windows (Recovery Service for Windows) . (.Pas de propriétaire - Application MFC STServices.) - C:\Windows\SMINST\BLService.exe
O23 - Service: Audio Service (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\STacSV.exe
~ Services: 14 Scanned in 00mn 04s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3816597742-2779814927-815833142-1000Core1cc10112f285ec4.job   [1022]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3816597742-2779814927-815833142-1000UA.job   [1074]
[MD5.F82F374417148CF545221DD88876219F] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe   [783728]
[MD5.3E6442B01E44B3AA31807FEF5235DC54] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe   [3919640]  =>Piriform Ltd
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [Google Updater and Installer] (.Google Inc..) -- C:\Users\TFSL\AppData\Local\Google\Update\GoogleUpdate.exe   [135664]
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskUserS-1-5-21-3816597742-2779814927-815833142-1000Core] (.Google Inc..) -- C:\Users\TFSL\AppData\Local\Google\Update\GoogleUpdate.exe   [135664]
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskUserS-1-5-21-3816597742-2779814927-815833142-1000Core1cc10112f285ec4] (.Google Inc..) -- C:\Users\TFSL\AppData\Local\Google\Update\GoogleUpdate.exe   [135664]
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskUserS-1-5-21-3816597742-2779814927-815833142-1000UA] (.Google Inc..) -- C:\Users\TFSL\AppData\Local\Google\Update\GoogleUpdate.exe   [135664]
[MD5.00000000000000000000000000000000] [APT] [HP Health Check] (...) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (.not file.)   [0]
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] [APT] [Java Update Scheduler] (.Oracle Corporation.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe   [254336]
[MD5.C637FC4638A96165256B28D38DE7B953] [APT] [Programme de mise … jour en ligne de HP.] (.Hewlett-Packard.) -- C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe   [49208]
[MD5.D9184C5FF3FD526761D518A95ABA74A3] [APT] [{2BC6DA62-CD6E-4320-AA21-22FA7D85BD33}] (.Mozilla Corporation.) -- c:\program files\mozilla firefox\firefox.exe   [275568]
[MD5.D9184C5FF3FD526761D518A95ABA74A3] [APT] [{47818ACA-2EE9-4C39-B42B-2289273E166D}] (.Mozilla Corporation.) -- c:\program files\mozilla firefox\firefox.exe   [275568]
[MD5.D9184C5FF3FD526761D518A95ABA74A3] [APT] [{61C2C7AC-EF77-44F4-A59C-84B41C7CD025}] (.Mozilla Corporation.) -- c:\program files\mozilla firefox\firefox.exe   [275568]
[MD5.D9184C5FF3FD526761D518A95ABA74A3] [APT] [{77AB427B-E505-4F82-B6EA-D05A9C2F2A75}] (.Mozilla Corporation.) -- c:\program files\mozilla firefox\firefox.exe   [275568]
[MD5.D9184C5FF3FD526761D518A95ABA74A3] [APT] [{91F32485-8A37-4527-A814-4F1126F7AFAB}] (.Mozilla Corporation.) -- c:\program files\mozilla firefox\firefox.exe   [275568]
~ Scheduled Task: 18 Scanned in 00mn 02s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll  =>.Microsoft Corporation
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (...) -- C:\Program Files\Java\jre6\bin\regutils.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll  =>.Microsoft Corporation
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe  =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe  =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll  =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 12.0 r0.) -- C:\Windows\system32\Macromed\Flash\Flash32_12_0_0_38.ocx
~ Active Setup: 12 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver:  (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
O41 - Driver:  (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
O41 - Driver:  (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
O41 - Driver:  (avgtp) . (.AVG Technologies - Pas de description.) - C:\Windows\system32\drivers\avgtpx86.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (FNETURPX) . (.FNet Co., Ltd. - FNetUrPx.sys.) - C:\Windows\System32\drivers\FNETURPX.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 75 Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 4.65 - (...) [HKLM] -- 7-Zip
O42 - Logiciel: AIMP3 - (.AIMP DevTeam.) [HKLM] -- AIMP3
O42 - Logiciel: AVerMedia TV Tuner Card 1.0.0.3 - (.AVerMedia TECHNOLOGIES, Inc..) [HKLM] -- AVerMedia TV Tuner Card
O42 - Logiciel: Acoustica Mixcraft 6 - (.Acoustica.) [HKLM] -- Acoustica Mixcraft 6
O42 - Logiciel: Adobe Acrobat 4.0 - (...) [HKLM] -- Adobe Acrobat 4.0
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Flash Player 12 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader X (10.1.9) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- {1BDC9633-895B-4842-BCB6-8FA1EC2A3C5A}
O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Airfoil - (.Rogue Amoeba.) [HKLM] -- Airfoil
O42 - Logiciel: Auslogics DiskDefrag - (.Auslogics Labs Pty Ltd.) [HKLM] -- {DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {C2E4B5BD-32DB-4817-A060-341AB17C3F90}
O42 - Logiciel: Broadcom 802.11 Network Adapter - (.Broadcom Corporation.) [HKLM] -- Broadcom 802.11 Network Adapter
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>Piriform Ltd
O42 - Logiciel: CDex - Open Source Digital Audio CD Extractor - (.Georgy Berdyshev.) [HKLM] -- CDex
O42 - Logiciel: Canon IJ Network Scanner Selector EX - (...) [HKLM] -- Canon_IJ_Network_Scanner_Selector_EX
O42 - Logiciel: Canon IJ Network Tool - (...) [HKLM] -- Canon_IJ_Network_UTILITY
O42 - Logiciel: Canon Inkjet Printer Driver Add-On Module - (...) [HKLM] -- CANONIJINBOXADDON100
O42 - Logiciel: Canon MG5300 series MP Drivers - (...) [HKLM] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series
O42 - Logiciel: Carte réseau local sans fil 802.11 Broadcom - (.Broadcom Corporation.) [HKLM] -- Broadcom 802.11b Network Adapter
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9}
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {51C7AD07-C3F6-4635-8E8A-231306D810FE}
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {ED5776D5-59B4-46B7-AF81-5F2D94D7C640}
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: DigitalPersona Personal 4.10 - (.DigitalPersona, Inc..) [HKLM] -- {B002889A-F359-4F2A-9113-10B0A438AD70}
O42 - Logiciel: Enregistrement utilisateur de Canon MG5300 series - (...) [HKLM] -- Enregistrement utilisateur de Canon MG5300 series  =>.Canon Inc
O42 - Logiciel: Finale 2001b - (...) [HKLM] -- Finale 2001b
O42 - Logiciel: Finale 2011 - (.MakeMusic.) [HKLM] -- Finale 2011
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
O42 - Logiciel: HP 3D DriveGuard - (.Hewlett-Packard.) [HKLM] -- {8FCDACA0-E090-4A9A-AC71-A96E7371DC6E}
O42 - Logiciel: HP Doc Viewer - (.Hewlett-Packard.) [HKLM] -- {082702D5-5DD8-4600-BCE5-48B15174687F}
O42 - Logiciel: HP Quick Launch Buttons - (.Hewlett-Packard.) [HKLM] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355}
O42 - Logiciel: HP QuickPlay 3.7 - (...) [HKLM] -- {45D707E9-F3C4-11D9-A373-0050BAE317E1}
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}
O42 - Logiciel: HP User Guides 0102 - (.Hewlett-Packard.) [HKLM] -- {F48098CD-2D66-4861-85EC-DC1D4D09D5F9}
O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM] -- {484B100E-6FBE-4631-BC55-5F872FD8E020}
O42 - Logiciel: IDT Audio - (.IDT.) [HKLM] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: JMicron 1394 Filter Driver - (.JMicron Technology Corp..) [HKLM] -- {13C96625-28E4-4c58-ADE0-CDAFC64752EB}
O42 - Logiciel: JMicron Flash Media Controller Driver - (.JMicron Technology Corp..) [HKLM] -- {26604C7E-A313-4D12-867F-7C6E7820BE4C}
O42 - Logiciel: Java 7 Update 51 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217025FF}
O42 - Logiciel: K-Lite Codec Pack 8.4.0 (Full) - (...) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: La Bible Online E-M 10.91 - (...) [HKCU] -- OnlineBible
O42 - Logiciel: MPC-HC 1.6.8 - (.MPC-HC Team.) [HKLM] -- {2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {77FCAE79-D819-43F9-8878-732AB23E61D4}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Mises à jour NVIDIA 1.11.3 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update
O42 - Logiciel: Mozilla Firefox 27.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 27.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: NVIDIA Logiciel système PhysX 9.12.0604 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {2FDD750F-49B7-40C1-9D5E-D2955BC0E2D8}
O42 - Logiciel: NVIDIA Pilote audio HD : 1.3.18.0 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver
O42 - Logiciel: NVIDIA Pilote graphique 311.00 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: NoteWorthy Composer - (...) [HKLM] -- NoteWorthy Composer
O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
O42 - Logiciel: PVSonyDll - (.NVIDIA Corporation.) [HKLM] -- {3D3E663D-4E7E-4577-A560-7ECDDD45548A}
O42 - Logiciel: Phpnuke Downloader Finale 2011 - (...) [HKLM] -- Phpnuke Downloader Finale 2011
O42 - Logiciel: Pilote UM-1 - (.Roland Corporation.) [HKLM] -- RolandRDID0009
O42 - Logiciel: QLBCASL - (.Hewlett-Packard.) [HKLM] -- {F1D7AC58-554A-4A58-B784-B61558B1449A}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Sibelius Scorch (Firefox, Opera, Netscape, Chrome only) - (.Sibelius Software, a division of Avid Technology, Inc..) [HKLM] -- {41626CC0-A854-4402-AD06-D7939515C282}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey
O42 - Logiciel: TSP_CODEC - (.Bytescribe.) [HKLM] -- {A90C03D6-08E1-4C59-B93B-6919A6C0AC19}
O42 - Logiciel: TVAnts 1.0 - (...) [HKLM] -- TVAnts 1.0
O42 - Logiciel: UsbBoost - (...) [HKLM] -- UsbBoost
O42 - Logiciel: VLC media player 2.1.2 - (.VideoLAN.) [HKLM] -- VLC media player  =>.VideoLAN
O42 - Logiciel: Veetle TV - (.Veetle, Inc.) [HKLM] -- Veetle TV
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}  =>.Microsoft Corporation
O42 - Logiciel: avast! Free Antivirus v9.0.2013 - (.Avast Software.) [HKLM] -- avast
~ Logic: 49 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\7-Zip]
[HKCU\Software\ALWIL Software]
[HKCU\Software\AVAST Software]
[HKCU\Software\Acoustica]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow]
[HKCU\Software\Applied Acoustics Systems]
[HKCU\Software\Auslogics]
[HKCU\Software\Avg]
[HKCU\Software\Binary Noise]
[HKCU\Software\CDDB]
[HKCU\Software\Canon]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CodaMusic]
[HKCU\Software\CyberLink]
[HKCU\Software\DigitalPersona]
[HKCU\Software\DivXNetworks]
[HKCU\Software\Finale2011_Reg]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\HP Guide]
[HKCU\Software\Haali]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IDT]
[HKCU\Software\IM Providers]
[HKCU\Software\IPE]
[HKCU\Software\JWPlugins]
[HKCU\Software\JavaSoft]
[HKCU\Software\LAV]
[HKCU\Software\LightScribe]
[HKCU\Software\Macromedia]
[HKCU\Software\Macrovision]
[HKCU\Software\MainConcept (Muvee)]
[HKCU\Software\MainConcept (Muvee2)]
[HKCU\Software\MainConcept]
[HKCU\Software\MakeMusic]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MediaInfo]
[HKCU\Software\MimarSinan]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\NoteWorthy Software]
[HKCU\Software\ODBC]
[HKCU\Software\PDFCreator]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Rogue Amoeba]
[HKCU\Software\Skype]
[HKCU\Software\Softthinks]
[HKCU\Software\Synaptics]
[HKCU\Software\SysInternals]
[HKCU\Software\TeleCharger]
[HKCU\Software\Trolltech]
[HKCU\Software\TuneUp]
[HKCU\Software\Veetle]
[HKCU\Software\Winamp]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\eSellerate]
[HKCU\Software\madFlac]
[HKCU\Software\madshi]
[HKCU\Software\muvee Technologies]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\ALWIL Software]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVAST Software]
[HKLM\Software\Acoustica]
[HKLM\Software\Adobe]
[HKLM\Software\AdwCleaner]
[HKLM\Software\America Online]
[HKLM\Software\AppDataLow]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Auslogics]
[HKLM\Software\Avg]
[HKLM\Software\BcmSetup]
[HKLM\Software\Broadcom]
[HKLM\Software\CDDB]
[HKLM\Software\CXT]
[HKLM\Software\CanonBJ]
[HKLM\Software\Canon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CodaMusic]
[HKLM\Software\Conexant]
[HKLM\Software\Cyberlink]
[HKLM\Software\Debug]
[HKLM\Software\DigitalPersona]
[HKLM\Software\EasyBits]
[HKLM\Software\FNET]
[HKLM\Software\GNU]
[HKLM\Software\Gabest]
[HKLM\Software\Google]
[HKLM\Software\HPQLOG]
[HKLM\Software\HPQ]
[HKLM\Software\HP]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\IDT]
[HKLM\Software\InstallShield]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\JMicron Technology Corp.]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KLCodecPack]
[HKLM\Software\Khronos]
[HKLM\Software\LAV]
[HKLM\Software\Licenses]
[HKLM\Software\LightScribe]
[HKLM\Software\Macromedia]
[HKLM\Software\MakeMusic]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MimarSinan]
[HKLM\Software\Mixcraft6]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Nullsoft]
[HKLM\Software\ODBC]
[HKLM\Software\Ontrack]
[HKLM\Software\PDFCreator]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Propellerhead Software]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Skype]
[HKLM\Software\Sonic]
[HKLM\Software\Symantec]
[HKLM\Software\Synaptics]
[HKLM\Software\TuneUp]
[HKLM\Software\VST]
[HKLM\Software\Veetle]
[HKLM\Software\VideoLAN]
[HKLM\Software\Volatile]
[HKLM\Software\WOW6432Node]
[HKLM\Software\Windows]
[HKLM\Software\cybelsoft]
[HKLM\Software\eSellerate]
[HKLM\Software\mozilla.org]
[HKLM\Software\muvee Technologies]
~ Key Software: 276 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 13/11/2009 - 16:44:33 - [2,951] ----D C:\Program Files\7-Zip
O43 - CFD: 07/11/2012 - 13:38:14 - [284,974] ----D C:\Program Files\Acoustica Mixcraft 6
O43 - CFD: 10/03/2012 - 18:26:34 - [121,221] ----D C:\Program Files\Adobe
O43 - CFD: 06/03/2013 - 18:53:36 - [36,568] ----D C:\Program Files\AIMP3
O43 - CFD: 06/02/2014 - 22:43:21 - [16,768] ----D C:\Program Files\Airfoil
O43 - CFD: 28/12/2010 - 13:46:20 - [430,662] ----D C:\Program Files\Alwil Software
O43 - CFD: 02/11/2013 - 17:55:26 - [20,578] ----D C:\Program Files\Auslogics
O43 - CFD: 13/11/2009 - 17:51:26 - [2,010] ----D C:\Program Files\AVerMedia
O43 - CFD: 13/11/2009 - 16:45:06 - [0] ----D C:\Program Files\AVG
O43 - CFD: 23/02/2014 - 21:00:47 - [22,585] ----D C:\Program Files\Bible
O43 - CFD: 06/02/2014 - 22:43:08 - [0,576] ----D C:\Program Files\Bonjour
O43 - CFD: 10/02/2012 - 22:45:28 - [20,881] ----D C:\Program Files\Broadcom
O43 - CFD: 25/09/2010 - 07:55:04 - [0,070] ----D C:\Program Files\Bytescribe
O43 - CFD: 21/11/2012 - 22:49:54 - [12,512] ----D C:\Program Files\Canon
O43 - CFD: 21/11/2012 - 22:47:39 - [15,754] --H-D C:\Program Files\CanonBJ
O43 - CFD: 02/11/2013 - 17:23:02 - [5,981] ----D C:\Program Files\CCleaner =>Piriform Ltd
O43 - CFD: 22/02/2014 - 16:15:11 - [10,219] ----D C:\Program Files\CDex
O43 - CFD: 10/02/2012 - 22:46:45 - [2,558] ----D C:\Program Files\Cisco
O43 - CFD: 22/02/2014 - 16:29:17 - [345,246] ----D C:\Program Files\Common Files
O43 - CFD: 04/04/2013 - 16:57:35 - [129,077] ----D C:\Program Files\CyberLink
O43 - CFD: 13/11/2009 - 17:58:53 - [49,044] ----D C:\Program Files\DigitalPersona
O43 - CFD: 02/11/2012 - 10:36:24 - [79,371] ----D C:\Program Files\DVD Maker
O43 - CFD: 13/11/2009 - 16:47:57 - [66,410] ----D C:\Program Files\EasyBits For Kids
O43 - CFD: 13/11/2009 - 17:37:30 - [0] -SH-D C:\Program Files\Fichiers communs
O43 - CFD: 27/08/2012 - 21:01:28 - [568,704] ----D C:\Program Files\Finale 2011
O43 - CFD: 13/11/2009 - 16:47:58 - [0] ----D C:\Program Files\Fujifilm
O43 - CFD: 04/04/2013 - 17:00:42 - [149,125] ----D C:\Program Files\Hewlett-Packard
O43 - CFD: 01/01/2013 - 13:28:23 - [172,157] ----D C:\Program Files\HP
O43 - CFD: 13/11/2009 - 17:50:17 - [41,572] ----D C:\Program Files\IDT
O43 - CFD: 04/04/2013 - 17:00:16 - [56,504] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 25/11/2012 - 21:00:53 - [21,365] ----D C:\Program Files\Intel
O43 - CFD: 13/02/2014 - 16:55:15 - [21,576] ----D C:\Program Files\Internet Explorer
O43 - CFD: 15/01/2014 - 12:00:39 - [121,316] ----D C:\Program Files\Java
O43 - CFD: 10/02/2012 - 22:57:35 - [3,434] ----D C:\Program Files\JMicron
O43 - CFD: 28/02/2012 - 15:13:54 - [57,266] ----D C:\Program Files\K-Lite Codec Pack
O43 - CFD: 14/01/2014 - 16:49:03 - [9,360] ----D C:\Program Files\ma-config.com
O43 - CFD: 21/04/2013 - 18:57:23 - [13,452] ----D C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 30/06/2013 - 21:50:06 - [22,259] ----D C:\Program Files\Media Player Classic - Home Cinema
O43 - CFD: 31/10/2010 - 13:30:50 - [0,502] ----D C:\Program Files\Microsoft
O43 - CFD: 13/07/2012 - 19:21:59 - [0] ----D C:\Program Files\Microsoft Games
O43 - CFD: 10/07/2011 - 20:32:30 - [564,149] ----D C:\Program Files\Microsoft Office
O43 - CFD: 10/10/2013 - 06:01:55 - [40,851] ----D C:\Program Files\Microsoft Silverlight
O43 - CFD: 13/11/2009 - 16:52:40 - [0,014] ----D C:\Program Files\Microsoft Visual Studio
O43 - CFD: 13/11/2009 - 16:52:40 - [1,323] ----D C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 04/04/2013 - 16:48:20 - [3,690] ----D C:\Program Files\Microsoft Works
O43 - CFD: 22/06/2010 - 20:47:28 - [7,797] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 15/02/2014 - 10:04:44 - [80,379] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 16/02/2014 - 07:56:28 - [0,216] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 13/11/2009 - 16:52:51 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 27/07/2009 - 18:56:46 - [0] ----D C:\Program Files\MSXML 4.0
O43 - CFD: 23/06/2011 - 17:18:01 - [4,488] ----D C:\Program Files\muvee Technologies
O43 - CFD: 17/11/2012 - 16:02:24 - [1,694] ----D C:\Program Files\NoteWorthy Composer
O43 - CFD: 26/11/2012 - 18:37:21 - [1226,728] ----D C:\Program Files\NVIDIA Corporation
O43 - CFD: 13/11/2009 - 16:52:52 - [20,914] R---D C:\Program Files\Online Services
O43 - CFD: 13/11/2009 - 16:52:53 - [0,826] ----D C:\Program Files\Ontrack
O43 - CFD: 30/06/2013 - 22:05:38 - [32,584] ----D C:\Program Files\PDFCreator
O43 - CFD: 13/11/2009 - 16:52:53 - [0,653] ----D C:\Program Files\Photodex
O43 - CFD: 08/05/2012 - 17:43:35 - [0,846] ----D C:\Program Files\Phpnuke Downloader
O43 - CFD: 28/07/2011 - 14:31:30 - [1,026] ----D C:\Program Files\RdDrv001
O43 - CFD: 25/11/2012 - 20:02:14 - [2,697] ----D C:\Program Files\Realtek
O43 - CFD: 04/04/2013 - 17:48:41 - [0,029] ----D C:\Program Files\REAPER
O43 - CFD: 14/07/2009 - 05:52:30 - [37,450] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 19/09/2013 - 17:59:43 - [27,829] ----D C:\Program Files\Sibelius Software
O43 - CFD: 13/11/2009 - 16:39:40 - [35,918] ----D C:\Program Files\Synaptics
O43 - CFD: 19/03/2013 - 19:18:38 - [1,415] ----D C:\Program Files\TVAnts
O43 - CFD: 14/07/2009 - 05:53:23 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 13/11/2009 - 16:53:04 - [6,923] ----D C:\Program Files\UsbBoost
O43 - CFD: 06/08/2011 - 18:43:12 - [9,742] ----D C:\Program Files\Veetle
O43 - CFD: 13/11/2009 - 16:53:04 - [102,564] ----D C:\Program Files\VideoLAN
O43 - CFD: 07/11/2012 - 13:37:20 - [0] ----D C:\Program Files\VST
O43 - CFD: 18/10/2012 - 09:37:42 - [0] ----D C:\Program Files\Winamp
O43 - CFD: 13/11/2009 - 16:53:10 - [0] ----D C:\Program Files\Windows Calendar
O43 - CFD: 13/11/2009 - 16:53:11 - [0] ----D C:\Program Files\Windows Collaboration
O43 - CFD: 11/07/2013 - 05:50:17 - [2,909] ----D C:\Program Files\Windows Defender
O43 - CFD: 02/11/2012 - 10:37:10 - [5,895] ----D C:\Program Files\Windows Mail  =>.Microsoft Corporation
O43 - CFD: 12/12/2013 - 21:49:29 - [6,298] ----D C:\Program Files\Windows Media Player  =>.Microsoft Corporation
O43 - CFD: 13/11/2009 - 17:37:30 - [11,632] ----D C:\Program Files\Windows NT
O43 - CFD: 13/11/2009 - 16:53:12 - [0] ----D C:\Program Files\Windows Photo Gallery
O43 - CFD: 02/11/2012 - 10:37:10 - [4,213] ----D C:\Program Files\Windows Photo Viewer
O43 - CFD: 02/03/2011 - 17:54:02 - [0,181] ----D C:\Program Files\Windows Portable Devices
O43 - CFD: 13/07/2012 - 19:21:55 - [1,124] ----D C:\Program Files\Windows Sidebar
O43 - CFD: 04/03/2014 - 15:53:58 - [17,269] ----D C:\Program Files\ZHPDiag  =>.Nicolas Coolman
O43 - CFD: 10/03/2012 - 18:26:41 - [4,209] ----D C:\Program Files\Common Files\Adobe
O43 - CFD: 30/07/2010 - 17:10:37 - [0,278] ----D C:\Program Files\Common Files\Canon
O43 - CFD: 13/11/2009 - 16:45:16 - [0,089] ----D C:\Program Files\Common Files\DESIGNER
O43 - CFD: 13/11/2009 - 16:45:17 - [11,346] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 25/11/2012 - 21:04:01 - [0,173] ----D C:\Program Files\Common Files\Intel Corporation
O43 - CFD: 23/10/2013 - 17:35:02 - [1,191] ----D C:\Program Files\Common Files\Java
O43 - CFD: 04/04/2013 - 16:48:20 - [223,713] ----D C:\Program Files\Common Files\microsoft shared
O43 - CFD: 22/09/2010 - 20:55:25 - [22,316] ----D C:\Program Files\Common Files\muvee Technologies
O43 - CFD: 02/11/2012 - 10:30:32 - [0] ----D C:\Program Files\Common Files\Propellerhead Software
O43 - CFD: 14/07/2009 - 03:37:05 - [0,003] ----D C:\Program Files\Common Files\Services
O43 - CFD: 14/07/2009 - 03:37:05 - [39,200] ----D C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 13/11/2009 - 16:46:10 - [0,476] ----D C:\Program Files\Common Files\Symantec Shared
O43 - CFD: 02/11/2012 - 10:37:10 - [42,254] ----D C:\Program Files\Common Files\System
O43 - CFD: 13/11/2009 - 16:46:11 - [0] ----D C:\Program Files\Common Files\Windows Live
O43 - CFD: 07/11/2012 - 13:37:20 - [61,528] ----D C:\ProgramData\Acoustica
O43 - CFD: 15/02/2013 - 11:05:21 - [177,593] ----D C:\ProgramData\Adobe
O43 - CFD: 28/12/2010 - 13:44:02 - [44,090] ----D C:\ProgramData\Alwil Software
O43 - CFD: 07/08/2013 - 17:29:10 - [0] ----D C:\ProgramData\AOL
O43 - CFD: 13/11/2009 - 16:53:12 - [0,006] ----D C:\ProgramData\AOL OCP
O43 - CFD: 06/02/2014 - 22:43:07 - [4,640] ----D C:\ProgramData\Apple
O43 - CFD: 14/07/2009 - 05:53:55 - [0] -SH-D C:\ProgramData\Application Data
O43 - CFD: 28/09/2013 - 18:56:30 - [0,133] ----D C:\ProgramData\Auslogics
O43 - CFD: 02/11/2013 - 17:21:26 - [4,321] ----D C:\ProgramData\AVAST Software
O43 - CFD: 13/11/2009 - 17:37:30 - [0] -SH-D C:\ProgramData\Bureau
O43 - CFD: 21/11/2012 - 22:49:54 - [0] ----D C:\ProgramData\Canon IJ Network Tool
O43 - CFD: 21/11/2012 - 22:48:56 - [23,489] --H-D C:\ProgramData\CanonBJ
O43 - CFD: 21/11/2012 - 22:49:03 - [0,003] ----D C:\ProgramData\CanonIJWSpt
O43 - CFD: 24/06/2012 - 20:34:39 - [0] --H-D C:\ProgramData\Common Files
O43 - CFD: 13/11/2009 - 16:53:14 - [0,042] ----D C:\ProgramData\CyberLink
O43 - CFD: 14/07/2009 - 05:53:55 - [0] -SH-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 05:53:55 - [0] -SH-D C:\ProgramData\Documents
O43 - CFD: 13/11/2009 - 17:58:40 - [24,498] ----D C:\ProgramData\Downloaded Installations
O43 - CFD: 13/11/2009 - 17:37:30 - [0] -SH-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 05:53:55 - [0] -SH-D C:\ProgramData\Favorites
O43 - CFD: 13/11/2009 - 16:53:14 - [0] ----D C:\ProgramData\FNET
O43 - CFD: 13/11/2009 - 16:53:15 - [48,550] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 21/11/2009 - 14:40:47 - [0] ----D C:\ProgramData\HP
O43 - CFD: 13/11/2009 - 16:53:15 - [0,001] ----D C:\ProgramData\LightScribe
O43 - CFD: 14/01/2014 - 16:49:03 - [1,455] ----D C:\ProgramData\ma-config.com
O43 - CFD: 13/11/2009 - 17:58:53 - [2,438] ----D C:\ProgramData\Macrovision
O43 - CFD: 27/08/2012 - 21:27:54 - [22,237] ----D C:\ProgramData\MakeMusic
O43 - CFD: 21/09/2011 - 14:44:42 - [16,810] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 13/11/2009 - 17:37:30 - [0] -SH-D C:\ProgramData\Menu Démarrer
O43 - CFD: 25/02/2014 - 23:23:58 - [249,297] -S--D C:\ProgramData\Microsoft
O43 - CFD: 15/01/2014 - 13:09:13 - [0,358] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 13/11/2009 - 17:37:30 - [0] -SH-D C:\ProgramData\Modèles
O43 - CFD: 07/05/2012 - 15:36:57 - [0,019] ----D C:\ProgramData\Mozilla
O43 - CFD: 13/11/2009 - 16:53:26 - [27,411] ----D C:\ProgramData\muvee Technologies
O43 - CFD: 12/09/2013 - 19:16:20 - [0,733] ----D C:\ProgramData\NVIDIA
O43 - CFD: 10/02/2012 - 22:37:24 - [2,414] ----D C:\ProgramData\NVIDIA Corporation
O43 - CFD: 15/01/2014 - 12:01:07 - [0] ----D C:\ProgramData\Oracle
O43 - CFD: 22/02/2014 - 16:29:18 - [125,682] ----D C:\ProgramData\Skype
O43 - CFD: 14/07/2009 - 05:53:55 - [0] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 09/04/2010 - 20:06:02 - [0] ----D C:\ProgramData\Sun
O43 - CFD: 13/11/2009 - 16:53:44 - [0,002] ----D C:\ProgramData\Symantec
O43 - CFD: 31/08/2009 - 18:12:20 - [0] ---AD C:\ProgramData\TEMP
O43 - CFD: 14/07/2009 - 05:53:55 - [0] -SH-D C:\ProgramData\Templates
O43 - CFD: 10/02/2012 - 23:08:44 - [1,908] ----D C:\ProgramData\TuneUp Software
O43 - CFD: 13/11/2009 - 16:53:45 - [15,811] ----D C:\ProgramData\WildTangent
O43 - CFD: 10/02/2012 - 23:07:52 - [22,935] -SH-D C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
O43 - CFD: 07/11/2012 - 13:49:21 - [0,036] ----D C:\Users\TFSL\AppData\Roaming\Acoustica
O43 - CFD: 10/03/2012 - 18:27:44 - [14,238] ----D C:\Users\TFSL\AppData\Roaming\Adobe
O43 - CFD: 01/03/2014 - 11:33:33 - [7,649] ----D C:\Users\TFSL\AppData\Roaming\AIMP3
O43 - CFD: 23/03/2013 - 14:48:39 - [0,130] ----D C:\Users\TFSL\AppData\Roaming\Applied Acoustics Systems
O43 - CFD: 01/04/2013 - 19:40:33 - [0,059] ----D C:\Users\TFSL\AppData\Roaming\Auslogics
O43 - CFD: 02/11/2013 - 17:50:53 - [6,179] ----D C:\Users\TFSL\AppData\Roaming\AVAST Software
O43 - CFD: 13/11/2009 - 17:02:13 - [0,018] ----D C:\Users\TFSL\AppData\Roaming\CyberLink
O43 - CFD: 13/11/2009 - 18:16:56 - [0] ----D C:\Users\TFSL\AppData\Roaming\DigitalPersona
O43 - CFD: 22/08/2012 - 12:40:12 - [0] ----D C:\Users\TFSL\AppData\Roaming\dvdcss
O43 - CFD: 13/07/2012 - 20:03:33 - [0] ----D C:\Users\TFSL\AppData\Roaming\GTek
O43 - CFD: 13/11/2009 - 18:04:56 - [0,297] ----D C:\Users\TFSL\AppData\Roaming\Hewlett-Packard
O43 - CFD: 21/11/2009 - 14:40:47 - [0] ----D C:\Users\TFSL\AppData\Roaming\HP
O43 - CFD: 13/11/2009 - 18:10:43 - [0,063] ----D C:\Users\TFSL\AppData\Roaming\hpqLog
O43 - CFD: 07/08/2013 - 17:26:40 - [0,001] ----D C:\Users\TFSL\AppData\Roaming\HpUpdate
O43 - CFD: 13/11/2009 - 17:02:13 - [0] ----D C:\Users\TFSL\AppData\Roaming\Identities
O43 - CFD: 10/02/2012 - 22:45:21 - [0] ----D C:\Users\TFSL\AppData\Roaming\InstallShield
O43 - CFD: 25/11/2012 - 21:03:42 - [0] ----D C:\Users\TFSL\AppData\Roaming\Intel Corporation
O43 - CFD: 13/11/2009 - 17:02:13 - [0,002] ----D C:\Users\TFSL\AppData\Roaming\Macromedia
O43 - CFD: 13/11/2009 - 18:17:58 - [0] ----D C:\Users\TFSL\AppData\Roaming\Macrovision
O43 - CFD: 27/08/2012 - 21:00:55 - [14,632] ----D C:\Users\TFSL\AppData\Roaming\MakeMusic
O43 - CFD: 21/09/2011 - 14:44:55 - [12,544] ----D C:\Users\TFSL\AppData\Roaming\Malwarebytes
O43 - CFD: 14/07/2009 - 08:48:18 - [0] ----D C:\Users\TFSL\AppData\Roaming\Media Center Programs
O43 - CFD: 17/01/2014 - 22:48:07 - [0] ----D C:\Users\TFSL\AppData\Roaming\Media Player Classic
O43 - CFD: 12/07/2013 - 21:40:30 - [4,092] -S--D C:\Users\TFSL\AppData\Roaming\Microsoft
O43 - CFD: 13/11/2009 - 17:02:22 - [235,961] ----D C:\Users\TFSL\AppData\Roaming\Mozilla
O43 - CFD: 13/11/2009 - 17:02:28 - [11,826] ----D C:\Users\TFSL\AppData\Roaming\muvee Technologies
O43 - CFD: 13/11/2009 - 17:02:34 - [0] ----D C:\Users\TFSL\AppData\Roaming\Netscape
O43 - CFD: 13/11/2009 - 17:02:34 - [0,123] ----D C:\Users\TFSL\AppData\Roaming\Photodex
O43 - CFD: 14/07/2012 - 09:24:01 - [0] ----D C:\Users\TFSL\AppData\Roaming\QuickScan
O43 - CFD: 03/11/2012 - 10:25:01 - [14,340] ----D C:\Users\TFSL\AppData\Roaming\REAPER
O43 - CFD: 19/09/2013 - 18:17:52 - [0,001] ----D C:\Users\TFSL\AppData\Roaming\Sibelius Software
O43 - CFD: 15/02/2014 - 20:04:57 - [10,283] ----D C:\Users\TFSL\AppData\Roaming\Skype
O43 - CFD: 13/11/2009 - 17:02:35 - [0,127] ----D C:\Users\TFSL\AppData\Roaming\skypePM
O43 - CFD: 13/11/2009 - 17:02:35 - [0] ----D C:\Users\TFSL\AppData\Roaming\Symantec
O43 - CFD: 07/11/2012 - 13:49:42 - [0] ----D C:\Users\TFSL\AppData\Roaming\SynthMaker
O43 - CFD: 10/02/2012 - 23:08:21 - [0,042] ----D C:\Users\TFSL\AppData\Roaming\TuneUp Software
O43 - CFD: 12/04/2010 - 12:56:00 - [0,555] ----D C:\Users\TFSL\AppData\Roaming\uTorrent =>P2P.µTorrent
O43 - CFD: 03/03/2014 - 00:38:36 - [1,484] ----D C:\Users\TFSL\AppData\Roaming\vlc
O43 - CFD: 04/03/2014 - 18:51:28 - [25,375] ----D C:\Users\TFSL\AppData\Roaming\ZHP  =>.Nicolas Coolman
O43 - CFD: 13/11/2009 - 17:52:26 - [17,733] ----D C:\Users\TFSL\AppData\Roaming\{8126D2ED-1984-4573-9D57-97637E10C716}
O43 - CFD: 17/01/2014 - 18:57:00 - [15,895] ----D C:\Users\TFSL\AppData\Local\Adobe
O43 - CFD: 13/11/2009 - 17:02:03 - [0,086] ----D C:\Users\TFSL\AppData\Local\AOL OCP
O43 - CFD: 13/11/2009 - 16:40:37 - [0] -SH-D C:\Users\TFSL\AppData\Local\Application Data
O43 - CFD: 02/11/2012 - 08:58:58 - [0] ----D C:\Users\TFSL\AppData\Local\Diagnostics
O43 - CFD: 13/11/2009 - 18:16:56 - [0] ----D C:\Users\TFSL\AppData\Local\DigitalPersona
O43 - CFD: 28/09/2013 - 16:16:44 - [0] ----D C:\Users\TFSL\AppData\Local\ElevatedDiagnostics
O43 - CFD: 13/01/2010 - 17:44:15 - [647,407] ----D C:\Users\TFSL\AppData\Local\Google
O43 - CFD: 13/11/2009 - 18:04:34 - [0,225] ----D C:\Users\TFSL\AppData\Local\Hewlett-Packard
O43 - CFD: 13/11/2009 - 16:40:37 - [0] -SH-D C:\Users\TFSL\AppData\Local\Historique
O43 - CFD: 23/06/2012 - 07:12:18 - [0] ----D C:\Users\TFSL\AppData\Local\Macromedia
O43 - CFD: 27/11/2013 - 08:38:05 - [245,569] ----D C:\Users\TFSL\AppData\Local\Microsoft
O43 - CFD: 13/11/2009 - 17:02:05 - [0,004] ----D C:\Users\TFSL\AppData\Local\Microsoft Corporation
O43 - CFD: 10/07/2011 - 20:58:33 - [0] ----D C:\Users\TFSL\AppData\Local\Microsoft Help
O43 - CFD: 02/10/2013 - 07:07:07 - [454,149] ----D C:\Users\TFSL\AppData\Local\Mozilla
O43 - CFD: 05/01/2013 - 14:50:24 - [0] ----D C:\Users\TFSL\AppData\Local\Programs
O43 - CFD: 21/11/2009 - 14:51:58 - [0,322] ----D C:\Users\TFSL\AppData\Local\QuickPlay
O43 - CFD: 06/02/2014 - 23:01:53 - [0,003] ----D C:\Users\TFSL\AppData\Local\Rogue Amoeba
O43 - CFD: 04/04/2013 - 16:44:08 - [0,272] ----D C:\Users\TFSL\AppData\Local\Seven Zip
O43 - CFD: 04/03/2014 - 18:49:32 - [0,017] ----D C:\Users\TFSL\AppData\Local\Temp
O43 - CFD: 13/11/2009 - 16:40:37 - [0] -SH-D C:\Users\TFSL\AppData\Local\Temporary Internet Files
O43 - CFD: 12/06/2013 - 08:11:45 - [0,001] ----D C:\Users\TFSL\AppData\Local\TrafficSpaceLLC
O43 - CFD: 13/11/2009 - 17:02:12 - [14,128] ----D C:\Users\TFSL\AppData\Local\VirtualStore
O43 - CFD: 15/03/2013 - 16:25:40 - [0,035] ----D C:\Users\TFSL\AppData\Local\Windows Live
O43 - CFD: 14/07/2009 - 05:42:04 - [0,014] R---D C:\Users\TFSL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 07/11/2012 - 13:38:14 - [0,014] ----D C:\Users\TFSL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acoustica Mixcraft 6
O43 - CFD: 12/09/2013 - 19:27:43 - [0] R---D C:\Users\TFSL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 06/02/2014 - 22:43:21 - [0] ----D C:\Users\TFSL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Airfoil
O43 - CFD: 04/04/2013 - 16:57:32 - [0,001] ----D C:\Users\TFSL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
O43 - CFD: 13/11/2009 - 17:02:21 - [0,001] ----D C:\Users\TFSL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
O43 - CFD: 11/01/2013 - 21:32:36 - [0,002] ----D C:\Users\TFSL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 14/07/2009 - 05:37:42 - [0,001] R---D C:\Users\TFSL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 31/10/2010 - 16:15:14 - [0,006] ----D C:\Users\TFSL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NoteWorthy Composer
O43 - CFD: 08/05/2012 - 17:43:35 - [0,001] ----D C:\Users\TFSL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Phpnuke Downloader
O43 - CFD: 12/09/2013 - 19:27:43 - [0] R---D C:\Users\TFSL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
~ Program Folder: 216 Scanned in 00mn 05s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.6FA9EAD6B6D314C0773A9C56F144D36A] - 02/03/2014 - 15:41:28 ---A- . (...) -- C:\Windows\ntbtlog.txt   [7722286]
O44 - LFC:[MD5.AF6300E3FAE7656D39277D8A56160EAF] - 02/03/2014 - 19:14:08 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI   [1681024]
O44 - LFC:[MD5.53287D0744B653E57364CC8488AE0FA5] - 02/03/2014 - 19:14:08 ---A- . (...) -- C:\Windows\System32\perfc009.dat   [123786]
O44 - LFC:[MD5.AA93607345A770F0309297ABA0F0DD01] - 02/03/2014 - 19:14:08 ---A- . (...) -- C:\Windows\System32\perfc00C.dat   [151870]
O44 - LFC:[MD5.B725C78B597D6AECF805BB3D5885B0FD] - 02/03/2014 - 19:14:08 ---A- . (...) -- C:\Windows\System32\perfh009.dat   [658476]
O44 - LFC:[MD5.EBA4F03A34B89387AB64008F7A78353E] - 02/03/2014 - 19:14:08 ---A- . (...) -- C:\Windows\System32\perfh00C.dat   [751758]
O44 - LFC:[MD5.0DB7527DB188C7D967A37BB51BBF3963] - 03/03/2014 - 09:16:36 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\Drivers\mbamswissarmy.sys   [40776]
O44 - LFC:[MD5.B92E6965D06FE962456101001FD48ADA] - 04/03/2014 - 15:34:16 ---A- . (...) -- C:\Windows\setupact.log   [170200]
O44 - LFC:[MD5.9D51DAAA75DEA3138B6D2335238AF2CA] - 04/03/2014 - 15:54:00 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin   [512]
O44 - LFC:[MD5.037559D92C43A23F012DB51181281CCD] - 04/03/2014 - 18:35:05 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.1A960E2A5F0A1BC88C5DA6535C95860C] - 04/03/2014 - 18:49:49 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [324530]
O44 - LFC:[MD5.ECB325A35E9BB7AA643622B4D843E77C] - 22/02/2014 - 12:15:53 ---A- . (...) -- C:\Windows\PFRO.log   [1374]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 22/02/2014 - 14:04:08 ---A- . (...) -- C:\Windows\setuperr.log   [0]
~ Files: 13 Scanned in 00mn 02s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.14226EA7200D7F1D37E74B363957B1CB] - 04/03/2014 - 18:39:36 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-EB1B961A.pf
O45 - LFCP:[MD5.E3E14E9BAF4FC735D7173D63D04708BA] - 04/03/2014 - 18:39:37 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-71214090.pf
O45 - LFCP:[MD5.DC0C8A10B447854847B7100336A96479] - 04/03/2014 - 18:40:26 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-3816597742-2779814927-815833142-1000.db
O45 - LFCP:[MD5.12DAD6C91F6333E1B8ED75B048F24922] - 04/03/2014 - 18:40:26 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-3816597742-2779814927-815833142-1000.db
O45 - LFCP:[MD5.78E60E8AF1881BE4E540CFC0A9B43DA5] - 04/03/2014 - 18:42:54 ---A- - C:\Windows\Prefetch\CHROME.EXE-3F03AFF4.pf
O45 - LFCP:[MD5.9F1E452A2275CA23D19CFBD0B53CE554] - 04/03/2014 - 18:49:30 ---A- - C:\Windows\Prefetch\AUDIODG.EXE-D0D776AC.pf
O45 - LFCP:[MD5.F4881B67762EE731A8E302BD3F388712] - 04/03/2014 - 18:50:29 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-BBB8B3DE.pf
O45 - LFCP:[MD5.C073C6A808CA0A399DC7942FAF434785] - 04/03/2014 - 18:50:42 ---A- - C:\Windows\Prefetch\CONSENT.EXE-65F6206D.pf
O45 - LFCP:[MD5.D357F8D41E2DA0D798A4256DC958F981] - 04/03/2014 - 18:50:43 ---A- - C:\Windows\Prefetch\ZHPHEP.EXE-073BE0BF.pf
O45 - LFCP:[MD5.A569FFBA43BB09D3AFBD25B54601D93D] - 04/03/2014 - 18:50:47 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-893DDF55.pf
O45 - LFCP:[MD5.E88DB830F7841F2BAE5AEB409738AF32] - 04/03/2014 - 18:50:53 ---A- - C:\Windows\Prefetch\ZHPDIAG.EXE-9D0EE457.pf
O45 - LFCP:[MD5.5766ECC558BCE312B7A8C7F89C80B9A4] - 04/03/2014 - 18:51:04 ---A- - C:\Windows\Prefetch\VDS.EXE-AD27F0DC.pf
O45 - LFCP:[MD5.EA5A48E48BB9CFB0CE48443373540D92] - 04/03/2014 - 18:51:08 ---A- - C:\Windows\Prefetch\VDSLDR.EXE-85F9A1C6.pf
O45 - LFCP:[MD5.7D2D4A6D85282B6E6E822D82514DB2C5] - 04/03/2014 - 18:51:15 ---A- - C:\Windows\Prefetch\CSCRIPT.EXE-E4C98DEB.pf
O45 - LFCP:[MD5.012C6A2E22E3FC548908A680D3EEF6FF] - 04/03/2014 - 18:51:16 ---A- - C:\Windows\Prefetch\PV.EXE-8E63E86A.pf
O45 - LFCP:[MD5.ED2E8919A04F84E369A4696EA16ED279] - 04/03/2014 - 18:51:20 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-CBE91656.pf
O45 - LFCP:[MD5.0F9D2451AC9F25AAECAA8AD1C2299068] - 04/03/2014 - 18:51:22 ---A- - C:\Windows\Prefetch\CMD.EXE-89305D47.pf
O45 - LFCP:[MD5.847F23A1AA20C6490E1BBDE515175F40] - 04/03/2014 - 18:51:22 ---A- - C:\Windows\Prefetch\CONHOST.EXE-3218E401.pf
O45 - LFCP:[MD5.D5DE32B8C857282FC6B6F2D910CFD74E] - 04/03/2014 - 18:51:22 ---A- - C:\Windows\Prefetch\SUBINACL.EXE-AD2C3B41.pf
O45 - LFCP:[MD5.A5792E828CA8A637FCE618D52B616AA5] - 04/03/2014 - 18:51:28 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-2DE769BF.pf
~ Prefetcher: 20 Scanned in 00mn 00s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Notification Packages . (.DigitalPersona, Inc. - DPPwdFlt Module.) -- C:\Windows\System32\DPPWDFLT.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
~ LSA: 9 Scanned in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en mode noyau.) -- C:\Windows\System32\Drivers\Wdf01000.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en mode noyau.) -- C:\Windows\System32\Drivers\Wdf01000.sys
~ CSB: 15 Scanned in 00mn 00s



---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{bffe87d1-de27-11e2-bebc-f17d613e0a43}\AutoRun\command. (...) -- F:\Startme.exe (.not file.)
O51 - MPSK:{d0d77e9e-c968-11e0-bfd2-c3450c487055}\AutoRun\command. (...) -- F:\WD SmartWare.exe (.not file.)
~ Keys:  Scanned in 00mn 00s



---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50.) -- C:\Windows\System32\tssoft32.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"l3codecp.acm"="" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm
~ TDSD: 5 Scanned in 00mn 00s



---\\ Enumération des clés de registre StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\Adobe ARM  [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe  =>.Adobe Systems Incorporated
O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher  [Key] . (...) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\DpAgent  [Key] . (.DigitalPersona, Inc. - DigitalPersona Local Agent.) -- C:\Program Files\DigitalPersona\Bin\dpagent.exe
O53 - SMSR:HKLM\...\startupreg\ehTray.exe  [Key] . (.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehTray.exe  =>.Microsoft Corporation
O53 - SMSR:HKLM\...\startupreg\Google Update  [Key] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\TFSL\AppData\Local\Google\Update\GoogleUpdate.exe  =>.Google Inc
O53 - SMSR:HKLM\...\startupreg\HP Health Check Scheduler  [Key] . (...) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\HP Software Update  [Key] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe  =>.Hewlett-Packard Co
O53 - SMSR:HKLM\...\startupreg\hpWirelessAssistant  [Key] . (.Hewlett-Packard - HP Wireless Assistant Main Program.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O53 - SMSR:HKLM\...\startupreg\IAStorIcon  [Key] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
O53 - SMSR:HKLM\...\startupreg\IJNetworkScannerSelectorEX  [Key] . (.CANON INC. - Canon IJ Network Scanner Selector EX.) -- C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
O53 - SMSR:HKLM\...\startupreg\OnScreenDisplay  [Key] . (...) -- C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\QlbCtrl.exe  [Key] . (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
O53 - SMSR:HKLM\...\startupreg\QPService  [Key] . (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files\HP\QuickPlay\QPService.exe
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched  [Key] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe  =>.Oracle Corporation
O53 - SMSR:HKLM\...\startupreg\SynTPEnh  [Key] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O53 - SMSR:HKLM\...\startupreg\SysTrayApp  [Key] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe
O53 - SMSR:HKLM\...\startupreg\UCam_Menu  [Key] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
O53 - SMSR:HKLM\...\startupreg\UsbBoost  [Key] . (.FNet Co., Ltd. - Pas de description.) -- C:\Program Files\UsbBoost\TurboHddUsb.exe
O53 - SMSR:HKLM\...\startupreg\WinampAgent  [Key] . (...) -- C:\Program Files\Winamp\winampa.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Windows Defender  [Key] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
O53 - SMSR:HKLM\...\startupreg\WirelessAssistant  [Key] . (.Hewlett-Packard - HP Wireless Assistant Main Program.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
~ SMSR Keys: 21 Scanned in 00mn 00s



---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
~ MWPS: 16 Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKLM\...\policies\Explorer] - "BindDirectlyToPropertySetStorage"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoCDBurning"=0
~ MWPE Keys: 3 Scanned in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.FBCE2F43185104AE8BF4D32571B19203] - 14/07/2009 - 00:51:21 ---A- . (.Microsoft Corporation - 1394 Bus Device Driver.) -- C:\Windows\System32\Drivers\1394bus.sys   [54784]
O58 - SDL:[MD5.1B133875B8AA8AC48969BD3458AFE9F5] - 20/11/2010 - 11:01:12 ---A- . (.Microsoft Corporation - 1394 OpenHCI Port Driver.) -- C:\Windows\System32\Drivers\1394ohci.sys   [164864]
O58 - SDL:[MD5.CC1F1D3D70DC13C2C281488D347D4415] - 13/05/2011 - 17:57:20 ---A- . (.Hewlett-Packard Company - HP Accelerometer.) -- C:\Windows\System32\Drivers\Accelerometer.sys   [35896]
O58 - SDL:[MD5.CEA80C80BED809AA0DA6FEBC04733349] - 20/11/2010 - 13:29:15 ---A- . (.Microsoft Corporation - Pilote ACPI pour NT.) -- C:\Windows\System32\Drivers\acpi.sys   [274304]
O58 - SDL:[MD5.1EFBC664ABFF416D1D07DB115DCB264F] - 20/11/2010 - 09:47:55 ---A- . (.Microsoft Corporation - ACPI Power Metering Driver.) -- C:\Windows\System32\Drivers\acpipmi.sys   [10240]
O58 - SDL:[MD5.21E785EBD7DC90A06391141AAC7892FB] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys   [422976]
O58 - SDL:[MD5.0C676BC278D5B59FF5ABD57BBE9123F2] - 14/07/2009 - 02:26:17 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\Drivers\adpahci.sys   [297552]
O58 - SDL:[MD5.7C7B5EE4B7B822EC85321FE23A27DB33] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\Drivers\adpu320.sys   [146512]
O58 - SDL:[MD5.F81BB7E487EDCEAB630A7EE66CF23913] - 14/09/2013 - 01:48:58 ---A- . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\Drivers\afd.sys   [338944]
O58 - SDL:[MD5.57EC4AEF73660166074D8F7F31C0D4FD] - 14/07/2009 - 00:55:00 ---A- . (.Microsoft Corporation - RAS Agile Vpn Miniport Call Manager.) -- C:\Windows\System32\Drivers\agilevpn.sys   [49152]
O58 - SDL:[MD5.507812C3054C21CEF746B6EE3D04DD6E] - 14/07/2009 - 02:26:15 ---A- . (.Microsoft Corporation - Filtre AGP 440 NT.) -- C:\Windows\System32\Drivers\AGP440.sys   [53312]
O58 - SDL:[MD5.0D40BCF52EA90FC7DF2AEAB6503DEA44] - 14/07/2009 - 02:26:15 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\Drivers\aliide.sys   [14400]
O58 - SDL:[MD5.3C6600A0696E90A463771C7422E23AB5] - 14/07/2009 - 02:26:15 ---A- . (.Microsoft Corporation - Filtre AGP AMD NT.) -- C:\Windows\System32\Drivers\AMDAGP.SYS   [53312]
O58 - SDL:[MD5.CD5914170297126B6266860198D1D4F0] - 14/07/2009 - 02:26:15 ---A- . (.Microsoft Corporation - Pilote IDE AMD.) -- C:\Windows\System32\Drivers\amdide.sys   [14912]
O58 - SDL:[MD5.00DDA200D71BAC534BF56A9DB5DFD666] - 14/07/2009 - 00:11:04 ---A- . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\Drivers\amdk8.sys   [55296]
O58 - SDL:[MD5.3CBF30F5370FDA40DD3E87DF38EA53B6] - 14/07/2009 - 00:11:04 ---A- . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\Drivers\amdppm.sys   [52736]
O58 - SDL:[MD5.D320BF87125326F996D4904FE24300FC] - 11/03/2011 - 06:38:37 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys   [80256]
O58 - SDL:[MD5.EA43AF0C423FF267355F74E7A53BDABA] - 14/07/2009 - 02:26:15 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows fa.) -- C:\Windows\System32\Drivers\amdsbs.sys   [159312]
O58 - SDL:[MD5.46387FB17B086D16DEA267D5BE23A2F2] - 11/03/2011 - 06:38:37 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys   [22400]
O58 - SDL:[MD5.AEA177F783E20150ACE5383EE368DA19] - 20/11/2010 - 10:29:49 ---A- . (.Microsoft Corporation - AppID Driver.) -- C:\Windows\System32\Drivers\appid.sys   [50176]
O58 - SDL:[MD5.2932004F49677BD84DBC72EDB754FFB3] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\Drivers\arc.sys   [76368]
O58 - SDL:[MD5.5D6F36C46FD283AE1B57BD2E9FEB0BC7] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys   [86608]
O58 - SDL:[MD5.61953E5E1FFAEAF246A610BEE2554879] - 17/02/2014 - 07:41:06 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\System32\Drivers\aswMonFlt.sys   [67824]
O58 - SDL:[MD5.AC48BDD4CD5D44AF33087C06D6E9511C] - 10/05/2011 - 12:59:56 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\System32\Drivers\aswRdr.sys   [25432]
O58 - SDL:[MD5.2206985EF126AB90F3D7F1A020589DC9] - 02/11/2013 - 17:30:15 ---A- . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\Windows\System32\Drivers\aswRdr2.sys   [79720]
O58 - SDL:[MD5.F385467DF95D0A73775CB3B076B8B969] - 02/11/2013 - 17:30:16 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys   [49944]
O58 - SDL:[MD5.8CD8710457FCC1CDE88CBFA3AA119B92] - 17/02/2014 - 07:41:07 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\Drivers\aswSnx.sys   [775952]
O58 - SDL:[MD5.C1F95C9481F46B96E23A276639C55AC9] - 17/02/2014 - 07:41:07 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\Drivers\aswsp.sys   [410784]
O58 - SDL:[MD5.BFE2A154BC197656ACA0FF917564406D] - 17/02/2014 - 07:41:07 ---A- . (.AVAST Software - Stream Filter.) -- C:\Windows\System32\Drivers\aswstm.sys   [64168]
O58 - SDL:[MD5.1B0662514A68C3A42E60D240C5ABEF28] - 09/01/2014 - 17:05:30 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys   [180248]
O58 - SDL:[MD5.ADD2ADE1C2B285AB8378D2DAAF991481] - 14/07/2009 - 00:54:46 ---A- . (.Microsoft Corporation - MS Remote Access serial network driver.) -- C:\Windows\System32\Drivers\asyncmac.sys   [17920]
O58 - SDL:[MD5.338C86357871C167A96AB976519BF59E] - 14/07/2009 - 02:26:15 ---A- . (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\Drivers\atapi.sys   [21584]
O58 - SDL:[MD5.DDCE686D76C2B4DB435A3AF5BD0E691D] - 05/08/2013 - 02:56:47 ---A- . (.Microsoft Corporation - ATAPI Driver Extension.) -- C:\Windows\System32\Drivers\ataport.sys   [133056]
O58 - SDL:[MD5.54DA0F700393AF2F1E9CD54A82F0C5A4] - 19/10/2012 - 09:17:02 ---A- . (.AVG Technologies - Pas de description.) -- C:\Windows\System32\Drivers\avgtpx86.sys   [26984]
O58 - SDL:[MD5.BD8869EB9CDE6BBE4508D869929869EE] - 13/07/2009 - 23:02:49 ---A- . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gigabit Ethernet..) -- C:\Windows\System32\Drivers\b57nd60x.sys   [229888]
O58 - SDL:[MD5.2B8EE031FD700AB942EBE60665440E83] - 14/07/2009 - 02:26:15 ---A- . (.Microsoft Corporation - Battery Class Driver.) -- C:\Windows\System32\Drivers\battc.sys   [25168]
O58 - SDL:[MD5.F9CE9B5E049EFC66B8E6C73C18EE8438] - 07/07/2009 - 23:45:32 ---A- . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless driver.) -- C:\Windows\System32\Drivers\BCMWL6.SYS   [2506232]
O58 - SDL:[MD5.505506526A9D467307B3C393DEDAF858] - 14/07/2009 - 00:45:01 ---A- . (.Microsoft Corporation - BEEP Driver.) -- C:\Windows\System32\Drivers\beep.sys   [6144]
O58 - SDL:[MD5.2287078ED48FCFC477B05B20CF38F36F] - 14/07/2009 - 00:23:04 ---A- . (.Microsoft Corporation - BLB Drive Driver.) -- C:\Windows\System32\Drivers\blbdrive.sys   [35328]
O58 - SDL:[MD5.8F2DA3028D5FCBD1A060A3DE64CD6506] - 23/02/2011 - 05:47:33 ---A- . (.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) -- C:\Windows\System32\Drivers\bowser.sys   [69632]
O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 13/07/2009 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltLo.sys   [13568]
O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 13/07/2009 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltUp.sys   [5248]
O58 - SDL:[MD5.77361D72A04F18809D0EFB6CCEB74D4B] - 14/07/2009 - 01:41:26 ---A- . (.Microsoft Corporation - MAC Bridge Driver.) -- C:\Windows\System32\Drivers\bridge.sys   [78336]
O58 - SDL:[MD5.845B8CE732E67F3B4133164868C666EA] - 14/07/2009 - 01:57:25 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\Drivers\BrSerId.sys   [272128]
O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 13/07/2009 - 23:53:32 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\Drivers\BrSerWdm.sys   [62336]
O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 13/07/2009 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\Drivers\BrUsbMdm.sys   [12160]
O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 13/07/2009 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\Drivers\BrUsbSer.sys   [11904]
O58 - SDL:[MD5.ED3DF7C56CE0084EB2034432FC56565A] - 14/07/2009 - 00:51:34 ---A- . (.Microsoft Corporation - Bluetooth Communications Driver.) -- C:\Windows\System32\Drivers\bthmodem.sys   [56320]
O58 - SDL:[MD5.1A231ABEC60FD316EC54C66715543CEC] - 13/07/2009 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbdx.sys   [430080]
O58 - SDL:[MD5.77EA11B065E0A8AB902D78145CA51E10] - 14/07/2009 - 00:11:15 ---A- . (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\Drivers\cdfs.sys   [70656]
O58 - SDL:[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - 20/11/2010 - 09:38:10 ---A- . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\Drivers\cdrom.sys   [108544]
O58 - SDL:[MD5.3FE3FE94A34DF6FB06E6418D0F6A0060] - 14/07/2009 - 00:51:17 ---A- . (.Microsoft Corporation - Consumer IR Class Driver for eHome.) -- C:\Windows\System32\Drivers\circlass.sys   [37888]
O58 - SDL:[MD5.A6388A5ABF92C7927C085DB0A958125F] - 14/07/2009 - 02:26:15 ---A- . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\Windows\System32\Drivers\Classpnp.sys   [140864]
O58 - SDL:[MD5.DEA805815E587DAD1DD2C502220B5616] - 14/07/2009 - 00:19:18 ---A- . (.Microsoft Corporation - Control Method Battery Driver.) -- C:\Windows\System32\Drivers\CmBatt.sys   [14080]
O58 - SDL:[MD5.C537B1DB64D495B9B4717B4D6D9EDBF2] - 14/07/2009 - 02:26:21 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\cmdide.sys   [15952]
O58 - SDL:[MD5.85449EEBE8F8EBD6481EFBF0F352B4EB] - 04/07/2013 - 13:16:47 ---A- . (.Microsoft Corporation - Kernel Cryptography, Next Generation.) -- C:\Windows\System32\Drivers\cng.sys   [369848]
O58 - SDL:[MD5.A6023D3823C37043986713F118A89BEE] - 14/07/2009 - 02:26:21 ---A- . (.Microsoft Corporation - Composite Battery Driver.) -- C:\Windows\System32\Drivers\compbatt.sys   [19024]
O58 - SDL:[MD5.CBE8C58A8579CFE5FCCF809E6F114E89] - 20/11/2010 - 10:50:21 ---A- . (.Microsoft Corporation - Multi-Transport Composite Bus Enumerator.) -- C:\Windows\System32\Drivers\CompositeBus.sys   [31232]
O58 - SDL:[MD5.B7EFEF22FF426EC4158A177CB3B558D3] - 14/07/2009 - 02:20:28 ---A- . (.Microsoft Corporation - Crash Dump Driver.) -- C:\Windows\System32\Drivers\crashdmp.sys   [35408]
O58 - SDL:[MD5.2C4EBCFC84A9B44F209DFF6C6E6C61D1] - 14/07/2009 - 02:20:28 ---A- . (.Microsoft Corporation - Disk Block Verification Filter Driver.) -- C:\Windows\System32\Drivers\crcdisk.sys   [22096]
O58 - SDL:[MD5.F024449C97EC1E464AAFFDA18593DB88] - 20/11/2010 - 09:42:32 ---A- . (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\Drivers\dfsc.sys   [78336]
O58 - SDL:[MD5.1A050B0274BFB3890703D490F330C0DA] - 14/07/2009 - 00:24:05 ---A- . (.Microsoft Corporation - System Indexer/Cache Driver.) -- C:\Windows\System32\Drivers\discache.sys   [32256]
O58 - SDL:[MD5.565003F326F99802E68CA78F2A68E9FF] - 14/07/2009 - 02:20:27 ---A- . (.Microsoft Corporation - PnP Disk Driver.) -- C:\Windows\System32\Drivers\disk.sys   [57424]
O58 - SDL:[MD5.D0F0D7A97C90FE72A79732812E65F822] - 22/04/2011 - 20:14:16 ---A- . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\Windows\System32\Drivers\Diskdump.sys   [27008]
O58 - SDL:[MD5.8B30250D573A8F6B4BD23195160D8707] - 14/07/2009 - 02:20:28 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\Drivers\djsvs.sys   [70720]
O58 - SDL:[MD5.9842041E2F5ACE1E2F5FB4EF02053DC8] - 04/10/2013 - 02:49:41 ---A- . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\Windows\System32\Drivers\drmk.sys   [81408]
O58 - SDL:[MD5.B918E7C5F9BF77202F89E1A9539F2EB4] - 14/07/2009 - 00:50:57 ---A- . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\Windows\System32\Drivers\drmkaud.sys   [5120]
O58 - SDL:[MD5.5428227D4730EBDFC842E9FB593F8C8A] - 14/07/2009 - 02:20:28 ---A- . (.Microsoft Corporation - ATAPI Dump Driver.) -- C:\Windows\System32\Drivers\Dumpata.sys   [26704]
O58 - SDL:[MD5.62A63EF2F3053B461CB327E4D69AAA74] - 14/07/2009 - 02:17:54 ---A- . (.Microsoft Corporation - Bitlocker Drive Encryption Crashdump Filter.) -- C:\Windows\System32\Drivers\dumpfve.sys   [55584]
O58 - SDL:[MD5.5FCD3320AAE71506B43F9E12E4E72172] - 14/07/2009 - 00:25:26 ---A- . (.Microsoft Corporation - DirectX API Driver.) -- C:\Windows\System32\Drivers\dxapi.sys   [13312]
O58 - SDL:[MD5.1B6242B20CB56F85A158E67F09EE84FE] - 14/07/2009 - 00:25:25 ---A- . (.Microsoft Corporation - DirectX Graphics Driver.) -- C:\Windows\System32\Drivers\dxg.sys   [76288]
O58 - SDL:[MD5.71BC35067CABC02C9453AEAA42B2E43E] - 01/08/2013 - 12:03:36 ---A- . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys   [729024]
O58 - SDL:[MD5.E405328A0E38BF823E2361C413283F6D] - 10/04/2013 - 06:18:40 ---A- . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\Windows\System32\Drivers\dxgmms1.sys   [218984]
O58 - SDL:[MD5.0ED67910C8C326796FAA00B2BF6D9D3C] - 14/07/2009 - 02:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys   [453712]
O58 - SDL:[MD5.4CD6B056C5FD9E97C06FE74C81479517] - 24/01/2008 - 14:23:12 ---A- . (.ENE TECHNOLOGY INC. - ENE CIR Driver for eHome.) -- C:\Windows\System32\Drivers\enecir.sys   [52736]
O58 - SDL:[MD5.8FC3208352DD3912C94367A206AB3F11] - 14/07/2009 - 00:19:19 ---A- . (.Microsoft Corporation - Error Device Driver.) -- C:\Windows\System32\Drivers\errdev.sys   [7168]
O58 - SDL:[MD5.024E1B5CAC09731E4D868E64DBFB4AB0] - 13/07/2009 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbdx.sys   [3100160]
O58 - SDL:[MD5.2DC9108D74081149CC8B651D3A26207F] - 14/07/2009 - 00:14:03 ---A- . (.Microsoft Corporation - Microsoft Extended FAT File System.) -- C:\Windows\System32\Drivers\exfat.sys   [142336]
O58 - SDL:[MD5.7E0AB74553476622FB6AE36F73D97D35] - 14/07/2009 - 00:14:02 ---A- . (.Microsoft Corporation - Fast FAT File System Driver.) -- C:\Windows\System32\Drivers\fastfat.sys   [148480]
O58 - SDL:[MD5.E817A017F82DF2A1F8CFDBDA29388B29] - 14/07/2009 - 00:45:45 ---A- . (.Microsoft Corporation - Floppy Disk Controller Driver.) -- C:\Windows\System32\Drivers\fdc.sys   [25088]
O58 - SDL:[MD5.6CF00369C97F3CF563BE99BE983D13D8] - 14/07/2009 - 02:20:28 ---A- . (.Microsoft Corporation - FileInfo Filter Driver.) -- C:\Windows\System32\Drivers\fileinfo.sys   [58448]
O58 - SDL:[MD5.42C51DC94C91DA21CB9196EB64C45DB9] - 14/07/2009 - 00:15:29 ---A- . (.Microsoft Corporation - File Trace Filter Driver.) -- C:\Windows\System32\Drivers\filetrace.sys   [28160]
O58 - SDL:[MD5.87907AA70CB3C56600F1C2FB8841579B] - 14/07/2009 - 00:45:45 ---A- . (.Microsoft Corporation - Floppy Driver.) -- C:\Windows\System32\Drivers\flpydisk.sys   [19968]
O58 - SDL:[MD5.7520EC808E0C35E0EE6F841294316653] - 14/07/2009 - 02:20:28 ---A- . (.Microsoft Corporation - Gestionnaire de filtres de système de fichiers Microsoft.) -- C:\Windows\System32\Drivers\fltMgr.sys   [198208]
O58 - SDL:[MD5.A9E2DF40ED6EC9E8885DA72B6E1818F3] - 12/08/2009 - 18:02:02 ---A- . (.FNet Co., Ltd. - FNetTboH.sys.) -- C:\Windows\System32\Drivers\FNETTBOH.SYS   [23680]
O58 - SDL:[MD5.784FFBA7EE5C5F3A396407E4712F72F0] - 12/08/2009 - 18:02:02 ---A- . (.FNet Co., Ltd. - FNetUrPx.sys.) -- C:\Windows\System32\Drivers\FNETURPX.SYS   [7936]
O58 - SDL:[MD5.1A16B57943853E598CFF37FE2B8CBF1D] - 14/07/2009 - 02:20:28 ---A- . (.Microsoft Corporation - File System Dependency Manager Mini Filter Driver.) -- C:\Windows\System32\Drivers\fsdepends.sys   [46160]
O58 - SDL:[MD5.7DAE5EBCC80E45D3253F4923DC424D05] - 01/03/2012 - 06:46:57 ---A- . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\Windows\System32\Drivers\fs_rec.sys   [19824]
O58 - SDL:[MD5.E306A24D9694C724FA2491278BF50FDB] - 24/01/2013 - 05:47:07 ---A- . (.Microsoft Corporation - BitLocker Drive Encryption Driver.) -- C:\Windows\System32\Drivers\fvevol.sys   [196328]
O58 - SDL:[MD5.AAB149EE616952BB84308C28E75ED20D] - 03/01/2013 - 06:04:43 ---A- . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) -- C:\Windows\System32\Drivers\FWPKCLNT.SYS   [187752]
O58 - SDL:[MD5.65EE0C7A58B65E74AE05637418153938] - 14/07/2009 - 02:20:28 ---A- . (.Microsoft Corporation - Filtre AGPv3.0 générique Microsoft pour plateformes de processe.) -- C:\Windows\System32\Drivers\GAGP30KX.SYS   [57936]
O58 - SDL:[MD5.C44E3C2BAB6837DB337DDEE7544736DB] - 13/07/2009 - 23:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys   [26624]
O58 - SDL:[MD5.9036377B8A6C15DC2EEC53E489D159B5] - 20/11/2010 - 10:59:29 ---A- . (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\Drivers\hdaudbus.sys   [108544]
O58 - SDL:[MD5.1D58A7F3E11A9731D0EAAAA8405ACC36] - 14/07/2009 - 00:19:21 ---A- . (.Microsoft Corporation - Hid Battery Driver.) -- C:\Windows\System32\Drivers\hidbatt.sys   [21504]
O58 - SDL:[MD5.89448F40E6DF260C206A193A4683BA78] - 14/07/2009 - 00:51:33 ---A- . (.Microsoft Corporation - Pilote de miniport Bluetooth pour les périphériques HID.) -- C:\Windows\System32\Drivers\hidbth.sys   [91136]
O58 - SDL:[MD5.50ABE682EBE752EAF62B18790D6D491C] - 03/07/2013 - 04:36:24 ---A- . (.Microsoft Corporation - Hid Class Library.) -- C:\Windows\System32\Drivers\hidclass.sys   [55808]
O58 - SDL:[MD5.CF50B4CF4A4F229B9F3C08351F99CA5E] - 14/07/2009 - 00:51:05 ---A- . (.Microsoft Corporation - Infrared Miniport Driver for Input Devices.) -- C:\Windows\System32\Drivers\hidir.sys   [37888]
O58 - SDL:[MD5.F1B27299F547D452EDAEF01FC187CB91] - 03/07/2013 - 04:36:22 ---A- . (.Microsoft Corporation - Hid Parsing Library.) -- C:\Windows\System32\Drivers\hidparse.sys   [25728]
O58 - SDL:[MD5.10C19F8290891AF023EAEC0832E1EB4D] - 20/11/2010 - 10:59:38 ---A- . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\Windows\System32\Drivers\hidusb.sys   [24064]
O58 - SDL:[MD5.4EF10B866C62ABBEAF7511CDD05A19BE] - 13/05/2011 - 17:57:42 ---A- . (.Hewlett-Packard Company - HP Disk Filter - SATA/RAID.) -- C:\Windows\System32\Drivers\hpdskflt.sys   [25656]
O58 - SDL:[MD5.1210960FF8928950D2A786895B0C424A] - 29/04/2009 - 08:46:54 ---A- . (.Hewlett-Packard Development Company, L.P. - HpqKbFiltr Keyboard Filter Driver.) -- C:\Windows\System32\Drivers\HpqKbFiltr.sys   [15872]
O58 - SDL:[MD5.115C0933B3ED51DFBEC4449348C8065B] - 11/07/2007 - 09:30:22 ---A- . (.Hewlett-Packard Development Company, L.P. - HP Remote Control HID Device.) -- C:\Windows\System32\Drivers\HpqRemHid.sys   [7168]
O58 - SDL:[MD5.295FDC419039090EB8B49FFDBB374549] - 14/07/2009 - 02:20:28 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys   [67152]
O58 - SDL:[MD5.871917B07A141BFF43D76D8844D48106] - 20/11/2010 - 09:40:21 ---A- . (.Microsoft Corporation - HTTP Pile du protocole.) -- C:\Windows\System32\Drivers\http.sys   [513536]
O58 - SDL:[MD5.0C4E035C7F105F1299258C90886C64C5] - 20/11/2010 - 13:29:53 ---A- . (.Microsoft Corporation - Hardware Policy Driver.) -- C:\Windows\System32\Drivers\hwpolicy.sys   [14208]
O58 - SDL:[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - 14/07/2009 - 00:11:24 ---A- . (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\Drivers\i8042prt.sys   [80896]
O58 - SDL:[MD5.DB0CC620B27A928D968C1A1E9CD9CB87] - 15/04/2008 - 17:53:44 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\Drivers\iaStor.sys   [312344]
O58 - SDL:[MD5.70BADD827F0C6863AD7F4850DCC5E79B] - 01/09/2012 - 18:01:50 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver - x86.) -- C:\Windows\System32\Drivers\iaStorA.sys   [532536]
O58 - SDL:[MD5.48BD3DD357DB6BB61FB2E6EF3D137764] - 01/09/2012 - 18:01:48 ---A- . (.Intel Corporation - Intel Rapid Storage Technology Filter driver - x86.) -- C:\Windows\System32\Drivers\iaStorF.sys   [25656]
O58 - SDL:[MD5.5CD5F9A5444E6CDCB0AC89BD62D8B76E] - 11/03/2011 - 06:38:51 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\Drivers\iaStorV.sys   [332160]
O58 - SDL:[MD5.4173FF5708F3236CF25195FECD742915] - 14/07/2009 - 02:20:36 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\Drivers\iirsp.sys   [41040]
O58 - SDL:[MD5.A0F12F2C9BA6C72F3987CE780E77C130] - 14/07/2009 - 02:20:36 ---A- . (.Microsoft Corporation - Intel PCI IDE Driver.) -- C:\Windows\System32\Drivers\intelide.sys   [15424]
O58 - SDL:[MD5.3B514D27BFC4ACCB4037BC6685F766E0] - 14/07/2009 - 00:11:04 ---A- . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\Drivers\intelppm.sys   [53760]
O58 - SDL:[MD5.709D1761D3B19A932FF0238EA6D50200] - 14/07/2009 - 00:54:29 ---A- . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\Windows\System32\Drivers\ipfltdrv.sys   [58880]
O58 - SDL:[MD5.4BD7134618C1D2A27466A099062547BF] - 20/11/2010 - 10:19:15 ---A- . (.Microsoft Corporation - PILOT IPMI WMI.) -- C:\Windows\System32\Drivers\IPMIDrv.sys   [65536]
O58 - SDL:[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - 14/07/2009 - 00:54:29 ---A- . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys   [101888]
O58 - SDL:[MD5.9F7E491FB0BA0F9E370163834FC1FE31] - 14/07/2009 - 00:53:32 ---A- . (.Microsoft Corporation - IRDA Protocol Driver.) -- C:\Windows\System32\Drivers\irda.sys   [96768]
O58 - SDL:[MD5.42996CFF20A3084A56017B7902307E9F] - 14/07/2009 - 00:53:27 ---A- . (.Microsoft Corporation - Infra-Red Bus Enumerator.) -- C:\Windows\System32\Drivers\irenum.sys   [13824]
O58 - SDL:[MD5.1F32BB6B38F62F7DF1A7AB7292638A35] - 14/07/2009 - 02:20:36 ---A- . (.Microsoft Corporation - Pilote de bus PNP ISA.) -- C:\Windows\System32\Drivers\isapnp.sys   [46656]
O58 - SDL:[MD5.AC472F84C74E5B9BF345931AFB4DE47D] - 25/11/2012 - 20:00:12 ---A- . (.JMicron Technology Corporation - JMicron PCIe Flash Media Controller Driver.) -- C:\Windows\System32\Drivers\jmcr.sys   [147768]
O58 - SDL:[MD5.055256CC0FF9CF623BFCCA58BB2DADE1] - 10/02/2012 - 22:55:47 ---A- . (.JMicron Technology Corp. - OHCI1394 upper filter driver.) -- C:\Windows\System32\Drivers\johci.sys   [23128]
O58 - SDL:[MD5.ADEF52CA1AEAE82B50DF86B56413107E] - 14/07/2009 - 02:20:36 ---A- . (.Microsoft Corporation - Pilote de la classe Clavier.) -- C:\Windows\System32\Drivers\kbdclass.sys   [42576]
O58 - SDL:[MD5.9E3CED91863E6EE98C24794D05E27A71] - 20/11/2010 - 10:50:10 ---A- . (.Microsoft Corporation - Pilote de filtre clavier HID.) -- C:\Windows\System32\Drivers\kbdhid.sys   [28160]
O58 - SDL:[MD5.5DCEF0C32BE0F33277326586FA503689] - 20/11/2010 - 10:50:19 ---A- . (.Microsoft Corporation - Kernel CSA Library.) -- C:\Windows\System32\Drivers\ks.sys   [190976]
O58 - SDL:[MD5.F286830298323272260332D6ABC905C1] - 25/09/2013 - 03:01:06 ---A- . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\Windows\System32\Drivers\ksecdd.sys   [67520]
O58 - SDL:[MD5.D7C760D57B1656DD748B9E4AB6CB5A51] - 25/09/2013 - 03:01:08 ---A- . (.Microsoft Corporation - Kernel Security Support Provider Interface Packages.) -- C:\Windows\System32\Drivers\ksecpkg.sys   [136640]
O58 - SDL:[MD5.F7611EC07349979DA9B0AE1F18CCC7A6] - 14/07/2009 - 00:53:19 ---A- . (.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) -- C:\Windows\System32\Drivers\lltdio.sys   [48128]
O58 - SDL:[MD5.EB119A53CCF2ACC000AC71B065B78FEF] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_fc.sys   [95824]
O58 - SDL:[MD5.8ADE1C877256A22E49B75D1CC9161F9C] - 14/07/2009 - 02:20:37 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys   [89168]
O58 - SDL:[MD5.DC9DC3D3DAA0E276FD2EC262E38B11E9] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys   [54864]
O58 - SDL:[MD5.0A036C7D7CAB643A7F07135AC47E0524] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_scsi.sys   [96848]
O58 - SDL:[MD5.6703E366CC18D3B6E534F5CF7DF39CEE] - 14/07/2009 - 00:15:45 ---A- . (.Microsoft Corporation - Pilote de filtre de virtualisation de fichier LUA.) -- C:\Windows\System32\Drivers\luafv.sys   [86528]
O58 - SDL:[MD5.4470E3C1E0C3378E4CAB137893C12C3A] - 04/04/2013 - 13:50:32 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys   [22856]
O58 - SDL:[MD5.0DB7527DB188C7D967A37BB51BBF3963] - 03/03/2014 - 09:16:36 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\Drivers\mbamswissarmy.sys   [40776]
O58 - SDL:[MD5.EF08D2EBE3EABBA43CC57EEE001027B6] - 14/07/2009 - 00:45:57 ---A- . (.Microsoft Corporation - Medium changer class driver.) -- C:\Windows\System32\Drivers\mcd.sys   [18432]
O58 - SDL:[MD5.0FFF5B045293002AB38EB1FD1FC2FB74] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7 for x86.) -- C:\Windows\System32\Drivers\megasas.sys   [30800]
O58 - SDL:[MD5.DCBAB2920C75F390CAF1D29F675D03D6] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\MegaSR.sys   [235584]
O58 - SDL:[MD5.F001861E5700EE84E2D4E52C712F4964] - 14/07/2009 - 00:55:24 ---A- . (.Microsoft Corporation - Pilote de périphérique modem.) -- C:\Windows\System32\Drivers\modem.sys   [31744]
O58 - SDL:[MD5.79D10964DE86B292320E9DFE02282A23] - 14/07/2009 - 00:25:59 ---A- . (.Microsoft Corporation - Monitor Driver.) -- C:\Windows\System32\Drivers\monitor.sys   [23552]
O58 - SDL:[MD5.FB18CC1D4C2E716B6B903B0AC0CC0609] - 14/07/2009 - 02:20:44 ---A- . (.Microsoft Corporation - Pilote de la classe Souris.) -- C:\Windows\System32\Drivers\mouclass.sys   [41552]
O58 - SDL:[MD5.2C388D2CD01C9042596CF3C8F3C7B24D] - 14/07/2009 - 00:45:08 ---A- . (.Microsoft Corporation - Pilote de filtre souris HID.) -- C:\Windows\System32\Drivers\mouhid.sys   [26112]
O58 - SDL:[MD5.FC8771F45ECCCFD89684E38842539B9B] - 20/11/2010 - 13:30:00 ---A- . (.Microsoft Corporation - Gestionnaire des points de montage.) -- C:\Windows\System32\Drivers\mountmgr.sys   [78208]
O58 - SDL:[MD5.2D699FB6E89CE0D8DA14ECC03B3EDFE0] - 20/11/2010 - 13:30:01 ---A- . (.Microsoft Corporation - Pilote du bus de prise en charge des chemins d’accès multiples.) -- C:\Windows\System32\Drivers\mpio.sys   [130432]
O58 - SDL:[MD5.AD2723A7B53DD1AACAE6AD8C0BFBF4D0] - 14/07/2009 - 00:52:53 ---A- . (.Microsoft Corporation - Microsoft Protection Service Driver.) -- C:\Windows\System32\Drivers\mpsdrv.sys   [60416]
O58 - SDL:[MD5.21F4B24ACFC79A483515BD986DD9043F] - 04/07/2013 - 10:48:52 ---A- . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\Windows\System32\Drivers\mrxdav.sys   [115712]
O58 - SDL:[MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - 27/04/2011 - 03:17:22 ---A- . (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\Drivers\mrxsmb.sys   [123904]
O58 - SDL:[MD5.6D17A4791ACA19328C685D256349FEFC] - 09/07/2011 - 03:30:00 ---A- . (.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) -- C:\Windows\System32\Drivers\mrxsmb10.sys   [223744]
O58 - SDL:[MD5.B81F204D146000BE76651A50670A5E9E] - 27/04/2011 - 03:17:28 ---A- . (.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) -- C:\Windows\System32\Drivers\mrxsmb20.sys   [96768]
O58 - SDL:[MD5.012C5F4E9349E711E11E0F19A8589F0A] - 20/11/2010 - 13:30:01 ---A- . (.Microsoft Corporation - MS AHCI 1.0 Standard Driver.) -- C:\Windows\System32\Drivers\msahci.sys   [28032]
O58 - SDL:[MD5.55055F8AD8BE27A64C831322A780A228] - 20/11/2010 - 13:30:04 ---A- . (.Microsoft Corporation - Module spécifique de périphériques Microsoft.) -- C:\Windows\System32\Drivers\msdsm.sys   [116096]
O58 - SDL:[MD5.DAEFB28E3AF5A76ABCC2C3078C07327F] - 14/07/2009 - 00:11:26 ---A- . (.Microsoft Corporation - Mailslot driver.) -- C:\Windows\System32\Drivers\msfs.sys   [22528]
O58 - SDL:[MD5.3E1E5767043C5AF9367F0056295E9F84] - 14/07/2009 - 00:51:08 ---A- . (.Microsoft Corporation - Pass-through HID to KMDF Filter Driver.) -- C:\Windows\System32\Drivers\mshidkmdf.sys   [4096]
O58 - SDL:[MD5.0A4E5757AE09FA9622E3158CC1AEF114] - 14/07/2009 - 02:20:43 ---A- . (.Microsoft Corporation - ISA Driver.) -- C:\Windows\System32\Drivers\msisadrv.sys   [13888]
O58 - SDL:[MD5.CB7A9ABB12B8415BCE5D74994C7BA3AE] - 20/11/2010 - 13:30:05 ---A- . (.Microsoft Corporation - Microsoft iSCSI Initiator Driver.) -- C:\Windows\System32\Drivers\msiscsi.sys   [233344]
O58 - SDL:[MD5.8C0860D6366AAFFB6C5BB9DF9448E631] - 14/07/2009 - 00:45:08 ---A- . (.Microsoft Corporation - MS KS Server.) -- C:\Windows\System32\Drivers\mskssrv.sys   [8320]
O58 - SDL:[MD5.3EA8B949F963562CEDBB549EAC0C11CE] - 14/07/2009 - 00:45:08 ---A- . (.Microsoft Corporation - MS Proxy Clock.) -- C:\Windows\System32\Drivers\mspclock.sys   [5888]
O58 - SDL:[MD5.F456E973590D663B1073E9C463B40932] - 14/07/2009 - 00:45:07 ---A- . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\Windows\System32\Drivers\mspqm.sys   [5504]
O58 - SDL:[MD5.0E008FC4819D238C51D7C93E7B41E560] - 14/07/2009 - 02:20:44 ---A- . (.Microsoft Corporation - Kernel Remote Procedure Call Provider.) -- C:\Windows\System32\Drivers\msrpc.sys   [162896]
O58 - SDL:[MD5.FC6B9FF600CC585EA38B12589BD4E246] - 14/07/2009 - 02:20:44 ---A- . (.Microsoft Corporation - System Management BIOS Driver.) -- C:\Windows\System32\Drivers\mssmbios.sys   [28240]
O58 - SDL:[MD5.B42C6B921F61A6E55159B8BE6CD54A36] - 14/07/2009 - 00:45:08 ---A- . (.Microsoft Corporation - WDM Tee/Communication Transform Filter.) -- C:\Windows\System32\Drivers\mstee.sys   [6144]
O58 - SDL:[MD5.33599130F44E1F34631CEA241DE8AC84] - 14/07/2009 - 00:46:55 ---A- . (.Microsoft Corporation - Pilote HID multipoint Microsoft.) -- C:\Windows\System32\Drivers\MTConfig.sys   [12288]
O58 - SDL:[MD5.159FAD02F64E6381758C990F753BCC80] - 14/07/2009 - 02:20:44 ---A- . (.Microsoft Corporation - Multiple UNC Provider Driver.) -- C:\Windows\System32\Drivers\mup.sys   [49728]
O58 - SDL:[MD5.8C9C922D71F1CD4DEF73F186416B7896] - 22/08/2012 - 18:16:46 ---A- . (.Microsoft Corporation - Pilote NDIS 6.20.) -- C:\Windows\System32\Drivers\ndis.sys   [712048]
O58 - SDL:[MD5.0E1787AA6C9191D3D319E8BAFE86F80C] - 14/07/2009 - 00:52:44 ---A- . (.Microsoft Corporation - NDIS Packet Capture Filter Driver.) -- C:\Windows\System32\Drivers\ndiscap.sys   [27136]
O58 - SDL:[MD5.E4A8AEC125A2E43A9E32AFEEA7C9C888] - 14/07/2009 - 00:54:24 ---A- . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) -- C:\Windows\System32\Drivers\ndistapi.sys   [20992]
O58 - SDL:[MD5.D8A65DAFB3EB41CBB622745676FCD072] - 20/11/2010 - 11:06:36 ---A- . (.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) -- C:\Windows\System32\Drivers\ndisuio.sys   [46080]
O58 - SDL:[MD5.38FBE267E7E6983311179230FACB1017] - 20/11/2010 - 11:07:50 ---A- . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\Windows\System32\Drivers\ndiswan.sys   [118784]
O58 - SDL:[MD5.A4BDC541E69674FBFF1A8FF00BE913F2] - 20/11/2010 - 11:07:39 ---A- . (.Microsoft Corporation - NDIS Proxy.) -- C:\Windows\System32\Drivers\ndproxy.sys   [48640]
O58 - SDL:[MD5.80B275B1CE3B0E79909DB7B39AF74D51] - 14/07/2009 - 00:53:54 ---A- . (.Microsoft Corporation - NetBIOS interface driver.) -- C:\Windows\System32\Drivers\netbios.sys   [36352]
O58 - SDL:[MD5.280122DDCF04B378EDD1AD54D71C1E54] - 20/11/2010 - 09:39:44 ---A- . (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\Drivers\netbt.sys   [187904]
O58 - SDL:[MD5.5DBD4F73E2A52FEED61DBAB3752E329C] - 26/11/2013 - 12:11:29 ---A- . (.Microsoft Corporation - Network I/O Subsystem.) -- C:\Windows\System32\Drivers\netio.sys   [240576]
O58 - SDL:[MD5.1D85C4B390B0EE09C7A46B91EFB2C097] - 14/07/2009 - 02:20:44 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\Drivers\nfrd960.sys   [44624]
O58 - SDL:[MD5.1DB262A9F8C087E8153D89BEF3D2235F] - 14/07/2009 - 00:11:32 ---A- . (.Microsoft Corporation - NPFS Driver.) -- C:\Windows\System32\Drivers\npfs.sys   [35328]
O58 - SDL:[MD5.E9A0A4D07E53D8FEA2BB8387A3293C58] - 14/07/2009 - 00:12:08 ---A- . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys   [16896]
O58 - SDL:[MD5.5E43D2B0EE64123D4880DFA6626DEFDE] - 12/04/2013 - 14:45:29 ---A- . (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\Drivers\ntfs.sys   [1211752]
O58 - SDL:[MD5.F9756A98D69098DCA8945D62858A812C] - 14/07/2009 - 00:11:12 ---A- . (.Microsoft Corporation - NULL Driver.) -- C:\Windows\System32\Drivers\null.sys   [4608]
O58 - SDL:[MD5.77F9F9A199B87FE3F852E12F5419240B] - 03/07/2012 - 16:25:17 ---A- . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\System32\Drivers\nvhda32v.sys   [149352]
O58 - SDL:[MD5.1CCE9097830775F447DD78BD1B35FC8E] - 27/02/2013 - 12:52:10 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 311.00.) -- C:\Windows\System32\Drivers\nvlddmkm.sys   [8913184]
O58 - SDL:[MD5.B3E25EE28883877076E0E1FF877D02E0] - 11/03/2011 - 06:39:00 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys   [117120]
O58 - SDL:[MD5.4380E59A170D88C4F1022EFF6719A8A4] - 11/03/2011 - 06:39:00 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys   [143744]
O58 - SDL:[MD5.5A0983915F02BAE73267CC2A041F717D] - 14/07/2009 - 02:20:44 ---A- . (.Microsoft Corporation - Filtre AGP NForce NT.) -- C:\Windows\System32\Drivers\NV_AGP.SYS   [105024]
O58 - SDL:[MD5.26384429FCD85D83746F63E798AB1480] - 14/07/2009 - 00:52:03 ---A- . (.Microsoft Corporation - Pilote de miniport WiFi natif.) -- C:\Windows\System32\Drivers\nwifi.sys   [267264]
O58 - SDL:[MD5.08A70A1F2CDDE9BB49B885CB817A66EB] - 14/07/2009 - 00:51:29 ---A- . (.Microsoft Corporation - 1394 OpenHCI Port Driver.) -- C:\Windows\System32\Drivers\ohci1394.sys   [62464]
O58 - SDL:[MD5.6270CCAE2A86DE6D146529FE55B3246A] - 14/07/2009 - 00:53:58 ---A- . (.Microsoft Corporation - Planificateur de paquets QoS.) -- C:\Windows\System32\Drivers\pacer.sys   [104448]
O58 - SDL:[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - 14/07/2009 - 00:45:35 ---A- . (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\Drivers\parport.sys   [79360]
O58 - SDL:[MD5.3F34A1B4C5F6475F320C275E63AFCE9B] - 17/03/2012 - 08:27:18 ---A- . (.Microsoft Corporation - Partition Management Driver.) -- C:\Windows\System32\Drivers\partmgr.sys   [56176]
O58 - SDL:[MD5.EB0A59F29C19B86479D36B35983DAADC] - 14/07/2009 - 00:45:29 ---A- . (.Microsoft Corporation - Pilote parallèle VDM.) -- C:\Windows\System32\Drivers\parvdm.sys   [8704]
O58 - SDL:[MD5.673E55C3498EB970088E812EA820AA8F] - 20/11/2010 - 13:30:06 ---A- . (.Microsoft Corporation - Énumérateur Plug-and-Play PCI pour NT.) -- C:\Windows\System32\Drivers\pci.sys   [153984]
O58 - SDL:[MD5.AFE86F419014DB4E5593F69FFE26CE0A] - 14/07/2009 - 02:20:45 ---A- . (.Microsoft Corporation - Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\pciide.sys   [12368]
O58 - SDL:[MD5.EDE040D666FF81BF1978D0F19F799E7A] - 14/07/2009 - 02:19:03 ---A- . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) -- C:\Windows\System32\Drivers\pciidex.sys   [42560]
O58 - SDL:[MD5.F396431B31693E71E8A80687EF523506] - 14/07/2009 - 02:19:03 ---A- . (.Microsoft Corporation - Pilote de bus PCMCIA.) -- C:\Windows\System32\Drivers\pcmcia.sys   [180288]
O58 - SDL:[MD5.250F6B43D2B613172035C6747AEEB19F] - 14/07/2009 - 02:19:04 ---A- . (.Microsoft Corporation - Performance Counters for Windows Driver.) -- C:\Windows\System32\Drivers\pcw.sys   [43088]
O58 - SDL:[MD5.9E0104BA49F4E6973749A02BF41344ED] - 14/07/2009 - 01:41:15 ---A- . (.Microsoft Corporation - Protected Environment Authentication and Authorization Export D.) -- C:\Windows\System32\Drivers\PEAuth.sys   [586752]
O58 - SDL:[MD5.EB6137D696A9B4E9718AC6F8641CB4C9] - 04/10/2013 - 02:17:08 ---A- . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport Devices).) -- C:\Windows\System32\Drivers\portcls.sys   [177152]
O58 - SDL:[MD5.85B1E3A0C7585BC4AAE6899EC6FCF011] - 14/07/2009 - 00:11:04 ---A- . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\Drivers\processr.sys   [52224]
O58 - SDL:[MD5.AB95ECF1F6659A60DDC166D8315B0751] - 14/07/2009 - 02:19:04 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\Drivers\ql2300.sys   [1383488]
O58 - SDL:[MD5.B4DD51DD25182244B86737DC51AF2270] - 14/07/2009 - 02:19:04 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\Drivers\ql40xx.sys   [106064]
O58 - SDL:[MD5.584078CA1B95CA72DF2A27C336F9719D] - 14/07/2009 - 00:54:13 ---A- . (.Microsoft Corporation - Pilote du support de Microsoft Quality Windows Audio Video Expe.) -- C:\Windows\System32\Drivers\qwavedrv.sys   [31744]
O58 - SDL:[MD5.30A81B53C766D0133BB86D234E5556AB] - 14/07/2009 - 00:54:40 ---A- . (.Microsoft Corporation - RAS Automatic Connection Driver.) -- C:\Windows\System32\Drivers\rasacd.sys   [11776]
O58 - SDL:[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - 14/07/2009 - 00:54:34 ---A- . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\Drivers\rasl2tp.sys   [78848]
O58 - SDL:[MD5.0FE8B15916307A6AC12BFB6A63E45507] - 14/07/2009 - 00:54:53 ---A- . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) -- C:\Windows\System32\Drivers\raspppoe.sys   [77824]
O58 - SDL:[MD5.631E3E205AD6D86F2AED6A4A8E69F2DB] - 14/07/2009 - 00:54:48 ---A- . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\Windows\System32\Drivers\raspptp.sys   [73728]
O58 - SDL:[MD5.44101F495A83EA6401D886E7FD70096B] - 14/07/2009 - 00:54:58 ---A- . (.Microsoft Corporation - RAS SSTP Miniport Call Manager.) -- C:\Windows\System32\Drivers\rassstp.sys   [75264]
O58 - SDL:[MD5.D528BC58A489409BA40334EBF96A311B] - 20/11/2010 - 09:44:05 ---A- . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire tampon de lecteur red.) -- C:\Windows\System32\Drivers\rdbss.sys   [242688]
O58 - SDL:[MD5.0D8F05481CB76E70E1DA06EE9F0DA9DF] - 14/07/2009 - 01:02:41 ---A- . (.Microsoft Corporation - Microsoft RDP Bus Device driver.) -- C:\Windows\System32\Drivers\rdpbus.sys   [18944]
O58 - SDL:[MD5.23DAE03F29D253AE74C44F99E515F9A1] - 20/11/2010 - 11:22:19 ---A- . (.Microsoft Corporation - RDP Miniport.) -- C:\Windows\System32\Drivers\RDPCDD.sys   [6656]
O58 - SDL:[MD5.5A53CA1598DD4156D44196D200C94B8A] - 14/07/2009 - 01:01:39 ---A- . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\RDPENCDD.sys   [6656]
O58 - SDL:[MD5.44B0A53CD4F27D50ED461DAE0C0B4E1F] - 14/07/2009 - 01:01:41 ---A- . (.Microsoft Corporation - RDP Reflector Driver Miniport.) -- C:\Windows\System32\Drivers\RDPREFMP.sys   [7168]
O58 - SDL:[MD5.65375DF758CA1872AB7EBBBA457FD5E6] - 23/08/2012 - 15:44:32 ---A- . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) -- C:\Windows\System32\Drivers\rdpvideominiport.sys   [14848]
O58 - SDL:[MD5.F031683E6D1FEA157ABB2FF260B51E61] - 28/04/2012 - 04:17:07 ---A- . (.Microsoft Corporation - Pilote de pile RDP Terminal.) -- C:\Windows\System32\Drivers\rdpwd.sys   [183808]
O58 - SDL:[MD5.592A973BD498707D0601F8DFD4AF69B0] - 28/07/2011 - 14:30:57 ---A- . (.Roland Corporation - Pas de description.) -- C:\Windows\System32\Drivers\Rdwm1009.sys   [61568]
O58 - SDL:[MD5.518395321DC96FE2C9F0E96AC743B656] - 20/11/2010 - 13:30:10 ---A- . (.Microsoft Corporation - ReadyBoost Driver.) -- C:\Windows\System32\Drivers\rdyboost.sys   [173440]
O58 - SDL:[MD5.906DCFC5EBF4EC0433F8D4FFFB0BA334] - 20/11/2010 - 11:06:36 ---A- . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\Windows\System32\Drivers\rmcast.sys   [117760]
O58 - SDL:[MD5.ED80D303102A746D30C1684B387BCBF1] - 04/07/2012 - 20:45:31 ---A- . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\Windows\System32\Drivers\RNDISMP.sys   [33280]
O58 - SDL:[MD5.564297827D213F52C7A3A2FF749568CA] - 14/07/2009 - 00:55:21 ---A- . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) -- C:\Windows\System32\Drivers\rootmdm.sys   [8192]
O58 - SDL:[MD5.032B0D36AD92B582D869879F5AF5B928] - 14/07/2009 - 00:53:20 ---A- . (.Microsoft Corporation - Link-Layer Topology Responder Driver for NDIS 6.) -- C:\Windows\System32\Drivers\rspndr.sys   [60928]
O58 - SDL:[MD5.48E68E7BB2B1E8A294490FA3249A2A7D] - 25/11/2012 - 20:01:50 ---A- . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.20 32-bit Driver.) -- C:\Windows\System32\Drivers\Rt86win7.sys   [552080]
O58 - SDL:[MD5.7157E70A90CCE49DEB8885D23A073A39] - 15/04/2008 - 11:05:08 ---A- . (.Realtek Corporation - Realtek 8101E/8168/8169 NDIS6 32-bit Driver.) -- C:\Windows\System32\Drivers\Rtlh86.sys   [118784]
O58 - SDL:[MD5.05D860DA1040F111503AC416CCEF2BCA] - 20/11/2010 - 13:30:10 ---A- . (.Microsoft Corporation - SBP-2 Protocol Driver.) -- C:\Windows\System32\Drivers\sbp2port.sys   [85376]
O58 - SDL:[MD5.0693B5EC673E34DC147E195779A4DCF6] - 20/11/2010 - 10:24:56 ---A- . (.Microsoft Corporation - Pilote de filtre de lecteur de carte à puce Microsoft.) -- C:\Windows\System32\Drivers\scfilter.sys   [26624]
O58 - SDL:[MD5.099972E1FAF4950D3994FBAB9DD21253] - 20/11/2010 - 13:30:10 ---A- . (.Microsoft Corporation - SCSI Port Driver.) -- C:\Windows\System32\Drivers\scsiport.sys   [140160]
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/07/2009 - 21:50:20 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys   [20480]
O58 - SDL:[MD5.9AD8B8B515E3DF6ACD4212EF465DE2D1] - 14/07/2009 - 00:45:28 ---A- . (.Microsoft Corporation - Serial Port Enumerator.) -- C:\Windows\System32\Drivers\serenum.sys   [17920]
O58 - SDL:[MD5.5FB7FCEA0490D821F26F39CC5EA3D1E2] - 14/07/2009 - 00:45:33 ---A- . (.Microsoft Corporation - Pilote de périphérique série.) -- C:\Windows\System32\Drivers\serial.sys   [83456]
O58 - SDL:[MD5.79BFFB520327FF916A582DFEA17AA813] - 14/07/2009 - 00:45:08 ---A- . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys   [19968]
O58 - SDL:[MD5.9F976E1EB233DF46FCE808D9DEA3EB9C] - 14/07/2009 - 00:45:52 ---A- . (.Microsoft Corporation - Small Form Factor Disk Driver.) -- C:\Windows\System32\Drivers\sffdisk.sys   [11264]
O58 - SDL:[MD5.932A68EE27833CFD57C1639D375F2731] - 14/07/2009 - 00:45:52 ---A- . (.Microsoft Corporation - Small Form Factor MMC Protocol Driver.) -- C:\Windows\System32\Drivers\sffp_mmc.sys   [12288]
O58 - SDL:[MD5.6D4CCAEDC018F1CF52866BBBAA235982] - 20/11/2010 - 10:50:49 ---A- . (.Microsoft Corporation - Small Form Factor SD Protocol Driver.) -- C:\Windows\System32\Drivers\sffp_sd.sys   [12800]
O58 - SDL:[MD5.DB96666CC8312EBC45032F30B007A547] - 14/07/2009 - 00:45:52 ---A- . (.Microsoft Corporation - SCSI Floppy Driver.) -- C:\Windows\System32\Drivers\sfloppy.sys   [13824]
O58 - SDL:[MD5.2565CAC0DC9FE0371BDCE60832582B2E] - 14/07/2009 - 02:19:03 ---A- . (.Microsoft Corporation - Filtre SIS NT AGP.) -- C:\Windows\System32\Drivers\SISAGP.SYS   [52304]
O58 - SDL:[MD5.A9F0486851BECB6DDA1D89D381E71055] - 14/07/2009 - 02:19:04 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys   [40016]
O58 - SDL:[MD5.3727097B55738E2F554972C3BE5BC1AA] - 14/07/2009 - 02:19:04 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys   [77888]
O58 - SDL:[MD5.3E21C083B8A01CB70BA1F09303010FCE] - 14/07/2009 - 00:53:41 ---A- . (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\Drivers\smb.sys   [71168]
O58 - SDL:[MD5.2E467E6CA8E0A140C08011844C0D3936] - 14/07/2009 - 00:45:28 ---A- . (.Microsoft Corporation - Smart Card Driver Library.) -- C:\Windows\System32\Drivers\smclib.sys   [17408]
O58 - SDL:[MD5.95CF1AE7527FB70F7816563CBC09D942] - 14/07/2009 - 02:19:03 ---A- . (.Microsoft Corporation - loader for security processor.) -- C:\Windows\System32\Drivers\spldr.sys   [17472]
O58 - SDL:[MD5.D16D818E9930A6E5B4F6476DD0998D1A] - 13/07/2009 - 21:34:43 ---A- . (.Microsoft Corporation - security processor.) -- C:\Windows\System32\Drivers\spsys.sys   [405504]
O58 - SDL:[MD5.E4C2764065D66EA1D2D3EBC28FE99C46] - 29/04/2011 - 03:46:33 ---A- . (.Microsoft Corporation - Server driver.) -- C:\Windows\System32\Drivers\srv.sys   [311808]
O58 - SDL:[MD5.03F0545BD8D4C77FA0AE1CEEDFCC71AB] - 29/04/2011 - 03:46:15 ---A- . (.Microsoft Corporation - Smb 2.0 Server driver.) -- C:\Windows\System32\Drivers\srv2.sys   [310272]
O58 - SDL:[MD5.BE6BD660CAA6F291AE06A718A4FA8ABC] - 29/04/2011 - 03:46:10 ---A- . (.Microsoft Corporation - Server Network driver.) -- C:\Windows\System32\Drivers\srvnet.sys   [114688]
O58 - SDL:[MD5.DB32D325C192B801DF274BFD12A7E72B] - 14/07/2009 - 02:19:04 ---A- . (.Promise Technology - Promise  SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys   [21072]
O58 - SDL:[MD5.EF3D32464EBBB10449465C8CAB57CA19] - 11/03/2011 - 06:39:05 ---A- . (.Microsoft Corporation - Microsoft Storage Port Driver.) -- C:\Windows\System32\Drivers\storport.sys   [148864]
O58 - SDL:[MD5.45B44FC9E5AC0DB02B19D515EE809DE5] - 14/07/2009 - 00:50:57 ---A- . (.Microsoft Corporation - WDM CODEC Class Device Driver 2.0.) -- C:\Windows\System32\Drivers\stream.sys   [53632]
O58 - SDL:[MD5.DADB74BF26766757DBBA9C5912969EBF] - 23/03/2010 - 13:53:06 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\Drivers\stwrt.sys   [423424]
O58 - SDL:[MD5.E58C78A848ADD9610A4DB6D214AF5224] - 14/07/2009 - 02:19:10 ---A- . (.Microsoft Corporation - Plug and Play Software Device Enumerator.) -- C:\Windows\System32\Drivers\swenum.sys   [12240]
O58 - SDL:[MD5.067CB9D745407A8C1B26E89A6A2CE152] - 27/05/2010 - 21:32:58 ---A- . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\Drivers\SynTP.sys   [245936]
O58 - SDL:[MD5.949C35BF4AE6C110A924AB5E2175DDA7] - 14/07/2009 - 00:45:53 ---A- . (.Microsoft Corporation - SCSI Tape Class Driver.) -- C:\Windows\System32\Drivers\tape.sys   [24576]
O58 - SDL:[MD5.CA59F7C570AF70BC174F477CFE2D9EE3] - 08/09/2013 - 03:07:12 ---A- . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\Windows\System32\Drivers\tcpip.sys   [1294272]
O58 - SDL:[MD5.3EEBD3BD93DA46A26E89893C7AB2FF3B] - 03/10/2012 - 16:21:38 ---A- . (.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) -- C:\Windows\System32\Drivers\tcpipreg.sys   [35328]
O58 - SDL:[MD5.2F885864D5BC8A16C86BEE595969A48A] - 20/11/2010 - 09:39:18 ---A- . (.Microsoft Corporation - TDI Wrapper.) -- C:\Windows\System32\Drivers\tdi.sys   [21504]
O58 - SDL:[MD5.1CB91B2BD8F6DD367DFC2EF26FD751B2] - 20/11/2010 - 11:21:10 ---A- . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\Windows\System32\Drivers\tdpipe.sys   [18432]
O58 - SDL:[MD5.2C2C5AFE7EE4F620D69C23C0617651A8] - 17/02/2012 - 05:13:22 ---A- . (.Microsoft Corporation - TCP Transport Driver.) -- C:\Windows\System32\Drivers\tdtcp.sys   [24576]
O58 - SDL:[MD5.B459575348C20E8121D6039DA063C704] - 20/11/2010 - 09:39:17 ---A- . (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\Drivers\tdx.sys   [74752]
O58 - SDL:[MD5.04DBF4B01EA4BF25A9A3E84AFFAC9B20] - 20/11/2010 - 13:30:12 ---A- . (.Microsoft Corporation - Remote Desktop Server Driver.) -- C:\Windows\System32\Drivers\termdd.sys   [53120]
O58 - SDL:[MD5.B37B08F2E5EEB1A37E448E09BACE1101] - 15/06/2013 - 04:38:43 ---A- . (.Microsoft Corporation - TS Security Filter Driver.) -- C:\Windows\System32\Drivers\tssecsrv.sys   [31232]
O58 - SDL:[MD5.9CE253214ACAA5A7D323327D2055EFAA] - 23/08/2012 - 15:40:25 ---A- . (.Microsoft Corporation - Pilote de filtre pour concentrateur USB du Bureau à distance.) -- C:\Windows\System32\Drivers\TsUsbFlt.sys   [49664]
O58 - SDL:[MD5.B2FA25D9B17A68BB93D58B0556E8C90D] - 20/11/2010 - 11:06:41 ---A- . (.Microsoft Corporation - Pilote d’interface de tunnel Microsoft.) -- C:\Windows\System32\Drivers\tunnel.sys   [108544]
O58 - SDL:[MD5.750FBCB269F4D7DD2E420C56B795DB6D] - 14/07/2009 - 02:19:10 ---A- . (.Microsoft Corporation - Filtre MS AGPv3.5.) -- C:\Windows\System32\Drivers\UAGP35.SYS   [55888]
O58 - SDL:[MD5.EE43346C7E4B5E63E54F927BABBB32FF] - 20/11/2010 - 09:42:28 ---A- . (.Microsoft Corporation - UDF File System Driver.) -- C:\Windows\System32\Drivers\udfs.sys   [246784]
O58 - SDL:[MD5.44E8048ACE47BEFBFDC2E9BE4CBC8880] - 14/07/2009 - 02:19:11 ---A- . (.Microsoft Corporation - Filtre ULi AGPv3.0 pour plateformes à processeur K8/9.) -- C:\Windows\System32\Drivers\ULIAGPKX.SYS   [57424]
O58 - SDL:[MD5.D295BED4B898F0FD999FCFA9B32B071B] - 20/11/2010 - 11:00:24 ---A- . (.Microsoft Corporation - User-Mode Bus Enumerator.) -- C:\Windows\System32\Drivers\umbus.sys   [39936]
O58 - SDL:[MD5.7550AD0C6998BA1CB4843E920EE0FEAC] - 14/07/2009 - 00:51:35 ---A- . (.Microsoft Corporation - Generic pass-through driver.) -- C:\Windows\System32\Drivers\umpass.sys   [8192]
O58 - SDL:[MD5.FE8A57C8E04EDD3AA8ADD8F3C8F65297] - 12/02/2013 - 04:32:45 ---A- . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\Windows\System32\Drivers\usb8023.sys   [15872]
O58 - SDL:[MD5.A1977C315BF5691DA99235AA4A6907AF] - 12/07/2013 - 11:07:52 ---A- . (.Microsoft Corporation - USB Audio Class Driver.) -- C:\Windows\System32\Drivers\USBAUDIO.sys   [80896]
O58 - SDL:[MD5.FD82D2B38C465A55C527E339BA1201B1] - 20/11/2010 - 11:00:05 ---A- . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\Windows\System32\Drivers\USBCAMD.sys   [25856]
O58 - SDL:[MD5.E071E5BE621FEC4590117C488A78AE32] - 20/11/2010 - 11:00:05 ---A- . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\Windows\System32\Drivers\USBCAMD2.sys   [25856]
O58 - SDL:[MD5.0803FBA9FE829D61AE26EC0BCC910C46] - 27/11/2013 - 02:13:44 ---A- . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\Windows\System32\Drivers\usbccgp.sys   [76288]
O58 - SDL:[MD5.2352AB5F9F8F097BF9D41D5A4718A041] - 12/07/2013 - 11:07:54 ---A- . (.Microsoft Corporation - USB Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\usbcir.sys   [86016]
O58 - SDL:[MD5.74F805AB12EB0E3E49E469F19FF02640] - 27/11/2013 - 02:13:33 ---A- . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\Windows\System32\Drivers\usbd.sys   [6016]
O58 - SDL:[MD5.D40855F89B69305140BBD7E9A3BA2DA6] - 27/11/2013 - 02:13:41 ---A- . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\Windows\System32\Drivers\usbehci.sys   [43520]
O58 - SDL:[MD5.EDF2DF71C4F1E13A6AC75F5224DE655A] - 27/11/2013 - 02:14:25 ---A- . (.Microsoft Corporation - Default Hub Driver for USB.) -- C:\Windows\System32\Drivers\usbhub.sys   [258560]
O58 - SDL:[MD5.9828C8D14CC2676421778F0DE638CF97] - 27/11/2013 - 02:13:38 ---A- . (.Microsoft Corporation - OHCI USB Miniport Driver.) -- C:\Windows\System32\Drivers\usbohci.sys   [20480]
O58 - SDL:[MD5.EC2C5AF37B76D7B58C642CB74423DB7A] - 27/11/2013 - 02:13:46 ---A- . (.Microsoft Corporation - Pilote de port USB 1.1 & 2.0.) -- C:\Windows\System32\Drivers\usbport.sys   [284672]
O58 - SDL:[MD5.797D862FE0875E75C7CC4C1AD7B30252] - 14/07/2009 - 01:17:06 ---A- . (.Microsoft Corporation - USB Printer driver.) -- C:\Windows\System32\Drivers\usbprint.sys   [19968]
O58 - SDL:[MD5.1A078C3FE1C1F9C8561CD600C69AD300] - 20/11/2010 - 11:52:01 ---A- . (.Microsoft Corporation - Gestionnaire de stratégie de redirection USB Windows.) -- C:\Windows\System32\Drivers\usbrpm.sys   [26112]
O58 - SDL:[MD5.F991AB9CC6B908DB552166768176896A] - 11/03/2011 - 05:01:12 ---A- . (.Microsoft Corporation - USB Mass Storage Class Driver.) -- C:\Windows\System32\Drivers\USBSTOR.SYS   [76288]
O58 - SDL:[MD5.800AABFD625EEFF899F7E5496BDE37AB] - 27/11/2013 - 02:13:36 ---A- . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\Windows\System32\Drivers\usbuhci.sys   [24064]
O58 - SDL:[MD5.DE014425522610BEDCA3821BB8C0F1D5] - 12/07/2013 - 11:08:19 ---A- . (.Microsoft Corporation - USB Video Class Driver.) -- C:\Windows\System32\Drivers\usbvideo.sys   [146816]
O58 - SDL:[MD5.0A344C93789920D2208FFBC3DB60D55D] - 17/08/2013 - 20:47:28 ---A- . (.Windows (R) Win 7 DDK provider - VB Virtual Audio Device.) -- C:\Windows\System32\Drivers\vbaudio_cable_win7.sys   [32128]
O58 - SDL:[MD5.A059C4C3EDB09E07D21A8E5C0AABD3CB] - 14/07/2009 - 02:19:10 ---A- . (.Microsoft Corporation - Énumérateur racine de lecteur virtuel.) -- C:\Windows\System32\Drivers\vdrvroot.sys   [32832]
O58 - SDL:[MD5.8E38096AD5C8570A6F1570A61E251561] - 14/07/2009 - 00:25:51 ---A- . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys   [25088]
O58 - SDL:[MD5.17C408214EA61696CEC9C66E388B14F3] - 14/07/2009 - 00:25:49 ---A- . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vgapnp.sys   [26112]
O58 - SDL:[MD5.5461686CCA2FDA57B024547733AB42E3] - 20/11/2010 - 13:30:14 ---A- . (.Microsoft Corporation - VHD Miniport Driver.) -- C:\Windows\System32\Drivers\vhdmp.sys   [160128]
O58 - SDL:[MD5.C829317A37B4BEA8F39735D4B076E923] - 14/07/2009 - 02:19:10 ---A- . (.Microsoft Corporation - Filtre VIA NT AGP.) -- C:\Windows\System32\Drivers\VIAAGP.SYS   [53328]
O58 - SDL:[MD5.E02F079A6AA107F06B16549C6E5C7B74] - 14/07/2009 - 00:11:04 ---A- . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\Drivers\viac7.sys   [52736]
O58 - SDL:[MD5.E43574F6A56A0EE11809B48C09E4FD3C] - 14/07/2009 - 02:19:10 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\viaide.sys   [16976]
O58 - SDL:[MD5.15C126D1B55814B9E5CAB10A9C1F4C67] - 14/07/2009 - 00:25:51 ---A- . (.Microsoft Corporation - Video Port Driver.) -- C:\Windows\System32\Drivers\videoprt.sys   [111616]
O58 - SDL:[MD5.4C63E00F2F4B5F86AB48A58CD990F212] - 20/11/2010 - 13:30:16 ---A- . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys   [53120]
O58 - SDL:[MD5.B5BB72067DDDDBBFB04B2F89FF8C3C87] - 14/07/2009 - 02:19:11 ---A- . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys   [297040]
O58 - SDL:[MD5.F497F67932C6FA693D7DE2780631CFE7] - 20/11/2010 - 13:30:16 ---A- . (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\Drivers\volsnap.sys   [245632]
O58 - SDL:[MD5.9DFA0CC2F8855A04816729651175B631] - 14/07/2009 - 02:19:11 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\Drivers\vsmraid.sys   [141904]
O58 - SDL:[MD5.90567B1E658001E79D7C8BBD3DDE5AA6] - 14/07/2009 - 00:52:02 ---A- . (.Microsoft Corporation - Pilote de bus WiFi virtuel.) -- C:\Windows\System32\Drivers\vwifibus.sys   [19968]
O58 - SDL:[MD5.7090D3436EEB4E7DA3373090A23448F7] - 14/07/2009 - 00:52:04 ---A- . (.Microsoft Corporation - Virtual WiFi Filter Driver.) -- C:\Windows\System32\Drivers\vwififlt.sys   [48128]
O58 - SDL:[MD5.A3F04CBEA6C2A10E6CB01F8B47611882] - 14/07/2009 - 00:52:10 ---A- . (.Microsoft Corporation - Virtual WiFi Miniport Driver.) -- C:\Windows\System32\Drivers\vwifimp.sys   [14336]
O58 - SDL:[MD5.DE3721E89C653AA281428C8A69745D90] - 14/07/2009 - 00:46:53 ---A- . (.Microsoft Corporation - Wacom Serial Pen Tablet HID Driver.) -- C:\Windows\System32\Drivers\wacompen.sys   [21632]
O58 - SDL:[MD5.3C3C78515F5AB448B022BDF5B8FFDD2E] - 20/11/2010 - 11:07:45 ---A- . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\Windows\System32\Drivers\wanarp.sys   [63488]
O58 - SDL:[MD5.CB45A417C8EF7BA6BAC67EDCDDED8700] - 14/07/2009 - 00:24:11 ---A- . (.Microsoft Corporation - Watchdog Driver.) -- C:\Windows\System32\Drivers\watchdog.sys   [35328]
O58 - SDL:[MD5.1112A9BADACB47B7C0BB0392E3158DFF] - 14/07/2009 - 02:19:11 ---A- . (.Microsoft Corporation - Microsoft Watchdog Timer Driver.) -- C:\Windows\System32\Drivers\wd.sys   [19024]
O58 - SDL:[MD5.25944D2CC49E0A6C581D02A74B7D6645] - 25/06/2013 - 23:56:40 ---A- . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en mode noyau.) -- C:\Windows\System32\Drivers\Wdf01000.sys   [527064]
O58 - SDL:[MD5.48704647CD2E9DAA2EB81BDE6D029EDB] - 26/07/2012 - 04:39:21 ---A- . (.Microsoft Corporation - Kernel Mode Driver Framework Loader.) -- C:\Windows\System32\Drivers\WdfLdr.sys   [47720]
O58 - SDL:[MD5.8B9A943F3B53861F2BFAF6C186168F79] - 14/07/2009 - 00:53:51 ---A- . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) -- C:\Windows\System32\Drivers\wfplwf.sys   [9728]
O58 - SDL:[MD5.5CF95B35E59E2A38023836FFF31BE64C] - 14/07/2009 - 02:19:10 ---A- . (.Microsoft Corporation - Wim file system Driver.) -- C:\Windows\System32\Drivers\wimmount.sys   [19008]
O58 - SDL:[MD5.A67E5F9A400F3BD1BE3D80613B45F708] - 20/11/2010 - 10:59:44 ---A- . (.Microsoft Corporation - Windows USB Class Driver BETA.) -- C:\Windows\System32\Drivers\winusb.sys   [35968]
O58 - SDL:[MD5.0217679B8FCA58714C3BF2726D2CA84E] - 14/07/2009 - 00:19:17 ---A- . (.Microsoft Corporation - Windows Management Interface for ACPI.) -- C:\Windows\System32\Drivers\wmiacpi.sys   [11264]
O58 - SDL:[MD5.9A5B1059FE015DB5269FBB25ACBF841D] - 14/07/2009 - 02:19:10 ---A- . (.Microsoft Corporation - WMILIB WMI support library Dll.) -- C:\Windows\System32\Drivers\wmilib.sys   [14912]
O58 - SDL:[MD5.6DB3276587B853BF886B69528FDB048C] - 14/07/2009 - 00:55:02 ---A- . (.Microsoft Corporation - Couche IFS Winsock2.) -- C:\Windows\System32\Drivers\ws2ifsl.sys   [16384]
O58 - SDL:[MD5.06E6F32C8D0A3F66D956F57B43A2E070] - 26/07/2012 - 03:33:43 ---A- . (.Microsoft Corporation - Windows Driver Foundation - User-mode Driver Framework Platform.) -- C:\Windows\System32\Drivers\WUDFPf.sys   [66560]
O58 - SDL:[MD5.867C301E8B790040AE9CF6486E8041DF] - 26/07/2012 - 03:32:51 ---A- . (.Microsoft Corporation - Windows Driver Foundation - User-mode Driver Framework Reflecto.) -- C:\Windows\System32\Drivers\WUDFRd.sys   [155136]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 13/07/2009 - 22:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS   [9029]
O58 - SDL:[MD5.635181E0E9BBF16871BF5380D71DB02D] - 14/07/2009 - 02:26:21 ---A- . (.Microsoft Corporation - Common Log File System Driver.) -- C:\Windows\System32\clfs.sys   [249408]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 13/07/2009 - 22:40:44 ---A- . (...) -- C:\Windows\System32\country.sys   [27097]
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 13/07/2009 - 22:40:40 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS   [4768]
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 13/07/2009 - 22:40:43 ---A- . (...) -- C:\Windows\System32\KEY01.SYS   [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 13/07/2009 - 22:40:43 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS   [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 13/07/2009 - 22:40:23 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS   [27866]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 13/07/2009 - 22:40:31 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS   [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 13/07/2009 - 22:40:35 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS   [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 13/07/2009 - 22:40:39 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS   [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 13/07/2009 - 22:40:27 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS   [29146]
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 13/07/2009 - 22:40:11 ---A- . (...) -- C:\Windows\System32\NTIO.SYS   [33952]
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 13/07/2009 - 22:40:15 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS   [34672]
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 13/07/2009 - 22:40:17 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS   [35776]
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 13/07/2009 - 22:40:19 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS   [35536]
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 13/07/2009 - 22:40:13 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS   [34672]
O58 - SDL:[MD5.1E882889A4314D6DF5DED4F6EC994E72] - 26/11/2013 - 11:10:21 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\System32\win32k.sys   [2349056]
~ Drivers: 16 Scanned in 00mn 04s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\00\00000000   [211]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\00\00000001   [15027084]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\000005.ldb   [621]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\LOCK   [0]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\000005.ldb   [180]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOCK   [0]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.fr_0.indexeddb.leveldb\000038.bak   [122]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.fr_0.indexeddb.leveldb\000038.ldb   [122]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.dailymotion.com_0.localstorage   [3072]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.dailymotion.com_0.localstorage-journal   [3608]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.football.fr_0.localstorage   [22528]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.football.fr_0.localstorage-journal   [16384]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.rugbynews.fr_0.localstorage   [3072]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.rugbynews.fr_0.localstorage-journal   [3608]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sports.fr_0.localstorage   [3072]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sports.fr_0.localstorage-journal   [3608]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage   [3072]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage-journal   [3608]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_fr-fr.facebook.com_0.localstorage   [4096]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_fr-fr.facebook.com_0.localstorage-journal   [3608]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.facebook.com_0.localstorage   [6144]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.facebook.com_0.localstorage-journal   [3608]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Login Data   [16384]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal   [12848]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\macromedia.com\support\flashplayer\sys\#files.player.mediabong.com\settings.sol   [96]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\macromedia.com\support\flashplayer\sys\#flash.quantserve.com\settings.sol   [90]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol   [81]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\macromedia.com\support\flashplayer\sys\#static.issuu.com\settings.sol   [86]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\macromedia.com\support\flashplayer\sys\#t.publicidees.com\settings.sol   [87]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\macromedia.com\support\flashplayer\sys\#www.dailymotion.com\settings.sol   [89]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\macromedia.com\support\flashplayer\sys\#www.ultimedia.com\settings.sol   [87]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\static.issuu.com\#mixpanel\mp_0cf3d#\1ea9fed57d54806204357b15a81.sol   [117]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\www.dailymotion.com\com.dm.player.sol   [281]
O61 - LFC: 01/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\www.ultimedia.com\analytics.sol   [257]
O61 - LFC: 01/03/2014 - 18:51:54 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\AIMP3\AIMP3.bak   [18512]
O61 - LFC: 01/03/2014 - 18:51:54 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\AIMP3\AudioLibrary\AIMP3.db   [300032]
O61 - LFC: 01/03/2014 - 18:51:54 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\AIMP3\PLS\Default.aimppl   [22866]
O61 - LFC: 01/03/2014 - 18:51:59 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\Microsoft\Office\Recent\Programme chants CD.LNK   [1236]
O61 - LFC: 01/03/2014 - 18:51:59 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\Microsoft\Office\Recent\Projet CD.LNK   [1044]
O61 - LFC: 01/03/2014 - 18:52:00 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\Microsoft\Office\Recent\Répèts et présences.LNK   [1094]
O61 - LFC: 01/03/2014 - 18:52:00 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\Microsoft\Office\Recent\Répétitions mars juin 2014.LNK   [1321]
O61 - LFC: 01/03/2014 - 18:53:02 ---A- . (...) -- C:\Users\TFSL\Flo\Kumbaya\Projet CD\Programme chants CD.pdf   [527673]
O61 - LFC: 01/03/2014 - 18:53:02 ---A- . (...) -- C:\Users\TFSL\Flo\Kumbaya\Répèts et présences\Répétitions mars juin 2014.pdf   [94584]
O61 - LFC: 01/03/2014 - 18:53:02 ---A- . (.CNAV.) -- C:\Users\TFSL\Flo\Kumbaya\Répèts et présences\Répétitions mars juin 2014.doc   [4872704]
O61 - LFC: 01/03/2014 - 18:53:02 ---A- . (.t12584t.) -- C:\Users\TFSL\Flo\Kumbaya\Projet CD\Programme chants CD.doc   [60416]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\33.0.1750.146.manifest   [224]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Extensions\external_extensions.json   [99]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\am.pak   [396187]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\ar.pak   [383429]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\bg.pak   [475132]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\bn.pak   [601231]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\ca.pak   [289178]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\cs.pak   [288830]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\da.pak   [262749]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\de.pak   [249956]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\el.pak   [517804]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\en-GB.pak   [242461]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\en-US.pak   [242430]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\es-419.pak   [289842]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\es.pak   [295288]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\et.pak   [253349]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\fa.pak   [407868]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\fi.pak   [271887]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\fil.pak   [294178]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\fr.pak   [306149]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\gu.pak   [569898]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\he.pak   [328873]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\hi.pak   [585177]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\hr.pak   [270800]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\hu.pak   [302611]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\id.pak   [260745]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\it.pak   [282390]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\ja.pak   [346053]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\kn.pak   [653391]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\ko.pak   [292096]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\lt.pak   [283416]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\lv.pak   [288014]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\chrome_100_percent.pak   [1109580]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\chrome_elf.dll   [51016]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\chrome_touch_100_percent.pak   [1021468]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\default_apps\docs.crx   [4578]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\default_apps\drive.crx   [25561]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\default_apps\external_extensions.json   [982]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\default_apps\gmail.crx   [24040]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\default_apps\search.crx   [26392]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\default_apps\youtube.crx   [23668]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\ffmpegsumo.dll   [1647432]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\libegl.dll   [100168]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\libglesv2.dll   [716616]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (.Google Inc..) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\chrome.dll   [28164424]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (.Google Inc..) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\chrome_child.dll   [32985928]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (.Google Inc..) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\delegate_execute.exe   [1689416]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (.Google Inc..) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\libpeerconnection.dll   [2285896]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (.Microsoft Corporation.) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\d3dcompiler_43.dll   [2106216]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (.Microsoft Corporation.) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\d3dcompiler_46.dll   [3231688]
O61 - LFC: 02/03/2014 - 18:51:46 ---A- . (.The ICU Project.) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\icudt.dll   [10001224]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\ml.pak   [756319]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\mr.pak   [577990]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\ms.pak   [218164]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\nb.pak   [261511]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\nl.pak   [279933]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\pl.pak   [285771]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\pt-BR.pak   [279495]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\pt-PT.pak   [285488]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\ro.pak   [297888]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\ru.pak   [452484]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\sk.pak   [299333]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\sl.pak   [265951]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\sr.pak   [437477]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\sv.pak   [264693]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\sw.pak   [242473]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\ta.pak   [683014]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\te.pak   [637359]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\th.pak   [581820]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\tr.pak   [286589]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\uk.pak   [449904]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\vi.pak   [329901]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\zh-CN.pak   [235066]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Locales\zh-TW.pak   [235927]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\PepperFlash\manifest.json   [2072]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll   [13632840]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\VisualElements\logo.png   [3976]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\VisualElements\smalllogo.png   [9285]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\VisualElements\splash-620x300.png   [10185]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\nacl_irt_x86_32.nexe   [5702792]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\nacl_irt_x86_64.nexe   [4105944]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\pdf.dll   [4061000]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\ppgooglenaclpluginchrome.dll   [394568]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\resources.pak   [11106086]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\secondarytile.png   [637]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\widevinecdmadapter.dll   [113992]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (.Google Inc..) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\metro_driver.dll   [461640]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (.Google Inc..) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\nacl64.exe   [1899336]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (.Google Inc..) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\chrome.exe   [859464]
O61 - LFC: 02/03/2014 - 18:51:47 ---A- . (.Microsoft Corporation.) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\xinput1_3.dll   [81768]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_connexity.net_0.localstorage   [3072]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_connexity.net_0.localstorage-journal   [3608]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sstatic1.com_0.localstorage   [18432]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sstatic1.com_0.localstorage-journal   [3608]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_connexity.net_0.localstorage   [3072]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_connexity.net_0.localstorage-journal   [3608]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\chatango.com\fixed_id.sol   [54]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\chatango.com\mini_login.sol   [48]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\macromedia.com\support\flashplayer\sys\#chatango.com\settings.sol   [82]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\macromedia.com\support\flashplayer\sys\#members.bet365.com\settings.sol   [88]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\macromedia.com\support\flashplayer\sys\#p.jwpcdn.com\settings.sol   [82]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\macromedia.com\support\flashplayer\sys\#thebestplayeronline.com\settings.sol   [93]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\macromedia.com\support\flashplayer\sys\settings.sol   [740]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\members.bet365.com\FCE.sol   [87]
O61 - LFC: 02/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSYEZGRS\thebestplayeronline.com\com.longtailvideo.jwplayer.sol   [58]
O61 - LFC: 02/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.377\_platform_specific\win_x86\widevinecdmadapter.dll   [113992]
O61 - LFC: 02/03/2014 - 18:51:59 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\Microsoft\Office\Recent\Angoisse.LNK   [1140]
O61 - LFC: 02/03/2014 - 18:51:59 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\Microsoft\Office\Recent\Etudes.LNK   [1003]
O61 - LFC: 02/03/2014 - 18:51:59 --H-- . (...) -- C:\Users\TFSL\AppData\Roaming\Microsoft\Office\Recent\index.dat   [410]
O61 - LFC: 02/03/2014 - 18:52:00 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\Microsoft\Office\Word12.pip   [1720]
O61 - LFC: 02/03/2014 - 18:53:04 ---A- . (.TFSL.) -- C:\Users\TFSL\Flo\Spi\Etudes\Angoisse.doc   [34304]
O61 - LFC: 03/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Session Storage\001052.ldb   [146]
O61 - LFC: 03/03/2014 - 18:51:50 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\33.0.1750.146\33.0.1750.146_33.0.1750.117_chrome_updater.exe   [786136]
O61 - LFC: 03/03/2014 - 18:51:50 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Update\Install\{A508BFC9-D5C9-4666-8E6D-D36FF6375BEB}\33.0.1750.146_33.0.1750.117_chrome_updater.exe   [786136]
O61 - LFC: 03/03/2014 - 18:51:50 --HA- . (...) -- C:\Users\TFSL\AppData\Local\IconCache.db   [1906567]
O61 - LFC: 03/03/2014 - 18:51:54 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\AVAST Software\Avast\Cache\HTMLayout.xml   [4491]
O61 - LFC: 04/03/2014 - 18:51:46 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Installer\chrome.7z   [146913361]
O61 - LFC: 04/03/2014 - 18:51:46 ---A- . (.Google Inc..) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\33.0.1750.146\Installer\setup.exe   [1150280]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\VisualElementsManifest.xml   [399]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists   [268276]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Cookies   [569344]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal   [16384]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\CURRENT   [16]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOCK   [0]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG   [0]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old   [47]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000004   [50]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Extension State\000754.ldb   [247]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Extension State\000756.ldb   [259]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT   [16]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG   [269]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old   [777]
O61 - LFC: 04/03/2014 - 18:51:47 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000755   [681]  =>.Google Inc
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Favicons   [940032]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal   [16384]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\.usage   [24]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\CURRENT   [16]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\LOG   [0]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\LOG.old   [145]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\MANIFEST-000023   [86]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT   [16]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOG   [145]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOG.old   [145]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\MANIFEST-000037   [112]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\History   [1064960]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache   [36397]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\History-journal   [16384]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.fr_0.indexeddb.leveldb\CURRENT   [16]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.fr_0.indexeddb.leveldb\LOG   [145]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.fr_0.indexeddb.leveldb\LOG.old   [145]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.google.fr_0.indexeddb.leveldb\MANIFEST-000078   [108]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Last Session   [153280]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Last Tabs   [3732]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ak-ns.sascdn.com_0.localstorage   [3072]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ak-ns.sascdn.com_0.localstorage-journal   [3608]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor   [37888]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal   [16384]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs   [21504]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs-journal   [4640]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Preferences   [39524]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\QuotaManager   [13312]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\QuotaManager-journal   [6704]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Session Storage\001054.ldb   [207]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Session Storage\001057.ldb   [363]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Session Storage\001060.ldb   [458]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT   [16]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG   [269]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old   [274]
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-001059   [474]  =>.Google Inc
O61 - LFC: 04/03/2014 - 18:51:48 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Shortcuts   [28672]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal   [12824]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Top Sites   [20480]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal   [12824]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity   [2562]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Visited Links   [131072]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Web Data   [116736]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal   [16384]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Local State   [139399]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom   [7716008]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set   [1699676]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies   [6144]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies-journal   [3608]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Safe Browsing Csd Whitelist   [135548]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Safe Browsing Download   [836880]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Safe Browsing Download Whitelist   [19504]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Safe Browsing Extension Blacklist   [24112]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\Safe Browsing IP Blacklist   [1412]
O61 - LFC: 04/03/2014 - 18:51:49 ---A- . (...) -- C:\Users\TFSL\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.377\_platform_specific\win_x86\CdmAdapterVersion   [13]
O61 - LFC: 04/03/2014 - 18:52:20 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\ZHP\Log.txt   [94944]  =>.Nicolas Coolman
O61 - LFC: 04/03/2014 - 18:52:20 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\ZHP\TestsZHPDiag.txt   [2782]  =>.Nicolas Coolman
O61 - LFC: 04/03/2014 - 18:52:20 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\ZHP\ZHPADSReport.txt   [554]  =>.Nicolas Coolman
O61 - LFC: 04/03/2014 - 18:52:20 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\ZHP\ZHPDiag.txt   [301681]  =>.Nicolas Coolman
O61 - LFC: 04/03/2014 - 18:52:20 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\ZHP\ZHPExportRegistry-04-03-2014-18-39-28.txt   [8687854]  =>.Nicolas Coolman
O61 - LFC: 04/03/2014 - 18:52:20 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\ZHP\ZHPFixQuarantine.txt   [75]  =>.Nicolas Coolman
O61 - LFC: 04/03/2014 - 18:52:20 ---A- . (...) -- C:\Users\TFSL\AppData\Roaming\ZHP\ZHPFix[R1].txt   [2027]  =>.Nicolas Coolman
~ Files: 240 Scanned in 01mn 21s



---\\ Fichiers Alternate Data Stream (ADS) (O62)
O62 - ADS:Alternate Data Stream File - C:\Windows\System32\jmcricon.dll:Zone.Identifier
O62 - ADS:Alternate Data Stream File - C:\Windows\System32\RdCi1009.dll:Zone.Identifier
O62 - ADS:Alternate Data Stream File - C:\Windows\System32\RDCP1009.CPL:Zone.Identifier
O62 - ADS:Alternate Data Stream File - C:\Windows\System32\RDDP1009.DAT:Zone.Identifier
O62 - ADS:Alternate Data Stream File - C:\Windows\System32\Drivers\jmcr.sys:Zone.Identifier
O62 - ADS:Alternate Data Stream File - C:\Windows\System32\Drivers\johci.sys:Zone.Identifier
O62 - ADS:Alternate Data Stream File - C:\Windows\System32\Drivers\Rdwm1009.sys:Zone.Identifier
~ ADS:  Scanned in 00mn 01s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1  =>.Nicolas Coolman
~ ADS:  Scanned in 00mn 00s



---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 14/09/2013 - C:\Windows\system32\drivers\afd.sys (AFD)  .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - 17/02/2014 - C:\Windows\system32\drivers\aswMonFlt.sys (aswMonFlt)  .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - 02/11/2013 - C:\Windows\system32\drivers\aswRdr2.sys (aswRdr)  .(.AVAST Software - avast! WFP Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - 02/11/2013 - C:\Windows\System32\Drivers\aswRvrt.sys (aswRvrt) .(...) - LEGACY_ASWRVRT
O64 - Services: CurCS - 17/02/2014 - C:\Windows\system32\drivers\aswSnx.sys (aswSnx)  .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - 17/02/2014 - C:\Windows\system32\drivers\aswSP.sys (aswSP)  .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - 17/02/2014 - C:\Windows\system32\drivers\aswStm.sys (aswStm)  .(.AVAST Software - Stream Filter.) - LEGACY_ASWSTM
O64 - Services: CurCS - 09/01/2014 - C:\Windows\System32\Drivers\aswVmm.sys (aswVmm) .(...) - LEGACY_ASWVMM
O64 - Services: CurCS - 19/10/2012 - C:\Windows\system32\drivers\avgtpx86.sys (avgtp)  .(.AVG Technologies - Pas de description.) - LEGACY_AVGTP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\Beep.sys (Beep)  .(.Microsoft Corporation - BEEP Driver.) - LEGACY_BEEP
O64 - Services: CurCS - 04/07/2012 - C:\Windows\system32\browser.dll (bowser)  .(.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) - LEGACY_BOWSER
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\clfs.sys (CLFS)  .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
O64 - Services: CurCS - 04/07/2013 - C:\Windows\System32\Drivers\cng.sys (CNG)  .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\dfsc.sys (DfsC)  .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\discache.sys (discache)  .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
O64 - Services: CurCS - 01/08/2013 - C:\Windows\system32\drivers\dxgkrnl.sys (DXGKrnl)  .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\fileinfo.sys (FileInfo)  .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\fltmgr.sys (FltMgr)  .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR
O64 - Services: CurCS - 12/08/2009 - C:\Windows\System32\drivers\FNETURPX.sys (FNETURPX)  .(.FNet Co., Ltd. - FNetUrPx.sys.) - LEGACY_FNETURPX
O64 - Services: CurCS - 24/01/2013 - C:\Windows\system32\drivers\fvevol.sys (fvevol)  .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\http.sys (HTTP)  .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy)  .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
O64 - Services: CurCS - 15/04/2008 - C:\Windows\System32\DRIVERS\iaStor.sys (iaStor)  .(.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) - LEGACY_IASTOR
O64 - Services: CurCS - 25/09/2013 - C:\Windows\System32\Drivers\ksecdd.sys (KSecDD)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
O64 - Services: CurCS - 25/09/2013 - C:\Windows\System32\Drivers\ksecpkg.sys (KSecPkg)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\lltdio.sys (lltdio)  .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\luafv.sys (luafv)  .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
O64 - Services: CurCS - 04/03/2014 - C:\Users\TFSL\AppData\Local\Temp\mbr.sys (mbr) .(...) - LEGACY_MBR
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\mountmgr.sys (mountmgr)  .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\FirewallAPI.dll (mpsdrv)  .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb10)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb20)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\msisadrv.sys (msisadrv)  .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\mup.sys (Mup)  .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\nwifi.sys (NativeWifiP)  .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP
O64 - Services: CurCS - 22/08/2012 - C:\Windows\system32\drivers\ndis.sys (NDIS)  .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\DRIVERS\ndisuio.sys (Ndisuio)  .(.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\netbios.sys (NetBIOS)  .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\netbt.sys (NetBT)  .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy)  .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\pcw.sys (pcw)  .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\peauth.sys (PEAUTH)  .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\pacer.sys (Psched)  .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (rdbss)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD)  .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD)  .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP)  .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\rspndr.sys (rspndr)  .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\spldr.sys (spldr)  .(.Microsoft Corporation - loader for security processor.) - LEGACY_SPLDR
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\srvsvc.dll (srv)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\srvsvc.dll (srv2)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
O64 - Services: CurCS - 29/04/2011 - C:\Windows\System32\DRIVERS\srvnet.sys (srvnet)  .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\tcpipcfg.dll (Tcpip)  .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP
O64 - Services: CurCS - 03/10/2012 - C:\Windows\System32\drivers\tcpipreg.sys (tcpipreg)  .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\tcpipcfg.dll (tdx)  .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX
O64 - Services: CurCS - 04/03/2014 - C:\Windows\system32\TrueSight.sys (TrueSight) .(...) - LEGACY_TRUESIGHT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\vga.sys (VgaSave)  .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\volmgrx.sys (volmgrx)  .(.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) - LEGACY_VOLMGRX
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\volsnap.sys (volsnap)  .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\vwififlt.sys (vwififlt)  .(.Microsoft Corporation - Virtual WiFi Filter Driver.) - LEGACY_VWIFIFLT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\rascfg.dll (Wanarpv6)  .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6
O64 - Services: CurCS - 25/06/2013 - C:\Windows\System32\drivers\Wdf01000.sys (Wdf01000)  .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\wfplwf.sys (WfpLwf)  .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF
~ Legacy: 83 Scanned in 00mn 00s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe  =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
~ FASS Keys: 11 Scanned in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome.43CN6V6IS5GV6QSHEM33U5NKNM> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\TFSL\AppData\Local\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys:  Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {75A33E57-07A3-457C-AE77-48440FACAF64} - (Yahoo! Search) - http://fr.search.yahoo.com
O69 - SBI: SearchScopes [HKCU] {86A53908-3752-4CC2-81A3-3E120F8550FC} - (Google) - http://www.google.fr
~ Keys:  Scanned in 00mn 00s



---\\ Enumère les service demarrés par Svchost (SSS) (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll   [62464]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [67584]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [67584]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [168960]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll   [593408]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [679424]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll   [473600]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll   [90624]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll   [286208]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [75264]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll   [49664]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [300544]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [242176]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll   [521216]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll   [1933848]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll   [585728]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [328192]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [499712]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [21504]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [47104]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [114688]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll   [49664]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll   [61440]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [98304]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [164352]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [750592]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll   [71168]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll   [113664]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [168960]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [102912]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [37376]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [76800]

~ Services: 32 Scanned in 00mn 00s



---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.7EAB9DA8069DE4F6AD5284323E16BFE0] [SPRF][21/11/2009] (...) -- C:\ProgramData\nvModes.dat   [27744]
[MD5.3BF2A8A287A0A7851E5925B91C476537] [SPRF][04/03/2014] (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Users\TFSL\Desktop\zhpdiag20.exe   [6866603]
[MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\Windows\Downloaded Program Files\dwusplay.dll   [24576]
[MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\Windows\Downloaded Program Files\dwusplay.exe   [196608]
[MD5.0C78701C6F42345DFF2B2B6C3C3D01EF] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\Windows\Downloaded Program Files\isusweb.dll   [172032]
[MD5.6F678556A6FCE04FC94F3435F6313705] [SPRF][27/07/2009] (...) -- C:\Windows\Downloaded Program Files\unagiuninst.exe   [38428]
~ Files: 6 Scanned in 00mn 00s



---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "SNMPTRAP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "SNMPTRAP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "WMP-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMP-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-QWave-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-QWave-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-QWave-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-QWave-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-WMP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-WMP-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-WMP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-QWave-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-QWave-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-QWave-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-QWave-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-WMP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-WMP-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-WMP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
O87 - FAEL: "WMPNSS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "Collab-P2PHost-In-TCP" | In - None - P6 - TRUE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "Collab-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "Collab-PNRP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "Collab-PNRP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-RAServer-In-TCP-NoScope-Active" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-RAServer-Out-TCP-NoScope-Active" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-DCOM-In-TCP-NoScope-Active" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-TCP-Active" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "FPS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "CoreNet-DHCP-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "CoreNet-DHCP-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "CoreNet-DHCPV6-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "CoreNet-DHCPV6-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "CoreNet-Teredo-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "CoreNet-Teredo-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "CoreNet-IPHTTPS-Out" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "CoreNet-GP-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "CoreNet-DNS-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-UPnP-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-FDPHOST-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-LLMNR-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-LLMNR-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-FDPHOST-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MsiScsi-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MsiScsi-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MsiScsi-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MsiScsi-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MSDTC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MSDTC-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MSDTC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MSDTC-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMI-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMI-WINMGMT-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMI-WINMGMT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMI-ASYNC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMI-WINMGMT-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMI-WINMGMT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WMI-ASYNC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "PNRPMNRS-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "PNRPMNRS-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "PNRPMNRS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "PNRPMNRS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteEventLogSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteEventLogSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteTask-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteTask-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteTask-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteTask-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteFwAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteFwAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RVM-VDS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RVM-VDS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WPDMTP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WPDMTP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WPDMTP-UPnPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "WPDMTP-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MCX-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MCX-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MCX-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe  =>.Microsoft Corporation
O87 - FAEL: "MCX-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe  =>.Microsoft Corporation
O87 - FAEL: "MCX-QWave-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MCX-QWave-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MCX-QWave-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MCX-QWave-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MCX-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe  =>.Microsoft Corporation
O87 - FAEL: "MCX-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe  =>.Microsoft Corporation
O87 - FAEL: "MCX-MCX2SVC-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MCX-Prov-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - MCX2 Provisioning library.) -- C:\Windows\ehome\mcx2prov.exe
O87 - FAEL: "MCX-PlayTo-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MCX-McrMgr-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Media Center Extender Manager.) -- C:\Windows\ehome\mcrmgr.exe
O87 - FAEL: "MCX-PlayTo-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "MCX-FDPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active_1" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active_1" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-TCP-Active_1" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-TCP-Active_1" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active_1" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active_1" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteAssistance-Out-TCP-Active_1" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active_1" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "{480CEE0F-103B-48EC-9C05-865E4E85C404}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files\Microsoft Office\Office12\outlook.exe  =>.Microsoft Corporation
O87 - FAEL: "{2356F9ED-8EC9-4BF1-AC9F-4A8570523401}" | In - None - P17 - TRUE | .(.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files\HP\QuickPlay\QPService.exe
O87 - FAEL: "{1F1A5F2C-0E0D-49F9-BD15-679FC4717866}" | In - None - P17 - TRUE | .(.CyberLink Corp. - HP QuickPlay.) -- C:\Program Files\HP\QuickPlay\QP.exe
O87 - FAEL: "{3258B2C8-B725-45CD-8870-6008D9F1027A}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "{4736A23D-92ED-4B2F-AEB7-CF5305A79EBC}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "{8C1F4799-A19B-40B7-8551-FF2EDF2855F0}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "{9293BB20-4758-4206-A983-22616D5F0AB2}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{2B035445-3912-4059-9FC4-B6EA4271D1E6}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
O87 - FAEL: "{E1078142-9140-4F65-B1FC-4509E7E9E1B1}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
O87 - FAEL: "{C9F9D405-B248-4F99-95F5-819807771174}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
O87 - FAEL: "{450F7A4F-3513-4815-8478-44B67714EED6}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
O87 - FAEL: "{1C68981D-B583-4632-A9E9-ADFC6EEFB0A7}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "{C723697F-A647-4303-AC83-386493690D2E}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "{6F28728D-969E-4325-952B-1D26EC5BB0FD}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe  =>.Microsoft Corporation
O87 - FAEL: "{D86EAB0F-ED44-47DA-9002-42ECAE203059}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{3D89C680-57A0-4008-A478-BBD075BE6370}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{37BC2957-63DC-4CE3-B2C9-CABC7F27746F}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{B9B719B3-073F-4F44-8CA9-39DEDDD08EA2}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{D3982C42-9A3B-49F0-B718-B377544E0198}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{CFA8F38C-1C38-4E6D-B90C-46827E3074B3}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{8A429952-916D-4C5D-A6FF-AA3CA1195694}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{2E922DB7-5672-4175-A73E-E6680339B5B5}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{CD687EE8-54DC-4BB1-A77D-31B63B55A31D}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "TCP Query User{4AD12AF9-F30A-4DC4-8E26-A912C7B7D894}C:\program files\videolan\vlc\vlc.exe" | In - Private - P6 - TRUE | .(.VideoLAN - VLC media player 2.1.2.) -- C:\program files\videolan\vlc\vlc.exe  =>.VideoLAN
O87 - FAEL: "UDP Query User{3352FFE7-D6CF-44B8-B15C-C0994146FABC}C:\program files\videolan\vlc\vlc.exe" | In - Private - P17 - TRUE | .(.VideoLAN - VLC media player 2.1.2.) -- C:\program files\videolan\vlc\vlc.exe  =>.VideoLAN
O87 - FAEL: "{5D965BA4-E508-4621-B8A3-D737C2754DAC}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\System32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{2CF7A160-CA8E-47B3-B2EC-13D21FD4F94D}" | In - None - P6 - TRUE | .(...) -- C:\Program Files\Veetle\Player\VeetleNet.exe
O87 - FAEL: "{AB7965C3-2FD4-4A0B-88A2-7793CA2F46EA}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{2A71D5F5-94BB-4C52-B1E6-D6FE624D4B14}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{59928833-3D94-479A-90B4-679FDAC2842B}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{75C03753-35D7-4E5A-904D-8E3B5693FED2}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{7F304D12-17FB-4F17-9E34-1E40F03BAF99}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{BFAC85F0-330C-400C-A37F-EAF1386CBC19}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{11E5D138-06CD-4DA1-BCB9-AF43A3E8FC25}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{AEED0D0F-1AFA-4C76-A97B-008C27F76C2C}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{39F5AF4E-D766-4F08-9862-A413B4BF0A83}" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{88C1CC49-5330-436D-A3A7-97A4ECCBE3D7}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{051EBE23-3E13-452E-81F9-0B5448811550}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "RemoteDesktop-UserMode-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe  =>.Microsoft Corporation
O87 - FAEL: "{FB39FE37-FC5A-43B9-8EB0-8566D251FCB4}" | In - Private - P6 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O87 - FAEL: "{E30512D9-2300-43F9-A25A-DE93577DBD69}" | In - Private - P17 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O87 - FAEL: "{A5AD974B-1A92-4BB7-A443-C30ECCDB102D}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\MaConfigAgent.exe
O87 - FAEL: "{44A15E2D-007A-4534-A236-F08B05BD75F9}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\MaConfigAgent.exe
O87 - FAEL: "{5FCE13A2-87A2-444F-845F-352B67441F48}" | In - None - P6 - FALSE | .(.Microsoft Corporation - SMSvcHost.exe.) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
O87 - FAEL: "{8FECA99D-4BAD-4594-8753-4DFBAFEF5C1F}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{3DAB071D-0F73-4044-811C-9F51D26C8234}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "TCP Query User{849A3050-C9B1-4ACE-9AB1-74BA2FBB2B0F}C:\program files\airfoil\airfoilspeakers.exe" | In - Private - P6 - TRUE | .(.Rogue Amoeba - Airfoil Speakers.) -- C:\program files\airfoil\airfoilspeakers.exe
O87 - FAEL: "UDP Query User{EC1689AF-15D1-4C28-97DA-DECDA67BB3C1}C:\program files\airfoil\airfoilspeakers.exe" | In - Private - P17 - TRUE | .(.Rogue Amoeba - Airfoil Speakers.) -- C:\program files\airfoil\airfoilspeakers.exe
O87 - FAEL: "{B86AA295-9AB8-4DE2-B93C-2DAE593AD806}" | In - Public - P17 - TRUE | .(.Rogue Amoeba - Airfoil Speakers.) -- C:\program files\airfoil\airfoilspeakers.exe
O87 - FAEL: "{5094DDE4-6526-4F61-A9FF-19BC52FD8E5B}" | In - Public - P6 - TRUE | .(.Rogue Amoeba - Airfoil Speakers.) -- C:\program files\airfoil\airfoilspeakers.exe
O87 - FAEL: "TCP Query User{B251F949-181E-4F06-846E-B197E83EC42D}C:\program files\airfoil\airfoil.exe" | In - Private - P6 - TRUE | .(.Rogue Amoeba - Airfoil.) -- C:\program files\airfoil\airfoil.exe
O87 - FAEL: "UDP Query User{9A88360F-EA38-4546-B695-98DEF52AF1F5}C:\program files\airfoil\airfoil.exe" | In - Private - P17 - TRUE | .(.Rogue Amoeba - Airfoil.) -- C:\program files\airfoil\airfoil.exe
O87 - FAEL: "{78D4D6EF-E3C0-41E4-AF41-4AF712DA25FB}" | In - Public - P17 - TRUE | .(.Rogue Amoeba - Airfoil.) -- C:\program files\airfoil\airfoil.exe
O87 - FAEL: "{309CBE9B-B0A0-4747-AF8B-ED79586AA769}" | In - Public - P6 - TRUE | .(.Rogue Amoeba - Airfoil.) -- C:\program files\airfoil\airfoil.exe
~ Firewall: 223 Scanned in 00mn 01s



---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "000021090200C0400000000000F01FEC" . (.Module de compatibilité pour Microsoft Office System 2007.) -- C:\Windows\Installer\{90120000-0020-040C-0000-0000000FF1CE}\O12ConvIcon.exe
O90 - PUC: "0ACADCF8090EA9A4CA179AE63717CDE6" . (.HP 3D DriveGuard.) -- C:\Windows\Installer\{8FCDACA0-E090-4A9A-AC71-A96E7371DC6E}\controlPanelIcon.exe
O90 - PUC: "0CC62614458A2044DA607D3959512C28" . (.Sibelius Scorch (Firefox, Opera, Netscape, Chrome only).) -- C:\Windows\Installer\{41626CC0-A854-4402-AD06-D7939515C282}\ARPPRODUCTICON.exe
O90 - PUC: "68AB67CA7DA76301B744AA0100000010" . (.Adobe Reader X (10.1.9) - Français.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O90 - PUC: "7CEBB04F4A2C00A4B942A750A5C22526" . (.Microsoft Office Live Add-in 1.5.) -- C:\Windows\Installer\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}\ProductIcon
O90 - PUC: "8994BF104C33134458DE70E9E3FE7ED5" . (.YouCam.) -- C:\Windows\Installer\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\ARPPRODUCTICON.exe
O90 - PUC: "97EACF77918D9F34888737A22BE3164D" . (.Ma-Config.com.) -- C:\Windows\Installer\{77FCAE79-D819-43F9-8878-732AB23E61D4}\maconfico
O90 - PUC: "A988200B953FA2F41931010B4A83DA07" . (.DigitalPersona Personal 4.10.) -- C:\Windows\Installer\{B002889A-F359-4F2A-9113-10B0A438AD70}\ARPPRODUCTICON.exe
O90 - PUC: "C4E4AFE2F5B77F841A0CA18A287B9A3C" . (.HP Update.) -- C:\Windows\Installer\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}\ARPPRODUCTICON.exe
O90 - PUC: "D366E3D3E7E477545A06E7DCDD5445A8" . (.PVSonyDll.) -- C:\Windows\Installer\{3D3E663D-4E7E-4577-A560-7ECDDD45548A}\ARPPRODUCTICON.exe
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "DB5B4E2CBD2371840A0643A11BC7F309" . (.Bonjour.) -- C:\Windows\Installer\{C2E4B5BD-32DB-4817-A060-341AB17C3F90}\Bonjour.ico
O90 - PUC: "E001B484EBF61364CB55F578F28D0E02" . (.HP Wireless Assistant.) -- C:\Windows\Installer\{484B100E-6FBE-4631-BC55-5F872FD8E020}\controlPanelIcon.exe
~ Update Products: 49 Scanned in 00mn 00s



---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.8DC692839DC8787C0ADB951EA84F266D] [WIS][13/11/2009] (.DigitalPersona, Inc. - DigitalPersona Personal.) -- C:\Windows\Installer\1398cb.msi   [25591296]
[MD5.5BA4F46783706C7AAD3C7CB05C1A35B1] [WIS][19/09/2013] (.Sibelius Software, a division of Avid Techn - Sibelius Scorch (Firefox, Opera, Netscape, Chrome only).) -- C:\Windows\Installer\fcc75.msi   [13103616]
~ WIS: 51 Scanned in 00mn 03s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 05/05/2009 228408 |  (Com4QLBEx) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
SS - | Auto 14/07/2009 20992 | C:\Windows\System32\ezsvc7.dll (ezSharedSvc) . (.EasyBits Sofware AS.) - C:\Windows\system32\svchost.exe
SS - | Demand 30/04/2009 229944 |  (hpqwmiex) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
SS - | Demand 22/10/2004 73728 |  (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
SS - | Demand 15/02/2014 118896 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Auto 27/02/2013 1260320 |  (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
SS - | Auto 23/04/2008 112008 |  (QPSched) . (...) - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
SS - | Demand 14/07/2009 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

SR - | Auto 18/12/2013 65432 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 02/03/2009 81920 |  (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\aestsrv.exe
SR - | Auto 17/02/2014 50344 |  (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
SR - | Auto 06/04/2011 349472 |  (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 17/07/2009 322624 |  (DpHost) . (.DigitalPersona, Inc..) - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
SR - | Auto 13/05/2011 26168 |  (hpsrv) . (.Hewlett-Packard Company.) - C:\Windows\System32\Hpservice.exe
SR - | Auto 01/09/2012 14904 |  (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SR - | Auto 08/01/2014 2077008 |  (MaConfigAgent) . (.CybelSoft.) - C:\Program Files\ma-config.com\MaConfigAgent.exe
SR - | Auto 10/01/2013 639776 |  (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SR - | Auto 23/04/2008 292232 |  (QPCapSvc) . (...) - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
SR - | Auto 26/03/2008 341328 |  (Recovery Service for Windows) . (...) - C:\Windows\SMINST\BLService.exe
SR - | Auto 23/03/2010 229458 |  (STacSV) . (.IDT, Inc..) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\STacSV.exe
SR - | Auto 14/07/2009 20992 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

~ Services:  Scanned in 00mn 04s



---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by TFSL at 04/03/2014 18:53:39

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys hpdskflt.sys halmacpi.dll iaStorF.sys ACPI.sys storport.sys iaStorA.sys 
C:\Windows\system32\DRIVERS\hpdskflt.sys Hewlett-Packard Company Mobile Data Protection System
C:\Windows\system32\DRIVERS\iaStorF.sys Intel Corporation Intel Rapid Storage Technology Filter driver 
C:\Windows\system32\DRIVERS\iaStorA.sys Intel Corporation Intel Rapid Storage Technology driver 
1 ntkrnlpa!IofCallDriver[0x8348ABBA] >> \Device\Harddisk0\DR0[0x88BA4AC8]
3 CLASSPNP[0x8BF9459E] >> ntkrnlpa!IofCallDriver[0x8348ABBA] >> [0x88BA4020]
5 hpdskflt[0x8C033F92] >> ntkrnlpa!IofCallDriver[0x8348ABBA] >> [0x861BE4D0]
7 iaStorF[0x8C636138] >> ntkrnlpa!IofCallDriver[0x8348ABBA] >> [0x86EE3288]
9 ACPI[0x8BCA13D4] >> ntkrnlpa!IofCallDriver[0x8348ABBA] >> \Device\000000e7[0x87A98030]
kernel: MBR read successfully
user & kernel MBR OK 

~ MBR: 18 Scanned in 00mn 02s



---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by TFSL at 04/03/2014 18:53:41

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin

~ MBR:  Scanned in 00mn 04s



---\\ Scan Additionnel (O88)
Database Version : 13031 - (03/03/2014)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 1
Fichiers trouvés  (Files found) : 0

C:\Users\TFSL\AppData\Roaming\uTorrent   =>P2P.µTorrent^
~ Additionnel Scan: 276977 Items scanned in 00mn 29s



---\\ Récapitulatif des détections trouvées sur votre station
~ MSI: 0 link(s) detected in 00mn 29s



End of the scan (2189 lines in 03mn 06s)(0)